last executing test programs: 12.28025546s ago: executing program 1 (id=301): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x2200003, 0x0, 0x0, 0x3, 0x80000001}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@bloom_filter={0x1e, 0x0, 0x2, 0x18000000, 0x40, 0xffffffffffffffff, 0x7d8593b8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x4}, 0x50) 11.709689709s ago: executing program 1 (id=312): r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) r1 = msgget$private(0x0, 0x264) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r4, &(0x7f0000000480)={0x8, 0x4, 0x8, 0xfffffffffffffffd, 0x20000000, 0x3, 0xaf4e, 0x5, 0x200}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x40044}}], 0x1, 0x4014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r10, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x38, 0x40044}}], 0x1, 0x4014) (async, rerun: 64) r14 = gettid() (rerun: 64) syz_pidfd_open(r14, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000940)={{r9, &(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x48080, &(0x7f00000002c0)={@align=0x101, {0x8, 0x8, 0x911, 0xfffffffffffffff8}}, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x1}, 0x4, &(0x7f00000008c0)=[{0x1, 0x6, &(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', &(0x7f0000000380)="b2a7eb00c4806cd5825073181fd91e16338a0590", 0x14}, {0x3, 0x100000, &(0x7f0000000400)='*+]#\xb0:^-\x00', &(0x7f00000005c0)="8e62a9caea5a36c7a27359c82a0bf562e7cc4a638ffcf9d8c528b55fac2fb1b5db4625d5d6230103e647cdd3fc96ea3ec3af59b96351b4bf67c406ac9b2d6f3d3ef5acb6f572b3df057ea8e689171aac745155821c841ed4e33dd12d4ee15f5550a938", 0x63, 0x2}, {0x3, 0x4, &(0x7f0000000440)='\x00', &(0x7f0000000740)="5fdf13d75dbb6fcede4992339851bad092642ec346f8eaaefeb18f01451943d87634f2449affbebb9360d8938c7bfc33d47e9e616c024633ac5f50bc68b502ade26bf98707cf5065b590ce6886c30c4b312898911178676f5d1d55d601088e689659fdee1ce1b5e0b3d229c555ad8e9b7859a63565eff7d916b7c734aaae552807d13c702299d335111f03a8f6d748348a972385ad87c7f7ebc55348caf4e430226a61c296c868001cb012eb57618b5bbc4c842920f2ae383f88ae7a3b8cd0a9618e9a687103a8bfd84acca0ab42cf77409e46a81e7cd8779d67ad0045f3977586bf2774e35f7416d75d1daa8032fb5b52284510690a221417fd6726a46f", 0xfe, 0x10}, {0x1, 0x10001, &(0x7f0000000640)='L/&*-:!\x00', &(0x7f0000000840)="933000390da62cdd955ebcee80e57b4c649a20038f9226a1fa35351895f084666d9bc5dc4260122a5e235755697989b83062f084b947683fcc8601cbca37cdede3a6bfd1626030d61a9178ee7ad011c6673dec3c69b52bedf91076cb", 0x5c, 0x30}]}) (async) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000040)={{0x0, r4, 0xee01, r7, r13, 0xe0, 0xc7be}, 0x0, 0x0, 0x6, 0x7ff, 0xb, 0x5, 0x5, 0x5, 0x101, 0x6, r14, r0}) (async) r15 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r15, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.573414586s ago: executing program 1 (id=317): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1100) unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f00000006c0)=""/97, 0x61}], 0x4, &(0x7f00000009c0)=""/250, 0xfa}, 0x2102) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}, {0x0}, {0x0}, {0x0}], 0x4}, 0x804) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1f5f, &(0x7f0000000040)={0x0, 0x36c, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) r4 = getpid() perf_event_open(0x0, r4, 0xfffffffffffffff9, r2, 0x0) r5 = socket(0x23, 0x5, 0x0) listen(r5, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x0) 10.366350158s ago: executing program 1 (id=326): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08f, 0x2, @perf_bp={0x0}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r4 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x200, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x4044010) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r7, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1101, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r9) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000011"], 0x38}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r11) r12 = getpgrp(0x0) r13 = syz_pidfd_open(r12, 0x0) fsetxattr$trusted_overlay_nlink(r13, &(0x7f00000018c0), 0x0, 0x0, 0x1) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 9.217379297s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20044053) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x10808, &(0x7f0000000c00), 0x1, 0xb88, &(0x7f0000002380)="$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") socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000000) r6 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ftruncate(r6, 0x2007ffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x800000009) 9.117561242s ago: executing program 1 (id=346): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e00)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 9.108866083s ago: executing program 32 (id=346): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e00)={0x120, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 3.855490752s ago: executing program 4 (id=384): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0x7f, 0x0, 0x4) 3.558370357s ago: executing program 3 (id=387): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x1f4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c4, 0x2, [@TCA_CGROUP_EMATCHES={0x19c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x180, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0xff}, {0x3, 0x5, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8001, 0x7, 0x5}, {{0x3, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x12c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x64, 0x5, "97c17a63c747cbe2401710d298abd433bb3406f00df5ae25ba16f4398bdeae9ff4bacd509a59bf2bf8fda23bb7aeaa8fdb23a30388f693c37399d6fd84f99ffc8589b7109a15726b2737156c32fefdc64c1ae3b8fad493fd47ba7e46cee6da58"}, @TCA_EM_IPT_MATCH_DATA={0x84, 0x5, "ad32d6e0ade3d85059586a57b31e0773d263055b14434cc7e882522a499cda01bdcd9e7037cf5ddd8294ce818c94c3adcbb163f7ed80e5db5281d10a31fd7dc91c84338e3640740c7995267ae8046ef0c9ce370ae783e1cc7e00c368c903692283ee9fa14dd3da1ccb980a6aa5b6f9a8183d4153068d96642a51da051553ff2d"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xaf}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x81}, {0xbd1d, 0x1ff, 0x722, 0x1, 0x4, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0xfff}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x83c1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0x0, 0xa, 0x7, 0x6, 0x2, 0x7, 0x6, 0x10, 0x9, 0xff, 0x4, 0xa, 0x4}, 0xe) (async) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r0, 0x0, 0x82) fchdir(r4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) utimensat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x0, 0xea60}}, 0x100) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r5, &(0x7f0000001600)=""/4101, 0x1005) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), r6) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="00042abd7000fcdbdf25030000002500070073797374656d5f753a6f626a6563745f723a64706b675f6c6f634b5f743a73300000000014000200fe8000000000000000000000000000aa14000600687372300000000000000000000000002600070073797374656d5f753a6f626a6563745f723a6370755f6f6e6c696e655f743a73300000000500010001000000"], 0x94}, 0x1, 0x0, 0x0, 0xc000840}, 0x20004801) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xd, 0x3, 0x20, @private2, @local, 0x700, 0x700, 0xfff, 0x9}}) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r12, 0x8010671f, &(0x7f0000001380)={&(0x7f00000002c0)=""/124, 0x7c}) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$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") (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187042, 0x1d) pwrite64(r13, &(0x7f0000000140)='\n', 0x1, 0xe7c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='2\x00'/12, @ANYRES32=r10, @ANYBLOB="b27c8b5a94c9e9f5578b8c5c5f3ae66451008bc623f63757df835e1ccdee0ee583f6c6e0cc", @ANYRES64=0x0], 0x20) 3.496882531s ago: executing program 4 (id=388): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) prctl$PR_GET_SECUREBITS(0x1b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x89}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x105c, &(0x7f0000001240)="$eJzsz7FtwzAUBNATpUhQlyYjZIlMkSZ1CndeQm68jDfxPgZc0qDAGWwX71WfPB6BH15qmHP8H8cka5JT6pLULcnnHk91aI9a9NEb97kPa/lOm7f9NPcvrofktt+MJclPktr00m/OX2WdkiVJ+bs8fWEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEOPAAAA///UnBCa") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r5, &(0x7f0000000440), 0x0, 0x1, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000003300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0x1, 0x4) 3.399506735s ago: executing program 3 (id=389): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300001b000000850000004c0000000318faea99b1f51d55090100000000009500000000000000bf91000000000000b6080000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 3.398768885s ago: executing program 3 (id=390): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000300)="686810a12b9bb26768b5d3a8e14080424bebb18d4cc748413dba930fea12774602dfbe753cd208297a58f4436f3594b085d028b08cb2c97d23fbc5debcc4249be8005a0c454a24e264c504a49502e409d81d8a4ae3078c4d4f9956fc28248da898e6f8b9cae54ce3dfadb61aec23da2acba2dabb5767724acca4cdeb56d78820a5", &(0x7f00000003c0)=""/119, &(0x7f0000000440)="75fc008c1a55c0d8e64b0e7feddedec2e2a0c24aa5565d467a37ca79d23f848c6c1835d48b468c9d1b1b707107ca5968647849cb716770832aa2896b4812f96c6961b486f7da57f6c863bcdd856dc16bc5fa50f6e7807b856d24610c9f8b181f79b6ce939597f3e880549a93ec15b2a3ba54115e0db149bbe6f13d1580f8a63927032a5873ec61243d5ad456c0bc1baec28436db7997ae77904fc1a48c9de83ac32b95d3ecf92602f89e5712e3f0a209f9d01e5eb0e6638a026990086d7ac9b52902c28dcbf4f8f1f361cb6ab0b7290d75a6052a053f8abeeb1c97c9c4fe46801837508d6a09dbbf9c47", &(0x7f0000000540)="584d57e4", 0x1, r1, 0x4}, 0x38) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = eventfd2(0x74a6, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001680)=@fuse_with_parent={0x18, 0x82, {{0x7, 0x4, 0x10000}, {0x390f, 0x9, 0xa}}}, 0x8800) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000100)="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", &(0x7f0000000640)=""/4096, &(0x7f0000000200)="6fd0c633fc4acdda1bfa45316fe38cf29c6fe6c3a43ea8e24f15a65d17121e1f1784775e0199ab4985829eb78b62b333", &(0x7f0000000240)="d3d65af60fc3c51a002ab75b991d3f130a913c356f86ec389f875886eb04b2525e11536ae25120571c1002fe333e8f5455ccc91a4df8004493395748b8b04556b6f4602f6f85b9bec603e360a80b36d00eba230bef056a265e", 0x6, r1}, 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x10, 0x0, 0x8, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x8, 0x5, 0x6}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) accept$inet(r6, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) 2.92943583s ago: executing program 3 (id=392): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0x7f, 0x0, 0x4) 2.659239964s ago: executing program 2 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004e00004c0000000000069078ac1e0001ac141411890fa2ac1414bbac1414bbffffffff44050503000000050000000086060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000df1a7e1b"], 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004e00004c0000000000069078ac1e0001ac141411890fa2ac1414bbac1414bbffffffff44050503000000050000000086060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000df1a7e1b"], 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX], 0x1, 0x30a, &(0x7f0000001040)="$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") chdir(&(0x7f0000000780)='./file0\x00') (async) chdir(&(0x7f0000000780)='./file0\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00') 2.646113054s ago: executing program 2 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="900000000002010400000000000000000a000007040001803c0003800c00028005000100110000002c00018014000300fe80000000000000000000000000001d69000400000000000000000000000000000000013c0002802c00018014000300fe80000000000000000000000000003b1400040000000000000000000000ffffe00000020c000280050001"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") 2.635349275s ago: executing program 4 (id=396): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e00)={0x128, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2.600133246s ago: executing program 5 (id=347): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48613, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x40000000000000, 0x1, 0x5, 0x101, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xd) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x1ff, 0xffff406e, 0xfffffffb, 0x40000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x30) sendfile(r0, r1, &(0x7f0000000080)=0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0xa, 0x4e20, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc46}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="566a3a2a35a8a1d9e2c9571b4f6223578e802b3e504a01274a018ed213cad053ff6dba41c4f431e2e408f27c7235dafa2f262f7e23dc04855a1a4ee600eb7ce5c3c04603672818b3dbfb88f42da0fa8af7e86a96d3110ac9da742bd02cf06506b128fc4348b98e2e506fea3ad31e460a8004587539cb6da70df0cedabe6fd797256d4f5cc424aabd76b67b6b976b94f01f1354c7cc161d013f5ee39ef5edaff22a974e75de747d4083d9c5ccb34457774e41023acc58604d76eea4ac6aecc3599c02e2099d4fa073a08f9f1d211498e430d6c0894434d3a1ad3e2c154a091a9f54a236c505f5d412f2859c7b1be68713f022043cedadee6c", 0xf8}, {&(0x7f0000000200)="0c5907960d09fb6460f772", 0xb}], 0x2, &(0x7f0000000700)=[@dstopts={{0x90, 0x29, 0x37, {0x33, 0xe, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0xe8be, [0x733, 0x10001, 0x80000000, 0xffffffff]}}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x10}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x80, 0x27, "4533a76ef29273108e7c112ed1a4236e503830521334850d81601343e576aa905ce92f2cfa0d6f"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0xd8}, 0x44040) sendmsg$nl_xfrm(r7, 0x0, 0x20040014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 2.436363355s ago: executing program 4 (id=397): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x553, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xffee) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x553, &(0x7f0000000b00)="$eJzs3U1vI2cdAPD/TOJNdjfFKXAolVoqWrRbwdqbhrYRh3aRELdKoCJx3EaJN4rWiaPYKZuoEqn4AEgIQa+cuCDxAZCgH6GqVIneeRMIwRYOIEEHjT1mXTPOSxvbq+T3k8aeeWbm+f8fbzx+5mVnAriwnoqIWxExExHPRkS1KE+LIQ57Q77cB/ffWMuHfM6rf00i6ZXNR8Riv7687Gp3lctHxm3vH9xdbTYbu8V0vbO1U2/vH9zY3FrdaGw0tpeXl15YeXHl+ZWbZ9LOvF0vff2PP/7Bz77x0q++/N3f3v7z9dnB+b12nUh6mrjvd18rMT9QlgfePU0lD7GZoj2VaScCAMCJ5J3ZT0fEF7r9/2rMxP+6xcNduvnJZwcAAACchezlhfh3EpEBAAAA59bLEbEQSVorrgVYiDSt1XrX8H42rqTNVrvzpTutve31fF7EYlTSO5vNxs3imtrFqCT59FJxEXB/+rmh6eWIeDQiflS93J2urbWa69M++AEAAAAXxNWh/f9/VHv7/wAAAMA5szjtBAAAAICxG7X/n0w4DwAAAGB8Ru3/z004DwAAAGAsvvnKK/mQzUfv+dfrr+/v3W29fmO90b5b29pbq621dndqG63WRveefVvH1ddstXa+Ett79+qdxq2k3t4/uL3V2tvu3N70/EAAAACYlkc///b7SUQcfvVyd8hdWn8tYmbECu4VAOdGepqF/zC+PIDJG/UzD5x/s9NOAJiew2knAEzbR271UdIpGLx4Jx1c+J2IuDTGxAAAgDNz7XMl5/+LXYDKtJMDxupU5/+Bc8X5f7i4Tnn+/91x5QFMXuVBD8ClQHBBHfeoj5E373inpKz0eoAsO7YuAABgrBa6r0laK84FLkSa1moRj3T/q38lubPZbNyMiE9FxG+qlbl8eqm3jscDAgAAAAAAAAAAAAAAAAAAAAAAAMAJZVkSGQAAAHCuRaR/Sornf12rPrMwfHzgUvLPavQe6dV/PmBndykv/1u/PDpvvfqTe6udzu5zkz56AQAAAJTp76d335emnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA580H999YK4ZLRyzW+N0Zx/3L1yJi8SPx13pzZmO++z4flYi48vckZgfWSyJi5gziH74ZEY+VxU/ytGKxyGI4fhoRlycT/4ksy0rjXz2D+HCRvZ1vf26Vff/SeKr7Xv79ny2GT6q3/ZuNuZL4/e3fzIjt3yMnjPH4e7+oj4z/ZsTjs+Xbn378ZET8p8sqLPlQXvv2wcH/FfYqj+ynEdeiPP5grHpna6fe3j+4sbm1utHYaGwvLy+9sPLiyvMrN+t3NpuN4rW0jT984pcfDhX9J+vpbkdjRPzFY9r/TD5SGSjMhsMUwd67d/8zvdHKUBXdz//60+V/f48dET//m/hi8TuQz78W8WHRpO7nOejJn7/7ZGliRfz1Ee0/7t//+qhKhzz7re///oSLAgAT0N4/uLvabDZ2TzVSLZ/1vaLS0rXeyrLs48Tqj1z5eKkaOWIkkgcl/d7dEWvNfaKg8w9Fk8c08p1fR4wzxNyor9UpRv6VnXThkiNb2dwkN0sAAMAYPOj0TzsTAAAAAAAAAAAAAAAAAAAAuLja+5GO++5owzEPp9NUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAj/TcAAP//OjfXYA==") (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) getdents64(r0, 0xfffffffffffffffe, 0xffee) (async) 2.304303212s ago: executing program 5 (id=398): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.271078483s ago: executing