last executing test programs: 4.150176107s ago: executing program 4 (id=285): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 4.067569242s ago: executing program 4 (id=289): unshare(0x6a040000) ioprio_get$pid(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x1, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x100003, @loopback, 0xfffffffc}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) 3.841245195s ago: executing program 3 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) connect$inet6(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 3.665286275s ago: executing program 3 (id=297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x4ff1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000003c0)="b902cce179bcb3bdeee25f41f55a13a44d1f47012922aca18318eece0f040ebf2fb8870354cdf6062928a5c636a14ed7f464c17a0b56", 0x36}, {&(0x7f0000001640)}, {0x0}], 0x5}, 0xc0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.639956197s ago: executing program 0 (id=298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.476873586s ago: executing program 4 (id=301): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000980)="f871", 0x2}], 0x1, 0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x100) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="fd", 0x1}], 0x1, 0xe7b, 0x6, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff6}}}, 0x38) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1c, &(0x7f0000000880)=[@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x9, 0x2, 0x2, 0xa971, 0xd26}, &(0x7f0000000100)=0x14) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = semget(0x0, 0x1, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0xb00, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)=[0xd5bd, 0x1ff]) 3.038980022s ago: executing program 4 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca5cb72}, 0x0) 3.011383033s ago: executing program 4 (id=307): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 2.789426936s ago: executing program 3 (id=311): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.787026856s ago: executing program 0 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.283166036s ago: executing program 2 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 2.204194461s ago: executing program 2 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cfe, 0xbd, 0x4, 0x9, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.696551141s ago: executing program 4 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x1e, 0x4, 0x0) shutdown(r4, 0x1) r5 = openat$procfs(0xffffff9c, &(0x7f0000003a80)='/proc/partitions\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1f8, 0x19, 0x1, 0x0, 0x10, {{@in6=@local, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x144, 0x5, [{{@in=@local, 0xffffffff, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@remote, 0x3501, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x2, 0x0, 0x1, 0xff}]}]}, 0x1f8}}, 0x0) syz_usb_connect$uac1(0x3, 0x93, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') 1.660465043s ago: executing program 2 (id=322): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8919, 0x0) 1.645577763s ago: executing program 3 (id=323): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080)=0x35, 0x4) 1.568637268s ago: executing program 2 (id=325): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb8"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='$\x00\x00\x00\x00 \x00\x00', @ANYRES32=r2, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="330000001000000000000000dd4b03838357d09aa0d0002fb27f039d023d6723de3f9457c36ee8e3553012f5af97a3e2d4495507358b90f3ee974e51f1bd002899dd930277e983c93f660c37e6d6637825e79c1e54", @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x21, 0x20}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x6fd, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r5, r1, 0x8, 0x24, 0x0, @void, @void, @void, @value=r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'lo\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @local, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38000000100000012abd", @ANYBLOB, @ANYRES32=r8, @ANYBLOB="08002800a4c8000008001e0007000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.52729794s ago: executing program 3 (id=326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x34) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x42000020) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 984.298012ms ago: executing program 0 (id=329): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000280)=[{r0, 0x1009}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) setxattr$system_posix_acl(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x6}, [{0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x4, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, 0xee00}], {}, {0x20, 0x6}}, 0x4c, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r9}, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") setgid(r9) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {}, [{0x2, 0xdc25b61b1179c217, r7}, {0x2, 0x5, r7}, {0x2, 0x2, r7}], {0x4, 0x4}, [{0x8, 0x6, r8}, {0x8, 0x0, r9}, {0x8, 0x1, r8}, {0x8, 0x3, r8}, {0x8, 0x6, r8}, {0x8, 0x1, r8}], {0x10, 0x4}, {0x20, 0x64093c703ea73e20}}, 0x6c, 0x3) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 950.361254ms ago: executing program 1 (id=330): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x109a20, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r4, 0x0, 0x0, 0x1000000}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 898.958798ms ago: executing program 1 (id=331): r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) epoll_create(0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x80000000, &(0x7f0000001340)="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", 0x1000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)="e7bd52d32afd36e09d6f717f02ce7bdef309a0d1636c0f51d8f9a49458869c10690cd847d3386cc66d3b0e20b80c3f88a3933241f2254cb06c0e2b11606ba0b0ae6f8c18ecde503c9ac1b1888eefbef2a809433c1709dc7933e331b9f71be48b7c43eeb701fc4af3325bd9a1") fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x2, r2}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r1, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xc40, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 476.606562ms ago: executing program 3 (id=332): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 358.070609ms ago: executing program 1 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cfe, 0xbd, 0x4, 0x9, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 357.899999ms ago: executing program 2 (id=334): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 151.065661ms ago: executing program 1 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x68}}, 0x0) 150.906061ms ago: executing program 2 (id=336): unshare(0x6a040000) ioprio_get$pid(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x1, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x100003, @loopback, 0xfffffffc}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) 101.477954ms ago: executing program 0 (id=337): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080)=0x35, 0x4) 80.226325ms ago: executing program 1 (id=338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbfffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 61.793926ms ago: executing program 0 (id=339): setuid(0xee01) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 29.626488ms ago: executing program 0 (id=340): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 0s ago: executing program 1 (id=341): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex_waitv(&(0x7f0000001fc0)=[{0x7fff, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000e40)={0x77359400}, 0x1) kernel console output (not intermixed with test programs): [ 18.677067][ T29] audit: type=1400 audit(1769820830.144:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.699634][ T29] audit: type=1400 audit(1769820830.144:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.722442][ T29] audit: type=1400 audit(1769820830.144:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.745686][ T29] audit: type=1400 audit(1769820830.144:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.768808][ T29] audit: type=1400 audit(1769820830.144:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. [ 23.243023][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 23.243037][ T29] audit: type=1400 audit(1769820834.704:70): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.272116][ T29] audit: type=1400 audit(1769820834.734:71): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.272897][ T3295] cgroup: Unknown subsys name 'net' [ 23.300018][ T29] audit: type=1400 audit(1769820834.764:72): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.415832][ T3295] cgroup: Unknown subsys name 'cpuset' [ 23.422016][ T3295] cgroup: Unknown subsys name 'rlimit' [ 23.551411][ T29] audit: type=1400 audit(1769820835.014:73): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.575065][ T29] audit: type=1400 audit(1769820835.014:74): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.595847][ T29] audit: type=1400 audit(1769820835.014:75): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.616408][ T29] audit: type=1400 audit(1769820835.014:76): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.623642][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.636936][ T29] audit: type=1400 audit(1769820835.024:77): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.670890][ T29] audit: type=1400 audit(1769820835.024:78): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.694903][ T29] audit: type=1400 audit(1769820835.044:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 23.726823][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.807602][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.878403][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.895983][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.908928][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 24.946951][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.954127][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.961448][ T3314] bridge_slave_0: entered allmulticast mode [ 24.968009][ T3314] bridge_slave_0: entered promiscuous mode [ 24.987413][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.994568][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.002039][ T3314] bridge_slave_1: entered allmulticast mode [ 25.008897][ T3314] bridge_slave_1: entered promiscuous mode [ 25.038480][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.077835][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.085085][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.092232][ T3310] bridge_slave_0: entered allmulticast mode [ 25.098684][ T3310] bridge_slave_0: entered promiscuous mode [ 25.106209][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.115372][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.122412][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.129682][ T3316] bridge_slave_0: entered allmulticast mode [ 25.136137][ T3316] bridge_slave_0: entered promiscuous mode [ 25.146812][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.153952][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.161146][ T3319] bridge_slave_0: entered allmulticast mode [ 25.167477][ T3319] bridge_slave_0: entered promiscuous mode [ 25.173979][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.181053][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.188321][ T3310] bridge_slave_1: entered allmulticast mode [ 25.194719][ T3310] bridge_slave_1: entered promiscuous mode [ 25.201955][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.215906][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.223136][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.230531][ T3316] bridge_slave_1: entered allmulticast mode [ 25.236977][ T3316] bridge_slave_1: entered promiscuous mode [ 25.247376][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.254428][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.261554][ T3319] bridge_slave_1: entered allmulticast mode [ 25.268076][ T3319] bridge_slave_1: entered promiscuous mode [ 25.291908][ T3314] team0: Port device team_slave_0 added [ 25.305200][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.318882][ T3314] team0: Port device team_slave_1 added [ 25.325505][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.341513][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.351619][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.365502][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.378097][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.422613][ T3319] team0: Port device team_slave_0 added [ 25.428414][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.435543][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.461512][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.477324][ T3316] team0: Port device team_slave_0 added [ 25.482981][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.490151][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.497815][ T3311] bridge_slave_0: entered allmulticast mode [ 25.504146][ T3311] bridge_slave_0: entered promiscuous mode [ 25.511495][ T3319] team0: Port device team_slave_1 added [ 25.517260][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.524369][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.531538][ T3311] bridge_slave_1: entered allmulticast mode [ 25.538176][ T3311] bridge_slave_1: entered promiscuous mode [ 25.545161][ T3310] team0: Port device team_slave_0 added [ 25.551069][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.558037][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.584053][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.598111][ T3316] team0: Port device team_slave_1 added [ 25.621340][ T3310] team0: Port device team_slave_1 added [ 25.632374][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.643247][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.657480][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.664434][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.690453][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.710792][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.717852][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.744175][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.755276][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.762275][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.788501][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.799694][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.806733][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.832818][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.852253][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.859272][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.885280][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.916269][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.923241][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.949698][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.961200][ T3311] team0: Port device team_slave_0 added [ 25.973124][ T3314] hsr_slave_0: entered promiscuous mode [ 25.979278][ T3314] hsr_slave_1: entered promiscuous mode [ 25.986327][ T3311] team0: Port device team_slave_1 added [ 26.030142][ T3310] hsr_slave_0: entered promiscuous mode [ 26.036239][ T3310] hsr_slave_1: entered promiscuous mode [ 26.042141][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 26.047987][ T3310] Cannot create hsr debugfs directory [ 26.060253][ T3316] hsr_slave_0: entered promiscuous mode [ 26.066239][ T3316] hsr_slave_1: entered promiscuous mode [ 26.072163][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 26.078460][ T3316] Cannot create hsr debugfs directory [ 26.086004][ T3319] hsr_slave_0: entered promiscuous mode [ 26.092109][ T3319] hsr_slave_1: entered promiscuous mode [ 26.097978][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 26.103688][ T3319] Cannot create hsr debugfs directory [ 26.121857][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.128910][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.154973][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.176211][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.183162][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.209384][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.276918][ T3311] hsr_slave_0: entered promiscuous mode [ 26.283029][ T3311] hsr_slave_1: entered promiscuous mode [ 26.289030][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.294867][ T3311] Cannot create hsr debugfs directory [ 