last executing test programs: 46.655182521s ago: executing program 2 (id=147): getrandom(&(0x7f0000000140)=""/4096, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x10006}, 0x1c) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000001200)={r0}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001080) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x10208, 0x20000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = socket(0xa, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 46.408973418s ago: executing program 2 (id=158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @loopback, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 46.335511925s ago: executing program 2 (id=151): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000001300)=[{&(0x7f00000011c0)='\b', 0x1}, {&(0x7f00000029c0)="06", 0x1}], 0x2) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r3 = socket$kcm(0x1e, 0x2, 0x0) r4 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x20040400) connect$phonet_pipe(r6, &(0x7f00000000c0)={0x23, 0x7f, 0x2, 0xca}, 0xa) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="18050000", @ANYRES16=r5, @ANYBLOB="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"], 0x518}, 0x1, 0x0, 0x0, 0x40010}, 0x40011) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001640)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(\x05\x00\x00\x00\x00\x00\x00\x00\x00\xee$\x92\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xab\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf7\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85\x95\x00c\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Za\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6\t\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14\xe7\x02\xb3s4\xb5p\x9c\x18\xc8\xf9*\xcd\xaf\xf3\tap&\xaa\x8c\xa9\x16Kxx\'E\xf2B\x12\xb8\x17\x7f\x80\x80s\x91\xd6\xba=]%d\x9a\xe0\x1b\x89\xf6\x1eIW\xcf\v\x13\x83\xfd!v2\x85\xee\xe7.>`\x85\xcf\\r\xb6\x9d\xbe?\x84\xf2\xe0ju\x94\bg\xd1\x82q\x1fG\xa3\xffP\x0fX\xb6\x0e\xe6gK\xe2\x17\xe9\x12\xdcE\x1eg\x13a>\x85[\xf0_', 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef) 45.218996798s ago: executing program 2 (id=156): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XZvsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCNiMiKG8va9so42JC3pXpyHWct64j+cP2flRx+w/vEV+X7HD0A53TyS78iXsty9/V829miOf6LN+Ge0zb7rQRS9/+s8/mvu74fr58jTFeOwbMxyov1bDq4s+OnDY592qr91/Jc9svqbY8F+uHU9YveK+D/Igs3HP1n8SZvtn61y6nB3dbz6/S/HOi0rOv7ajYg9bY9/7o1Ks9Qa1yf3z81XZycbP9vW8fU3b33Zqf6i48+2/7YO8bds/3Tl67LP5GKXdXx14sa5TstG7xt/+vNQ0jjeHMpL3pleXLw0FTGUHM9XaSk/sHZbmus03yOLf+8z7fv/st//68vfZ6T5J7MLF984e7vTsgfZ/i0Xk+/UumxDJ1n8M/ff/qv6f1b2SZd1/PHm5ac6LVsr/pH1BAYAAAAAAAAllNavwSbpxN10mk5MNObLPhbb0uqFhcVn5y5cPj8Tsbf+/5CDafNK91gjn2T5qfz/YZv5Ayvyz0XEzoj4rDJSz0+cvlCdKTp4AAAAAAAAAAAAAAAAAAAA2CS25/P/m/ep/r3SmP8PlEQvbzAHbG76P5RXvf+vusUTUAb2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCWtPPpmz8mEbH00kj9kRnKl5kRBFvbYNENAApTKboBQGHuXvo32IfS6Wr8/1f+5YC9bw5QgKRdYX1wUFu7899s+0oAAAAAAAAAAAAAoAf27Oo8/9/cYNjaTPuD8lrH/H9fHQAPOV/9D+XlGB+43yz+4U4LzP8HAAAAAAAAAAAAgL4ZrT+SdCKfCzwaaToxEfH/iNgRg8ncfHV2MiIeiYgfKoP/y/JTRTcaAAAAAAAAAAAAAAAAAAAAtpiFK1fPTlers5daE3+vKtnaieZdUPtQ18vxH18VSf8/lpGIKHyj9Cwx0FKSRCxlW35TNOzSQmyOZtQTBf9hAgAAAAAAAAAAAAAAAACAEmqZe9ze7i/63CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L979//vXaLoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9O/AQAA//+fuUAt") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x50) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 44.639159485s ago: executing program 2 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) wait4(0x0, 0x0, 0xe000000b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_dev$loop(0x0, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x5, 0x7ff, 0x7, 0x7fffffff, 0x9665}, 0x14) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0xc003, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64], 0xb, 0x2d4, &(0x7f0000000580)="$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") 43.856731167s ago: executing program 2 (id=173): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) socket(0x28, 0x5, 0x3) (async) socket(0x28, 0x5, 0x3) 43.856213737s ago: executing program 32 (id=173): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) socket(0x28, 0x5, 0x3) (async) socket(0x28, 0x5, 0x3) 8.348088424s ago: executing program 1 (id=416): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001080) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = socket(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 7.995986152s ago: executing program 0 (id=419): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x8}}, 0x20) 7.410820129s ago: executing program 1 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fchdir(r1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 7.401396777s ago: executing program 3 (id=422): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 7.310247151s ago: executing program 5 (id=423): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x80}, 0x1}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000010c0)={{0x0, 0x800080, 0x6, 0xfffffffffffffffd, 0x6, 0x4, 0x27, 0xc, 0x8, 0x3, 0xfffffff8, 0x4, 0x9, 0xc5c9, 0x3}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001200)={{r5, 0x3, 0x8000000000000000, 0x2c, 0x8, 0x80000000, 0x2, 0x4, 0x7, 0x0, 0x6, 0x7fffffff, 0x4, 0x5, 0x9d2}}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40010126) shutdown(r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x4, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r11 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r12, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3ff) 7.014116029s ago: executing program 4 (id=424): perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x1, @perf_bp={0x0, 0x1}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x2b1e}, 0x58) timer_create(0x0, 0x0, &(0x7f00000000c0)) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.958996639s ago: executing program 3 (id=425): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 6.950759857s ago: executing program 4 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fchdir(r1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 6.922664162s ago: executing program 1 (id=427): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) mknodat(r1, &(0x7f0000000240)='./file1\x00', 0x8000, 0x3) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 6.635825242s ago: executing program 5 (id=428): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.56433441s ago: executing program 4 (id=429): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") setreuid(0x0, 0xee00) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x9) 6.556938878s ago: executing program 0 (id=430): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 6.199425385s ago: executing program 0 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fchdir(r1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) 6.078213493s ago: executing program 3 (id=432): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) mknodat(r1, &(0x7f0000000240)='./file1\x00', 0x8000, 0x3) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 5.937174069s ago: executing program 1 (id=433): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 5.926677876s ago: executing program 0 (id=434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x18, 0x3, 0x3, 0x25, @loopback, @mcast1, 0x700, 0x7, 0x8, 0x19}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r5, 0x25, 0xc, @void}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r8, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, 0x20) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r9, 0x10, 0x6, 0x10001) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x1}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 5.926449847s ago: executing program 5 (id=435): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 4.403176497s ago: executing program 5 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000009000), 0x4) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401c50900000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) 4.402896647s ago: executing program 4 (id=437): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 3.958741959s ago: executing program 1 (id=438): r0 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="757466382c68696465009e2d2ba14c07726a241ce3757466382c6f76657272696465726f636b7065726d2c6d61703d6f66662c6d6170303030303030303030013030303033372c756e686964652c756e686964652c6f76657272696465726f636b7005000000000000006f66662c6d61703d6e6f726d00"/133, @ANYRES32, @ANYBLOB="d2060d5510f769588bebfb7ad0a30755959f01793e1a5d4bcfa6efe55403df51d73b494928d0ee3f91532f54843e20493c9c59c7c629e588f0e334b250f874ec42a4c2f9e3243f83b0dcef5a670a8357262f84a029f52ee1cd1df7950e34d813", @ANYRESOCT], 0x3, 0x6b1, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x80e1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)={0x179c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1770, 0x3, 0x0, 0x1, [{0x176c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x171c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x388, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x378, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_MASK={0x35c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "b3f887bdbf992b2c1d9862b6e6939191b93a928854d994cedb567fe951eebc458e32e8d0b7bdd7a6ae7be9c06fe4310bfe82771d7972a527ba6850278aa1bc930494b569c91df18ea260cf047a53fd5cacbbdca2d17a061488c70f3dc02fbc885669f6ebe6f25ee0006d2d000bdad2813373227a6dc8cb550653eb4f6546940037341d44ac097dfa39aeeb2e9b54cd16b8be1db05fe1c54b699a7c099f13156f5f99bb90ab8bd2a260e3e2140b5509c805f4a531f48e2ebeeaeb644a546680d69f2143e845597151aa03db2d97f43305c98245f56e75e3fcbb59d6ac0db23963497b94c5fe50f119"}, @NFTA_DATA_VALUE={0xa5, 0x1, "9c5b80db0c8015b9a34757bad0b9cbc9587b147ddfea69e57027e9a9dded20d821ad27cd5695e2c72a3a943b98e3465e19396ca10a0cc8dfc2f4a3ab89d2baf2d5e5ec64cdadd8df66b2a999c59e7371db858e536c1e0756e7347ee185e10fd8a0c3abcf06bd8508a4497ff27f8de50cc6578aa66cf520a9af458f480af64b81adda96ee013cd0c02f5dceae78f2c2c388fb6a211133ec446828371fc0fc32ac95"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x38, 0x1, "c2e1e1a96620769e80911c2ec1cfb5788b9c0f315ce408c73c0c7fbfb8f9a766ded8b76fe7d6f4ce867de13e8ba6916c23908747"}, @NFTA_DATA_VALUE={0x9f, 0x1, "bc208c6978bd4536970e75dd34ee40d057142926e5ba458d18e767517e9b7f4f3081a5e1d8fbb4c340af1c9c0dbec5ac62cf49720b080da055745155e200dea26eca49a0bdf4f828c4f7ec3a39b0105cb4e6f5170a9b019f8aa3ca463db0c5d7dd2fbcae7045ae1b5d1ad5002282cbcfea86437230b831518d6ab00712f334b12f6fff4cc8ba0c9179a776e22e103beb961b862ff1b0ff5fcdf588"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xe4, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xd4, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0xa0, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x30000000}]}}}, {0x11ec, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x11e0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x11dc, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xea, 0x1, "e015f894bbdab7164c40b22b042825fccf7153cc39e844026ecb01e9075720a5210b093abbf9326b9e34141b658d0f30f38f0ea5b28367d52a3dbeaed99c28bb176d181906a82ccb5e0cc09ae458d54eeadb46cc42fd0ed9c2a464672c81f72547f26806e83fb24ccc75461ac1cd5f8b0c445af3aab1979007f53fd482dc31f6e075c895ca67d4459565c72e6d970ab416ac0139d8a72344fb2ad7898dc9fd740a713ec85dd3d2e9e1f1c8525012541e284956ebf56a36cfe441896ca403e9cb2ba79cbf6b4bc9d37ce80388b38ec66ced13aa51a3fdcb594f45fa7899e0c637909ea7eab65e"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x16, 0x1, "1becd999cd867e653a498daceb2de1329fdc"}, @NFTA_DATA_VALUE={0x78, 0x1, "88bedc525577dcf73862a2e0d86f14cb3c1faffbb1b7509a94a8c5b9d384486592d7bf61a85b5c3f7863df99b0687023bcc44165c280f3d1cfd63f50c6d3211032cada4d793455c46ed92fc44221de55a5e97d529ace8c06798b970c267067836184d6844e92d80400b08835e26facef043822f4"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "4d0aafd0e1fb1861aa7d7a9f1d5f0d7cdeec4e1cb2c2b5cdd8f06907008308e7f1057ef39b0c96c8a5ce62a88cded6dcd1cc9bc2e5122f2afecdfd6dc39434c7fb"}]}]}]}]}, 0x179c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 3.924900173s ago: executing program 3 (id=439): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 3.373226955s ago: executing program 0 (id=440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fchdir(r1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3.081118664s ago: executing program 4 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fchdir(r1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3}, {0x61}, {}, {}, {0x6}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x800}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd27}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1b0}}, 0x4050) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000001340)={0x1d, r8}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000012c0)='cpuacct.stat\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000148800"], 0x0) 3.063281731s ago: executing program 1 (id=442): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 2.303895166s ago: executing program 0 (id=443): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 2.170562643s ago: executing program 3 (id=444): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) mknodat(r1, &(0x7f0000000240)='./file1\x00', 0x8000, 0x3) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 2.166580252s ago: executing program 5 (id=445): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 2.148638109s ago: executing program 5 (id=446): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 58.03127ms ago: executing program 4 (id=447): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(r0, &(0x7f0000000040)='net/psched\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000800fcfffffffcdbdf250055ff26", @ANYRES32=0x0, @ANYBLOB="8408000000010000"], 0x20}}, 0x24008840) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x1d) fcntl$setlease(r5, 0x400, 0x0) 0s ago: executing program 3 (id=448): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001080) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = socket(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) kernel console output (not intermixed with test programs): [ 20.233712][ T28] audit: type=1400 audit(1773081890.299:65): avc: denied { read open } for pid=3239 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.259142][ T28] audit: type=1400 audit(1773081890.299:66): avc: denied { getattr } for pid=3239 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 26.500175][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 26.500188][ T28] audit: type=1400 audit(1773081896.559:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.529271][ T28] audit: type=1400 audit(1773081896.589:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.530033][ T3302] cgroup: Unknown subsys name 'net' [ 26.557535][ T28] audit: type=1400 audit(1773081896.629:71): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.671703][ T3302] cgroup: Unknown subsys name 'cpuset' [ 26.677942][ T3302] cgroup: Unknown subsys name 'rlimit' [ 26.787056][ T28] audit: type=1400 audit(1773081896.849:72): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.811890][ T28] audit: type=1400 audit(1773081896.849:73): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.843259][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.851223][ T28] audit: type=1400 audit(1773081896.849:74): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.870056][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.872720][ T28] audit: type=1400 audit(1773081896.849:75): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.901511][ T28] audit: type=1400 audit(1773081896.859:76): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.928250][ T28] audit: type=1400 audit(1773081896.859:77): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.951702][ T28] audit: type=1400 audit(1773081896.879:78): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.668764][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 28.690139][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.713662][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.741804][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.784702][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 28.833931][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.841322][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.848420][ T3319] bridge_slave_0: entered allmulticast mode [ 28.854859][ T3319] bridge_slave_0: entered promiscuous mode [ 28.865145][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.872306][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.879516][ T3319] bridge_slave_1: entered allmulticast mode [ 28.885926][ T3319] bridge_slave_1: entered promiscuous mode [ 28.901065][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.908196][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.915323][ T3322] bridge_slave_0: entered allmulticast mode [ 28.921700][ T3322] bridge_slave_0: entered promiscuous mode [ 28.942144][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.949236][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.956436][ T3322] bridge_slave_1: entered allmulticast mode [ 28.962877][ T3322] bridge_slave_1: entered promiscuous mode [ 28.969173][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.976479][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.983667][ T3314] bridge_slave_0: entered allmulticast mode [ 28.990298][ T3314] bridge_slave_0: entered promiscuous mode [ 28.996788][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.003889][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.011083][ T3315] bridge_slave_0: entered allmulticast mode [ 29.017489][ T3315] bridge_slave_0: entered promiscuous mode [ 29.027301][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.041602][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.048758][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.056024][ T3314] bridge_slave_1: entered allmulticast mode [ 29.062441][ T3314] bridge_slave_1: entered promiscuous mode [ 29.068701][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.075959][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.083225][ T3315] bridge_slave_1: entered allmulticast mode [ 29.089537][ T3315] bridge_slave_1: entered promiscuous mode [ 29.099505][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.119070][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.149304][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.175680][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.182977][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.190245][ T3326] bridge_slave_0: entered allmulticast mode [ 29.196732][ T3326] bridge_slave_0: entered promiscuous mode [ 29.204265][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.214364][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.224743][ T3322] team0: Port device team_slave_0 added [ 29.231288][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.241457][ T3319] team0: Port device team_slave_0 added [ 29.247147][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.254403][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.261641][ T3326] bridge_slave_1: entered allmulticast mode [ 29.268087][ T3326] bridge_slave_1: entered promiscuous mode [ 29.275524][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.285285][ T3322] team0: Port device team_slave_1 added [ 29.299987][ T3319] team0: Port device team_slave_1 added [ 29.327051][ T3315] team0: Port device team_slave_0 added [ 29.341345][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.348342][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.374397][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.389024][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.396059][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.422139][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.433709][ T3315] team0: Port device team_slave_1 added [ 29.440444][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.450019][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.457053][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.483132][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.495125][ T3314] team0: Port device team_slave_0 added [ 29.503974][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.510938][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.536951][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.552779][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.567266][ T3314] team0: Port device team_slave_1 added [ 29.594270][ T3326] team0: Port device team_slave_0 added [ 29.604103][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.611209][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.637369][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.649370][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.656373][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.682320][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.693379][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.700302][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.726190][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.737787][ T3326] team0: Port device team_slave_1 added [ 29.761520][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.768553][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.794925][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.807789][ T3319] hsr_slave_0: entered promiscuous mode [ 29.813828][ T3319] hsr_slave_1: entered promiscuous mode [ 29.835246][ T3322] hsr_slave_0: entered promiscuous mode [ 29.841499][ T3322] hsr_slave_1: entered promiscuous mode [ 29.847323][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 29.853158][ T3322] Cannot create hsr debugfs directory [ 29.861334][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.868348][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.895016][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.915756][ T3314] hsr_slave_0: entered promiscuous mode [ 29.921673][ T3314] hsr_slave_1: entered promiscuous mode [ 29.927359][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.933100][ T3314] Cannot create hsr debugfs directory [ 29.943730][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.950673][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.976594][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.045322][ T3326] hsr_slave_0: entered promiscuous mode [ 30.051352][ T3326] hsr_slave_1: entered promiscuous mode [ 30.057223][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 30.062980][ T3326] Cannot create hsr debugfs directory [ 30.073366][ T3315] hsr_slave_0: entered promiscuous mode [ 30.079397][ T3315] hsr_slave_1: entered promiscuous mode [ 30.085471][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.091222][ T3315] Cannot create hsr debugfs directory [ 30.249719][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.258657][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.267611][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.278914][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.304501][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.313552][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.322597][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.331247][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.359260][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.376337][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.385167][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.412934][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.422111][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.430821][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.440845][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.447904][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.466290][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.493339][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.509495][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.516643][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.525479][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.534590][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.543836][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.552950][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.565093][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.572241][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.584921][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.604583][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.624546][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.631632][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.640334][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.647393][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.717448][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.726837][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.747641][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.767643][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.781909][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.792191][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.799484][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.817137][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.828947][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.836137][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.846629][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.853728][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.871538][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.881994][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.897289][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.904976][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.925835][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.936897][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.969806][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.983588][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.999889][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.019519][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.026892][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.041039][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.048107][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.107560][ T3314] veth0_vlan: entered promiscuous mode [ 31.137205][ T3314] veth1_vlan: entered promiscuous mode [ 31.153663][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.169412][ T3319] veth0_vlan: entered promiscuous mode [ 31.192275][ T3314] veth0_macvtap: entered promiscuous mode [ 31.203935][ T3314] veth1_macvtap: entered promiscuous mode [ 31.211501][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.227494][ T3319] veth1_vlan: entered promiscuous mode [ 31.245034][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.255541][ T3322] veth0_vlan: entered promiscuous mode [ 31.278733][ T3319] veth0_macvtap: entered promiscuous mode [ 31.287133][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.304106][ T3322] veth1_vlan: entered promiscuous mode [ 31.313932][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.323392][ T3319] veth1_macvtap: entered promiscuous mode [ 31.333783][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.360146][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.379367][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.388836][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.399676][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.419388][ T3322] veth0_macvtap: entered promiscuous mode [ 31.438211][ T3322] veth1_macvtap: entered promiscuous mode [ 31.447599][ T3326] veth0_vlan: entered promiscuous mode [ 31.453902][ T119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.464197][ T119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.478768][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.494105][ T3315] veth0_vlan: entered promiscuous mode [ 31.500274][ T119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.510782][ T119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527548][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 31.527564][ T28] audit: type=1400 audit(1773081901.589:98): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.560270][ T28] audit: type=1400 audit(1773081901.589:99): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.571576][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.585063][ T28] audit: type=1400 audit(1773081901.589:100): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.605709][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.625686][ T3326] veth1_vlan: entered promiscuous mode [ 31.640503][ T3315] veth1_vlan: entered promiscuous mode [ 31.655201][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.673437][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.709224][ T3326] veth0_macvtap: entered promiscuous mode [ 31.717708][ T3326] veth1_macvtap: entered promiscuous mode [ 31.736173][ T28] audit: type=1400 audit(1773081901.799:101): avc: denied { map } for pid=3481 comm="syz.1.2" path="socket:[3786]" dev="sockfs" ino=3786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 31.766934][ T3315] veth0_macvtap: entered promiscuous mode [ 31.782041][ T3487] hub 8-0:1.0: USB hub found [ 31.786834][ T3487] hub 8-0:1.0: 8 ports detected [ 31.819090][ T3315] veth1_macvtap: entered promiscuous mode [ 31.849260][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.878319][ T28] audit: type=1400 audit(1773081901.799:102): avc: denied { accept } for pid=3481 comm="syz.1.2" path="socket:[3786]" dev="sockfs" ino=3786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 31.906393][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.923422][ T28] audit: type=1400 audit(1773081901.799:103): avc: denied { write } for pid=3481 comm="syz.1.2" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.948650][ T28] audit: type=1400 audit(1773081901.879:104): avc: denied { create } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 31.970046][ T28] audit: type=1400 audit(1773081901.939:105): avc: denied { create } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.990030][ T28] audit: type=1400 audit(1773081901.939:106): avc: denied { ioctl } for pid=3485 comm="syz.0.1" path="socket:[3854]" dev="sockfs" ino=3854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.201133][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.210030][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238331][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.254912][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.263378][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.272710][ T28] audit: type=1400 audit(1773081902.339:107): avc: denied { open } for pid=3494 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.292225][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.301877][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.310728][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.331800][ T1618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.358179][ T1618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.379269][ T1618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.418975][ T1618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523062][ T3502] loop1: detected capacity change from 0 to 164 [ 32.662692][ T3502] Unable to read rock-ridge attributes [ 32.766427][ T3507] loop2: detected capacity change from 0 to 164 [ 32.793445][ T3495] loop0: detected capacity change from 0 to 4096 [ 32.802076][ T3507] Unable to read rock-ridge attributes [ 32.831811][ T3502] Unable to read rock-ridge attributes [ 32.860855][ T3507] Unable to read rock-ridge attributes [ 32.893062][ T3495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.073496][ T3512] loop3: detected capacity change from 0 to 164 [ 33.407497][ C1] hrtimer: interrupt took 47047 ns [ 33.543173][ T3523] netem: change failed [ 33.611495][ T3528] veth0_to_team: entered promiscuous mode [ 33.716376][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 33.732952][ T3527] bond1: Removing last ns target with arp_interval on [ 33.790921][ T3520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.802710][ T3520] block device autoloading is deprecated and will be removed. [ 34.056534][ T3542] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.065738][ T3542] netlink: 'syz.4.15': attribute type 5 has an invalid length. [ 34.092926][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.102646][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.115953][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.125105][ T288] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.134578][ T288] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.145309][ T288] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.154481][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 34.165086][ T288] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.173245][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.260074][ T3547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.314778][ T3551] loop4: detected capacity change from 0 to 512 [ 34.331554][ T3553] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 34.345445][ T3553] netlink: 'syz.3.16': attribute type 8 has an invalid length. [ 34.415467][ T3551] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.19: inode has both inline data and extents flags [ 34.443999][ T3551] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.444212][ T3551] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.19: couldn't read orphan inode 15 (err -117) [ 34.453415][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 34.453432][ C0] EXT4-fs (loop4): initial error at time 1773081904: ext4_orphan_get:1391: inode 15 [ 34.453477][ C0] EXT4-fs (loop4): last error at time 1773081904: ext4_orphan_get:1391: inode 15 [ 34.490689][ T3551] loop4: lost filesystem error report for type 5 error -117 [ 34.491505][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.561956][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.607546][ T3402] IPVS: starting estimator thread 0... [ 34.713674][ T3576] Zero length message leads to an empty skb [ 34.771164][ T3577] IPVS: using max 2400 ests per chain, 120000 per kthread [ 35.057716][ T3576] syz.4.22 (3576) used greatest stack depth: 10376 bytes left [ 35.136360][ T3590] loop1: detected capacity change from 0 to 512 [ 35.159607][ T3590] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.183478][ T3557] syz.2.20 (3557) used greatest stack depth: 10184 bytes left [ 35.211438][ T3586] loop4: detected capacity change from 0 to 512 [ 35.230453][ T3597] netlink: 'syz.2.27': attribute type 63 has an invalid length. [ 35.256750][ T3590] EXT4-fs (loop1): 1 orphan inode deleted [ 35.257951][ T3597] lo: entered promiscuous mode [ 35.264524][ T3600] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 35.275794][ T3597] lo: entered allmulticast mode [ 35.277601][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 35.282893][ T3586] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 35.305954][ T3586] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 35.316682][ T3586] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.23: Corrupt directory, running e2fsck is recommended [ 35.319953][ T30] loop1: lost filesystem error report for type 5 error -117 [ 35.332885][ T3590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.348772][ T3586] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 35.355343][ T3590] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.418979][ T3600] team0: Device vxcan3 is of different type [ 35.430254][ T3602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 35.432742][ T3586] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.23: corrupted in-inode xattr: e_name out of bounds [ 35.432861][ T3586] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.433864][ T3586] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.23: couldn't read orphan inode 15 (err -117) [ 35.434150][ T3586] loop4: lost filesystem error report for type 5 error -117 [ 35.440184][ T3586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.550324][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.655395][ T3603] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.662773][ T3603] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.724612][ T3603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.735508][ T3603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.758603][ T3590] syz.1.25 (3590) used greatest stack depth: 9736 bytes left [ 35.781756][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.800482][ T3605] team0: Port device gretap1 added [ 35.855649][ T3600] macvlan2: entered promiscuous mode [ 35.861508][ T3600] macvlan2: entered allmulticast mode [ 35.867148][ T3600] team0: Device macvlan2 is already an upper device of the team interface [ 35.905779][ T3623] loop0: detected capacity change from 0 to 164 [ 35.912879][ T47] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.948388][ T3623] Unable to read rock-ridge attributes [ 35.955035][ T47] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.964208][ T47] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.982841][ T3626] loop4: detected capacity change from 0 to 2048 [ 35.989717][ T47] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.003706][ T3623] Unable to read rock-ridge attributes [ 36.003750][ T3628] netlink: 100 bytes leftover after parsing attributes in process `syz.2.36'. [ 36.025465][ T3307] loop4: p1 < > p4 [ 36.033794][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated [ 36.048150][ T3626] loop4: p1 < > p4 [ 36.055662][ T3630] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 36.064931][ T3626] loop4: p4 size 8388608 extends beyond EOD, truncated [ 36.072891][ T3628] netlink: 100 bytes leftover after parsing attributes in process `syz.2.36'. [ 36.124801][ T3633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 36.214196][ T3630] macvlan2: entered promiscuous mode [ 36.226082][ T3639] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 36.243532][ T3630] macvlan2: entered allmulticast mode [ 36.264866][ T3639] team0: Device vxcan1 is of different type [ 36.702538][ T3656] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 36.830531][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 36.830546][ T28] audit: type=1400 audit(1773081906.889:209): avc: denied { bind } for pid=3659 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.886438][ T28] audit: type=1400 audit(1773081906.929:210): avc: denied { append } for pid=3659 comm="syz.0.44" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.947083][ T28] audit: type=1400 audit(1773081906.929:211): avc: denied { ioctl } for pid=3659 comm="syz.0.44" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.091702][ T28] audit: type=1400 audit(1773081907.159:212): avc: denied { create } for pid=3667 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 37.131259][ T3668] loop4: detected capacity change from 0 to 512 [ 37.161358][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.261807][ T28] audit: type=1400 audit(1773081907.329:213): avc: denied { map } for pid=3659 comm="syz.0.44" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.396731][ T28] audit: type=1400 audit(1773081907.329:214): avc: denied { execute } for pid=3659 comm="syz.0.44" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.505145][ T28] audit: type=1400 audit(1773081907.569:215): avc: denied { create } for pid=3667 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.547319][ T28] audit: type=1400 audit(1773081907.569:216): avc: denied { write } for pid=3667 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.587446][ T28] audit: type=1400 audit(1773081907.599:217): avc: denied { create } for pid=3667 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.636081][ T28] audit: type=1400 audit(1773081907.699:218): avc: denied { accept } for pid=3667 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.185351][ T3663] macvlan2: entered promiscuous mode [ 38.190802][ T3663] macvlan2: entered allmulticast mode [ 38.205619][ T3671] kthread_run failed with err -4 [ 38.227380][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.346590][ T3691] netlink: 'syz.4.51': attribute type 10 has an invalid length. [ 38.372604][ T3691] team0: Device vxcan1 is of different type [ 38.469040][ T3697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.504581][ T3697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.568082][ T3697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.598914][ T3703] FAULT_INJECTION: forcing a failure. [ 38.598914][ T3703] name failslab, interval 1, probability 0, space 0, times 1 [ 38.612578][ T3703] CPU: 0 UID: 0 PID: 3703 Comm: syz.4.55 Not tainted syzkaller #0 PREEMPT(full) [ 38.612676][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.612739][ T3703] Call Trace: [ 38.612743][ T3703] [ 38.612748][ T3703] __dump_stack+0x1d/0x30 [ 38.612807][ T3703] dump_stack_lvl+0x95/0xd0 [ 38.612819][ T3703] dump_stack+0x15/0x1b [ 38.612830][ T3703] should_fail_ex+0x263/0x280 [ 38.612893][ T3703] should_failslab+0x8c/0xb0 [ 38.612905][ T3703] kmem_cache_alloc_noprof+0x66/0x400 [ 38.612972][ T3703] ? security_file_alloc+0x32/0xf0 [ 38.612990][ T3703] security_file_alloc+0x32/0xf0 [ 38.613005][ T3703] init_file+0x5b/0x1b0 [ 38.613080][ T3703] alloc_empty_file+0x8b/0x200 [ 38.613093][ T3703] alloc_file_pseudo+0xf6/0x190 [ 38.613184][ T3703] sock_alloc_file+0x9c/0x1e0 [ 38.613195][ T3703] do_accept+0x1e3/0x390 [ 38.613257][ T3703] __sys_accept4+0xbe/0x170 [ 38.613272][ T3703] __x64_sys_accept4+0x51/0x60 [ 38.613285][ T3703] x64_sys_call+0x48d/0x3020 [ 38.613298][ T3703] do_syscall_64+0x12c/0x370 [ 38.613363][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.613376][ T3703] RIP: 0033:0x7ff308e4c799 [ 38.613389][ T3703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.613399][ T3703] RSP: 002b:00007ff307886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 38.613411][ T3703] RAX: ffffffffffffffda RBX: 00007ff3090c6090 RCX: 00007ff308e4c799 [ 38.613480][ T3703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 38.613489][ T3703] RBP: 00007ff307886090 R08: 0000000000000000 R09: 0000000000000000 [ 38.613496][ T3703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.613502][ T3703] R13: 00007ff3090c6128 R14: 00007ff3090c6090 R15: 00007ffd483bd328 [ 38.613563][ T3703] [ 38.848615][ T3697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.885229][ T2268] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.893673][ T3706] loop3: detected capacity change from 0 to 8192 [ 38.897223][ T2268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.914679][ T2268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.932845][ T2268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961316][ T3307] loop3: p1 < > p2 p4 < p5 > [ 38.966105][ T3307] loop3: partition table partially beyond EOD, truncated [ 38.979158][ T3307] loop3: p1 start 134217728 is beyond EOD, truncated [ 38.986967][ T3307] loop3: p2 size 591360 extends beyond EOD, truncated [ 38.994749][ T3307] loop3: p5 size 591360 extends beyond EOD, truncated [ 39.013157][ T3706] loop3: p1 < > p2 p4 < p5 > [ 39.024624][ T3706] loop3: partition table partially beyond EOD, truncated [ 39.033278][ T3706] loop3: p1 start 134217728 is beyond EOD, truncated [ 39.053146][ T3706] loop3: p2 size 591360 extends beyond EOD, truncated [ 39.062768][ T3706] loop3: p5 size 591360 extends beyond EOD, truncated [ 39.076431][ T3715] __nla_validate_parse: 4 callbacks suppressed [ 39.076449][ T3715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.60'. [ 39.101170][ T3715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 39.249526][ T3706] IPv6: addrconf: prefix option has invalid lifetime [ 39.893406][ T3734] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 39.954657][ T3733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 39.977313][ T3748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 39.987902][ T3750] netlink: 'syz.4.73': attribute type 14 has an invalid length. [ 40.060091][ T3734] macvlan2: entered promiscuous mode [ 40.071227][ T3734] macvlan2: entered allmulticast mode [ 40.724747][ T3769] netlink: 4348 bytes leftover after parsing attributes in process `syz.3.80'. [ 40.734238][ T3769] netlink: 4348 bytes leftover after parsing attributes in process `syz.3.80'. [ 40.823746][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.831243][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.884999][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.897943][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.951948][ T1618] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.966732][ T1618] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.973290][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 40.982500][ T1618] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.001212][ T1618] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.015421][ T3792] netlink: 160 bytes leftover after parsing attributes in process `syz.3.89'. [ 41.029311][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 41.038198][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 41.050067][ T1618] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.059157][ T1618] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.068132][ T1618] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.079962][ T3783] macvlan2: entered promiscuous mode [ 41.086116][ T3783] macvlan2: entered allmulticast mode [ 41.099389][ T1618] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.192114][ T2268] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.201849][ T2268] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.211512][ T2268] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.223378][ T2268] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 41.642723][ T3808] loop4: detected capacity change from 0 to 512 [ 41.668336][ T3810] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.753795][ T3812] loop4: detected capacity change from 0 to 256 [ 41.848224][ T3816] loop4: detected capacity change from 0 to 164 [ 41.855698][ T3816] Unable to read rock-ridge attributes [ 41.867252][ T3816] Unable to read rock-ridge attributes [ 42.707776][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 42.707806][ T28] audit: type=1326 audit(1773081912.769:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz.3.103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcda1cdc799 code=0x0 [ 42.796768][ T3823] syz.4.100 (3823) used greatest stack depth: 9608 bytes left [ 43.722356][ T3852] loop4: detected capacity change from 0 to 128 [ 44.021224][ T28] audit: type=1400 audit(1773081912.949:320): avc: denied { read } for pid=3838 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.351569][ T3850] __nla_validate_parse: 10 callbacks suppressed [ 44.351588][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 44.371192][ T28] audit: type=1400 audit(1773081913.009:321): avc: denied { write } for pid=3838 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.431256][ T28] audit: type=1400 audit(1773081913.019:322): avc: denied { write } for pid=3838 comm="syz.0.106" path="socket:[6726]" dev="sockfs" ino=6726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.574385][ T28] audit: type=1400 audit(1773081913.709:323): avc: denied { wake_alarm } for pid=3844 comm="syz.4.107" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.606769][ T3863] loop3: detected capacity change from 0 to 164 [ 44.630015][ T3863] Unable to read rock-ridge attributes [ 44.683788][ T3863] Unable to read rock-ridge attributes [ 44.905527][ T28] audit: type=1400 audit(1773081914.959:324): avc: denied { shutdown } for pid=3877 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.945521][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 44.966887][ T28] audit: type=1400 audit(1773081915.009:325): avc: denied { nlmsg_read } for pid=3881 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.000327][ T3884] veth0_to_team: entered promiscuous mode [ 45.005383][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 45.006780][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 45.015104][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 45.033313][ T3888] syz.3.123 uses obsolete (PF_INET,SOCK_PACKET) [ 45.034564][ T28] audit: type=1400 audit(1773081915.059:326): avc: denied { setopt } for pid=3887 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.068353][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 45.090484][ T28] audit: type=1400 audit(1773081915.099:327): avc: denied { listen } for pid=3887 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.092741][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.130303][ T28] audit: type=1400 audit(1773081915.099:328): avc: denied { accept } for pid=3875 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.153040][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.168917][ T3896] loop1: detected capacity change from 0 to 164 [ 45.176786][ T3896] Unable to read rock-ridge attributes [ 45.186245][ T3896] Unable to read rock-ridge attributes [ 45.243666][ T3904] loop3: detected capacity change from 0 to 512 [ 45.265316][ T3908] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 45.265316][ T3908] The task syz.4.112 (3908) triggered the difference, watch for misbehavior. [ 45.370457][ T3921] netlink: 'syz.0.132': attribute type 21 has an invalid length. [ 45.398194][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 45.427970][ T3926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.133'. [ 45.640214][ T3935] hub 8-0:1.0: USB hub found [ 45.645298][ T3935] hub 8-0:1.0: 8 ports detected [ 45.875695][ T3939] loop2: detected capacity change from 0 to 164 [ 45.887770][ T3939] Unable to read rock-ridge attributes [ 45.928772][ T3939] Unable to read rock-ridge attributes [ 46.023354][ T3941] netlink: 128 bytes leftover after parsing attributes in process `syz.2.138'. [ 46.067097][ T3941] netlink: 'syz.2.138': attribute type 5 has an invalid length. [ 46.209631][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 46.383119][ T288] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.443987][ T288] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.474177][ T3951] xt_hashlimit: size too large, truncated to 1048576 [ 46.488148][ T288] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.539015][ T288] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.588679][ T3958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=3958 comm=syz.0.146 [ 46.612238][ T3958] loop0: detected capacity change from 0 to 1024 [ 46.619080][ T3958] ======================================================= [ 46.619080][ T3958] WARNING: The mand mount option has been deprecated and [ 46.619080][ T3958] and is ignored by this kernel. Remove the mand [ 46.619080][ T3958] option from the mount to silence this warning. [ 46.619080][ T3958] ======================================================= [ 46.683093][ T3958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.696918][ T3955] loop1: detected capacity change from 0 to 8192 [ 46.751711][ T3958] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.888650][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.930593][ T3979] loop1: detected capacity change from 0 to 164 [ 46.958202][ T288] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.968786][ T288] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.981289][ T3979] Unable to read rock-ridge attributes [ 47.001883][ T3979] Unable to read rock-ridge attributes [ 47.013287][ T288] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.064908][ T288] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.025375][ T3994] loop2: detected capacity change from 0 to 1024 [ 48.055938][ T3994] EXT4-fs: inline encryption not supported [ 48.072574][ T3994] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.190622][ T3994] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.156: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.209209][ T3994] loop2: lost filesystem error report for type 5 error -117 [ 48.209435][ T3994] EXT4-fs (loop2): Remounting filesystem read-only [ 48.216857][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 48.216901][ C1] EXT4-fs (loop2): initial error at time 1773081918: ext4_free_blocks:6724 [ 48.216921][ C1] EXT4-fs (loop2): last error at time 1773081918: ext4_free_blocks:6724 [ 48.250261][ T3994] EXT4-fs (loop2): 1 orphan inode deleted [ 48.256789][ T3994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.422729][ T3994] mmap: syz.2.156 (3994) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.502857][ T288] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 48.520282][ T288] __quota_error: 2 callbacks suppressed [ 48.520297][ T288] Quota error (device loop2): write_blk: dquota write failed [ 48.571184][ T288] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries [ 48.612135][ T288] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 48.623245][ T288] Quota error (device loop2): write_blk: dquota write failed [ 48.630671][ T288] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list [ 48.640746][ T288] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.651273][ T288] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 48.679164][ T28] audit: type=1400 audit(1773081918.739:331): avc: denied { bind } for pid=4022 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.779577][ T4032] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 48.789432][ T4032] team0: Device wg1 is of different type [ 48.879853][ T28] audit: type=1400 audit(1773081918.939:332): avc: denied { create } for pid=4037 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 48.881673][ T28] audit: type=1400 audit(1773081918.939:333): avc: denied { bind } for pid=4037 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.883128][ T4019] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.946469][ T2268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.946572][ T2268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.017748][ T4040] loop4: detected capacity change from 0 to 512 [ 49.357105][ T4040] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.357478][ T4047] loop3: detected capacity change from 0 to 164 [ 49.376982][ T4040] ------------[ cut here ]------------ [ 49.382492][ T4040] EA inode 11 i_nlink=2 [ 49.382520][ T4040] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.170/4040 [ 49.397799][ T4040] Modules linked in: [ 49.401787][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.4.170 Not tainted syzkaller #0 PREEMPT(full) [ 49.411277][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.421394][ T4040] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 49.428086][ T4040] Code: b4 45 99 ff 4c 8d 2d fd bd 5d 05 49 8d 7e 40 e8 54 df b5 ff 49 8b 6e 40 4c 89 e7 e8 88 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 9f 57 dd 03 66 66 66 66 66 66 2e [ 49.448119][ T4040] RSP: 0018:ffffc9000177f778 EFLAGS: 00010246 [ 49.454249][ T4040] RAX: ffff888104ec2c38 RBX: ffff8881005eca68 RCX: ffffffff81c007f8 [ 49.462385][ T4040] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc5e0 [ 49.462515][ T4047] Unable to read rock-ridge attributes [ 49.470500][ T4040] RBP: 000000000000000b R08: 00018881005eca1b R09: 0000000000000000 [ 49.470523][ T4040] R10: 000188811ab6b008 R11: 0001c9000177f6a8 R12: ffff8881005eca18 [ 49.470537][ T4040] R13: ffffffff871dc5e0 R14: ffff8881005ec9d0 R15: 0000000000000001 [ 49.470557][ T4040] FS: 00007ff3078866c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 49.470573][ T4040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.470587][ T4040] CR2: 00007fcd9832b000 CR3: 000000011ce52000 CR4: 00000000003506f0 [ 49.523832][ T4040] Call Trace: [ 49.527100][ T4040] [ 49.530023][ T4040] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 49.536154][ T4040] ? errseq_check+0x2c/0x50 [ 49.540712][ T4040] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 49.546275][ T4040] ? ext4_truncate+0x92b/0xb00 [ 49.551214][ T4040] ext4_evict_inode+0xa1f/0xd60 [ 49.556256][ T4040] ? __pfx_ext4_evict_inode+0x10/0x10 [ 49.561752][ T4040] evict+0x2af/0x510 [ 49.566214][ T4040] ? __dquot_initialize+0x146/0x7c0 [ 49.571426][ T4040] iput+0x41a/0x580 [ 49.575437][ T4040] ext4_process_orphan+0x1a9/0x1c0 [ 49.580647][ T4040] ext4_orphan_cleanup+0x6a8/0xa00 [ 49.586002][ T4040] ext4_fill_super+0x3408/0x37c0 [ 49.591103][ T4040] ? set_blocksize+0x14c/0x270 [ 49.595935][ T4040] ? setup_bdev_super+0x30e/0x370 [ 49.600990][ T4040] ? __pfx_ext4_fill_super+0x10/0x10 [ 49.603490][ T4056] Unable to read rock-ridge attributes [ 49.607017][ T4040] get_tree_bdev_flags+0x291/0x300 [ 49.618400][ T4040] ? __pfx_ext4_fill_super+0x10/0x10 [ 49.624177][ T4040] get_tree_bdev+0x1f/0x30 [ 49.628918][ T4040] ext4_get_tree+0x1c/0x30 [ 49.633373][ T4040] vfs_get_tree+0x57/0x1d0 [ 49.637802][ T4040] do_new_mount+0x288/0x8d0 [ 49.642498][ T4040] path_mount+0x4d0/0xbc0 [ 49.646894][ T4040] __se_sys_mount+0x28c/0x2e0 [ 49.651692][ T4040] __x64_sys_mount+0x67/0x80 [ 49.656575][ T4040] x64_sys_call+0x2d61/0x3020 [ 49.661281][ T4040] do_syscall_64+0x12c/0x370 [ 49.665964][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.671925][ T4040] RIP: 0033:0x7ff308e4da0a [ 49.676334][ T4040] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.696225][ T4040] RSP: 002b:00007ff307885e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 49.704649][ T4040] RAX: ffffffffffffffda RBX: 00007ff307885ee0 RCX: 00007ff308e4da0a [ 49.712720][ T4040] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007ff307885ea0 [ 49.720710][ T4040] RBP: 00002000000009c0 R08: 00007ff307885ee0 R09: 0000000000800718 [ 49.728702][ T4040] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 49.736778][ T4040] R13: 00007ff307885ea0 R14: 000000000000048d R15: 0000200000000200 [ 49.744882][ T4040] [ 49.747916][ T4040] ---[ end trace 0000000000000000 ]--- [ 49.753603][ T4040] EXT4-fs (loop4): 1 orphan inode deleted [ 49.760235][ T4040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.779381][ T2268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.801221][ T2268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.821594][ T4051] batadv_slave_1: entered promiscuous mode [ 49.856795][ T4050] batadv_slave_1: left promiscuous mode [ 49.902882][ T2268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.903433][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.914598][ T2268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.939343][ T4067] __nla_validate_parse: 10 callbacks suppressed [ 49.939358][ T4067] netlink: 4348 bytes leftover after parsing attributes in process `syz.1.181'. [ 49.957835][ T4067] netlink: 4348 bytes leftover after parsing attributes in process `syz.1.181'. [ 50.133557][ T2268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.156873][ T2268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.386755][ T2268] bridge_slave_1: left allmulticast mode [ 50.392471][ T2268] bridge_slave_1: left promiscuous mode [ 50.398154][ T2268] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.409777][ T2268] bridge_slave_0: left allmulticast mode [ 50.415672][ T2268] bridge_slave_0: left promiscuous mode [ 50.421481][ T2268] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.430166][ T28] audit: type=1400 audit(1773081920.489:334): avc: denied { read append } for pid=4077 comm="syz.1.183" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.454021][ T4082] loop1: detected capacity change from 0 to 512 [ 50.457152][ T28] audit: type=1400 audit(1773081920.499:335): avc: denied { ioctl open } for pid=4077 comm="syz.1.183" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.461441][ T4082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.516786][ T4082] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.183: bg 0: block 4: invalid block bitmap [ 50.529516][ T4082] loop1: lost filesystem error report for type 5 error -117 [ 50.529831][ T4082] EXT4-fs (loop1): 1 truncate cleaned up [ 50.537150][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.537182][ C1] EXT4-fs (loop1): initial error at time 1773081920: ext4_validate_block_bitmap:432 [ 50.537206][ C1] EXT4-fs (loop1): last error at time 1773081920: ext4_validate_block_bitmap:432 [ 50.568955][ T4082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.593255][ T2268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.603841][ T2268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.613726][ T2268] bond0 (unregistering): Released all slaves [ 50.741668][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 50.758928][ T2268] hsr_slave_0: left promiscuous mode [ 50.764862][ T2268] hsr_slave_1: left promiscuous mode [ 50.770545][ T2268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.778658][ T2268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.863622][ T2268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.877709][ T2268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.622982][ T2268] veth1_macvtap: left promiscuous mode [ 51.634411][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.662748][ T4111] loop3: detected capacity change from 0 to 164 [ 51.680077][ T2268] veth0_macvtap: left promiscuous mode [ 51.720036][ T2268] veth1_vlan: left promiscuous mode [ 51.725681][ T2268] veth0_vlan: left promiscuous mode [ 51.751588][ T4111] Unable to read rock-ridge attributes [ 51.791430][ T4111] Unable to read rock-ridge attributes [ 51.844454][ T2268] team0 (unregistering): Port device team_slave_1 removed [ 51.931882][ T2268] team0 (unregistering): Port device team_slave_0 removed [ 52.002374][ T47] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.054021][ T4114] batadv_slave_1: entered promiscuous mode [ 52.070676][ T47] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.092998][ T47] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.219889][ T4113] batadv_slave_1: left promiscuous mode [ 52.276527][ T41] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.287095][ T4142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 52.402983][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.458246][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.498524][ T4144] loop4: detected capacity change from 0 to 4096 [ 52.529243][ T4048] bridge_slave_0: entered allmulticast mode [ 52.547456][ T4048] bridge_slave_0: entered promiscuous mode [ 52.565888][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.566433][ T4144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.587049][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.594455][ T4048] bridge_slave_1: entered allmulticast mode [ 52.601453][ T4048] bridge_slave_1: entered promiscuous mode [ 52.640716][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.657988][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.699583][ T4048] team0: Port device team_slave_0 added [ 52.715312][ T4048] team0: Port device team_slave_1 added [ 52.745154][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.753659][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.779984][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.803767][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.815139][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.866426][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.906425][ T4172] loop0: detected capacity change from 0 to 164 [ 52.987701][ T4172] Unable to read rock-ridge attributes [ 53.123794][ T4175] Unable to read rock-ridge attributes [ 53.332269][ T4048] hsr_slave_0: entered promiscuous mode [ 53.355345][ T4048] hsr_slave_1: entered promiscuous mode [ 53.370782][ T4048] debugfs: 'hsr0' already exists in 'hsr' [ 53.379029][ T4189] loop0: detected capacity change from 0 to 1024 [ 53.381757][ T4048] Cannot create hsr debugfs directory [ 53.416438][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.436730][ T4189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 53.457703][ T4189] System zones: 0-1, 3-36 [ 53.466474][ T4185] netlink: 'syz.3.205': attribute type 8 has an invalid length. [ 53.475917][ T4189] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.206: bad orphan inode 134217728 [ 53.486749][ T4189] loop0: lost filesystem error report for type 5 error -117 [ 53.487968][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.550710][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 53.550725][ T28] audit: type=1400 audit(1773081923.609:345): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.567066][ T4048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.630919][ T4048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.649345][ T4048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.663446][ T4048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.885210][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.968067][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.040819][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.048225][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.129095][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.136515][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.244214][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.280831][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.394046][ T28] audit: type=1400 audit(1773081924.459:346): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.492068][ T4220] syz.1.209 (4220) used greatest stack depth: 9544 bytes left [ 54.598840][ T4257] loop1: detected capacity change from 0 to 4096 [ 54.651592][ T4257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.714144][ T4240] loop3: detected capacity change from 0 to 1024 [ 54.745898][ T4259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 54.779791][ T4048] veth0_vlan: entered promiscuous mode [ 54.856766][ T4048] veth1_vlan: entered promiscuous mode [ 54.912676][ T4240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 54.928127][ T4240] System zones: 0-1, 3-36 [ 54.944263][ T4048] veth0_macvtap: entered promiscuous mode [ 54.952364][ T4048] veth1_macvtap: entered promiscuous mode [ 54.969540][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.977476][ T4240] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.213: bad orphan inode 134217728 [ 54.991614][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.999431][ T4240] loop3: lost filesystem error report for type 5 error -117 [ 55.006083][ T2268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.014557][ T4240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.078821][ T2268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.092780][ T28] audit: type=1400 audit(1773081925.159:347): avc: denied { connect } for pid=4239 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.110430][ T2268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.138505][ T4240] syz.3.213 (4240) used greatest stack depth: 9416 bytes left [ 55.146457][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.161970][ T2268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.204102][ T28] audit: type=1400 audit(1773081925.269:348): avc: denied { mounton } for pid=4048 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.278262][ T4271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 55.337847][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.339715][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 55.454576][ T4280] batadv_slave_1: entered promiscuous mode [ 55.468863][ T4279] batadv_slave_1: left promiscuous mode [ 55.619171][ T4291] FAULT_INJECTION: forcing a failure. [ 55.619171][ T4291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.632616][ T4291] CPU: 0 UID: 0 PID: 4291 Comm: syz.5.223 Tainted: G W syzkaller #0 PREEMPT(full) [ 55.632685][ T4291] Tainted: [W]=WARN [ 55.632734][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.632744][ T4291] Call Trace: [ 55.632749][ T4291] [ 55.632755][ T4291] __dump_stack+0x1d/0x30 [ 55.632778][ T4291] dump_stack_lvl+0x95/0xd0 [ 55.632797][ T4291] dump_stack+0x15/0x1b [ 55.632898][ T4291] should_fail_ex+0x263/0x280 [ 55.632923][ T4291] should_fail+0xb/0x20 [ 55.632944][ T4291] should_fail_usercopy+0x1a/0x20 [ 55.633031][ T4291] _copy_from_user+0x1c/0xb0 [ 55.633118][ T4291] ___sys_sendmsg+0xc1/0x1e0 [ 55.633181][ T4291] __x64_sys_sendmsg+0xd4/0x160 [ 55.633268][ T4291] x64_sys_call+0x194c/0x3020 [ 55.633317][ T4291] do_syscall_64+0x12c/0x370 [ 55.633355][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.633372][ T4291] RIP: 0033:0x7ff81accc799 [ 55.633388][ T4291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.633405][ T4291] RSP: 002b:00007ff819727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.633457][ T4291] RAX: ffffffffffffffda RBX: 00007ff81af45fa0 RCX: 00007ff81accc799 [ 55.633469][ T4291] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 000000000000000a [ 55.633479][ T4291] RBP: 00007ff819727090 R08: 0000000000000000 R09: 0000000000000000 [ 55.633489][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.633502][ T4291] R13: 00007ff81af46038 R14: 00007ff81af45fa0 R15: 00007ffe4089ce28 [ 55.633569][ T4291] [ 55.889471][ T4301] batadv_slave_1: entered promiscuous mode [ 55.896156][ T4300] batadv_slave_1: left promiscuous mode [ 55.916372][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 55.927210][ T28] audit: type=1400 audit(1773081925.979:349): avc: denied { create } for pid=4302 comm="syz.5.