program 4 (id=399): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r0, 0x2007ffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00000000000000000000000d002e00d0a3e6c9c7"], 0x30}], 0x1}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$setperm(0x5, r1, 0x802) keyctl$get_security(0x11, r1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) socket$inet_sctp(0x2, 0x5, 0x84) 2.225057576s ago: executing program 2 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0x8, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0x4, 0x2f, 0x0, @local, @empty, {[@lsrr={0x83, 0x2b, 0x19, [@private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @loopback, @multicast1, @empty, @remote, @remote]}, @ssrr={0x89, 0xb, 0xeb, [@multicast2, @loopback]}, @rr={0x7, 0x7, 0x6d, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003140)={r7, 0x0, 0x0, 0x82, 0x0, &(0x7f0000000f00)=""/130, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x639}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000980)}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x51}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @generic={0x40, 0x9, 0x0, 0x100}], &(0x7f0000000280)='GPL\x00', 0x0, 0xf0, &(0x7f0000000880)=""/240, 0x1f00, 0x61, '\x00', r6, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0xfffffff9, 0xffffffff}, 0x10, 0x7d1d, r7, 0x7, &(0x7f0000000340)=[r8, r9, r5], &(0x7f0000000a40)=[{0x5, 0x5, 0xa, 0x8}, {0x1, 0x2, 0x7, 0x2}, {0x3, 0x5, 0x1, 0x2}, {0x5, 0x5, 0xd, 0x5}, {0x2, 0x4, 0x5, 0x5}, {0x1, 0x5, 0xd, 0xa}, {0x3, 0x4, 0x0, 0x8}], 0x10, 0x1}, 0x94) sendmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="b6db79", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b40)="e3c09d7ef7", 0x5}], 0x1, &(0x7f00000031c0)=[{0x10, 0x1, 0x3}], 0x10}}], 0x2, 0x0) unshare(0x22020600) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r11 = socket(0x1, 0x803, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r14 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r14, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x0, {{0xa, 0x4e21, 0x9, @private1}}, 0x1}, 0x90) r15 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r15, &(0x7f0000002040)=@known='system.sockprotoname\x00') sendmsg$NL80211_CMD_GET_WIPHY(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r12, 0x321, 0x60bd1f, 0x25dfdc01, {{}, {@val={0x8, 0x117, 0x26}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x3a63ade8439deb60}, 0x50) sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r12, 0x200, 0x70bd25, 0x25dfdbf8, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x71}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xa3bca42f79e97f3d}, 0x84) 2.201657757s ago: executing program 3 (id=402): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x5}], {0x10, 0x6}, {0x20, 0x2}}, 0x2c, 0x3) r2 = syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x60d31000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4200, r3, 0x8000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 2.180778838s ago: executing program 0 (id=403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3e0a5769a9f09a5989f3292da752830105588c0600c491164c8f1520200012800b0017002e000300"], 0x40}, 0x1, 0x0, 0x0, 0x24080800}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0209000f000000008c441222035d93000c5ce18ec91fef5c06d2e22778a62ad48e80435b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'macsec0\x00'}, 0x18) 2.112165182s ago: executing program 0 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newchain={0x38, 0x1e, 0x1, 0x20, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x93}]}}]}, 0x38}}, 0x44004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.111913791s ago: executing program 0 (id=405): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010000f228000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010000f228000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) (async) pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) (async) 2.108085552s ago: executing program 5 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0x36, 0xa]}}}}]}) 2.074385014s ago: executing program 0 (id=407): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") (async) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") readlinkat(r0, 0x0, 0xfffffffffffffffe, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x6, 0x7}) 2.047588465s ago: executing program 0 (id=408): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) cachestat(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000071114f800000000016000000e1c5845acb8a58aab4de9d670276a1310700000000000034009337f5688c176e27fae96edda68d5afb714b0a07f4f07d827eceda27552bb235e434a68de00b1b697e03b71bd6bc7c549d35430b4c6ed3c0110ed9ecdd0000000000000000800f266f7ecd134ec8d480183695832c369f06fdee1d99a99795344543a8a6b21eecd2b9833b8fa89f26a4b04baab26b17706c1052789764eca968d563a7f2568e1d7ee5bd846de45a718496ab01c87f3963f7442a447cf3837c4b"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x4) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x0, 0x1, {0x12, 0x15, 0xf, 0x4, 0xb, 0x4, 0x3, 0x7fff, 0x1}}) 1.983854108s ago: executing program 0 (id=409): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 940.035682ms ago: executing program 2 (id=410): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 331.893703ms ago: executing program 2 (id=411): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006140)=@delchain={0x24, 0x5f, 0x333, 0x200, 0x200, {0x0, 0x0, 0x1f, 0x0, {}, {0x5, 0x2}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8810) r1 = socket(0xa, 0x2400000001, 0x3) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x64}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf13}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x2fce]}, 0x8}) 239.755838ms ago: executing program 4 (id=412): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xe9c, 0x30, 0xb, 0x0, 0x0, {}, [{0xe88, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x3}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0x4, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x23, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xd}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe9c}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x4c27, &(0x7f0000000300)={0x0, 0xfa46, 0x1000, 0x3, 0x339, 0x0, r0}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000004c0)={r2, &(0x7f0000000000)=')\'\x00', 0x10d000, &(0x7f0000000240)={@align=0x2, {0x5, 0x9, 0x7fffffff, 0x7}}, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x3}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_io_uring_setup(0x54d, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0xdd4, &(0x7f0000000180)={0x0, 0xeb7f, 0x40, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) r6 = eventfd2(0x7ff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f00000002c0)=r6, 0x1) 226.571058ms ago: executing program 5 (id=413): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) 142.103132ms ago: executing program 2 (id=414): syz_clone3(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x3, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 0s ago: executing program 3 (id=415): r0 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x20044081, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200)) r4 = creat(&(0x7f0000000240)='./file1\x00', 0x21) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x44800) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140), &(0x7f00000006c0)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) (async) socket(0x10, 0x3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x20044081, 0x1}) (async) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200)) (async) creat(&(0x7f0000000240)='./file1\x00', 0x21) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x44800) (async) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) kernel console output (not intermixed with test programs): [ 26.369450][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.376440][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.402325][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.417131][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.424177][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.450120][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.483412][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.490372][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.516451][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.533213][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.540240][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.566137][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.578042][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.585023][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.611005][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.629098][ T3310] hsr_slave_0: entered promiscuous mode [ 26.634994][ T3310] hsr_slave_1: entered promiscuous mode [ 26.640789][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 26.646483][ T3310] Cannot create hsr debugfs directory [ 26.665159][ T3315] hsr_slave_0: entered promiscuous mode [ 26.671010][ T3315] hsr_slave_1: entered promiscuous mode [ 26.676723][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 26.682450][ T3315] Cannot create hsr debugfs directory [ 26.706818][ T3309] hsr_slave_0: entered promiscuous mode [ 26.712945][ T3309] hsr_slave_1: entered promiscuous mode [ 26.718740][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 26.724532][ T3309] Cannot create hsr debugfs directory [ 26.793151][ T3311] hsr_slave_0: entered promiscuous mode [ 26.799223][ T3311] hsr_slave_1: entered promiscuous mode [ 26.804930][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.810681][ T3311] Cannot create hsr debugfs directory [ 26.902940][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.913751][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.924758][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.941984][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.969311][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.979914][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.988692][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.001053][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.027534][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.040689][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.049254][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.063155][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.090421][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.099217][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.107575][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.123247][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.145720][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.162430][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.171307][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.180025][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.188993][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.209523][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.224787][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.231827][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.246145][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.255273][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.262318][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.292293][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.312104][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.319158][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.344489][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.351597][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.366379][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.384015][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.405420][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.421838][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.436222][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.446001][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.455171][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.462283][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.471018][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.478094][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.497923][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.504993][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.515004][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.522055][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.535219][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.542284][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.551597][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.558648][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.575804][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.589054][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.604686][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.616251][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.634974][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.645470][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.740727][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.787742][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.815987][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.824882][ T3317] veth0_vlan: entered promiscuous mode [ 27.831947][ T3309] veth0_vlan: entered promiscuous mode [ 27.843802][ T3317] veth1_vlan: entered promiscuous mode [ 27.852378][ T3309] veth1_vlan: entered promiscuous mode [ 27.889922][ T3317] veth0_macvtap: entered promiscuous mode [ 27.912196][ T3317] veth1_macvtap: entered promiscuous mode [ 27.933953][ T3309] veth0_macvtap: entered promiscuous mode [ 27.948154][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.968869][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.991168][ T3309] veth1_macvtap: entered promiscuous mode [ 27.997921][ T3436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.006982][ T3436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.019880][ T3436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.028632][ T3436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.044334][ T3315] veth0_vlan: entered promiscuous mode [ 28.051358][ T3311] veth0_vlan: entered promiscuous mode [ 28.058277][ T3310] veth0_vlan: entered promiscuous mode [ 28.066475][ T3315] veth1_vlan: entered promiscuous mode [ 28.076055][ T3311] veth1_vlan: entered promiscuous mode [ 28.089825][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.101175][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.109966][ T3310] veth1_vlan: entered promiscuous mode [ 28.120324][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.143282][ T3436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.152135][ T3436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.164422][ T3311] veth0_macvtap: entered promiscuous mode [ 28.175297][ T3436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.184105][ T3436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.196216][ T3315] veth0_macvtap: entered promiscuous mode [ 28.206138][ T3311] veth1_macvtap: entered promiscuous mode [ 28.223605][ T3315] veth1_macvtap: entered promiscuous mode [ 28.244429][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.254709][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.262900][ T3310] veth0_macvtap: entered promiscuous mode [ 28.274940][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.290119][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.298002][ T3310] veth1_macvtap: entered promiscuous mode [ 28.326540][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.335645][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.337339][ T3481] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 28.361668][ T3484] netlink: 'syz.2.3': attribute type 16 has an invalid length. [ 28.371477][ T3484] netlink: 'syz.2.3': attribute type 17 has an