26.422780][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.432044][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.446317][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.461201][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.495538][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.513671][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.522688][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.532086][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.540862][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.549583][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.558478][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.571843][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.595573][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.605333][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.613729][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.622104][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.661384][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.673162][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.682474][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.695956][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.712316][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.727636][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.742306][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.749383][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.770660][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.788992][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.796134][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.806983][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.819250][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.837659][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.848724][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.855856][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.874435][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.885002][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.902675][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.909780][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.920169][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.927290][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.940383][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.947648][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.958997][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.998795][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.011347][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.048084][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.073594][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.080733][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.104772][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.116896][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.124037][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.153192][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.164591][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.184385][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.191600][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.208537][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.221288][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.228362][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.253341][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.298280][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.373262][ T3316] veth0_vlan: entered promiscuous mode [ 27.396172][ T3316] veth1_vlan: entered promiscuous mode [ 27.415713][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.435031][ T3314] veth0_vlan: entered promiscuous mode [ 27.442021][ T3319] veth0_vlan: entered promiscuous mode [ 27.455619][ T3319] veth1_vlan: entered promiscuous mode [ 27.462381][ T3314] veth1_vlan: entered promiscuous mode [ 27.477625][ T3310] veth0_vlan: entered promiscuous mode [ 27.490275][ T3316] veth0_macvtap: entered promiscuous mode [ 27.500568][ T3316] veth1_macvtap: entered promiscuous mode [ 27.511737][ T3314] veth0_macvtap: entered promiscuous mode [ 27.518496][ T3310] veth1_vlan: entered promiscuous mode [ 27.531200][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.549526][ T3319] veth0_macvtap: entered promiscuous mode [ 27.556961][ T3314] veth1_macvtap: entered promiscuous mode [ 27.566650][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.581194][ T3319] veth1_macvtap: entered promiscuous mode [ 27.589355][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.612144][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.630501][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.639888][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.649529][ T3311] veth0_vlan: entered promiscuous mode [ 27.660665][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.669269][ T3310] veth0_macvtap: entered promiscuous mode [ 27.676084][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.688534][ T3310] veth1_macvtap: entered promiscuous mode [ 27.696294][ T3311] veth1_vlan: entered promiscuous mode [ 27.706562][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.715696][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.724612][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.735938][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.747404][ T3463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.770099][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.799672][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.808555][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.820606][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.836695][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.844429][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.859593][ T3311] veth0_macvtap: entered promiscuous mode [ 27.870635][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.880444][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.893334][ T3311] veth1_macvtap: entered promiscuous mode [ 27.916371][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.926100][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.948699][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.956610][ T3485] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 27.978887][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.992864][ T3487] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 28.016636][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.026617][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.046470][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.055582][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.074460][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.098506][ T3492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.111090][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.174695][ T3500] capability: warning: `syz.3.8' uses 32-bit capabilities (legacy support in use) [ 28.193123][ T3498] loop2: detected capacity change from 0 to 8192 [ 28.204671][ T3498] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.357668][ T3498] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 28.366869][ T3498] FAT-fs (loop2): Filesystem has been set read-only [ 28.389360][ T3498] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 28.425444][ T3498] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 28.452399][ T3507] loop3: detected capacity change from 0 to 512 [ 28.479483][ T3507] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 28.513293][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 28.513308][ T29] audit: type=1326 audit(1769820839.974:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.534187][ T3507] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9'. [ 28.588775][ C1] hrtimer: interrupt took 57267 ns [ 28.633802][ T29] audit: type=1326 audit(1769820839.974:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.658067][ T29] audit: type=1326 audit(1769820839.974:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.679052][ T3507] ªªªªªª: renamed from vlan0 (while UP) [ 28.681363][ T29] audit: type=1326 audit(1769820839.974:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.681394][ T29] audit: type=1326 audit(1769820839.974:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.681454][ T29] audit: type=1326 audit(1769820839.974:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.681480][ T29] audit: type=1326 audit(1769820839.974:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.681571][ T29] audit: type=1326 audit(1769820839.974:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.681643][ T29] audit: type=1326 audit(1769820839.984:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.681668][ T29] audit: type=1326 audit(1769820839.984:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c44aeb9 code=0x7ffc0000 [ 28.995435][ T3512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.003107][ T3513] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12'. [ 29.010486][ T3512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.062982][ T3519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14'. [ 29.077775][ T3510] loop2: detected capacity change from 0 to 512 [ 29.108010][ T3510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.128315][ T3510] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.128848][ T3521] loop1: detected capacity change from 0 to 512 [ 29.145687][ T3521] ======================================================= [ 29.145687][ T3521] WARNING: The mand mount option has been deprecated and [ 29.145687][ T3521] and is ignored by this kernel. Remove the mand [ 29.145687][ T3521] option from the mount to silence this warning. [ 29.145687][ T3521] ======================================================= [ 29.197804][ T3521] EXT4-fs: Ignoring removed orlov option [ 29.204461][ T3521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.214706][ T3521] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.222025][ T3521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.15: bg 0: block 248: padding at end of block bitmap is not set [ 29.236775][ T3521] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.15: Failed to acquire dquot type 1 [ 29.248485][ T3521] EXT4-fs (loop1): 1 truncate cleaned up [ 29.254710][ T3521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.278483][ T3521] Zero length message leads to an empty skb [ 29.391329][ T3521] syz.1.15 (3521) used greatest stack depth: 9272 bytes left [ 29.399278][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.720282][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.743229][ T3534] tipc: Started in network mode [ 29.748175][ T3534] tipc: Node identity 7a37de0f8c95, cluster identity 4711 [ 29.755461][ T3534] tipc: Enabled bearer , priority 0 [ 29.763992][ T3534] syzkaller0: entered promiscuous mode [ 29.769531][ T3534] syzkaller0: entered allmulticast mode [ 29.780557][ T3534] tipc: Resetting bearer [ 29.788046][ T3533] tipc: Resetting bearer [ 29.795613][ T3533] tipc: Disabling bearer [ 29.896014][ T3536] loop4: detected capacity change from 0 to 512 [ 29.903823][ T3536] EXT4-fs: Ignoring removed oldalloc option [ 29.920769][ T3536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.933472][ T3536] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.946910][ T3536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.19: bg 0: block 217: padding at end of block bitmap is not set [ 29.961363][ T3536] EXT4-fs (loop4): Remounting filesystem read-only [ 29.977918][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.602252][ T3548] veth0: entered promiscuous mode [ 30.636698][ T3548] vlan2: entered promiscuous mode [ 30.790092][ T3555] loop0: detected capacity change from 0 to 128 [ 30.980786][ T3557] loop2: detected capacity change from 0 to 128 [ 30.992978][ T3555] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 31.012198][ T3559] loop1: detected capacity change from 0 to 512 [ 31.019143][ T3557] msdos: Bad value for 'fmask' [ 31.036163][ T3555] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.070016][ T3559] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.092238][ T3555] ext2 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.118881][ T3559] ------------[ cut here ]------------ [ 31.124367][ T3559] EA inode 11 i_nlink=2 [ 31.124389][ T3559] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.26/3559 [ 31.139206][ T3559] Modules linked in: [ 31.143122][ T3559] CPU: 1 UID: 0 PID: 3559 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.152700][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.162788][ T3559] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 31.169529][ T3559] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 31.189560][ T3559] RSP: 0018:ffffc90002897778 EFLAGS: 00010246 [ 31.195775][ T3559] RAX: ffff88811b91cc90 RBX: ffff888107a2edb8 RCX: ffffffff81be1958 [ 31.203753][ T3559] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 31.211753][ T3559] RBP: 000000000000000b R08: 0001888107a2ed6b R09: 0000000000000000 [ 31.219757][ T3559] R10: ffffc900028976a8 R11: 0001c900028976a8 R12: ffff888107a2ed68 [ 31.228040][ T3559] R13: ffffffff86fc3b10 R14: ffff888107a2ed20 R15: 0000000000000001 [ 31.236032][ T3559] FS: 00007f7c459e76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 31.245042][ T3559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.251637][ T3559] CR2: 0000001b33d10ff8 CR3: 000000011bd82000 CR4: 00000000003506f0 [ 31.259656][ T3559] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.267825][ T3559] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 31.275856][ T3559] Call Trace: [ 31.279160][ T3559] [ 31.282102][ T3559] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 31.288185][ T3559] ? errseq_check+0x2c/0x50 [ 31.292703][ T3559] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 31.298715][ T3559] ? ext4_truncate+0x92b/0xad0 [ 31.303510][ T3559] ext4_evict_inode+0xa1f/0xd40 [ 31.308454][ T3559] ? __pfx_ext4_evict_inode+0x10/0x10 [ 31.313946][ T3559] evict+0x2af/0x510 [ 31.317954][ T3559] ? __dquot_initialize+0x146/0x7c0 [ 31.323176][ T3559] iput+0x4b9/0x650 [ 31.327045][ T3559] ext4_process_orphan+0x1a9/0x1c0 [ 31.332257][ T3559] ext4_orphan_cleanup+0x6a8/0xa00 [ 31.337496][ T3559] ext4_fill_super+0x3476/0x3800 [ 31.342475][ T3559] ? set_blocksize+0x1a3/0x310 [ 31.347393][ T3559] ? setup_bdev_super+0x30e/0x370 [ 31.352425][ T3559] ? __pfx_ext4_fill_super+0x10/0x10 [ 31.357800][ T3559] get_tree_bdev_flags+0x291/0x300 [ 31.362959][ T3559] ? __pfx_ext4_fill_super+0x10/0x10 [ 31.368285][ T3559] get_tree_bdev+0x1f/0x30 [ 31.372883][ T3559] ext4_get_tree+0x1c/0x30 [ 31.377417][ T3559] vfs_get_tree+0x57/0x1d0 [ 31.381889][ T3559] do_new_mount+0x288/0x700 [ 31.386475][ T3559] path_mount+0x4d0/0xbc0 [ 31.390910][ T3559] ? user_path_at+0xbf/0x130 [ 31.395615][ T3559] __se_sys_mount+0x28c/0x2e0 [ 31.400352][ T3559] __x64_sys_mount+0x67/0x80 [ 31.404978][ T3559] x64_sys_call+0x2cca/0x3000 [ 31.409739][ T3559] do_syscall_64+0xc0/0x2a0 [ 31.414402][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.420334][ T3559] RIP: 0033:0x7f7c46f8c14a [ 31.424973][ T3559] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.444775][ T3559] RSP: 002b:00007f7c459e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 31.453289][ T3559] RAX: ffffffffffffffda RBX: 00007f7c459e6ee0 RCX: 00007f7c46f8c14a [ 31.461466][ T3559] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7c459e6ea0 [ 31.469556][ T3559] RBP: 0000200000000180 R08: 00007f7c459e6ee0 R09: 0000000000800718 [ 31.477596][ T3559] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 31.485610][ T3559] R13: 00007f7c459e6ea0 R14: 000000000000047f R15: 0000200000000200 [ 31.493671][ T3559] [ 31.496715][ T3559] ---[ end trace 0000000000000000 ]--- [ 31.541916][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.569500][ T3559] EXT4-fs (loop1): 1 orphan inode deleted [ 31.575968][ T3559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.593326][ T3564] syzkaller0: entered promiscuous mode [ 31.598888][ T3564] syzkaller0: entered allmulticast mode [ 31.758395][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.846306][ T3571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 31.861906][ T3586] loop1: detected capacity change from 0 to 2048 [ 31.867062][ T3577] loop4: detected capacity change from 0 to 512 [ 31.899335][ T3589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3589 comm=syz.3.35 [ 31.919083][ T3577] EXT4-fs: Ignoring removed nobh option [ 31.931678][ T3589] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 31.932357][ T3586] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.943198][ T3589] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 31.984264][ T3586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.032063][ T3597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 32.061025][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.124729][ T3586] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.33: bg 0: block 234: padding at end of block bitmap is not set [ 32.155991][ T3586] EXT4-fs (loop1): Remounting filesystem read-only [ 32.179865][ T3577] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.406973][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.481785][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.482694][ T3611] syzkaller0: entered promiscuous mode [ 32.496379][ T3611] syzkaller0: entered allmulticast mode [ 32.509101][ T1036] IPVS: starting estimator thread 0... [ 32.604919][ T3613] IPVS: using max 2592 ests per chain, 129600 per kthread [ 32.682035][ T3617] SELinux: failed to load policy [ 33.341670][ T3643] syzkaller0: entered promiscuous mode [ 33.348198][ T3643] syzkaller0: entered allmulticast mode [ 33.547070][ T3651] set_capacity_and_notify: 1 callbacks suppressed [ 33.547085][ T3651] loop0: detected capacity change from 0 to 512 [ 33.577228][ T3653] syzkaller0: entered promiscuous mode [ 33.582776][ T3653] syzkaller0: entered allmulticast mode [ 33.621293][ T3651] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.53: bg 0: block 5: invalid block bitmap [ 33.646475][ T3651] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 33.660357][ T3651] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.53: invalid indirect mapped block 3 (level 2) [ 33.718049][ T3651] EXT4-fs (loop0): 1 orphan inode deleted [ 33.723987][ T3651] EXT4-fs (loop0): 1 truncate cleaned up [ 33.753136][ T3658] syzkaller0: entered promiscuous mode [ 33.758699][ T3658] syzkaller0: entered allmulticast mode [ 33.793781][ T3651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.890068][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.956067][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 33.956099][ T29] audit: type=1400 audit(1769820845.424:289): avc: denied { listen } for pid=3665 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.233467][ T3674] loop0: detected capacity change from 0 to 512 [ 34.269166][ T3674] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.269844][ T29] audit: type=1400 audit(1769820845.734:290): avc: denied { write } for pid=3659 comm="syz.1.57" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.282263][ T3674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.388108][ T3676] dummy0: entered promiscuous mode [ 34.403947][ T3676] vlan2: entered promiscuous mode [ 34.416348][ T3674] EXT4-fs (loop0): 1 truncate cleaned up [ 34.423125][ T3674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.501854][ T3674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.519730][ T29] audit: type=1400 audit(1769820845.974:291): avc: denied { kexec_image_load } for pid=3680 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 34.660535][ T29] audit: type=1400 audit(1769820846.124:292): avc: denied { write } for pid=3686 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.711666][ T3691] syzkaller0: entered promiscuous mode [ 34.717435][ T3691] syzkaller0: entered allmulticast mode [ 34.729424][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 34.738307][ T3693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 34.756041][ T3693] netlink: 'syz.0.67': attribute type 10 has an invalid length. [ 34.768699][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.776056][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.787539][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.794728][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.802067][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.809776][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.828660][ T3693] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 34.854313][ T29] audit: type=1400 audit(1769820846.314:293): avc: denied { mount } for pid=3692 comm="syz.0.67" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 34.879353][ T3694] bridge0: port 3(syz_tun) entered blocking state [ 34.885980][ T3694] bridge0: port 3(syz_tun) entered disabled state [ 34.892848][ T3694] syz_tun: entered allmulticast mode [ 34.898851][ T3694] syz_tun: entered promiscuous mode [ 34.904418][ T3694] bridge0: port 3(syz_tun) entered blocking state [ 34.910921][ T3694] bridge0: port 3(syz_tun) entered forwarding state [ 34.925031][ T29] audit: type=1400 audit(1769820846.394:294): avc: denied { create } for pid=3692 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 34.927333][ T3693] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 34.945242][ T29] audit: type=1400 audit(1769820846.394:295): avc: denied { write } for pid=3692 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 35.010314][ T3693] infiniband syz1: set active [ 35.015213][ T3693] infiniband syz1: added syz_tun [ 35.028765][ T3693] RDS/IB: syz1: added [ 35.032870][ T3693] smc: adding ib device syz1 with port count 1 [ 35.039777][ T3693] smc: ib device syz1 port 1 has no pnetid [ 35.623181][ T3707] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure [ 35.663767][ T29] audit: type=1400 audit(1769820847.084:296): avc: denied { setopt } for pid=3701 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.709837][ T3708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.71'. [ 36.045938][ T3712] syzkaller0: entered promiscuous mode [ 36.047123][ T3711] loop4: detected capacity change from 0 to 2048 [ 36.051555][ T3712] syzkaller0: entered allmulticast mode [ 36.076246][ T3711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.092357][ T29] audit: type=1400 audit(1769820847.554:297): avc: denied { read write } for pid=3709 comm="syz.4.73" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.117144][ T29] audit: type=1400 audit(1769820847.554:298): avc: denied { open } for pid=3709 comm="syz.4.73" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.143013][ T3711] autofs4:pid:3711:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1869771886), cmd(0xc0189379) [ 36.156962][ T3711] autofs4:pid:3711:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 36.222889][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.421905][ T3724] loop2: detected capacity change from 0 to 128 [ 36.428764][ T3724] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.441351][ T3724] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.457119][ T3724] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.495245][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.511950][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 36.520828][ T3726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.78'. [ 36.538893][ T3726] loop2: detected capacity change from 0 to 2048 [ 36.560013][ T3726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.576511][ T3726] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.591545][ T3726] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 36.603935][ T3726] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.603935][ T3726] [ 36.613690][ T3726] EXT4-fs (loop2): Total free blocks count 0 [ 36.619725][ T3726] EXT4-fs (loop2): Free/Dirty block details [ 36.625825][ T3726] EXT4-fs (loop2): free_blocks=2415919104 [ 36.631554][ T3726] EXT4-fs (loop2): dirty_blocks=32 [ 36.636702][ T3726] EXT4-fs (loop2): Block reservation details [ 36.642728][ T3726] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 36.673103][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.874670][ T3733] syzkaller0: entered promiscuous mode [ 36.880289][ T3733] syzkaller0: entered allmulticast mode [ 37.098834][ T3735] loop4: detected capacity change from 0 to 1024 [ 37.116296][ T3735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.128558][ T3735] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.142426][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 3) [ 37.156693][ T3735] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 37.169022][ T3735] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.169022][ T3735] [ 37.181458][ T3735] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.81: bg 0: block 112: padding at end of block bitmap is not set [ 37.199695][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.213887][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.228164][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.242491][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.256769][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.271011][ T3734] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.285499][ T3734] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.299660][ T3735] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.81: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.495898][ T3681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.615045][ T3745] syzkaller0: entered promiscuous mode [ 37.620670][ T3745] syzkaller0: entered allmulticast mode [ 38.407183][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.777473][ T3782] process 'syz.4.91' launched './file0' with NULL argv: empty string added [ 39.107196][ T3786] loop1: detected capacity change from 0 to 512 [ 39.149564][ T3786] EXT4-fs: Ignoring removed nobh option [ 39.165216][ T3786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.184367][ T3786] EXT4-fs (loop1): 1 truncate cleaned up [ 39.190756][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.288231][ T3786] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 39.382426][ T3786] SELinux: failed to load policy [ 39.444635][ T3797] loop4: detected capacity change from 0 to 2048 [ 39.469677][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.576810][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.953760][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 39.953777][ T29] audit: type=1400 