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.949049][ T4303] loop5: detected capacity change from 0 to 512 [ 55.961642][ T4303] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.998061][ T4303] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.227: Invalid block bitmap block 0 in block_group 0 [ 56.077187][ T4311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 56.115132][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.115355][ T4303] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 56.122705][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 56.122735][ C0] EXT4-fs (loop5): initial error at time 1773081926: ext4_read_block_bitmap_nowait:483 [ 56.122762][ C0] EXT4-fs (loop5): last error at time 1773081926: ext4_read_block_bitmap_nowait:483 [ 56.187261][ T4313] hub 8-0:1.0: USB hub found [ 56.192393][ T4313] hub 8-0:1.0: 8 ports detected [ 56.211251][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.219863][ T4303] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.227: attempt to clear invalid blocks 983261 len 1 [ 56.243968][ T4303] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.244169][ T4303] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.227: Invalid inode table block 0 in block_group 0 [ 56.266315][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.274144][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 56.279274][ T4303] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 56.300524][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.300709][ T4303] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 56.316892][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.318439][ T4303] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.227: Invalid inode table block 0 in block_group 0 [ 56.338655][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.339016][ T4303] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 56.356160][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.356352][ T4303] EXT4-fs error (device loop5): ext4_truncate:4587: inode #11: comm syz.5.227: mark_inode_dirty error [ 56.376272][ T4303] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.376493][ T4303] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 56.394864][ T4303] loop5: lost filesystem error report for type 5 error -117 [ 56.395084][ T4303] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.227: Invalid inode table block 0 in block_group 0 [ 56.415539][ T4303] EXT4-fs (loop5): 1 truncate cleaned up [ 56.421819][ T4303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.475926][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 56.650832][ T4332] netlink: 128 bytes leftover after parsing attributes in process `syz.3.239'. [ 56.670715][ T28] audit: type=1400 audit(1773081926.729:350): avc: denied { getopt } for pid=4326 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.702960][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 56.716593][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 56.741334][ T28] audit: type=1400 audit(1773081926.729:351): avc: denied { read } for pid=4326 comm="syz.0.238" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.776479][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 56.788344][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 57.352396][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.507366][ T4348] hub 8-0:1.0: USB hub found [ 57.512428][ T4348] hub 8-0:1.0: 8 ports detected [ 57.622849][ T28] audit: type=1400 audit(1773081927.689:352): avc: denied { listen } for pid=4349 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.701595][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.090361][ T4357] hub 8-0:1.0: USB hub found [ 58.095197][ T4357] hub 8-0:1.0: 8 ports detected [ 58.119062][ T28] audit: type=1400 audit(1773081927.759:353): avc: denied { read write } for pid=4349 comm="syz.1.244" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.203207][ T28] audit: type=1400 audit(1773081927.759:354): avc: denied { open } for pid=4349 comm="syz.1.244" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.370882][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.439777][ T4374] batadv_slave_1: entered promiscuous mode [ 58.468609][ T4373] batadv_slave_1: left promiscuous mode [ 58.488895][ T4376] loop4: detected capacity change from 0 to 2048 [ 58.557231][ T3307] loop4: p1 < > p4 [ 58.563499][ T3307] loop4: p4 size 8388608 extends beyond EOD, truncated [ 58.581319][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 58.581427][ T28] audit: type=1400 audit(1773081928.639:373): avc: denied { connect } for pid=4349 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.611123][ T4376] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 58.638200][ T28] audit: type=1326 audit(1773081928.699:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4385 comm="syz.0.255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff70d0bc799 code=0x0 [ 58.656445][ T4381] loop5: detected capacity change from 0 to 4096 [ 58.671309][ T3001] loop4: p1 < > p4 [ 58.674898][ T4384] bridge_slave_0: left allmulticast mode [ 58.676097][ T3001] loop4: p4 size 8388608 extends beyond EOD, truncated [ 58.686286][ T4384] bridge_slave_0: left promiscuous mode [ 58.705263][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.722054][ T4384] bridge_slave_1: left allmulticast mode [ 58.727888][ T4384] bridge_slave_1: left promiscuous mode [ 58.739460][ T4381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.742462][ T4383] 9pnet_fd: p9_fd_create_unix (4383): problem connecting socket: ./file0: -2 [ 58.756076][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.777457][ T4384] bond0: (slave bond_slave_0): Releasing backup interface [ 58.787064][ T28] audit: type=1400 audit(1773081928.849:375): avc: denied { add_name } for pid=4380 comm="syz.5.253" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.821833][ T4384] bond0: (slave bond_slave_1): Releasing backup interface [ 58.845002][ T4384] team0: Port device team_slave_0 removed [ 58.862243][ T4384] team0: Port device team_slave_1 removed [ 58.868203][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.967355][ T4398] hub 8-0:1.0: USB hub found [ 58.972422][ T4398] hub 8-0:1.0: 8 ports detected [ 58.989084][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.231739][ T4384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.378699][ T4387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.560655][ T4405] hub 8-0:1.0: USB hub found [ 59.565620][ T4405] hub 8-0:1.0: 8 ports detected [ 59.655674][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.903808][ T4415] batadv_slave_1: entered promiscuous mode [ 59.928474][ T4414] batadv_slave_1: left promiscuous mode [ 60.038204][ T4422] batadv_slave_1: entered promiscuous mode [ 60.045064][ T4421] batadv_slave_1: left promiscuous mode [ 60.045182][ T4418] loop0: detected capacity change from 0 to 512 [ 60.086382][ T4418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.098333][ T4418] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.265: Invalid block bitmap block 0 in block_group 0 [ 60.112043][ T4418] fserror_report: 1 callbacks suppressed [ 60.112058][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.119838][ T4418] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 60.127196][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 60.127212][ C1] EXT4-fs (loop0): initial error at time 1773081930: ext4_read_block_bitmap_nowait:483 [ 60.127231][ C1] EXT4-fs (loop0): last error at time 1773081930: ext4_read_block_bitmap_nowait:483 [ 60.162262][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.162472][ T4418] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.265: attempt to clear invalid blocks 983261 len 1 [ 60.183383][ T4418] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.186230][ T28] audit: type=1326 audit(1773081930.249:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.1.269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f928b7cc799 code=0x0 [ 60.191124][ T4418] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.265: Invalid inode table block 0 in block_group 0 [ 60.231554][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.231933][ T4418] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 60.249008][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.250735][ T4418] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 60.273473][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.291496][ T4437] batadv_slave_1: entered promiscuous mode [ 60.312228][ T4436] batadv_slave_1: left promiscuous mode [ 60.335110][ T4418] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.265: Invalid inode table block 0 in block_group 0 [ 60.362311][ T4432] __nla_validate_parse: 10 callbacks suppressed [ 60.362327][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 60.484022][ T4443] hub 8-0:1.0: USB hub found [ 60.488794][ T4443] hub 8-0:1.0: 8 ports detected [ 60.577295][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.577656][ T4418] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 60.640050][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.640674][ T4418] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.265: mark_inode_dirty error [ 60.709925][ T4418] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.711110][ T4418] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 60.773483][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.774221][ T4418] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.265: Invalid inode table block 0 in block_group 0 [ 60.837569][ T4418] loop0: lost filesystem error report for type 5 error -117 [ 60.847229][ T4418] EXT4-fs (loop0): 1 truncate cleaned up [ 60.860896][ T4418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.877149][ T28] audit: type=1400 audit(1773081930.949:377): avc: denied { setattr } for pid=4417 comm="syz.0.265" path="/56/bus" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.910030][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.944214][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.954388][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.969545][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 61.154706][ T4460] loop1: detected capacity change from 0 to 164 [ 61.213915][ T4460] rock: directory entry would overflow storage [ 61.220957][ T4460] rock: sig=0x5252, size=5, remaining=3 [ 61.222944][ T28] audit: type=1400 audit(1773081931.289:378): avc: denied { setopt } for pid=4463 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.247944][ T28] audit: type=1400 audit(1773081931.289:379): avc: denied { write } for pid=4463 comm="syz.4.281" path="socket:[9618]" dev="sockfs" ino=9618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.278285][ T4460] syz.1.279 (4460) used greatest stack depth: 9352 bytes left [ 62.851617][ T4474] hub 8-0:1.0: USB hub found [ 62.856849][ T4474] hub 8-0:1.0: 8 ports detected [ 62.877315][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 62.880721][ T28] audit: type=1326 audit(1773081932.939:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4478 comm="syz.1.285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f928b7cc799 code=0x0 [ 62.898211][ T4479] team0: entered promiscuous mode [ 62.918708][ T4479] team_slave_0: entered promiscuous mode [ 62.925286][ T4479] team_slave_1: entered promiscuous mode [ 62.931708][ T4479] lo: entered promiscuous mode [ 62.961353][ T4483] lo: left promiscuous mode [ 62.966756][ T28] audit: type=1400 audit(1773081933.029:381): avc: denied { read } for pid=4484 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.013734][ T4483] team0: left promiscuous mode [ 63.030309][ T4483] team_slave_0: left promiscuous mode [ 63.030770][ T4491] netlink: 136 bytes leftover after parsing attributes in process `syz.5.288'. [ 63.039560][ T4483] team_slave_1: left promiscuous mode [ 63.054650][ T4489] vlan2: entered promiscuous mode [ 63.060259][ T4489] bond0: entered promiscuous mode [ 63.078344][ T4485] loop0: detected capacity change from 0 to 8192 [ 63.183251][ T28] audit: type=1400 audit(1773081933.249:382): avc: denied { ioctl } for pid=4496 comm="syz.4.292" path="socket:[10645]" dev="sockfs" ino=10645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.194026][ T4502] loop5: detected capacity change from 0 to 4096 [ 63.314118][ T4506] hub 8-0:1.0: USB hub found [ 63.319049][ T4506] hub 8-0:1.0: 8 ports detected [ 63.379132][ T4502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.851604][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 63.892670][ T4517] bond2: Removing last ns target with arp_interval on [ 65.877788][ T4523] hub 8-0:1.0: USB hub found [ 65.882513][ T4523] hub 8-0:1.0: 8 ports detected [ 65.903623][ T4525] hub 8-0:1.0: USB hub found [ 65.908328][ T4525] hub 8-0:1.0: 8 ports detected [ 66.033564][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 66.171549][ T4537] hub 8-0:1.0: USB hub found [ 66.176409][ T4537] hub 8-0:1.0: 8 ports detected [ 66.336933][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 66.336946][ T28] audit: type=1326 audit(1773081936.399:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.431572][ T4527] bond2: Removing last ns target with arp_interval on [ 66.442969][ T28] audit: type=1326 audit(1773081936.429:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.507197][ T28] audit: type=1326 audit(1773081936.429:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.531845][ T28] audit: type=1326 audit(1773081936.429:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.559732][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.568959][ T28] audit: type=1326 audit(1773081936.449:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.604685][ T28] audit: type=1326 audit(1773081936.449:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.628432][ T28] audit: type=1326 audit(1773081936.449:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.652805][ T28] audit: type=1326 audit(1773081936.449:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.676438][ T28] audit: type=1326 audit(1773081936.449:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.700845][ T28] audit: type=1326 audit(1773081936.449:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4535 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70d0bc799 code=0x7ffc0000 [ 66.758815][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.306'. [ 66.767837][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 66.781499][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.781552][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.306'. [ 