invalid length. [ 28.376395][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.387947][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.430066][ T3484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 28.448025][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.448083][ T3485] loop0: detected capacity change from 0 to 512 [ 28.457017][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.475240][ T3485] EXT4-fs: Ignoring removed nobh option [ 28.484864][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.503241][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.517248][ T3485] ------------[ cut here ]------------ [ 28.522900][ T3485] EA inode 11 i_nlink=1026 [ 28.522916][ T3485] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.1/3485 [ 28.529014][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.537893][ T3485] Modules linked in: [ 28.550431][ T3485] CPU: 0 UID: 0 PID: 3485 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 28.559472][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 28.567726][ T1565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.569597][ T3485] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 28.578854][ T1565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.584905][ T3485] Code: 54 4b 99 ff 4c 8d 2d 2d b4 5d 05 49 8d 7e 40 e8 a4 df b5 ff 49 8b 6e 40 4c 89 e7 e8 d8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 9b dd 03 66 66 66 66 66 66 2e [ 28.608092][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.613214][ T3485] RSP: 0018:ffffc90001c475a8 EFLAGS: 00010246 [ 28.626496][ T3485] RAX: ffff888101cecdc8 RBX: ffff88810766d788 RCX: ffffffff81c013e8 [ 28.634483][ T3485] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc800 [ 28.642474][ T3485] RBP: 000000000000000b R08: 000188810766d73b R09: 0000000000000000 [ 28.650506][ T3485] R10: ffffc90001c474d8 R11: 0001c90001c474d8 R12: ffff88810766d738 [ 28.658488][ T3485] R13: ffffffff871dc800 R14: ffff88810766d6f0 R15: 0000000000000001 [ 28.666446][ T3485] FS: 00007fec1b93d6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 28.675403][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.682050][ T3485] CR2: 000055558e5564e8 CR3: 000000011b766000 CR4: 00000000003506f0 [ 28.690095][ T3485] Call Trace: [ 28.691459][ T3490] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 28.693363][ T3485] [ 28.693374][ T3485] ext4_xattr_set_entry+0x77c/0x1010 [ 28.707651][ T3485] ext4_xattr_ibody_set+0x184/0x3c0 [ 28.712902][ T3485] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 28.718764][ T3485] __ext4_expand_extra_isize+0x246/0x280 [ 28.724398][ T3485] __ext4_mark_inode_dirty+0x29b/0x400 [ 28.729901][ T3485] ext4_evict_inode+0x7c3/0xd60 [ 28.734843][ T3485] ? __pfx_ext4_evict_inode+0x10/0x10 [ 28.740234][ T3485] evict+0x2af/0x510 [ 28.744177][ T3485] ? __dquot_initialize+0x146/0x7c0 [ 28.749402][ T3485] iput+0x41a/0x580 [ 28.753243][ T3485] ext4_process_orphan+0x1a9/0x1c0 [ 28.758433][ T3485] ext4_orphan_cleanup+0x6a8/0xa00 [ 28.763630][ T3485] ext4_fill_super+0x3408/0x37c0 [ 28.768582][ T3485] ? set_blocksize+0x14c/0x270 [ 28.773379][ T3485] ? setup_bdev_super+0x30e/0x370 [ 28.778413][ T3485] ? __pfx_ext4_fill_super+0x10/0x10 [ 28.783738][ T3485] get_tree_bdev_flags+0x291/0x300 [ 28.788866][ T3485] ? __pfx_ext4_fill_super+0x10/0x10 [ 28.794139][ T3485] get_tree_bdev+0x1f/0x30 [ 28.798573][ T3485] ext4_get_tree+0x1c/0x30 [ 28.802985][ T3485] vfs_get_tree+0x57/0x1d0 [ 28.807435][ T3485] do_new_mount+0x288/0x8d0 [ 28.811957][ T3485] path_mount+0x4d0/0xbc0 [ 28.816315][ T3485] __se_sys_mount+0x28c/0x2e0 [ 28.821028][ T3485] __x64_sys_mount+0x67/0x80 [ 28.825661][ T3485] x64_sys_call+0x2d61/0x3020 [ 28.830439][ T3485] do_syscall_64+0x12c/0x370 [ 28.835058][ T3485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.840983][ T3485] RIP: 0033:0x7fec1cf2da0a [ 28.845392][ T3485] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.865065][ T3485] RSP: 002b:00007fec1b93ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 28.873503][ T3485] RAX: ffffffffffffffda RBX: 00007fec1b93cee0 RCX: 00007fec1cf2da0a [ 28.881513][ T3485] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fec1b93cea0 [ 28.889501][ T3485] RBP: 0000200000000180 R08: 00007fec1b93cee0 R09: 0000000000800718 [ 28.897454][ T3485] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 28.905444][ T3485] R13: 00007fec1b93cea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 28.913437][ T3485] [ 28.916435][ T3485] ---[ end trace 0000000000000000 ]--- [ 28.923960][ T3485] EXT4-fs (loop0): 1 orphan inode deleted [ 28.932669][ T3485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.945491][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 28.945503][ T28] audit: type=1400 audit(1774306609.114:115): avc: denied { mount } for pid=3478 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.950695][ T3485] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.985350][ T1565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.994255][ T1565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.025378][ T1565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.046552][ T1565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.058438][ T28] audit: type=1400 audit(1774306609.224:116): avc: denied { create } for pid=3496 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.080313][ T28] audit: type=1400 audit(1774306609.224:117): avc: denied { create } for pid=3478 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.100736][ T28] audit: type=1400 audit(1774306609.224:118): avc: denied { write } for pid=3478 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.122747][ T3499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.126745][ T28] audit: type=1400 audit(1774306609.274:119): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.160160][ T28] audit: type=1400 audit(1774306609.334:120): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.186089][ T28] audit: type=1400 audit(1774306609.334:121): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.210320][ T28] audit: type=1400 audit(1774306609.334:122): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.245587][ T3502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.267770][ T3497] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.269593][ T3505] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 29.280410][ T28] audit: type=1400 audit(1774306609.434:123): avc: denied { write } for pid=3496 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.313410][ T3505] team0: Failed to send options change via netlink (err -105) [ 29.325582][ T3511] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 29.333648][ T3505] team0: Port device dummy0 added [ 29.341708][ T28] audit: type=1400 audit(1774306609.434:124): avc: denied { nlmsg_read } for pid=3496 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.362225][ T3513] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 29.401920][ T3513] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 29.418158][ T3513] team0: Failed to send options change via netlink (err -105) [ 29.434902][ T3513] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 29.459775][ T3513] team0: Port device dummy0 removed [ 29.465333][ T3526] loop4: detected capacity change from 0 to 128 [ 29.467305][ T3513] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 29.479183][ T3526] ======================================================= [ 29.479183][ T3526] WARNING: The mand mount option has been deprecated and [ 29.479183][ T3526] and is ignored by this kernel. Remove the mand [ 29.479183][ T3526] option from the mount to silence this warning. [ 29.479183][ T3526] ======================================================= [ 29.559208][ T3526] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.616950][ T3526] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.725185][ C0] hrtimer: interrupt took 36557 ns [ 29.732980][ T3526] RDS: rds_bind could not find a transport for fe80::44, load rds_tcp or rds_rdma? [ 29.781349][ T3526] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.844688][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.884082][ T3544] netlink: 'syz.4.15': attribute type 3 has an invalid length. [ 29.928546][ T3544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15'. [ 30.035607][ T3546] batadv0: entered promiscuous mode [ 30.042066][ T3546] bond0: entered promiscuous mode [ 30.047462][ T3546] bond_slave_0: entered promiscuous mode [ 30.053923][ T3546] bond_slave_1: entered promiscuous mode [ 30.061755][ T3546] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 30.095660][ T3548] loop4: detected capacity change from 0 to 128 [ 30.111947][ T3546] hsr1: entered allmulticast mode [ 30.119676][ T3551] ipt_rpfilter: unknown options [ 30.124592][ T3546] batadv0: entered allmulticast mode [ 30.125746][ T3553] loop3: detected capacity change from 0 to 256 [ 30.130672][ T3546] bond0: entered allmulticast mode [ 30.141737][ T3546] bond_slave_0: entered allmulticast mode [ 30.147928][ T3546] bond_slave_1: entered allmulticast mode [ 30.204744][ T3546] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 30.228898][ T3546] batadv0: left promiscuous mode [ 30.240466][ T3546] bond0: left promiscuous mode [ 30.245508][ T3546] bond_slave_0: left promiscuous mode [ 30.251047][ T3546] bond_slave_1: left promiscuous mode [ 30.385617][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.464748][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.478667][ T3561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 30.569734][ T3563] Zero length message leads to an empty skb [ 30.863434][ T3569] loop3: detected capacity change from 0 to 512 [ 30.952222][ T3569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.033896][ T3569] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.24: bg 0: block 393: padding at end of block bitmap is not set [ 31.079763][ T3575] loop1: detected capacity change from 0 to 764 [ 31.115290][ T3569] loop3: lost filesystem error report for type 5 error -117 [ 31.116248][ T3569] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 31.123636][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 31.123662][ C1] EXT4-fs (loop3): initial error at time 1774306611: ext4_validate_block_bitmap:441 [ 31.123688][ C1] EXT4-fs (loop3): last error at time 1774306611: ext4_validate_block_bitmap:441 [ 31.283124][ T3569] loop3: lost filesystem error report for type 5 error -117 [ 31.283473][ T3569] EXT4-fs (loop3): 2 truncates cleaned up [ 31.283901][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.305508][ T3569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 31.314165][ T3581] syzkaller0: entered promiscuous mode [ 31.314181][ T3581] syzkaller0: entered allmulticast mode [ 31.325906][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325919][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325929][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325937][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325945][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325953][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325961][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.325991][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.326001][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.326011][ T3581] tc action pedit 'at' offset -2147483647 out of bounds [ 31.326030][ T3581] 0: reclassify loop, rule prio 0, protocol 800 [ 31.614916][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 31.674963][ T3589] hub 8-0:1.0: USB hub found [ 31.675101][ T3589] hub 8-0:1.0: 8 ports detected [ 31.682573][ T3589] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 31.683044][ T3589] macvlan1: entered allmulticast mode [ 31.686206][ T3589] veth1_vlan: entered allmulticast mode [ 31.688996][ T3589] team0: Port device macvlan1 added [ 31.697428][ T3589] loop2: detected capacity change from 0 to 512 [ 31.700094][ T3589] EXT4-fs (loop2): bad s_min_extra_isize: 2304 [ 31.759109][ T3591] loop4: detected capacity change from 0 to 2048 [ 31.852788][ T3591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.852953][ T3591] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.932489][ T3594] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.30: bg 0: block 345: padding at end of block bitmap is not set [ 31.932933][ T3594] EXT4-fs (loop4): Remounting filesystem read-only [ 31.933150][ T83] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 32.090828][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.159305][ T3569] syz.3.24 (3569) used greatest stack depth: 10280 bytes left [ 32.205424][ T3589] syz.2.29 (3589) used greatest stack depth: 9464 bytes left [ 32.239093][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.268047][ T3603] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure [ 32.289781][ T3603] loop2: detected capacity change from 0 to 512 [ 32.291176][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.300515][ T3604] netlink: 48 bytes leftover after parsing attributes in process `syz.3.34'. [ 32.312973][ T3604] syz_tun: entered allmulticast mode [ 32.323564][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.330683][ T3607] loop4: detected capacity change from 0 to 512 [ 32.332467][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.337411][ T3602] syz_tun: left allmulticast mode [ 32.346984][ T3598] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.358143][ T3598] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 32.378744][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.379201][ T3603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.387542][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.409447][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.411885][ T3607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.418273][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.436463][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.443122][ T3603] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.446023][ T3598] dummy0 speed is unknown, defaulting to 1000 [ 32.453911][ T3607] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.916960][ T3601] syz.2.35 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 33.004422][ T3628] iso9660: Unknown parameter 'ÿ' [ 33.029151][ T3601] CPU: 1 UID: 0 PID: 3601 Comm: syz.2.35 Tainted: G W syzkaller #0 PREEMPT(full) [ 33.029180][ T3601] Tainted: [W]=WARN [ 33.029186][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.029244][ T3601] Call Trace: [ 33.029293][ T3601] [ 33.029300][ T3601] __dump_stack+0x1d/0x30 [ 33.029324][ T3601] dump_stack_lvl+0x95/0xd0 [ 33.029369][ T3601] dump_stack+0x15/0x1b [ 33.029385][ T3601] dump_header+0x80/0x240 [ 33.029402][ T3601] oom_kill_process+0x295/0x350 [ 33.029494][ T3601] out_of_memory+0x97d/0xb80 [ 33.029515][ T3601] try_charge_memcg+0x62e/0xa10 [ 33.029618][ T3601] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 33.029642][ T3601] __swap_cache_prepare_and_add+0x386/0x530 [ 33.029669][ T3601] swap_cache_alloc_folio+0xa2/0x120 [ 33.029766][ T3601] swap_cluster_readahead+0x26e/0x3d0 [ 33.029796][ T3601] swapin_readahead+0xde/0x840 [ 33.029882][ T3601] ? __rcu_read_unlock+0x4e/0x70 [ 33.029901][ T3601] ? __perf_event_task_sched_in+0xa65/0xad0 [ 33.029922][ T3601] ? __list_add_valid_or_report+0x38/0xe0 [ 33.030058][ T3601] ? __rcu_read_unlock+0x4e/0x70 [ 33.030077][ T3601] ? swap_cache_get_folio+0x26f/0x280 [ 33.030142][ T3601] do_swap_page+0x30d/0x2220 [ 33.030222][ T3601] ? __schedule+0x93c/0xd40 [ 33.030243][ T3601] ? __rcu_read_lock+0x36/0x50 [ 33.030268][ T3601] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 33.030315][ T3601] handle_mm_fault+0xb46/0x3020 [ 33.030378][ T3601] ? vma_start_read+0x1c7/0x2c0 [ 33.030404][ T3601] do_user_addr_fault+0x62f/0x1050 [ 33.030511][ T3601] ? trace_page_fault_user+0x1f/0xe0 [ 33.030534][ T3601] exc_page_fault+0x62/0xa0 [ 33.030558][ T3601] asm_exc_page_fault+0x26/0x30 [ 33.030674][ T3601] RIP: 0033:0x7fdec8f3cfce [ 33.030746][ T3601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.030768][ T3601] RSP: 002b:00007ffd64d947d8 EFLAGS: 00010246 [ 33.030784][ T3601] RAX: 0000000000000000 RBX: 000055558e556500 RCX: 00007fdec8f3cfce [ 33.030801][ T3601] RDX: 00007ffd64d94830 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.030811][ T3601] RBP: 00007fdec91f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 33.030820][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000813a [ 33.030865][ T3601] R13: 00007fdec91f5fac R14: 0000000000007f05 R15: 00007ffd64d94960 [ 33.030880][ T3601] [ 33.034537][ T3601] memory: usage 307200kB, limit 307200kB, failcnt 551 [ 33.156459][ T3628] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 33.170538][ T3601] memory+swap: usage 195416kB, limit 9007199254740988kB, failcnt 0 [ 33.298821][ T3628] netlink: 'syz.1.40': attribute type 2 has an invalid length. [ 33.307223][ T3601] kmem: usage 320kB, limit 9007199254740988kB, failcnt 0 [ 33.314435][ T3601] Memory cgroup stats for /syz2: [ 33.314622][ T3601] cache 135168 [ 33.328344][ T3601] rss 8192 [ 33.331365][ T3601] shmem 0 [ 33.334286][ T3601] mapped_file 4096 [ 33.377862][ T3601] dirty 0 [ 33.381468][ T3601] writeback 4096 [ 33.404945][ T3601] workingset_refault_anon 9 [ 33.548583][ T3601] workingset_refault_file 208 [ 33.553365][ T3601] swap 421888 [ 33.556659][ T3601] swapcached 450560 [ 33.561494][ T3601] pgpgin 4912 [ 33.564794][ T3601] pgpgout 4872 [ 33.568154][ T3601] pgfault 6044 [ 33.571700][ T3601] pgmajfault 9 [ 33.575076][ T3601] inactive_anon 24576 [ 33.579188][ T3601] active_anon 4096 [ 33.582995][ T3601] inactive_file 102400 [ 33.587046][ T3601] active_file 32768 [ 34.288080][ T28] kauditd_printk_skb: 195 callbacks suppressed [ 34.288095][ T28] audit: type=1400 audit(1774306613.774:320): avc: denied { create } for pid=3644 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.314189][ T28] audit: type=1400 audit(1774306613.774:321): avc: denied { write } for pid=3644 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.348366][ T3601] unevictable 0 [ 34.351834][ T3601] hierarchical_memory_limit 314572800 [ 34.359411][ T3601] hierarchical_memsw_limit 9223372036854771712 [ 34.365617][ T3601] total_cache 135168 [ 34.370645][ T3601] total_rss 8192 [ 34.374178][ T3601] total_shmem 0 [ 34.377623][ T3601] total_mapped_file 4096 [ 34.429829][ T3601] total_dirty 0 [ 34.433367][ T3601] total_writeback 4096 [ 34.459625][ T3601] total_workingset_refault_anon 9 [ 34.477874][ T3601] total_workingset_refault_file 208 [ 34.498418][ T3601] total_swap 421888 [ 34.502228][ T3601] total_swapcached 450560 [ 34.524863][ T3601] total_pgpgin 4912 [ 34.536798][ T3601] total_pgpgout 4872 [ 34.551215][ T3601] total_pgfault 6044 [ 34.565267][ T3601] total_pgmajfault 9 [ 34.575635][ T3601] total_inactive_anon 24576 [ 34.590746][ T3601] total_active_anon 4096 [ 34.608373][ T3601] total_inactive_file 102400 [ 34.623825][ T3601] total_active_file 32768 [ 34.636896][ T3601] total_unevictable 0 [ 34.647027][ T3601] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.35,pid=3601,uid=0 [ 34.678394][ T3601] Memory cgroup out of memory: Killed process 3601 (syz.2.35) total-vm:94032kB, anon-rss:1240kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 34.793179][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.851058][ T3666] netlink: 104 bytes leftover after parsing attributes in process `syz.1.52'. [ 34.942890][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.007691][ T3666] set_capacity_and_notify: 1 callbacks suppressed [ 35.007722][ T3666] loop1: detected capacity change from 0 to 512 [ 35.064789][ T3669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.54'. [ 35.138475][ T28] audit: type=1400 audit(1774306615.284:322): avc: denied { read write } for pid=3668 comm="syz.3.54" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.441340][ T3671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.452709][ T3671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.488997][ T3671] veth1_vlan: left allmulticast mode [ 35.520729][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.540471][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.617602][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.639765][ T28] audit: type=1400 audit(1774306615.284:323): avc: denied { open } for pid=3668 comm="syz.3.54" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.667795][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.684731][ T28] audit: type=1400 audit(1774306615.384:324): avc: denied { create } for pid=3670 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.792393][ T28] audit: type=1400 audit(1774306615.684:325): avc: denied { mount } for pid=3678 comm="syz.3.56" name="/" dev="hugetlbfs" ino=5883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 35.818293][ T28] audit: type=1400 audit(1774306615.844:326): avc: denied { associate } for pid=3678 comm="syz.3.56" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.841512][ T28] audit: type=1400 audit(1774306615.874:327): avc: denied { connect } for pid=3689 comm="syz.1.59" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.841926][ T3687] loop3: detected capacity change from 0 to 512 [ 35.862151][ T28] audit: type=1400 audit(1774306615.874:328): avc: denied { mount } for pid=3678 comm="syz.3.56" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 36.055863][ T28] audit: type=1400 audit(1774306616.224:329): avc: denied { mounton } for pid=3678 comm="syz.3.56" path="/file0" dev="bpf" ino=6490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 36.108913][ T3687] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.56: ea_inode with extended attributes [ 36.403970][ T3687] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.405749][ T3687] EXT4-fs (loop3): Remounting filesystem read-only [ 36.414912][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 36.414933][ C0] EXT4-fs (loop3): initial error at time 1774306616: ext4_xattr_inode_iget:441: inode 11 [ 36.414963][ C0] EXT4-fs (loop3): last error at time 1774306616: ext4_xattr_inode_iget:441: inode 11 [ 36.489305][ T3702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1814 sclass=netlink_route_socket pid=3702 comm=syz.4.63 [ 36.524215][ T3693] loop2: detected capacity change from 0 to 1024 [ 36.693444][ T3703] loop4: detected capacity change from 0 to 512 [ 36.835271][ T3687] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 36.876840][ T3687] EXT4-fs (loop3): 1 orphan inode deleted [ 36.897377][ T3693] loop2: detected capacity change from 0 to 128 [ 36.913292][ T3687] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.971964][ T3687] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 36.999996][ T3708] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 37.052393][ T3712] bridge_slave_0: left allmulticast mode [ 37.070531][ T3712] bridge_slave_0: left promiscuous mode [ 37.076313][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.107692][ T3719] loop3: detected capacity change from 0 to 512 [ 37.117464][ T3712] bridge_slave_1: left allmulticast mode [ 37.123285][ T3712] bridge_slave_1: left promiscuous mode [ 37.129699][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.139714][ T3712] bond0: (slave bond_slave_0): Releasing backup interface [ 37.147431][ T3722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 37.179507][ T3712] bond0: (slave bond_slave_1): Releasing backup interface [ 37.191709][ T3712] team0: Port device team_slave_0 removed [ 37.208846][ T3712] team0: Port device team_slave_1 removed [ 37.231644][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.249543][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.268587][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.278814][ T3719] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.299786][ T3712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.307355][ T3728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 37.326310][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.352164][ T3712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 37.372839][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.473131][ T3738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.496100][ T3738] wireguard0: entered promiscuous mode [ 37.501725][ T3738] wireguard0: entered allmulticast mode [ 37.525247][ T3743] loop1: detected capacity change from 0 to 128 [ 37.750580][ T3745] loop3: detected capacity change from 0 to 164 [ 37.832951][ T3749] loop4: detected capacity change from 0 to 512 [ 37.892080][ T3745] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 37.960003][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.994097][ T3749] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.046043][ T3749] netlink: 60 bytes leftover after parsing attributes in process `syz.4.73'. [ 38.116625][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.173448][ T3760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'. [ 38.184163][ T3760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 38.227990][ T3763] dummy0 speed is unknown, defaulting to 1000 [ 38.337889][ T3766] dummy0 speed is unknown, defaulting to 1000 [ 38.365580][ T3765] loop3: detected capacity change from 0 to 512 [ 38.381443][ T3765] EXT4-fs: Ignoring removed bh option [ 38.395021][ T3765] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 38.431982][ T3765] EXT4-fs (loop3): 1 truncate cleaned up [ 38.466860][ T3765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.635965][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.689357][ T3790] dummy0 speed is unknown, defaulting to 1000 [ 38.778703][ T3800] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.822032][ T3800] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.852755][ T3803] EXT4-fs: Ignoring removed orlov option [ 38.874231][ T3803] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 38.914521][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.929247][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.991033][ T3807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3807 comm=syz.2.90 [ 38.992767][ T3803] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 39.044031][ T3809] futex_wake_op: syz.3.89 tries to shift op by -1; fix this program [ 39.131133][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.232886][ T3822] bond1: entered promiscuous mode [ 39.238696][ T3822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.259423][ T3826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.318400][ T3826] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.350182][ T3831] ext4: Unknown parameter 'fsmagic' [ 39.384696][ T3831] netlink: 'syz.3.96': attribute type 46 has an invalid length. [ 39.420762][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 39.420805][ T28] audit: type=1400 audit(1774306619.584:392): avc: denied { watch } for pid=3821 comm="syz.2.94" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 39.469594][ T3836] iso9660: Unknown parameter 'bockD0x0000000000000800' [ 39.522654][ T28] audit: type=1400 audit(1774306619.694:393): avc: denied { create } for pid=3823 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 39.543943][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.615381][ T28] audit: type=1400 audit(1774306619.754:394): avc: denied { create } for pid=3843 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.695663][ T28] audit: type=1400 audit(1774306619.754:395): avc: denied { append } for pid=3843 comm="syz.3.99" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 39.776213][ T28] audit: type=1400 audit(1774306619.854:396): avc: denied { write } for pid=3850 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.914176][ T28] audit: type=1400 audit(1774306619.944:397): avc: denied { map } for pid=3853 comm="syz.2.101" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.021368][ T3859] set_capacity_and_notify: 8 callbacks suppressed [ 40.021380][ T3859] loop0: detected capacity change from 0 to 512 [ 40.086484][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.148492][ T3859] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.269189][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.318122][ T28] audit: type=1326 audit(1774306620.484:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.0.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec1cf2c799 code=0x0 [ 40.323856][ T3865] loop4: detected capacity change from 0 to 1024 [ 40.407145][ T3865] EXT4-fs: inline encryption not supported [ 40.428218][ T3865] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.569701][ T3865] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.104: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.622929][ T3865] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.623018][ T3865] EXT4-fs (loop4): Remounting filesystem read-only [ 40.632172][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.632186][ C0] EXT4-fs (loop4): initial error at time 1774306620: ext4_map_blocks:776: inode 3: block 2 [ 40.632243][ C0] EXT4-fs (loop4): last error at time 1774306620: ext4_map_blocks:776: inode 3: block 2 [ 40.638137][ T3879] loop2: detected capacity change from 0 to 2048 [ 40.656364][ T3865] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 40.703795][ T3879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.713190][ T3865] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 40.728387][ T3865] EXT4-fs (loop4): 1 orphan inode deleted [ 40.734647][ T3865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.749586][ T3879] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.792527][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.830763][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.857230][ T3883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'. [ 40.900515][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 41.027251][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.106222][ T3894] loop2: detected capacity change from 0 to 512 [ 41.135140][ T3894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.169287][ T3897] loop0: detected capacity change from 0 to 512 [ 41.177896][ T3894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.198640][ T3894] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.217248][ T3894] EXT4-fs (loop2): 1 truncate cleaned up [ 41.223142][ T3897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.233306][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.248170][ T3897] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.297261][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.340696][ T3906] loop0: detected capacity change from 0 to 256 [ 41.349761][ T3906] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.371874][ T28] audit: type=1400 audit(1774306621.544:399): avc: denied { setopt } for pid=3908 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.381548][ T3906] FAT-fs (loop0): Directory bread(block 64) failed [ 41.407865][ T3906] FAT-fs (loop0): Directory bread(block 65) failed [ 41.414477][ T3906] FAT-fs (loop0): Directory bread(block 66) failed [ 41.422639][ T3906] FAT-fs (loop0): Directory bread(block 67) failed [ 41.434293][ T3906] FAT-fs (loop0): Directory bread(block 68) failed [ 41.441031][ T3906] FAT-fs (loop0): Directory bread(block 69) failed [ 41.447954][ T3906] FAT-fs (loop0): Directory bread(block 70) failed [ 41.467709][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.470483][ T3906] FAT-fs (loop0): Directory bread(block 71) failed [ 41.483456][ T3906] FAT-fs (loop0): Directory bread(block 72) failed [ 41.492515][ T3906] FAT-fs (loop0): Directory bread(block 73) failed [ 41.501216][ T3912] 8021q: VLANs not supported on ipvlan0 [ 41.507848][ T10] IPVS: starting estimator thread 0... [ 41.523769][ T3912] loop1: detected capacity change from 0 to 2048 [ 41.578509][ T3917] mmap: syz.2.118 (3917) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.628434][ T3913] IPVS: using max 2592 ests per chain, 129600 per kthread [ 41.640015][ T3912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.662613][ T3912] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.701326][ T3912] hugetlbfs: syz.1.119 (3912): Using