audit(1769820851.414:310): avc: denied { write } for pid=3812 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 40.092869][ T3813] loop3: detected capacity change from 0 to 8192 [ 40.148147][ T3808] loop1: detected capacity change from 0 to 2048 [ 40.176689][ T3808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.206127][ T3818] syzkaller0: entered promiscuous mode [ 40.211713][ T3818] syzkaller0: entered allmulticast mode [ 40.218034][ T29] audit: type=1400 audit(1769820851.674:311): avc: denied { mounton } for pid=3812 comm="syz.3.101" path="/20/file0/file0" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 40.338908][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.409562][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 40.422114][ T3828] syzkaller0: entered promiscuous mode [ 40.427714][ T3828] syzkaller0: entered allmulticast mode [ 40.434018][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.450848][ T3830] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 40.474612][ T29] audit: type=1400 audit(1769820851.934:312): avc: denied { execute } for pid=3825 comm="syz.4.105" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 40.520196][ T29] audit: type=1400 audit(1769820851.984:313): avc: denied { create } for pid=3829 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 40.544801][ T29] audit: type=1400 audit(1769820852.004:314): avc: denied { write } for pid=3829 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 40.606580][ T3839] macvlan2: entered promiscuous mode [ 40.611947][ T3839] macvlan2: entered allmulticast mode [ 40.623527][ T3838] syzkaller0: entered promiscuous mode [ 40.632061][ T3838] syzkaller0: entered allmulticast mode [ 40.722100][ T29] audit: type=1326 audit(1769820852.164:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 40.745409][ T29] audit: type=1326 audit(1769820852.164:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 40.768562][ T29] audit: type=1326 audit(1769820852.164:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 40.792180][ T29] audit: type=1326 audit(1769820852.164:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 40.815957][ T29] audit: type=1326 audit(1769820852.164:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3842 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 40.880216][ T3843] loop4: detected capacity change from 0 to 256 [ 40.920031][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 41.023125][ T3856] syzkaller0: entered promiscuous mode [ 41.028738][ T3858] loop3: detected capacity change from 0 to 512 [ 41.028745][ T3856] syzkaller0: entered allmulticast mode [ 41.075404][ T3858] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.081934][ T3858] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 41.092099][ T3860] syzkaller0: entered promiscuous mode [ 41.097755][ T3860] syzkaller0: entered allmulticast mode [ 41.129359][ T3858] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 41.144076][ T3858] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.117: attempt to clear invalid blocks 2 len 1 [ 41.165225][ T3858] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.117: invalid indirect mapped block 1819239214 (level 0) [ 41.183547][ T3858] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.117: invalid indirect mapped block 1819239214 (level 1) [ 41.198573][ T3858] EXT4-fs (loop3): 1 truncate cleaned up [ 41.204517][ T3858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.422673][ T3406] Process accounting resumed [ 41.463550][ T3833] syz.1.108 (3833) used greatest stack depth: 7464 bytes left [ 41.474015][ T3875] syz.2.122: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 41.475218][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.488474][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz.2.122 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.488518][ T3875] Tainted: [W]=WARN [ 41.488525][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.488594][ T3875] Call Trace: [ 41.488602][ T3875] [ 41.488611][ T3875] __dump_stack+0x1d/0x30 [ 41.488659][ T3875] dump_stack_lvl+0x95/0xd0 [ 41.488684][ T3875] dump_stack+0x15/0x1b [ 41.488707][ T3875] warn_alloc+0x145/0x1c0 [ 41.488792][ T3875] ? __cgroup_account_cputime+0x81/0xa0 [ 41.488826][ T3875] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 41.488899][ T3875] ? update_curr+0x9c/0x150 [ 41.488918][ T3875] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 41.488952][ T3875] ? probe_sched_wakeup+0x84/0xa0 [ 41.488980][ T3875] ? __rcu_read_unlock+0x4e/0x70 [ 41.489078][ T3875] ? avc_has_perm_noaudit+0xab/0x130 [ 41.489115][ T3875] ? should_fail_ex+0x30/0x280 [ 41.489151][ T3875] ? should_failslab+0x8c/0xb0 [ 41.489222][ T3875] vmalloc_user_noprof+0x7d/0xb0 [ 41.489353][ T3875] ? xskq_create+0x80/0xe0 [ 41.489389][ T3875] xskq_create+0x80/0xe0 [ 41.489515][ T3875] xsk_init_queue+0x91/0xe0 [ 41.489549][ T3875] xsk_setsockopt+0x477/0x640 [ 41.489600][ T3875] ? __pfx_xsk_setsockopt+0x10/0x10 [ 41.489633][ T3875] __sys_setsockopt+0x184/0x200 [ 41.489722][ T3875] __x64_sys_setsockopt+0x64/0x80 [ 41.489760][ T3875] x64_sys_call+0x21d5/0x3000 [ 41.489852][ T3875] do_syscall_64+0xc0/0x2a0 [ 41.489892][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.489918][ T3875] RIP: 0033:0x7fc25ccaaeb9 [ 41.489996][ T3875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.490017][ T3875] RSP: 002b:00007fc25b707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 41.490040][ T3875] RAX: ffffffffffffffda RBX: 00007fc25cf25fa0 RCX: 00007fc25ccaaeb9 [ 41.490061][ T3875] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 41.490076][ T3875] RBP: 00007fc25cd18c1f R08: 0000000000000004 R09: 0000000000000000 [ 41.490091][ T3875] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 41.490148][ T3875] R13: 00007fc25cf26038 R14: 00007fc25cf25fa0 R15: 00007fff7919be98 [ 41.490169][ T3875] [ 41.490177][ T3875] Mem-Info: [ 41.683055][ T3879] batadv0: entered promiscuous mode [ 41.688408][ T3875] active_anon:6863 inactive_anon:10 isolated_anon:0 [ 41.688408][ T3875] active_file:20484 inactive_file:2282 isolated_file:0 [ 41.688408][ T3875] unevictable:0 dirty:109 writeback:12 [ 41.688408][ T3875] slab_reclaimable:3220 slab_unreclaimable:16323 [ 41.688408][ T3875] mapped:31110 shmem:329 pagetables:1120 [ 41.688408][ T3875] sec_pagetables:0 bounce:0 [ 41.688408][ T3875] kernel_misc_reclaimable:0 [ 41.688408][ T3875] free:1839309 free_pcp:52421 free_cma:0 [ 41.699536][ T3879] vlan2: entered promiscuous mode [ 41.704631][ T3875] Node 0 active_anon:27452kB inactive_anon:40kB active_file:81936kB inactive_file:9128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124440kB dirty:436kB writeback:48kB shmem:1316kB kernel_stack:3472kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 41.704754][ T3875] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 41.704911][ T3875] lowmem_reserve[]: 0 [ 41.837139][ T3881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3881 comm=syz.0.126 [ 41.839394][ T3875] 2879 7858 7858 [ 41.859866][ T3875] Node 0 DMA32 free:2944852kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 41.891488][ T3875] lowmem_reserve[]: 0 0 4978 4978 [ 41.896682][ T3875] Node 0 Normal free:4397024kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27568kB inactive_anon:40kB active_file:81936kB inactive_file:9128kB unevictable:0kB writepending:484kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:205988kB local_pcp:39520kB free_cma:0kB [ 41.931714][ T3875] lowmem_reserve[]: 0 0 0 0 [ 41.937310][ T3875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 41.950190][ T3875] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944852kB [ 41.966538][ T3875] Node 0 Normal: 869*4kB (UME) 679*8kB (UME) 427*16kB (UME) 242*32kB (UME) 220*64kB (UME) 147*128kB (UME) 94*256kB (UME) 29*512kB (UME) 25*1024kB (UM) 16*2048kB (UME) 1036*4096kB (UM) = 4397116kB [ 41.986020][ T3875] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 41.995358][ T3875] 23333 total pagecache pages [ 42.000047][ T3875] 13 pages in swap cache [ 42.004285][ T3875] Free swap = 124084kB [ 42.008523][ T3875] Total swap = 124996kB [ 42.012675][ T3875] 2097051 pages RAM [ 42.016549][ T3875] 0 pages HighMem/MovableOnly [ 42.021398][ T3875] 81556 pages reserved [ 42.128613][ T3888] loop2: detected capacity change from 0 to 512 [ 42.144872][ T3886] netlink: 14 bytes leftover after parsing attributes in process `syz.0.127'. [ 42.226305][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 42.825989][ T3932] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.834725][ T3932] vhci_hcd vhci_hcd.2: invalid port number 96 [ 42.840958][ T3932] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 42.866905][ T3934] mmap: syz.0.143 (3934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.924881][ T3939] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.933266][ T3937] syzkaller0: entered promiscuous mode [ 42.938822][ T3937] syzkaller0: entered allmulticast mode [ 43.517163][ T3978] loop1: detected capacity change from 0 to 128 [ 43.635825][ T3978] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.695611][ T3978] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.989879][ T4003] syzkaller0: entered promiscuous mode [ 43.995545][ T4003] syzkaller0: entered allmulticast mode [ 44.203996][ T4011] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 44.248934][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.331004][ T4023] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4023 comm=syz.1.175 [ 44.404754][ T4032] netlink: 232 bytes leftover after parsing attributes in process `syz.1.175'. [ 44.521034][ T4033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.182'. [ 44.604242][ T4047] loop1: detected capacity change from 0 to 512 [ 44.620290][ T4051] bridge1: entered promiscuous mode [ 44.625892][ T4051] bridge1: entered allmulticast mode [ 44.632770][ T4047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.637858][ T4051] team0: Port device bridge1 added [ 44.659584][ T4051] bridge0: port 3(team0) entered blocking state [ 44.666152][ T4051] bridge0: port 3(team0) entered disabled state [ 44.675943][ T4047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 44.694181][ T4047] System zones: 1-2, 4-12, 8-8 [ 44.699605][ T4047] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.189: iget: bad i_size value: 38620345925642 [ 44.714314][ T4051] team0: entered allmulticast mode [ 44.719490][ T4051] team_slave_0: entered allmulticast mode [ 44.725474][ T4051] team_slave_1: entered allmulticast mode [ 44.733805][ T4047] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.189: couldn't read orphan inode 15 (err -117) [ 44.746598][ T4047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.784747][ T4051] team0: entered promiscuous mode [ 44.789988][ T4051] team_slave_0: entered promiscuous mode [ 44.795983][ T4051] team_slave_1: entered promiscuous mode [ 44.843590][ T4051] bridge0: port 3(team0) entered blocking state [ 44.850007][ T4051] bridge0: port 3(team0) entered forwarding state [ 44.870604][ T4061] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.189: bg 0: block 5: invalid block bitmap [ 44.926522][ T4064] EXT4-fs error (device loop1): __ext4_iget:5426: inode #16: block 50331678: comm syz.1.189: invalid block [ 45.065279][ T4061] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 568 with error 28 [ 45.077946][ T4061] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.077946][ T4061] [ 45.087808][ T4061] EXT4-fs (loop1): Total free blocks count 0 [ 45.093816][ T4061] EXT4-fs (loop1): Free/Dirty block details [ 45.100309][ T4061] EXT4-fs (loop1): free_blocks=0 [ 45.105286][ T4061] EXT4-fs (loop1): dirty_blocks=7880 [ 45.110582][ T4061] EXT4-fs (loop1): Block reservation details [ 45.116743][ T4061] EXT4-fs (loop1): i_reserved_data_blocks=584 [ 45.126100][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 45.900431][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 45.900461][ T29] audit: type=1400 audit(1769820857.364:508): avc: denied { mount } for pid=4077 comm="syz.3.200" name="/" dev="rpc_pipefs" ino=5874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 45.906833][ T4082] loop3: detected capacity change from 0 to 512 [ 45.940323][ T4082] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.955231][ T4082] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.200: bad orphan inode 131083 [ 45.969698][ T4082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.988182][ T29] audit: type=1400 audit(1769820857.454:509): avc: denied { create } for pid=4077 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.036186][ T29] audit: type=1400 audit(1769820857.454:510): avc: denied { write } for pid=4077 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.071390][ T29] audit: type=1326 audit(1769820857.534:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.112776][ T29] audit: type=1326 audit(1769820857.564:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.136372][ T29] audit: type=1326 audit(1769820857.564:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.137573][ T4095] openvswitch: netlink: Missing key (keys=40, expected=80) [ 46.159843][ T29] audit: type=1326 audit(1769820857.564:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.159887][ T29] audit: type=1326 audit(1769820857.564:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.159911][ T29] audit: type=1326 audit(1769820857.564:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.159934][ T29] audit: type=1326 audit(1769820857.564:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93aa59aeb9 code=0x7ffc0000 [ 46.295962][ T4100] syzkaller0: entered promiscuous mode [ 46.301627][ T4100] syzkaller0: entered allmulticast mode [ 46.533490][ T4140] loop1: detected capacity change from 0 to 512 [ 46.551526][ T4140] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.225: inode has both inline data and extents flags [ 46.587138][ T4140] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.225: couldn't read orphan inode 15 (err -117) [ 46.592261][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 46.610943][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.769649][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.799237][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.149859][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 47.185406][ T4226] loop1: detected capacity change from 0 to 512 [ 47.238579][ T4226] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.256306][ T4226] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.284545][ T4226] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.263: Failed to acquire dquot type 1 [ 47.301516][ T4226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.263: bg 0: block 40: padding at end of block bitmap is not set [ 47.328657][ T4226] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 47.383108][ T4226] EXT4-fs (loop1): 1 truncate cleaned up [ 47.396212][ T4226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.406612][ T4245] Illegal XDP return value 651570356 on prog (id 74) dev syz_tun, expect packet loss! [ 47.555886][ T4246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.619672][ T4246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.689466][ T4246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.930399][ T4246] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.949850][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.978280][ T4267] bridge0: port 3(syz_tun) entered disabled state [ 47.984875][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.992225][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.045769][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.065139][ T4273] netlink: 'syz.2.284': attribute type 1 has an invalid length. [ 48.074544][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088874][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.132832][ T4273] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 48.153904][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264627][ T4273] veth3: entered promiscuous mode [ 48.276984][ T4289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 48.301595][ T4294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.292'. [ 48.311621][ T4273] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 48.364926][ T4299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 48.373919][ T4299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 48.382962][ T4299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 48.395149][ T4299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'. [ 48.435108][ T4289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.440807][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 48.574937][ T321] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 48.657454][ T4279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.668214][ T4279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.724418][ T4319] loop4: detected capacity change from 0 to 1024 [ 48.753885][ T4319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.775564][ T4319] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.790619][ T4319] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.808723][ T4319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.821236][ T4319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.821236][ T4319] [ 48.842911][ T4319] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.844000][ T4279] SELinux: failed to load policy [ 48.892386][ T4319] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.301: lblock 3 mapped to illegal pblock 3 (length 1) [ 48.904850][ T4326] veth0: entered promiscuous mode [ 48.907696][ T4319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 48.913154][ T4327] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.924616][ T4319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.924616][ T4319] [ 48.932756][ T4326] vlan2: entered promiscuous mode [ 48.939348][ T4327] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.974679][ T4327] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 48.989697][ T4327] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.003508][ T4327] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.301: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.018583][ T4327] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.301: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.037344][ T4319] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.301: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.070623][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 49.079890][ T4319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.301'. [ 49.091253][ T4319] gtp0: entered promiscuous mode [ 49.096343][ T4319] gtp0: entered allmulticast mode [ 49.136097][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.175723][ T4336] loop4: detected capacity change from 0 to 1024 [ 49.184593][ T4336] EXT4-fs: Ignoring removed oldalloc option [ 49.190924][ T4336] EXT4-fs: Ignoring removed bh option [ 49.209092][ T4336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.226090][ T4338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4338 comm=syz.2.308 [ 49.417771][ T4348] syzkaller0: entered promiscuous mode [ 49.423319][ T4348] syzkaller0: entered allmulticast mode [ 50.072199][ T4369] syzkaller0: entered promiscuous mode [ 50.078271][ T4369] syzkaller0: entered allmulticast mode [ 50.479728][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.662207][ T4381] lo speed is unknown, defaulting to 1000 [ 50.682630][ T4381] lo speed is unknown, defaulting to 1000 [ 50.699685][ T4381] lo speed is unknown, defaulting to 1000 [ 50.708266][ T4381] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.747162][ T4381] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.779409][ T4388] netlink: 'syz.3.326': attribute type 13 has an invalid length. [ 50.857684][ T4388] bridge0: port 3(team0) entered disabled state [ 50.864109][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.872271][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.966654][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.988054][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.058678][ T4381] lo speed is unknown, defaulting to 1000 [ 51.064727][ T321] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.073294][ T321] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.082471][ T4381] lo speed is unknown, defaulting to 1000 [ 51.102370][ T321] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.111714][ T4381] lo speed is unknown, defaulting to 1000 [ 51.133588][ T4381] lo speed is unknown, defaulting to 1000 [ 51.140928][ T321] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.160203][ T4381] lo speed is unknown, defaulting to 1000 [ 51.180693][ T4387] smc: removing ib device syz1 [ 51.285364][ T4400] loop1: detected capacity change from 0 to 512 [ 51.315333][ T4400] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.360986][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 51.361000][ T29] audit: type=1326 audit(1769820862.824:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.413349][ T29] audit: type=1326 audit(1769820862.864:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.438619][ T29] audit: type=1326 audit(1769820862.864:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.462511][ T29] audit: type=1326 audit(1769820862.864:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.486005][ T29] audit: type=1326 audit(1769820862.864:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.510433][ T29] audit: type=1326 audit(1769820862.864:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.534691][ T29] audit: type=1326 audit(1769820862.864:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.558160][ T29] audit: type=1326 audit(1769820862.864:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.581382][ T29] audit: type=1326 audit(1769820862.864:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.606755][ T29] audit: type=1326 audit(1769820862.864:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c46f8aeb9 code=0x7ffc0000 [ 51.646300][ T4402] __nla_validate_parse: 1 callbacks suppressed [ 51.646323][ T4402] netlink: 80 bytes leftover after parsing attributes in process `syz.1.331'. [ 51.710354][ T4404] loop3: detected capacity change from 0 to 1024 [ 51.717292][ T4404] EXT4-fs: Ignoring removed oldalloc option [ 51.723315][ T4404] EXT4-fs: Ignoring removed bh option [ 51.750657][ T4400] ªªªªªª: renamed from vlan0 (while UP) [ 51.758208][ T4404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.827547][ T4408] syzkaller0: entered promiscuous mode [ 51.833281][ T4408] syzkaller0: entered allmulticast mode [ 51.865607][ T4411] syzkaller0: entered promiscuous mode [ 51.871303][ T4411] syzkaller0: entered allmulticast mode [ 52.039376][ T4413] lo speed is unknown, defaulting to 1000 [ 52.217236][ T4409] ================================================================== [ 52.225555][ T4409] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 52.232980][ T4409] [ 52.235395][ T4409] write to 0xffff888107a2ee9c of 4 bytes by task 4404 on cpu 1: [ 52.243201][ T4409] xas_set_mark+0x12b/0x140 [ 52.247954][ T4409] __folio_start_writeback+0x17b/0x370 [ 52.253775][ T4409] ext4_bio_write_folio+0x5ad/0x9f0 [ 52.259180][ T4409] mpage_process_page_bufs+0x4a1/0x620 [ 52.264842][ T4409] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 52.271283][ T4409] ext4_do_writepages+0x9f6/0x2800 [ 52.276525][ T4409] ext4_writepages+0x18f/0x320 [ 52.281819][ T4409] do_writepages+0x1c6/0x310 [ 52.286509][ T4409] file_write_and_wait_range+0x178/0x2f0 [ 52.292237][ T4409] generic_buffers_fsync_noflush+0x45/0x130 [ 52.298496][ T4409] ext4_sync_file+0x1aa/0x680 [ 52.303723][ T4409] vfs_fsync_range+0x10d/0x130 [ 52.308685][ T4409] ext4_buffered_write_iter+0x34f/0x3c0 [ 52.314445][ T4409] ext4_file_write_iter+0x380/0xf70 [ 52.319706][ T4409] iter_file_splice_write+0x6bc/0xa80 [ 52.325098][ T4409] direct_splice_actor+0x156/0x2a0 [ 52.330231][ T4409] splice_direct_to_actor+0x311/0x670 [ 52.335803][ T4409] do_splice_direct+0x119/0x1a0 [ 52.341206][ T4409] do_sendfile+0x382/0x650 [ 52.345637][ T4409] __x64_sys_sendfile64+0x105/0x150 [ 52.351191][ T4409] x64_sys_call+0x2db1/0x3000 [ 52.356399][ T4409] do_syscall_64+0xc0/0x2a0 [ 52.360999][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.366888][ T4409] [ 52.369210][ T4409] read to 0xffff888107a2ee9c of 4 bytes by task 4409 on cpu 0: [ 52.376740][ T4409] xas_find_marked+0x5d7/0x620 [ 52.381595][ T4409] filemap_get_folios_tag+0xfa/0x510 [ 52.386973][ T4409] filemap_fdatawait_range+0x88/0x1e0 [ 52.392338][ T4409] __writeback_single_inode+0xdb/0x7b0 [ 52.397919][ T4409] writeback_single_inode+0x16d/0x3f0 [ 52.403863][ T4409] sync_inode_metadata+0x6e/0xa0 [ 52.408810][ T4409] generic_buffers_fsync_noflush+0xee/0x130 [ 52.414704][ T4409] ext4_sync_file+0x1aa/0x680 [ 52.419459][ T4409] vfs_fsync_range+0x10d/0x130 [ 52.424214][ T4409] ext4_buffered_write_iter+0x34f/0x3c0 [ 52.429771][ T4409] ext4_file_write_iter+0x380/0xf70 [ 52.435014][ T4409] iter_file_splice_write+0x6bc/0xa80 [ 52.440383][ T4409] direct_splice_actor+0x156/0x2a0 [ 52.445498][ T4409] splice_direct_to_actor+0x311/0x670 [ 52.450860][ T4409] do_splice_direct+0x119/0x1a0 [ 52.455709][ T4409] do_sendfile+0x382/0x650 [ 52.460126][ T4409] __x64_sys_sendfile64+0x105/0x150 [ 52.465340][ T4409] x64_sys_call+0x2db1/0x3000 [ 52.470110][ T4409] do_syscall_64+0xc0/0x2a0 [ 52.474612][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.480502][ T4409] [ 52.482821][ T4409] value changed: 0x0a000021 -> 0x04000021 [ 52.488632][ T4409] [ 52.490953][ T4409] Reported by Kernel Concurrency Sanitizer on: [ 52.497198][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz.3.332 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.508498][ T4409] Tainted: [W]=WARN [ 52.512292][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.522472][ T4409] ================================================================== [ 52.656109][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.