mlock ulimits for SHM_HUGETLB is obsolete [ 41.721080][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.900242][ T3940] loop4: detected capacity change from 0 to 512 [ 41.935196][ T3940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.939008][ T3944] loop1: detected capacity change from 0 to 512 [ 41.954147][ T3942] loop2: detected capacity change from 0 to 2048 [ 41.962613][ T3940] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.999559][ T3303] loop2: p3 p4 < > [ 42.003525][ T3303] loop2: p3 start 263168 is beyond EOD, truncated [ 42.015413][ T3942] loop2: p3 p4 < > [ 42.019386][ T3942] loop2: p3 start 263168 is beyond EOD, truncated [ 42.068681][ T3949] 9p: Bad value for 'wfdno' [ 42.068854][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.078878][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.117205][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.150093][ T3944] EXT4-fs (loop1): 1 orphan inode deleted [ 42.168491][ T50] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 42.232095][ T3944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.248469][ T3944] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.273637][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.312119][ T3959] netlink: 'syz.2.133': attribute type 10 has an invalid length. [ 42.327590][ T3959] dummy0: entered allmulticast mode [ 42.336752][ T3959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.345475][ T3957] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.358935][ T3959] xt_TCPMSS: Only works on TCP SYN packets [ 42.380560][ T3967] Attempt to read inode for relocated directory [ 42.391145][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.405255][ T3968] dummy0 speed is unknown, defaulting to 1000 [ 42.406141][ T3959] EXT4-fs: Invalid want_extra_isize 5 [ 42.422726][ T3393] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.430716][ T3393] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.505782][ T3982] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.529844][ T3982] EXT4-fs: test_dummy_encryption option not supported [ 42.547501][ T3980] dummy0 speed is unknown, defaulting to 1000 [ 42.563181][ T3970] fido_id[3970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.593445][ T3982] netlink: 'syz.2.138': attribute type 27 has an invalid length. [ 42.607438][ T3976] dummy0 speed is unknown, defaulting to 1000 [ 42.778113][ T3998] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.847371][ T4002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 42.866693][ T4002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.142'. [ 42.886794][ T4002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 42.930277][ T3998] FAT-fs (loop4): Directory bread(block 64) failed [ 42.967675][ T3998] FAT-fs (loop4): Directory bread(block 65) failed [ 42.978383][ T3998] FAT-fs (loop4): Directory bread(block 66) failed [ 42.984924][ T3998] FAT-fs (loop4): Directory bread(block 67) failed [ 43.009853][ T3998] FAT-fs (loop4): Directory bread(block 68) failed [ 43.028370][ T3998] FAT-fs (loop4): Directory bread(block 69) failed [ 43.034885][ T3998] FAT-fs (loop4): Directory bread(block 70) failed [ 43.067751][ T4004] tipc: Started in network mode [ 43.068374][ T3998] FAT-fs (loop4): Directory bread(block 71) failed [ 43.072791][ T4004] tipc: Node identity ac14140f, cluster identity 4711 [ 43.089690][ T4004] tipc: Enabled bearer , priority 10 [ 43.098677][ T3998] FAT-fs (loop4): Directory bread(block 72) failed [ 43.119288][ T4011] EXT4-fs: inline encryption not supported [ 43.125205][ T4011] EXT4-fs: Ignoring removed i_version option [ 43.137671][ T3998] FAT-fs (loop4): Directory bread(block 73) failed [ 43.259522][ T4011] EXT4-fs (loop3): 1 orphan inode deleted [ 43.265564][ T4011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.340011][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.423400][ T4016] EXT4-fs: Ignoring removed nobh option [ 43.429789][ T4016] EXT4-fs: dax option not supported [ 43.489591][ T4025] Q±6ã`Ò˜: renamed from lo (while UP) [ 43.521556][ T4031] netlink: 52 bytes leftover after parsing attributes in process `syz.3.149'. [ 43.532111][ T4031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 43.541461][ T4031] veth0_macvtap: left promiscuous mode [ 43.555630][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.566298][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.574696][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.585333][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.593254][ T4026] loop6: unable to read partition table [ 43.643407][ T4026] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 43.678589][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.689262][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.697300][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.707926][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.715754][ T3303] loop6: unable to read partition table [ 43.722459][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.733134][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.744727][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.755367][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.763422][ T4025] loop6: unable to read partition table [ 43.773635][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 43.780513][ T4025] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 43.784861][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.806413][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.814357][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.824965][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.834684][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.845329][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.853401][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 43.864056][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 43.962323][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.984715][ T4047] dummy0 speed is unknown, defaulting to 1000 [ 43.985092][ T4049] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.020896][ T4047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.153'. [ 44.100222][ T4047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.113594][ T4057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.130027][ T4059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.154: bg 0: block 345: padding at end of block bitmap is not set [ 44.147132][ T4057] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.180487][ T4057] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.157: lblock 0 mapped to illegal pblock 0 (length 6) [ 44.206528][ T4066] dummy0 speed is unknown, defaulting to 1000 [ 44.212795][ T3393] tipc: Node number set to 2886997007 [ 44.236480][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.246192][ T4057] EXT4-fs (loop0): Remounting filesystem read-only [ 44.272075][ T4059] EXT4-fs (loop3): Remounting filesystem read-only [ 44.279240][ T4070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 44.328056][ T30] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 44.444030][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.471628][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.529688][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 44.529703][ T28] audit: type=1400 audit(1774306624.704:447): avc: denied { lock } for pid=4075 comm="syz.2.160" path="socket:[7584]" dev="sockfs" ino=7584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.569761][ T28] audit: type=1400 audit(1774306624.734:448): avc: denied { read } for pid=4075 comm="syz.2.160" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.610367][ T28] audit: type=1400 audit(1774306624.734:449): avc: denied { open } for pid=4075 comm="syz.2.160" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 44.670053][ T28] audit: type=1400 audit(1774306624.844:450): avc: denied { read } for pid=4100 comm="syz.0.166" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.718355][ T28] audit: type=1400 audit(1774306624.844:451): avc: denied { open } for pid=4100 comm="syz.0.166" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.742050][ T28] audit: type=1400 audit(1774306624.844:452): avc: denied { ioctl } for pid=4100 comm="syz.0.166" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.790231][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.820103][ T4104] FAT-fs (loop1): bogus number of reserved sectors [ 44.826753][ T4104] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 44.836184][ T4104] FAT-fs (loop1): Can't find a valid FAT filesystem [ 44.876686][ T28] audit: type=1400 audit(1774306625.044:453): avc: denied { append } for pid=4111 comm="syz.1.169" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.180148][ T4124] set_capacity_and_notify: 13 callbacks suppressed [ 45.180207][ T4124] loop2: detected capacity change from 0 to 2048 [ 45.220276][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.238626][ T4124] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.255474][ T28] audit: type=1400 audit(1774306625.404:454): avc: denied { getopt } for pid=4127 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.278435][ T4128] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.303882][ T28] audit: type=1400 audit(1774306625.444:455): avc: denied { getopt } for pid=4127 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.336169][ T28] audit: type=1400 audit(1774306625.454:456): avc: denied { ioctl } for pid=4127 comm="syz.4.173" path="socket:[7678]" dev="sockfs" ino=7678 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.432370][ T4133] dummy0 speed is unknown, defaulting to 1000 [ 45.518409][ T4132] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.172: bg 0: block 345: padding at end of block bitmap is not set [ 45.562742][ T4132] EXT4-fs (loop2): Remounting filesystem read-only [ 45.578416][ T50] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 45.596245][ T4142] openvswitch: netlink: Missing key (keys=40, expected=100) [ 45.612032][ T4140] loop4: detected capacity change from 0 to 2048 [ 45.640489][ T4140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.653055][ T4144] siw: device registration error -23 [ 45.658145][ T4140] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.713222][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.728131][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.796752][ T4144] dummy0 speed is unknown, defaulting to 1000 [ 45.924767][ T4179] syz_tun: entered allmulticast mode [ 45.933109][ T4183] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 45.980065][ T4190] vhci_hcd vhci_hcd.0: invalid port number 236 [ 45.991868][ T4190] vhci_hcd vhci_hcd.0: invalid port number 236 [ 45.999370][ T4192] loop1: detected capacity change from 0 to 256 [ 46.006811][ T4192] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.046607][ T4192] FAT-fs (loop1): Directory bread(block 64) failed [ 46.076319][ T4192] FAT-fs (loop1): Directory bread(block 65) failed [ 46.087904][ T4192] FAT-fs (loop1): Directory bread(block 66) failed [ 46.094697][ T4192] FAT-fs (loop1): Directory bread(block 67) failed [ 46.101225][ T4192] FAT-fs (loop1): Directory bread(block 68) failed [ 46.108426][ T4192] FAT-fs (loop1): Directory bread(block 69) failed [ 46.131916][ T4209] loop2: detected capacity change from 0 to 512 [ 46.138885][ T4192] FAT-fs (loop1): Directory bread(block 70) failed [ 46.151224][ T4192] FAT-fs (loop1): Directory bread(block 71) failed [ 46.157782][ T4192] FAT-fs (loop1): Directory bread(block 72) failed [ 46.167018][ T4192] FAT-fs (loop1): Directory bread(block 73) failed [ 46.188994][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.201971][ T4209] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.303502][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.307341][ T4218] loop4: detected capacity change from 0 to 764 [ 46.322701][ T4218] iso9660: Unknown parameter '' [ 46.329111][ T4218] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 46.393569][ T4222] __nla_validate_parse: 1 callbacks suppressed [ 46.393592][ T4222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'. [ 46.500293][ T4226] loop0: detected capacity change from 0 to 512 [ 46.523329][ T4224] loop2: detected capacity change from 0 to 512 [ 46.611331][ T4224] EXT4-fs (loop2): 1 truncate cleaned up [ 46.618955][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.642875][ T4224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.682090][ T4226] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.704123][ T4220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.766867][ T4220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.860228][ T4220] netlink: 'syz.2.198': attribute type 21 has an invalid length. [ 47.034371][ T4238] loop4: detected capacity change from 0 to 512 [ 47.054219][ T4238] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.203: corrupted in-inode xattr: invalid size in ea xattr [ 47.082940][ T4238] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.083612][ T4238] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.203: couldn't read orphan inode 15 (err -117) [ 47.092764][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.092783][ C1] EXT4-fs (loop4): initial error at time 1774306627: ext4_iget_extra_inode:5025: inode 15 [ 47.092825][ C1] EXT4-fs (loop4): last error at time 1774306627: ext4_iget_extra_inode:5025: inode 15 [ 47.198007][ T4238] loop4: lost filesystem error report for type 5 error -117 [ 47.198668][ T4238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.319043][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.348731][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.567529][ T4250] loop3: detected capacity change from 0 to 2048 [ 47.572473][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.777549][ T4252] loop4: detected capacity change from 0 to 128 [ 47.786291][ T4252] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.802777][ T4252] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.901982][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.179615][ T4250] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.207818][ T4258] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 48.251097][ T4258] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 48.256728][ T4263] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.209: bg 0: block 345: padding at end of block bitmap is not set [ 48.270910][ T4258] xt_cgroup: xt_cgroup: no path or classid specified [ 48.287736][ T4263] EXT4-fs (loop3): Remounting filesystem read-only [ 48.294919][ T30] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 48.354995][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 48.378613][ T4258] FAT-fs (loop1): Directory bread(block 1285) failed [ 48.405476][ T4265] dummy0 speed is unknown, defaulting to 1000 [ 48.414393][ T4258] FAT-fs (loop1): Directory bread(block 1286) failed [ 48.422879][ T4258] FAT-fs (loop1): Directory bread(block 1287) failed [ 48.424193][ T4277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.429894][ T4258] FAT-fs (loop1): Directory bread(block 1288) failed [ 48.447006][ T4277] wireguard0: entered promiscuous mode [ 48.449440][ T4258] FAT-fs (loop1): Directory bread(block 1285) failed [ 48.452608][ T4277] wireguard0: entered allmulticast mode [ 48.459435][ T4258] FAT-fs (loop1): Directory bread(block 1286) failed [ 48.490281][ T4258] FAT-fs (loop1): Directory bread(block 1287) failed [ 48.500507][ T4281] netlink: 100 bytes leftover after parsing attributes in process `syz.0.217'. [ 48.513603][ T4258] FAT-fs (loop1): Directory bread(block 1288) failed [ 48.514063][ T4281] netlink: 100 bytes leftover after parsing attributes in process `syz.0.217'. [ 48.520544][ T4258] FAT-fs (loop1): Directory bread(block 1285) failed [ 48.520562][ T4258] FAT-fs (loop1): Directory bread(block 1286) failed [ 48.561268][ T4279] ªªªªª=: renamed from bridge_slave_0 (while UP) [ 48.567784][ T4284] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 48.634944][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.661696][ T4296] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 48.696534][ T4295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.713122][ T4303] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.716760][ T4295] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.782632][ T4303] FAT-fs (loop3): Directory bread(block 64) failed [ 48.792747][ T4303] FAT-fs (loop3): Directory bread(block 65) failed [ 48.815592][ T4303] FAT-fs (loop3): Directory bread(block 66) failed [ 48.819450][ T4306] EXT4-fs: dax option not supported [ 48.851227][ T4303] FAT-fs (loop3): Directory bread(block 67) failed [ 48.857837][ T4303] FAT-fs (loop3): Directory bread(block 68) failed [ 48.863151][ T4308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.864615][ T4303] FAT-fs (loop3): Directory bread(block 69) failed [ 48.880852][ T4303] FAT-fs (loop3): Directory bread(block 70) failed [ 48.887388][ T4303] FAT-fs (loop3): Directory bread(block 71) failed [ 48.894634][ T4303] FAT-fs (loop3): Directory bread(block 72) failed [ 48.901587][ T4303] FAT-fs (loop3): Directory bread(block 73) failed [ 48.901786][ T4308] EXT4-fs (loop4): 1 truncate cleaned up [ 48.918838][ T4308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.942650][ T4308] xt_hashlimit: max too large, truncated to 1048576 [ 48.969521][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 49.019720][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.640580][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.719173][ T4342] rock: directory entry would overflow storage [ 49.731370][ T4342] rock: sig=0x4654, size=5, remaining=4 [ 49.852180][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 49.858684][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 49.858731][ T28] audit: type=1400 audit(1774306630.014:489): avc: denied { watch } for pid=4345 comm="syz.2.233" path="/51" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.922977][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 49.943527][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 49.980759][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.064547][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.130628][ T4353] EXT4-fs: Ignoring removed i_version option [ 50.168118][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.196123][ T4353] ext4: Bad value for 'dax' [ 50.217595][ T4349] set_capacity_and_notify: 17 callbacks suppressed [ 50.217608][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.239601][ T4360] loop4: detected capacity change from 0 to 256 [ 50.272219][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.311712][ T4360] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.344329][ T4363] netlink: 23 bytes leftover after parsing attributes in process `syz.0.239'. [ 50.354279][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.366506][ T4360] FAT-fs (loop4): Filesystem has been set read-only [ 50.387953][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.413437][ T4360] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.432000][ T28] audit: type=1400 audit(1774306630.604:490): avc: denied { read write } for pid=4368 comm="syz.0.240" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.463757][ T4360] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.493110][ T28] audit: type=1400 audit(1774306630.604:491): avc: denied { open } for pid=4368 comm="syz.0.240" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.511409][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.517639][ T28] audit: type=1400 audit(1774306630.604:492): avc: denied { ioctl } for pid=4368 comm="syz.0.240" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.551059][ T4365] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 50.573230][ T4374] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 50.581426][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.612725][ T28] audit: type=1400 audit(1774306630.784:493): avc: denied { create } for pid=4377 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 50.626085][ T4376] loop0: detected capacity change from 0 to 4096 [ 50.632303][ T4381] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 50.648685][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.651596][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.665481][ T4374] bond0: (slave dummy0): Releasing backup interface [ 50.690634][ T4376] EXT4-fs (loop0): invalid first ino: 4211081227 [ 50.708037][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.719961][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.731905][ T4374] team0: Port device dummy0 added [ 50.737532][ T4378] delete_channel: no stack [ 50.747384][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.766959][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.779802][ T4381] team0: Port device dummy0 removed [ 50.791374][ T4381] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.795904][ T4349] loop2: detected capacity change from 0 to 1024 [ 50.815888][ T4389] dummy0 speed is unknown, defaulting to 1000 [ 50.822611][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.887034][ T28] audit: type=1400 audit(1774306631.054:494): avc: denied { read } for pid=4392 comm="syz.3.246" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 50.887325][ T4349] loop2: detected capacity change from 0 to 1024 [ 51.001254][ T28] audit: type=1400 audit(1774306631.054:495): avc: denied { open } for pid=4392 comm="syz.3.246" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.026893][ T4403] netlink: 'syz.1.249': attribute type 3 has an invalid length. [ 51.046054][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.082258][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.131347][ T4412] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.170994][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.187030][ T4412] FAT-fs (loop1): Directory bread(block 64) failed [ 51.193630][ T4412] FAT-fs (loop1): Directory bread(block 65) failed [ 51.208388][ T4412] FAT-fs (loop1): Directory bread(block 66) failed [ 51.221697][ T4412] FAT-fs (loop1): Directory bread(block 67) failed [ 51.228296][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.235067][ T4412] FAT-fs (loop1): Directory bread(block 68) failed [ 51.249923][ T4412] FAT-fs (loop1): Directory bread(block 69) failed [ 51.259936][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.263178][ T4412] FAT-fs (loop1): Directory bread(block 70) failed [ 51.284197][ T4412] FAT-fs (loop1): Directory bread(block 71) failed [ 51.298377][ T4412] FAT-fs (loop1): Directory bread(block 72) failed [ 51.310770][ T4412] FAT-fs (loop1): Directory bread(block 73) failed [ 51.324711][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.360341][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.483299][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.518544][ T4409] syz.0.250 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 51.531795][ T4409] CPU: 1 UID: 0 PID: 4409 Comm: syz.0.250 Tainted: G W syzkaller #0 PREEMPT(full) [ 51.531893][ T4409] Tainted: [W]=WARN [ 51.531900][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.531909][ T4409] Call Trace: [ 51.531914][ T4409] [ 51.531921][ T4409] __dump_stack+0x1d/0x30 [ 51.531945][ T4409] dump_stack_lvl+0x95/0xd0 [ 51.531981][ T4409] dump_stack+0x15/0x1b [ 51.531998][ T4409] dump_header+0x80/0x240 [ 51.532015][ T4409] oom_kill_process+0x295/0x350 [ 51.532033][ T4409] out_of_memory+0x97d/0xb80 [ 51.532124][ T4409] try_charge_memcg+0x62e/0xa10 [ 51.532231][ T4409] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 51.532274][ T4409] __swap_cache_prepare_and_add+0x386/0x530 [ 51.532300][ T4409] swap_cache_alloc_folio+0xa2/0x120 [ 51.532321][ T4409] swap_cluster_readahead+0x26e/0x3d0 [ 51.532406][ T4409] swapin_readahead+0xde/0x840 [ 51.532431][ T4409] ? _raw_spin_unlock+0x9/0x30 [ 51.532467][ T4409] ? swap_put_entries_cluster+0x385/0x3a0 [ 51.532489][ T4409] ? swap_put_entries_cluster+0xc1/0x3a0 [ 51.532521][ T4409] ? __rcu_read_unlock+0x4e/0x70 [ 51.532541][ T4409] ? swap_cache_get_folio+0x26f/0x280 [ 51.532643][ T4409] do_swap_page+0x30d/0x2220 [ 51.532670][ T4409] ? css_rstat_updated+0xbb/0x280 [ 51.532709][ T4409] ? __rcu_read_lock+0x36/0x50 [ 51.532800][ T4409] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 51.532820][ T4409] handle_mm_fault+0xb46/0x3020 [ 51.532877][ T4409] ? vma_start_read+0x1c7/0x2c0 [ 51.532973][ T4409] do_user_addr_fault+0x62f/0x1050 [ 51.533118][ T4409] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 51.533136][ T4409] ? trace_page_fault_user+0x1f/0xe0 [ 51.533157][ T4409] exc_page_fault+0x62/0xa0 [ 51.533231][ T4409] asm_exc_page_fault+0x26/0x30 [ 51.533250][ T4409] RIP: 0033:0x7fec1cdfa14c [ 51.533266][ T4409] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 51.533333][ T4409] RSP: 002b:00007ffd2f52f650 EFLAGS: 00010202 [ 51.533349][ T4409] RAX: 0000000000000000 RBX: 00007fec1d1a7080 RCX: 000055556f0f7808 [ 51.533360][ T4409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.533369][ T4409] RBP: 00007fec1d1a7da0 R08: 0000000000000000 R09: 0000000000000000 [ 51.533408][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000cac3 [ 51.533443][ T4409] R13: 00007fec1d1a5fac R14: 000000000000c7ca R15: 00007ffd2f52f750 [ 51.533461][ T4409] [ 51.533568][ T4409] memory: usage 307200kB, limit 307200kB, failcnt 1146 [ 51.855450][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.921528][ T4409] memory+swap: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 52.065606][ T4409] kmem: usage 277612kB, limit 9007199254740988kB, failcnt 0 [ 52.128436][ T4409] Memory cgroup stats for /syz0: [ 52.128642][ T4409] cache 0 [ 52.177520][ T4409] rss 12288 [ 52.188847][ T4409] shmem 0 [ 52.279440][ T4409] mapped_file 0 [ 52.291828][ T4409] dirty 0 [ 52.302401][ T4409] writeback 4096 [ 52.312446][ T4409] workingset_refault_anon 71 [ 52.531085][ T4409] workingset_refault_file 355 [ 52.538665][ T4409] swap 151552 [ 52.544929][ T4409] swapcached 462848 [ 52.552865][ T4349] EXT4-fs: Mount option(s) incompatible with ext3 [ 52.562312][ T4409] pgpgin 20107 [ 52.574273][ T4409] pgpgout 20098 [ 52.908751][ T4409] pgfault 23042 [ 52.947059][ T4409] pgmajfault 32 [ 52.958681][ T4409] inactive_anon 8192 [ 52.971727][ T4409] active_anon 24576 [ 52.978547][ T4409] inactive_file 0 [ 52.988083][ T4409] active_file 0 [ 53.002529][ T4409] unevictable 0 [ 53.038406][ T4409] hierarchical_memory_limit 314572800 [ 53.048400][ T4409] hierarchical_memsw_limit 9223372036854771712 [ 53.077411][ T4409] total_cache 0 [ 53.090769][ T28] audit: type=1400 audit(1774306633.224:496): avc: denied { listen } for pid=4433 comm="syz.3.256" lport=54679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.112664][ T28] audit: type=1400 audit(1774306633.224:497): avc: denied { accept } for pid=4433 comm="syz.3.256" lport=54679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.133273][ T28] audit: type=1400 audit(1774306633.284:498): avc: denied { ioctl } for pid=4435 comm="syz.2.258" path="socket:[9465]" dev="sockfs" ino=9465 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.144703][ T4409] total_rss 12288 [ 53.183475][ T4438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.259'. [ 53.188327][ T4409] total_shmem 0 [ 53.204567][ T4409] total_mapped_file 0 [ 53.216607][ T4440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.221790][ T4409] total_dirty 0 [ 53.251356][ T4409] total_writeback 4096 [ 53.255100][ T4440] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.260607][ T4409] total_workingset_refault_anon 71 [ 53.279637][ T4409] total_workingset_refault_file 355 [ 53.287600][ T4409] total_swap 151552 [ 53.297737][ T4409] total_swapcached 462848 [ 53.305194][ T4409] total_pgpgin 20107 [ 53.315458][ T4409] total_pgpgout 20098 [ 53.325097][ T4409] total_pgfault 23042 [ 53.333535][ T4409] total_pgmajfault 32 [ 53.337621][ T4409] total_inactive_anon 8192 [ 53.342217][ T4409] total_active_anon 24576 [ 53.346579][ T4409] total_inactive_file 0 [ 53.350856][ T4409] total_active_file 0 [ 53.354947][ T4409] total_unevictable 0 [ 53.358998][ T4409] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.250,pid=4409,uid=0 [ 53.373647][ T4409] Memory cgroup out of memory: Killed process 4409 (syz.0.250) total-vm:94032kB, anon-rss:1244kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 53.462662][ T4455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.262'. [ 53.704938][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 53.714018][ T4466] netlink: 'syz.1.265': attribute type 30 has an invalid length. [ 53.721875][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 53.876770][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.003809][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 54.015205][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.028028][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 54.038754][ T4482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.051453][ T4483] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.062075][ T4485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 54.071583][ T4482] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.140345][ T4494] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 54.306146][ T4494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.362852][ T4492] sctp: [Deprecated]: syz.2.273 (pid 4492) Use of int in maxseg socket option. [ 54.362852][ T4492] Use struct sctp_assoc_value instead [ 54.495743][ T4480] syz.4.270 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 54.507552][ T4512] netlink: 'syz.1.279': attribute type 39 has an invalid length. [ 54.528367][ T4512] syz_tun (unregistering): left allmulticast mode [ 54.539227][ T4517] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 54.553296][ T4519] bridge_slave_1: left allmulticast mode [ 54.570051][ T4519] bridge_slave_1: left promiscuous mode [ 54.570152][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.570501][ T4480] CPU: 0 UID: 0 PID: 4480 Comm: syz.4.270 Tainted: G W syzkaller #0 PREEMPT(full) [ 54.570529][ T4480] Tainted: [W]=WARN [ 54.570535][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.570575][ T4480] Call Trace: [ 54.570581][ T4480] [ 54.570587][ T4480] __dump_stack+0x1d/0x30 [ 54.570610][ T4480] dump_stack_lvl+0x95/0xd0 [ 54.570630][ T4480] dump_stack+0x15/0x1b [ 54.570646][ T4480] dump_header+0x80/0x240 [ 54.570691][ T4480] oom_kill_process+0x295/0x350 [ 54.570713][ T4480] out_of_memory+0x97d/0xb80 [ 54.570734][ T4480] try_charge_memcg+0x62e/0xa10 [ 54.570766][ T4480] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 54.570802][ T4480] __swap_cache_prepare_and_add+0x386/0x530 [ 54.570833][ T4480] swap_cache_alloc_folio+0xa2/0x120 [ 54.570928][ T4480] swap_cluster_readahead+0x26e/0x3d0 [ 54.571008][ T4480] swapin_readahead+0xde/0x840 [ 54.571032][ T4480] ? _raw_spin_unlock+0x9/0x30 [ 54.571087][ T4480] ? swap_put_entries_cluster+0x385/0x3a0 [ 54.571113][ T4480] ? swap_put_entries_cluster+0xc1/0x3a0 [ 54.571138][ T4480] ? __rcu_read_unlock+0x4e/0x70 [ 54.571156][ T4480] ? swap_cache_get_folio+0x26f/0x280 [ 54.571268][ T4480] do_swap_page+0x30d/0x2220 [ 54.571372][ T4480] ? css_rstat_updated+0xbb/0x280 [ 54.571389][ T4480] ? __rcu_read_lock+0x36/0x50 [ 54.571406][ T4480] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 54.571430][ T4480] handle_mm_fault+0xb46/0x3020 [ 54.571516][ T4480] ? vma_start_read+0x1c7/0x2c0 [ 54.571540][ T4480] do_user_addr_fault+0x62f/0x1050 [ 54.571566][ T4480] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 54.571647][ T4480] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 54.571668][ T4480] ? trace_page_fault_user+0x1f/0xe0 [ 54.571693][ T4480] exc_page_fault+0x62/0xa0 [ 54.571790][ T4480] asm_exc_page_fault+0x26/0x30 [ 54.571808][ T4480] RIP: 0033:0x7fa64d6178f8 [ 54.571823][ T4480] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 54.571876][ T4480] RSP: 002b:00007ffdf500e640 EFLAGS: 00010246 [ 54.571891][ T4480] RAX: 0000000000000000 RBX: 000055555909f500 RCX: 00007fa64d61cfce [ 54.571902][ T4480] RDX: 00007ffdf500e690 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.571982][ T4480] RBP: 00007fa64d8d7da0 R08: 0000000000000000 R09: 0000000000000000 [ 54.571993][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000d608 [ 54.572004][ T4480] R13: 00007fa64d8d5fac R14: 000000000000d360 R15: 00007ffdf500e7c0 [ 54.572021][ T4480] [ 54.572414][ T4480] memory: usage 307200kB, limit 307200kB, failcnt 9870 [ 54.699005][ T4517] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 54.731556][ T4480] memory+swap: usage 135952kB, limit 9007199254740988kB, failcnt 0 [ 54.823439][ T4527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49143 sclass=netlink_route_socket pid=4527 comm=syz.0.283 [ 54.832429][ T4480] kmem: usage 552kB, limit 9007199254740988kB, failcnt 0 [ 54.832443][ T4480] Memory cgroup stats for /syz4: [ 54.832746][ T4480] cache 12288 [ 54.836278][ T4527] IPVS: set_ctl: invalid protocol: 114 100.1.1.1:20004 [ 54.844440][ T4480] rss 8192 [ 54.895522][ T4480] shmem 0 [ 54.895530][ T4480] mapped_file 0 [ 54.895537][ T4480] dirty 0 [ 54.895987][ T4480] writeback 4096 [ 54.938276][ T4480] workingset_refault_anon 77 [ 54.938898][ T4527] --map-set only usable from mangle table [ 54.954450][ T4480] workingset_refault_file 428 [ 54.964398][ T4480] swap 626688 [ 54.967676][ T4480] swapcached 925696 [ 54.974703][ T4531] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.986007][ T4480] pgpgin 52064 [ 54.989459][ T4480] pgpgout 52056 [ 54.990842][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 54.990920][ T28] audit: type=1400 audit(1774306635.164:558): avc: denied { write } for pid=4530 comm="syz.2.284" lport=115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.992952][ T4480] pgfault 31969 [ 55.022757][ T4480] pgmajfault 55 [ 55.026295][ T4480] inactive_anon 8192 [ 55.030194][ T4480] active_anon 12288 [ 55.034177][ T4480] inactive_file 12288 [ 55.038138][ T4480] active_file 0 [ 55.041648][ T4480] unevictable 0 [ 55.045095][ T4480] hierarchical_memory_limit 314572800 [ 55.050492][ T4480] hierarchical_memsw_limit 9223372036854771712 [ 55.056627][ T4480] total_cache 12288 [ 55.060536][ T4480] total_rss 8192 [ 55.064068][ T4480] total_shmem 0 [ 55.067506][ T4480] total_mapped_file 0 [ 55.072706][ T4480] total_dirty 0 [ 55.076168][ T4480] total_writeback 4096 [ 55.080461][ T4480] total_workingset_refault_anon 77 [ 55.085578][ T4480] total_workingset_refault_file 428 [ 55.090802][ T4480] total_swap 626688 [ 55.091512][ T4542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4542 comm=syz.1.287 [ 55.094607][ T4480] total_swapcached 925696 [ 55.111534][ T4480] total_pgpgin 52064 [ 55.115458][ T4480] total_pgpgout 52056 [ 55.119471][ T4480] total_pgfault 31969 [ 55.123441][ T4480] total_pgmajfault 55 [ 55.138954][ T4480] total_inactive_anon 8192 [ 55.143375][ T4480] total_active_anon 12288 [ 55.147698][ T4480] total_inactive_file 12288 [ 55.152248][ T4480] total_active_file 0 [ 55.156240][ T4480] total_unevictable 0 [ 55.160251][ T4480] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.270,pid=4480,uid=0 [ 55.174828][ T4480] Memory cgroup out of memory: Killed process 4480 (syz.4.270) total-vm:94032kB, anon-rss:1236kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 55.191239][ T4483] syz.4.270 (4483) used greatest stack depth: 8448 bytes left [ 55.221613][ T28] audit: type=1400 audit(1774306635.394:559): avc: denied { bind } for pid=4547 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.317352][ T4563] set_capacity_and_notify: 16 callbacks suppressed [ 55.317434][ T4563] loop3: detected capacity change from 0 to 2048 [ 55.398037][ T4563] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.502710][ T4578] FAULT_INJECTION: forcing a failure. [ 55.502710][ T4578] name failslab, interval 1, probability 0, space 0, times 1 [ 55.515375][ T4578] CPU: 0 UID: 0 PID: 4578 Comm: syz.3.295 Tainted: G W syzkaller #0 PREEMPT(full) [ 55.515465][ T4578] Tainted: [W]=WARN [ 55.515471][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.515482][ T4578] Call Trace: [ 55.515488][ T4578] [ 55.515496][ T4578] __dump_stack+0x1d/0x30 [ 55.515520][ T4578] dump_stack_lvl+0x95/0xd0 [ 55.515536][ T4578] dump_stack+0x15/0x1b [ 55.515562][ T4578] should_fail_ex+0x263/0x280 [ 55.515608][ T4578] should_failslab+0x8c/0xb0 [ 55.515665][ T4578] kmem_cache_alloc_noprof+0x66/0x400 [ 55.515686][ T4578] ? ext4_init_io_end+0x31/0xb0 [ 55.515713][ T4578] ext4_init_io_end+0x31/0xb0 [ 55.515787][ T4578] ext4_do_writepages+0x6ea/0x2840 [ 55.515890][ T4578] ? xas_load+0x413/0x430 [ 55.515911][ T4578] ? obj_cgroup_charge_account+0x122/0x1a0 [ 55.515936][ T4578] ? avc_has_perm_noaudit+0xab/0x130 [ 55.515991][ T4578] ? avc_has_perm+0x101/0x190 [ 55.516012][ T4578] ? selinux_file_open+0x2e6/0x330 [ 55.516095][ T4578] ext4_writepages+0x18f/0x320 [ 55.516158][ T4578] ? __pfx_ext4_writepages+0x10/0x10 [ 55.516217][ T4578] do_writepages+0x1c6/0x310 [ 55.516240][ T4578] ? inode_to_bdi+0x47/0xa0 [ 55.516254][ T4578] ? _raw_spin_unlock+0x9/0x30 [ 55.516345][ T4578] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 55.516391][ T4578] filemap_flush_range+0x105/0x140 [ 55.516478][ T4578] generic_fadvise+0x338/0x460 [ 55.516558][ T4578] __x64_sys_fadvise64+0xcb/0x110 [ 55.516593][ T4578] x64_sys_call+0x242b/0x3020 [ 55.516691][ T4578] do_syscall_64+0x12c/0x370 [ 55.516711][ T4578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.516728][ T4578] RIP: 0033:0x7f742da4c799 [ 55.516742][ T4578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.516815][ T4578] RSP: 002b:00007f742c486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 55.516906][ T4578] RAX: ffffffffffffffda RBX: 00007f742dcc6090 RCX: 00007f742da4c799 [ 55.516996][ T4578] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000005 [ 55.517007][ T4578] RBP: 00007f742c486090 R08: 0000000000000000 R09: 0000000000000000 [ 55.517016][ T4578] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 55.517027][ T4578] R13: 00007f742dcc6128 R14: 00007f742dcc6090 R15: 00007ffdcac60288 [ 55.517049][ T4578] [ 55.752620][ T4575] dummy0 speed is unknown, defaulting to 1000 [ 55.793816][ T4591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.298'. [ 55.831587][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 55.855240][ T4596] loop1: detected capacity change from 0 to 512 [ 55.861738][ T28] audit: type=1400 audit(1774306636.004:560): avc: denied { getopt } for pid=4576 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.885716][ T4591] loop2: detected capacity change from 0 to 4096 [ 55.907965][ T28] audit: type=1400 audit(1774306636.004:561): avc: denied { create } for pid=4595 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.918695][ T4596] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.928077][ T28] audit: type=1400 audit(1774306636.074:562): avc: denied { append } for pid=4576 comm="syz.2.298" path=2F35392F66696C65302F66696C65302F233138202864656C6574656429 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.053720][ T4578] dummy0 speed is unknown, defaulting to 1000 [ 56.063476][ T4601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4601 comm=syz.4.304 [ 56.179939][ T50] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 56.242360][ T50] EXT4-fs (loop3): Remounting filesystem read-only [ 56.249119][ T30] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 56.290065][ T28] audit: type=1400 audit(1774306636.464:563): avc: denied { ioctl } for pid=4614 comm="syz.2.309" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.388394][ T4623] netlink: 'syz.4.310': attribute type 39 has an invalid length. [ 56.398969][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 56.437399][ T4623] hsr_slave_1 (unregistering): left promiscuous mode [ 56.463060][ T4629] dummy0 speed is unknown, defaulting to 1000 [ 56.584806][ T28] audit: type=1400 audit(1774306636.754:564): avc: denied { create } for pid=4641 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.630116][ T4646] loop3: detected capacity change from 0 to 2048 [ 56.662750][ T28] audit: type=1400 audit(1774306636.754:565): avc: denied { write } for pid=4641 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.683441][ T4646] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.706206][ T28] audit: type=1400 audit(1774306636.804:566): avc: denied { listen } for pid=4648 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.770652][ T28] audit: type=1400 audit(1774306636.814:567): avc: denied { accept } for pid=4648 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.772171][ T4659] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.315: bg 0: block 345: padding at end of block bitmap is not set [ 56.805404][ T4659] EXT4-fs (loop3): Remounting filesystem read-only [ 56.823064][ T50] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 56.879452][ T4646] dummy0 speed is unknown, defaulting to 1000 [ 57.037106][ T4672] netlink: 'syz.4.322': attribute type 4 has an invalid length. [ 57.052890][ T4672] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 57.055471][ T4670] dummy0 speed is unknown, defaulting to 1000 [ 57.330278][ T4677] syz.4.323 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 57.347784][ T4677] CPU: 0 UID: 0 PID: 4677 Comm: syz.4.323 Tainted: G W syzkaller #0 PREEMPT(full) [ 57.347816][ T4677] Tainted: [W]=WARN [ 57.347822][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.347834][ T4677] Call Trace: [ 57.347839][ T4677] [ 57.347847][ T4677] __dump_stack+0x1d/0x30 [ 57.347871][ T4677] dump_stack_lvl+0x95/0xd0 [ 57.347892][ T4677] dump_stack+0x15/0x1b [ 57.347912][ T4677] dump_header+0x80/0x240 [ 57.348005][ T4677] oom_kill_process+0x295/0x350 [ 57.348022][ T4677] out_of_memory+0x97d/0xb80 [ 57.348039][ T4677] try_charge_memcg+0x62e/0xa10 [ 57.348150][ T4677] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 57.348226][ T4677] __swap_cache_prepare_and_add+0x386/0x530 [ 57.348327][ T4677] swap_cache_alloc_folio+0xa2/0x120 [ 57.348351][ T4677] swap_cluster_readahead+0x26e/0x3d0 [ 57.348381][ T4677] swapin_readahead+0xde/0x840 [ 57.348419][ T4677] ? _raw_spin_unlock+0x9/0x30 [ 57.348440][ T4677] ? swap_put_entries_cluster+0x385/0x3a0 [ 57.348502][ T4677] ? swap_put_entries_cluster+0xc1/0x3a0 [ 57.348525][ T4677] ? __rcu_read_unlock+0x4e/0x70 [ 57.348554][ T4677] ? swap_cache_get_folio+0x26f/0x280 [ 57.348626][ T4677] do_swap_page+0x30d/0x2220 [ 57.348671][ T4677] ? css_rstat_updated+0xbb/0x280 [ 57.348687][ T4677] ? __rcu_read_lock+0x36/0x50 [ 57.348706][ T4677] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 57.348812][ T4677] handle_mm_fault+0xb46/0x3020 [ 57.348839][ T4677] ? vma_start_read+0x1c7/0x2c0 [ 57.348939][ T4677] do_user_addr_fault+0x62f/0x1050 [ 57.349044][ T4677] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 57.349101][ T4677] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 57.349119][ T4677] ? trace_page_fault_user+0x1f/0xe0 [ 57.349140][ T4677] exc_page_fault+0x62/0xa0 [ 57.349225][ T4677] asm_exc_page_fault+0x26/0x30 [ 57.349244][ T4677] RIP: 0033:0x7fa64d6178c3 [ 57.349259][ T4677] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 57.349275][ T4677] RSP: 002b:00007ffdf500e650 EFLAGS: 00010246 [ 57.349297][ T4677] RAX: 0000000000000000 RBX: 000055555909f500 RCX: 0000000000000000 [ 57.349307][ T4677] RDX: 00007ffdf500e690 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.349316][ T4677] RBP: 00007fa64d8d7da0 R08: 0000000000000000 R09: 0000000000000000 [ 57.349326][ T4677] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000e28e [ 57.349336][ T4677] R13: 00007fa64d8d5fac R14: 000000000000df84 R15: 00007ffdf500e7c0 [ 57.349350][ T4677] [ 57.599117][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881053b2a00: rx timeout, send abort [ 57.607487][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881053b2a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 57.609118][ T4677] memory: usage 303820kB, limit 307200kB, failcnt 10145 [ 57.648415][ T4677] memory+swap: usage 243324kB, limit 9007199254740988kB, failcnt 0 [ 57.660627][ T4677] kmem: usage 214628kB, limit 9007199254740988kB, failcnt 0 [ 57.673519][ T4677] Memory cgroup stats for /syz4: [ 57.673903][ T4677] cache 8192 [ 57.686528][ T4677] rss 0 [ 57.710026][ T4677] shmem 0 [ 57.713147][ T4677] mapped_file 0 [ 57.716761][ T4677] dirty 0 [ 57.741677][ T4677] writeback 4096 [ 57.749492][ T4677] workingset_refault_anon 96 [ 57.749750][ T4682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=4682 comm=syz.0.325 [ 57.759897][ T4677] workingset_refault_file 556 [ 57.781555][ T4677] swap 352256 [ 57.784842][ T4677] swapcached 1036288 [ 57.788779][ T4677] pgpgin 64590 [ 57.802640][ T4677] pgpgout 64580 [ 57.805955][ T4690] program syz.0.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.806093][ T4677] pgfault 42756 [ 57.806158][ T4677] pgmajfault 68 [ 57.822197][ T4677] inactive_anon 24576 [ 57.826247][ T4677] active_anon 8192 [ 57.829973][ T4677] inactive_file 8192 [ 57.833956][ T4677] active_file 0 [ 57.837485][ T4677] unevictable 0 [ 57.841021][ T4677] hierarchical_memory_limit 314572800 [ 57.883500][ T4694] netlink: 'syz.0.329': attribute type 9 has an invalid length. [ 57.898624][ T4677] hierarchical_memsw_limit 9223372036854771712 [ 57.908450][ T4677] total_cache 8192 [ 57.918706][ T4677] total_rss 0 [ 57.922007][ T4677] total_shmem 0 [ 57.928371][ T4677] total_mapped_file 0 [ 57.933870][ T4692] loop2: detected capacity change from 0 to 1024 [ 57.940735][ T4677] total_dirty 0 [ 57.944193][ T4677] total_writeback 4096 [ 57.949873][ T4677] total_workingset_refault_anon 96 [ 57.955498][ T4677] total_workingset_refault_file 556 [ 57.962573][ T4677] total_swap 352256 [ 57.966381][ T4677] total_swapcached 1036288 [ 57.975519][ T4692] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 57.984455][ T4692] System zones: 0-1, 3-36 [ 57.989603][ T4677] total_pgpgin 64590 [ 57.993480][ T4677] total_pgpgout 64580 [ 57.997517][ T4677] total_pgfault 42756 [ 58.001575][ T4677] total_pgmajfault 68 [ 58.003438][ T4692] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.328: bad orphan inode 134217728 [ 58.005538][ T4677] total_inactive_anon 24576 [ 58.005598][ T4677] total_active_anon 8192 [ 58.005604][ T4677] total_inactive_file 8192 [ 58.005610][ T4677] total_active_file 0 [ 58.005617][ T4677] total_unevictable 0 [ 58.005625][ T4677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.151,pid=4037,uid=0 [ 58.005724][ T4677] Memory cgroup out of memory: Killed process 4037 (syz.4.151) total-vm:94032kB, anon-rss:1228kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 58.072156][ T4692] loop2: lost filesystem error report for type 5 error -117 [ 58.204292][ T4713] __nla_validate_parse: 2 callbacks suppressed [ 58.204308][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 58.231987][ T4713] n: the hash_elasticity option has been deprecated and is always 16 [ 58.248592][ T4713] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 58.276530][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 58.289216][ T4720] n: the hash_elasticity option has been deprecated and is always 16 [ 58.329457][ T4720] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 58.366273][ T4724] loop2: detected capacity change from 0 to 2048 [ 58.439529][ T4715] dummy0 speed is unknown, defaulting to 1000 [ 58.542388][ T4725] netlink: 10 bytes leftover after parsing attributes in process `syz.1.326'. [ 58.600054][ T4727] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 58.629172][ T4728] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 58.803837][ T4733] bridge2: entered promiscuous mode [ 58.877728][ T4733] ip6erspan0: entered allmulticast mode [ 58.995288][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.016055][ T4751] loop2: detected capacity change from 0 to 2048 [ 59.097304][ T4765] loop3: detected capacity change from 0 to 2048 [ 59.104328][ T4751] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.121640][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.202627][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.232753][ T4765] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.245230][ T4784] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.345: bg 0: block 345: padding at end of block bitmap is not set [ 59.263586][ T4780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.268478][ T4784] EXT4-fs (loop2): Remounting filesystem read-only [ 59.293073][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.303487][ T55] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 59.427938][ T4766] dummy0 speed is unknown, defaulting to 1000 [ 59.446916][ T4751] dummy0 speed is unknown, defaulting to 1000 [ 59.510670][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 59.544323][ T83] bridge_slave_1: left allmulticast mode [ 59.568885][ T83] bridge_slave_1: left promiscuous mode [ 59.575027][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.594286][ T83] bridge_slave_0: left allmulticast mode [ 59.600104][ T83] bridge_slave_0: left promiscuous mode [ 59.605885][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.613795][ T4815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4815 comm=syz.4.356 [ 59.631969][ T4819] loop2: detected capacity change from 0 to 512 [ 59.670544][ T4819] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.065121][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 60.065160][ T28] audit: type=1400 audit(1774306640.234:646): avc: denied { unlink } for pid=4831 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3633 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.226580][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.244860][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.261083][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.265579][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.279086][ T83] bond0 (unregistering): Released all slaves [ 60.347318][ T4838] loop3: detected capacity change from 0 to 2048 [ 60.408749][ T4838] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.448419][ T83] hsr_slave_0: left promiscuous mode [ 60.454289][ T83] hsr_slave_1: left promiscuous mode [ 60.460019][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.467592][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.477963][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.487687][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.508553][ T83] veth1_macvtap: left promiscuous mode [ 60.524371][ T4858] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.360: bg 0: block 345: padding at end of block bitmap is not set [ 60.538361][ T83] veth0_macvtap: left promiscuous mode [ 60.544077][ T83] veth1_vlan: left promiscuous mode [ 60.550965][ T83] veth0_vlan: left promiscuous mode [ 60.576983][ T4858] EXT4-fs (loop3): Remounting filesystem read-only [ 60.608361][ T1565] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 60.981865][ T83] team0 (unregistering): Port device team_slave_1 removed [ 60.992809][ T83] team0 (unregistering): Port device team_slave_0 removed [ 61.066327][ T4766] chnl_net:caif_netlink_parms(): no params data found [ 61.079953][ T4854] netlink: 'syz.0.361': attribute type 13 has an invalid length. [ 61.098799][ T4854] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.361'. [ 61.147943][ T1033] dummy0 speed is unknown, defaulting to 1000 [ 61.160343][ T1033] infiniband syz1: ib_query_port failed (-19) [ 61.223191][ T4875] netlink: 264 bytes leftover after parsing attributes in process `syz.0.365'. [ 61.380126][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.387261][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.394664][ T4766] bridge_slave_0: entered allmulticast mode [ 61.402177][ T28] audit: type=1400 audit(1774306641.564:647): avc: denied { write } for pid=4883 comm="syz.0.367" path="socket:[11329]" dev="sockfs" ino=11329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.406332][ T4766] bridge_slave_0: entered promiscuous mode [ 61.444139][ T28] audit: type=1400 audit(1774306641.614:648): avc: denied { ioctl } for pid=4891 comm="syz.0.368" path="socket:[11337]" dev="sockfs" ino=11337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.528415][ T28] audit: type=1400 audit(1774306641.674:649): avc: denied { read } for pid=4891 comm="syz.0.368" path="socket:[11337]" dev="sockfs" ino=11337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.560815][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.576977][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.584262][ T4766] bridge_slave_1: entered allmulticast mode [ 61.591022][ T4766] bridge_slave_1: entered promiscuous mode [ 61.614054][ T4896] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 61.651240][ T4766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.669598][ T4766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.697453][ T4910] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 61.697968][ T4766] team0: Port device team_slave_0 added [ 61.706291][ T4910] netlink: 'syz.2.370': attribute type 2 has an invalid length. [ 61.719356][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.370'. [ 61.721296][ T83] IPVS: stop unused estimator thread 0... [ 61.736801][ T4766] team0: Port device team_slave_1 added [ 61.766164][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.774142][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.801467][ T4766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.829980][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.846714][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.922248][ T4766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.980119][ T4766] hsr_slave_0: entered promiscuous mode [ 61.986213][ T4766] hsr_slave_1: entered promiscuous mode [ 61.993360][ T4766] debugfs: 'hsr0' already exists in 'hsr' [ 61.999167][ T4766] Cannot create hsr debugfs directory [ 63.410361][ T28] audit: type=1400 audit(1774306643.584:650): avc: denied { read } for pid=4938 comm="syz.2.375" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.579434][ T28] audit: type=1400 audit(1774306643.604:651): avc: denied { open } for pid=4938 comm="syz.2.375" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.723024][ T4766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.746239][ T4766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.767658][ T4766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.797571][ T4766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.838500][ T28] audit: type=1400 audit(1774306643.984:652): avc: denied { execute } for pid=4954 comm="syz.4.380" path="/98/cpu.stat" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.861629][ T4959] loop2: detected capacity change from 0 to 2048 [ 63.916743][ T4959] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 64 [ 63.976719][ T28] audit: type=1400 audit(1774306644.144:653): avc: denied { create } for pid=4956 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 64.020864][ T4946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.031686][ T4969] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.031692][ T28] audit: type=1400 audit(1774306644.204:654): avc: denied { write } for pid=4956 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.183258][ T4946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.207855][ T28] audit: type=1400 audit(1774306644.374:655): avc: denied { connect } for pid=4976 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 64.236124][ T4766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.262948][ T4946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.286797][ T4766] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.411565][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.418652][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.447523][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.454660][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.632625][ T4766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.650960][ T4766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.712203][ T4946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.836061][ T55] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.880100][ T3436] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.910676][ T4766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.951223][ T3436] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.952164][ T5002] xt_hashlimit: size too large, truncated to 1048576 [ 64.959890][ T4998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.390'. [ 65.012584][ T3436] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.057577][ T5015] pimreg: entered allmulticast mode [ 65.175557][ T4766] veth0_vlan: entered promiscuous mode [ 65.205471][ T4766] veth1_vlan: entered promiscuous mode [ 65.265938][ T5029] loop3: detected capacity change from 0 to 2048 [ 65.276202][ T4766] veth0_macvtap: entered promiscuous mode [ 65.291650][ T4766] veth1_macvtap: entered promiscuous mode [ 65.313034][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.331342][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.349263][ T5000] pimreg: left allmulticast mode [ 65.377018][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 65.377029][ T28] audit: type=1400 audit(1774306645.544:657): avc: denied { mounton } for pid=4766 comm="syz-executor" path="/root/syzkaller.HqAQid/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.457247][ T28] audit: type=1400 audit(1774306645.594:658): avc: denied { mount } for pid=4766 comm="syz-executor" name="/" dev="gadgetfs" ino=3749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.502775][ T28] audit: type=1400 audit(1774306645.614:659): avc: denied { mount } for pid=5035 comm="syz.2.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 65.515717][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.524981][ T28] audit: type=1400 audit(1774306645.614:660): avc: denied { search } for pid=5035 comm="syz.2.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 65.555454][ T28] audit: type=1400 audit(1774306645.624:661): avc: denied { search } for pid=5035 comm="syz.2.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 65.567971][ T5029] EXT4-fs mount: 22 callbacks suppressed [ 65.567984][ T5029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.578887][ T28] audit: type=1400 audit(1774306645.624:662): avc: denied { search } for pid=5035 comm="syz.2.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 65.595301][ T5043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 65.616681][ T28] audit: type=1400 audit(1774306645.624:663): avc: denied { search } for pid=5035 comm="syz.2.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 65.626055][ T5029] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.648768][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680772][ T5043] loop2: detected capacity change from 0 to 1024 [ 65.702585][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711470][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.738957][ T5043] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 65.758729][ T5043] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 65.768172][ T5043] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.395: Failed to acquire dquot type 0 [ 65.779614][ T5043] loop2: lost filesystem error report for type 5 error -5 [ 65.779712][ T28] audit: type=1400 audit(1774306645.664:664): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 65.806814][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 65.806828][ C1] EXT4-fs (loop2): initial error at time 1774306645: ext4_acquire_dquot:7001 [ 65.806869][ C1] EXT4-fs (loop2): last error at time 1774306645: ext4_acquire_dquot:7001 [ 65.809160][ T5043] EXT4-fs (loop2): 1 truncate cleaned up [ 65.816160][ T5052] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.392: bg 0: block 345: padding at end of block bitmap is not set [ 65.850199][ T5043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.853999][ T5052] EXT4-fs (loop3): Remounting filesystem read-only [ 65.885713][ T3436] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 65.919419][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.929174][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.939391][ T5061] netlink: 'syz.4.399': attribute type 46 has an invalid length. [ 65.963810][ T5065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.403'. [ 65.988173][ T5067] netlink: 'syz.0.404': attribute type 12 has an invalid length. [ 66.006273][ T5067] Illegal XDP return value 5067 on prog (id 132) dev N/A, expect packet loss! [ 66.057457][ T5072] netlink: 44 bytes leftover after parsing attributes in process `syz.5.406'. [ 66.070626][ T5077] tipc: Can't bind to reserved service type 0 [ 66.119113][ T5084] tmpfs: Bad value for 'mpol' [ 66.125312][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.132495][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.918516][ T5097] support for the xor transformation has been removed. [ 67.934183][ T5103] loop5: detected capacity change from 0 to 2048 [ 67.971390][ T5103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.008762][ T5103] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.110097][ T5110] ================================================================== [ 68.118189][ T5110] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 68.125394][ T5110] [ 68.127725][ T5110] read-write to 0xffff88811b253d88 of 8 bytes by task 5103 on cpu 1: [ 68.135781][ T5110] __xa_set_mark+0xd2/0x1a0 [ 68.140291][ T5110] __folio_mark_dirty+0x383/0x4a0 [ 68.145315][ T5110] mark_buffer_dirty+0x120/0x220 [ 68.150254][ T5110] folio_zero_new_buffers+0x28c/0x2e0 [ 68.155635][ T5110] block_write_end+0x200/0x210 [ 68.160398][ T5110] ext4_da_write_end+0x1d3/0x810 [ 68.165336][ T5110] generic_perform_write+0x311/0x490 [ 68.170614][ T5110] ext4_buffered_write_iter+0x1ee/0x3c0 [ 68.176154][ T5110] ext4_file_write_iter+0x380/0xfa0 [ 68.181341][ T5110] vfs_write+0x5a6/0x9f0 [ 68.185586][ T5110] ksys_write+0xdc/0x1a0 [ 68.189822][ T5110] __x64_sys_write+0x40/0x50 [ 68.194410][ T5110] x64_sys_call+0x27e1/0x3020 [ 68.199088][ T5110] do_syscall_64+0x12c/0x370 [ 68.203679][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.209568][ T5110] [ 68.211881][ T5110] read to 0xffff88811b253d88 of 8 bytes by task 5110 on cpu 0: [ 68.219414][ T5110] xas_find_marked+0x213/0x620 [ 68.224176][ T5110] filemap_get_folios_tag+0xfa/0x510 [ 68.229457][ T5110] mpage_prepare_extent_to_map+0x328/0xc50 [ 68.235265][ T5110] ext4_do_writepages+0xa07/0x2840 [ 68.240376][ T5110] ext4_writepages+0x18f/0x320 [ 68.245130][ T5110] do_writepages+0x1c6/0x310 [ 68.249721][ T5110] filemap_flush_range+0x105/0x140 [ 68.254827][ T5110] generic_fadvise+0x338/0x460 [ 68.259576][ T5110] __x64_sys_fadvise64+0xcb/0x110 [ 68.264619][ T5110] x64_sys_call+0x242b/0x3020 [ 68.269282][ T5110] do_syscall_64+0x12c/0x370 [ 68.273856][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.279733][ T5110] [ 68.282038][ T5110] value changed: 0x00ffffffffffffff -> 0x03ffffffffffffff [ 68.289120][ T5110] [ 68.291426][ T5110] Reported by Kernel Concurrency Sanitizer on: [ 68.297565][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.5.413 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.308309][ T5110] Tainted: [W]=WARN [ 68.312093][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.322129][ T5110] ================================================================== [ 68.336013][ T5113] loop3: detected capacity change from 0 to 512 [ 68.336438][ T5110] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.413: bg 0: block 345: padding at end of block bitmap is not set [ 68.357197][ T5110] EXT4-fs (loop5): Remounting filesystem read-only [ 68.365581][ T83] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 68.379465][ T5113] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.388995][ T5113] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.402882][ T5113] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 68.411174][ T5113] System zones: 0-2, 18-18, 34-35 [ 68.419011][ T5113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.448292][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.483656][ T4766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.