66.781568][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 66.808707][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.817930][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.827325][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.872360][ T4563] loop5: detected capacity change from 0 to 512 [ 66.937099][ T4563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.011171][ T4563] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.030138][ T4578] loop0: detected capacity change from 0 to 512 [ 67.047216][ T4574] loop3: detected capacity change from 0 to 4096 [ 67.089266][ T4578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.107662][ T4574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.139668][ T4578] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.311: invalid indirect mapped block 4294967295 (level 1) [ 67.184429][ T4578] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.187112][ T4578] EXT4-fs (loop0): Remounting filesystem read-only [ 67.196350][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 67.196368][ C0] EXT4-fs (loop0): initial error at time 1773081937: ext4_free_branches:1023: inode 11 [ 67.196392][ C0] EXT4-fs (loop0): last error at time 1773081937: ext4_free_branches:1023: inode 11 [ 67.228801][ T4578] EXT4-fs (loop0): 2 truncates cleaned up [ 67.232704][ T4593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.312'. [ 67.235215][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.326047][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.346487][ T4600] loop4: detected capacity change from 0 to 4096 [ 67.372155][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 67.439032][ T4609] loop5: detected capacity change from 0 to 164 [ 67.469550][ T4600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.497469][ T4603] bond3: Removing last ns target with arp_interval on [ 67.522694][ T4609] Unable to read rock-ridge attributes [ 67.567807][ T4609] Unable to read rock-ridge attributes [ 67.579599][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.601401][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.670448][ T4625] netlink: 'syz.4.317': attribute type 4 has an invalid length. [ 67.768079][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.804048][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 67.821487][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 67.869481][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 67.881456][ T4644] loop5: detected capacity change from 0 to 164 [ 67.901111][ T4644] Unable to read rock-ridge attributes [ 67.932826][ T4644] Unable to read rock-ridge attributes [ 68.066987][ T4669] loop5: detected capacity change from 0 to 164 [ 68.092132][ T4669] Unable to read rock-ridge attributes [ 68.112685][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.119912][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.134370][ T4669] Unable to read rock-ridge attributes [ 68.226967][ T4677] loop5: detected capacity change from 0 to 512 [ 68.242500][ T4677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.295484][ T4677] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.327: invalid indirect mapped block 4294967295 (level 1) [ 68.358493][ T4656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.366578][ T4677] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.366758][ T4677] EXT4-fs (loop5): Remounting filesystem read-only [ 68.375912][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 68.375933][ C1] EXT4-fs (loop5): initial error at time 1773081938: ext4_free_branches:1023: inode 11 [ 68.375962][ C1] EXT4-fs (loop5): last error at time 1773081938: ext4_free_branches:1023: inode 11 [ 68.417438][ T4677] EXT4-fs (loop5): 2 truncates cleaned up [ 68.424057][ T4677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.429771][ T4656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.459337][ T4691] loop0: detected capacity change from 0 to 4096 [ 68.485582][ T4691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.535216][ T4695] loop1: detected capacity change from 0 to 164 [ 68.551227][ T4695] Unable to read rock-ridge attributes [ 68.566472][ T288] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.585137][ T288] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.594388][ T288] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.603721][ T4695] Unable to read rock-ridge attributes [ 68.631061][ T288] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.633781][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.648989][ T30] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.666251][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.687282][ T4700] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 68.708648][ T30] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.721543][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.725171][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.904404][ T4710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.941060][ T4715] hub 8-0:1.0: USB hub found [ 68.945993][ T4715] hub 8-0:1.0: 8 ports detected [ 69.386293][ T4719] ext4: Unknown parameter 'fsmagic' [ 69.459913][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.607094][ T4729] hub 8-0:1.0: USB hub found [ 69.611959][ T4729] hub 8-0:1.0: 8 ports detected [ 70.220855][ T4735] hub 8-0:1.0: USB hub found [ 70.226002][ T4735] hub 8-0:1.0: 8 ports detected [ 70.601536][ T4743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.672850][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.806607][ T4757] FAULT_INJECTION: forcing a failure. [ 70.806607][ T4757] name failslab, interval 1, probability 0, space 0, times 0 [ 70.856990][ T4757] CPU: 1 UID: 0 PID: 4757 Comm: syz.0.350 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.857022][ T4757] Tainted: [W]=WARN [ 70.857030][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.857042][ T4757] Call Trace: [ 70.857048][ T4757] [ 70.857056][ T4757] __dump_stack+0x1d/0x30 [ 70.857099][ T4757] dump_stack_lvl+0x95/0xd0 [ 70.857119][ T4757] dump_stack+0x15/0x1b [ 70.857136][ T4757] should_fail_ex+0x263/0x280 [ 70.857212][ T4757] should_failslab+0x8c/0xb0 [ 70.857234][ T4757] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 70.857399][ T4757] ? __d_alloc+0x37/0x340 [ 70.857426][ T4757] __d_alloc+0x37/0x340 [ 70.857447][ T4757] d_alloc_parallel+0x54/0xce0 [ 70.857497][ T4757] ? lockref_get_not_dead+0x120/0x1c0 [ 70.857525][ T4757] ? __rcu_read_unlock+0x4e/0x70 [ 70.857543][ T4757] ? try_to_unlazy+0x39d/0x580 [ 70.857565][ T4757] __lookup_slow+0x96/0x260 [ 70.857630][ T4757] lookup_slow+0x3c/0x60 [ 70.857666][ T4757] path_lookupat+0x2f7/0x500 [ 70.857692][ T4757] filename_lookup+0x190/0x390 [ 70.857724][ T4757] ? __pfx_resume_store+0x10/0x10 [ 70.857746][ T4757] kern_path+0x3b/0xf0 [ 70.857766][ T4757] lookup_bdev+0x66/0x150 [ 70.857826][ T4757] resume_store+0x10b/0x3d0 [ 70.857849][ T4757] ? _copy_from_iter+0x13e/0xea0 [ 70.857869][ T4757] ? should_fail_ex+0xd9/0x280 [ 70.857887][ T4757] ? __pfx_resume_store+0x10/0x10 [ 70.857905][ T4757] kobj_attr_store+0x4a/0x70 [ 70.857954][ T4757] ? __pfx_kobj_attr_store+0x10/0x10 [ 70.857977][ T4757] sysfs_kf_write+0xfe/0x120 [ 70.857997][ T4757] ? __pfx_sysfs_kf_write+0x10/0x10 [ 70.858018][ T4757] kernfs_fop_write_iter+0x1eb/0x300 [ 70.858139][ T4757] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 70.858167][ T4757] vfs_write+0x5a6/0x9f0 [ 70.858198][ T4757] ksys_write+0xdc/0x1a0 [ 70.858216][ T4757] __x64_sys_write+0x40/0x50 [ 70.858286][ T4757] x64_sys_call+0x27e1/0x3020 [ 70.858312][ T4757] do_syscall_64+0x12c/0x370 [ 70.858333][ T4757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.858355][ T4757] RIP: 0033:0x7ff70d0bc799 [ 70.858370][ T4757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.858495][ T4757] RSP: 002b:00007ff70bb0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.858516][ T4757] RAX: ffffffffffffffda RBX: 00007ff70d335fa0 RCX: 00007ff70d0bc799 [ 70.858530][ T4757] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000009 [ 70.858543][ T4757] RBP: 00007ff70bb0f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.858562][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.858574][ T4757] R13: 00007ff70d336038 R14: 00007ff70d335fa0 R15: 00007ffd98db9468 [ 70.858590][ T4757] [ 71.151969][ T4757] __nla_validate_parse: 8 callbacks suppressed [ 71.151985][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 71.357510][ T4773] hub 8-0:1.0: USB hub found [ 71.363689][ T4773] hub 8-0:1.0: 8 ports detected [ 71.478503][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 71.478545][ T28] audit: type=1326 audit(1773081941.539:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.1.352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f928b7cc799 code=0x0 [ 72.617465][ T28] audit: type=1400 audit(1773081942.669:544): avc: denied { ioctl } for pid=4776 comm="syz.0.354" path="socket:[10038]" dev="sockfs" ino=10038 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.145837][ T28] audit: type=1400 audit(1773081942.679:545): avc: denied { read write } for pid=4776 comm="syz.0.354" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.169961][ T28] audit: type=1400 audit(1773081942.679:546): avc: denied { open } for pid=4776 comm="syz.0.354" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.194538][ T28] audit: type=1400 audit(1773081942.809:547): avc: denied { ioctl } for pid=4776 comm="syz.0.354" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.286667][ T4817] hub 8-0:1.0: USB hub found [ 74.291474][ T4817] hub 8-0:1.0: 8 ports detected [ 74.974486][ T4820] hub 8-0:1.0: USB hub found [ 74.979369][ T4820] hub 8-0:1.0: 8 ports detected [ 75.474863][ T28] audit: type=1326 audit(1773081945.539:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.5.369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff81accc799 code=0x0 [ 75.716244][ T4837] hub 8-0:1.0: USB hub found [ 75.721235][ T4837] hub 8-0:1.0: 8 ports detected [ 77.140234][ T4852] set_capacity_and_notify: 4 callbacks suppressed [ 77.140249][ T4852] loop5: detected capacity change from 0 to 512 [ 77.169278][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 77.178199][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 77.178327][ T4852] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.197543][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 77.197730][ T4812] syz.1.366 (4812) used greatest stack depth: 8776 bytes left [ 77.240751][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 77.257702][ T4861] loop1: detected capacity change from 0 to 164 [ 77.272259][ T4861] Unable to read rock-ridge attributes [ 77.291205][ T4858] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 77.302092][ T4858] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 77.309955][ T4852] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.379: Invalid block bitmap block 0 in block_group 0 [ 77.324017][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.331195][ T4852] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 77.347421][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 77.347469][ C1] EXT4-fs (loop5): initial error at time 1773081947: ext4_read_block_bitmap_nowait:483 [ 77.347496][ C1] EXT4-fs (loop5): last error at time 1773081947: ext4_read_block_bitmap_nowait:483 [ 77.373786][ T4861] Unable to read rock-ridge attributes [ 77.381237][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 77.404338][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.404519][ T4852] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.379: attempt to clear invalid blocks 983261 len 1 [ 77.426095][ T4864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.448016][ T4852] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.453137][ T4858] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 77.465757][ T4852] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.379: Invalid inode table block 0 in block_group 0 [ 77.478261][ T4869] loop3: detected capacity change from 0 to 4096 [ 77.495939][ T4858] macvlan2: entered promiscuous mode [ 77.502021][ T4858] macvlan2: entered allmulticast mode [ 77.509526][ T4858] bond1: entered promiscuous mode [ 77.515224][ T4858] gretap1: entered promiscuous mode [ 77.521504][ T4858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.528556][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.528860][ T4852] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 77.558947][ T4871] hub 8-0:1.0: USB hub found [ 77.563873][ T4871] hub 8-0:1.0: 8 ports detected [ 77.585961][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.586428][ T4852] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 77.610088][ T4858] bond1: left promiscuous mode [ 77.617207][ T4858] gretap1: left promiscuous mode [ 77.645028][ T4869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.718690][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.719342][ T4852] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.379: Invalid inode table block 0 in block_group 0 [ 77.761326][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.761716][ T4852] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 77.827117][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.827695][ T4852] EXT4-fs error (device loop5): ext4_truncate:4587: inode #11: comm syz.5.379: mark_inode_dirty error [ 77.886678][ T4852] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.887872][ T4852] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 77.914809][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.940146][ T4852] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.379: Invalid inode table block 0 in block_group 0 [ 77.960083][ T4852] loop5: lost filesystem error report for type 5 error -117 [ 77.960388][ T4852] EXT4-fs (loop5): 1 truncate cleaned up [ 77.973865][ T4852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.005939][ T4852] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.379: Invalid inode table block 0 in block_group 0 [ 78.019121][ T4852] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 78.041418][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.079865][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.167058][ T4879] hub 8-0:1.0: USB hub found [ 78.171966][ T4879] hub 8-0:1.0: 8 ports detected [ 78.482463][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 78.793476][ T4887] hub 8-0:1.0: USB hub found [ 78.798229][ T4887] hub 8-0:1.0: 8 ports detected [ 78.878624][ T4885] loop3: detected capacity change from 0 to 4096 [ 79.067164][ T4885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.102318][ T4881] bond1: Removing last ns target with arp_interval on [ 79.426420][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.545740][ T28] audit: type=1326 audit(1773081949.609:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.0.391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff70d0bc799 code=0x0 [ 79.810047][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 80.285556][ T4916] loop1: detected capacity change from 0 to 2048 [ 80.361955][ T3307] loop1: p1 < > p4 [ 80.384329][ T3307] loop1: p4 size 8388608 extends beyond EOD, truncated [ 80.416508][ T4916] loop1: p1 < > p4 [ 80.428391][ T4916] loop1: p4 size 8388608 extends beyond EOD, truncated [ 81.083689][ T4923] loop0: detected capacity change from 0 to 512 [ 81.120083][ T4923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.141254][ T4923] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.397: Invalid block bitmap block 0 in block_group 0 [ 81.250530][ T4928] hub 8-0:1.0: USB hub found [ 81.255731][ T4928] hub 8-0:1.0: 8 ports detected [ 81.330646][ T4923] loop0: lost filesystem error report for type 5 error -117 [ 81.331014][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 81.344765][ C1] EXT4-fs (loop0): initial error at time 1773081951: ext4_read_block_bitmap_nowait:483 [ 81.354410][ C1] EXT4-fs (loop0): last error at time 1773081951: ext4_read_block_bitmap_nowait:483 [ 81.365168][ T4923] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 81.391751][ T4923] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.397: attempt to clear invalid blocks 983261 len 1 [ 81.512214][ T4923] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.513155][ T4923] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.397: Invalid inode table block 0 in block_group 0 [ 81.742072][ T4923] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 81.783027][ T4923] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 81.825602][ T4923] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.397: Invalid inode table block 0 in block_group 0 [ 81.868269][ T4936] loop5: detected capacity change from 0 to 512 [ 81.893937][ T4936] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.988712][ T4923] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 82.079399][ T4936] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.401: Invalid block bitmap block 0 in block_group 0 [ 82.116454][ T4923] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.397: mark_inode_dirty error [ 82.210503][ T4923] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.210838][ T4923] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 82.241024][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 82.248126][ C0] EXT4-fs (loop5): initial error at time 1773081952: ext4_read_block_bitmap_nowait:483 [ 82.258005][ C0] EXT4-fs (loop5): last error at time 1773081952: ext4_read_block_bitmap_nowait:483 [ 82.266537][ T4936] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 82.270808][ T4923] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.397: Invalid inode table block 0 in block_group 0 [ 82.292350][ T4936] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.401: attempt to clear invalid blocks 983261 len 1 [ 82.308072][ T4936] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.308397][ T4936] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.401: Invalid inode table block 0 in block_group 0 [ 82.333596][ T4923] EXT4-fs (loop0): 1 truncate cleaned up [ 82.341087][ T4936] fserror_report: 10 callbacks suppressed [ 82.341103][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.349247][ T4923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.392041][ T4936] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 82.401814][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.401981][ T4936] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 82.420321][ T4923] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.397: Invalid inode table block 0 in block_group 0 [ 82.469566][ T4923] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 82.482740][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.487316][ T4936] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.401: Invalid inode table block 0 in block_group 0 [ 82.512642][ T4944] loop3: detected capacity change from 0 to 4096 [ 82.550857][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.551194][ T4936] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 82.580863][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.601071][ T4944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.614530][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.614728][ T4936] EXT4-fs error (device loop5): ext4_truncate:4587: inode #11: comm syz.5.401: mark_inode_dirty error [ 82.671141][ T4936] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 82.671314][ T4936] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 82.804782][ T4953] hub 8-0:1.0: USB hub found [ 82.809912][ T4953] hub 8-0:1.0: 8 ports detected [ 82.842671][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.843097][ T4936] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.401: Invalid inode table block 0 in block_group 0 [ 82.913499][ T4936] loop5: lost filesystem error report for type 5 error -117 [ 82.913977][ T4936] EXT4-fs (loop5): 1 truncate cleaned up [ 82.957503][ T4936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.035941][ T4936] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.401: Invalid inode table block 0 in block_group 0 [ 83.077616][ T4936] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 83.226963][ T4048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.263201][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.687250][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 83.727225][ T4969] hub 8-0:1.0: USB hub found [ 83.731964][ T4969] hub 8-0:1.0: 8 ports detected [ 83.782673][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 83.818451][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 83.830854][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 84.797577][ T4974] hub 8-0:1.0: USB hub found [ 84.802379][ T4974] hub 8-0:1.0: 8 ports detected [ 84.809849][ T4978] loop0: detected capacity change from 0 to 512 [ 84.832552][ T4978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.872501][ T4978] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.415: Invalid block bitmap block 0 in block_group 0 [ 84.891092][ T4978] loop0: lost filesystem error report for type 5 error -117 [ 84.895085][ T4978] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 84.902487][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 84.902509][ C1] EXT4-fs (loop0): initial error at time 1773081954: ext4_read_block_bitmap_nowait:483 [ 84.902535][ C1] EXT4-fs (loop0): last error at time 1773081954: ext4_read_block_bitmap_nowait:483 [ 84.937466][ T4978] loop0: lost filesystem error report for type 5 error -117 [ 84.937761][ T4978] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.415: attempt to clear invalid blocks 983261 len 1 [ 84.961894][ T4978] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.962095][ T4978] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.415: Invalid inode table block 0 in block_group 0 [ 84.984224][ T4978] loop0: lost filesystem error report for type 5 error -117 [ 84.984405][ T4978] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 85.002514][ T4978] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 85.011305][ T4978] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.415: Invalid inode table block 0 in block_group 0 [ 85.038633][ T4978] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 85.048526][ T4978] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.415: mark_inode_dirty error [ 85.058529][ T4987] loop3: detected capacity change from 0 to 164 [ 85.059676][ T4978] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.066229][ T4978] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 85.091853][ T4978] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.415: Invalid inode table block 0 in block_group 0 [ 85.104947][ T4987] Unable to read rock-ridge attributes [ 85.123364][ T4978] EXT4-fs (loop0): 1 truncate cleaned up [ 85.130248][ T4978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.179788][ T4989] hub 8-0:1.0: USB hub found [ 85.184822][ T4989] hub 8-0:1.0: 8 ports detected [ 85.220818][ T4991] Unable to read rock-ridge attributes [ 85.472809][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.048468][ T5004] loop5: detected capacity change from 0 to 2048 [ 86.222772][ T3307] loop5: p1 < > p4 [ 86.227578][ T3307] loop5: p4 size 8388608 extends beyond EOD, truncated [ 86.237439][ T5004] loop5: p1 < > p4 [ 86.241974][ T5004] loop5: p4 size 8388608 extends beyond EOD, truncated [ 86.250867][ T28] audit: type=1400 audit(1773081956.309:550): avc: denied { create } for pid=5003 comm="syz.5.423" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.436834][ T5018] hub 8-0:1.0: USB hub found [ 86.441665][ T5018] hub 8-0:1.0: 8 ports detected [ 86.462187][ T5016] loop1: detected capacity change from 0 to 4096 [ 86.557074][ T28] audit: type=1400 audit(1773081956.619:551): avc: denied { unlink } for pid=4048 comm="syz-executor" name="file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.636686][ T5016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.788994][ T5025] loop4: detected capacity change from 0 to 512 [ 86.861073][ T5025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.902438][ T5025] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.429: Invalid block bitmap block 0 in block_group 0 [ 86.935785][ T5025] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 86.944895][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 86.944934][ C0] EXT4-fs (loop4): initial error at time 1773081956: ext4_read_block_bitmap_nowait:483 [ 86.944953][ C0] EXT4-fs (loop4): last error at time 1773081956: ext4_read_block_bitmap_nowait:483 [ 86.987262][ T5025] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.429: attempt to clear invalid blocks 983261 len 1 [ 87.001019][ T5025] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.001263][ T5025] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.429: Invalid inode table block 0 in block_group 0 [ 87.032343][ T5025] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 87.119141][ T5025] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 87.167455][ T5025] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.429: Invalid inode table block 0 in block_group 0 [ 87.189674][ T5033] loop3: detected capacity change from 0 to 4096 [ 87.190244][ T5025] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 87.206278][ T5025] EXT4-fs error (device loop4): ext4_truncate:4587: inode #11: comm syz.4.429: mark_inode_dirty error [ 87.217327][ T5025] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.218491][ T5033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.232102][ T5025] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 87.267397][ T5025] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.429: Invalid inode table block 0 in block_group 0 [ 87.284484][ T5025] EXT4-fs (loop4): 1 truncate cleaned up [ 87.290782][ T5025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.308560][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.412806][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.612942][ T28] audit: type=1326 audit(1773081957.679:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff70d0bc799 code=0x0 [ 87.670772][ T5047] hub 8-0:1.0: USB hub found [ 87.675882][ T5047] hub 8-0:1.0: 8 ports detected [ 89.295149][ T5052] loop1: detected capacity change from 0 to 164 [ 89.866407][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.893625][ T5052] Unable to read rock-ridge attributes [ 90.150167][ T5052] Unable to read rock-ridge attributes [ 90.344479][ T5067] hub 8-0:1.0: USB hub found [ 90.349332][ T5067] hub 8-0:1.0: 8 ports detected [ 92.029282][ T5075] loop3: detected capacity change from 0 to 4096 [ 92.052764][ T5075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.144294][ T5078] hub 8-0:1.0: USB hub found [ 93.149401][ T5078] hub 8-0:1.0: 8 ports detected [ 93.190110][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.212322][ T3001] ================================================================== [ 93.220453][ T3001] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 93.228016][ T3001] [ 93.230331][ T3001] read-write to 0xffff88811a090000 of 4 bytes by task 3307 on cpu 1: [ 93.238384][ T3001] dont_mount+0x2a/0x40 [ 93.242531][ T3001] vfs_unlink+0x206/0x490 [ 93.246851][ T3001] filename_unlinkat+0x1e2/0x410 [ 93.251774][ T3001] __se_sys_unlink+0x2b/0xe0 [ 93.256358][ T3001] __x64_sys_unlink+0x1f/0x30 [ 93.261018][ T3001] x64_sys_call+0x2eb6/0x3020 [ 93.265683][ T3001] do_syscall_64+0x12c/0x370 [ 93.270265][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.276152][ T3001] [ 93.278461][ T3001] read to 0xffff88811a090000 of 4 bytes by task 3001 on cpu 0: [ 93.285982][ T3001] step_into_slowpath+0xea/0x4c0 [ 93.290917][ T3001] path_lookupat+0x330/0x500 [ 93.295495][ T3001] filename_lookup+0x190/0x390 [ 93.300246][ T3001] do_readlinkat+0x74/0x2f0 [ 93.304740][ T3001] __x64_sys_readlink+0x47/0x60 [ 93.309597][ T3001] x64_sys_call+0x2b51/0x3020 [ 93.314286][ T3001] do_syscall_64+0x12c/0x370 [ 93.318862][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.324747][ T3001] [ 93.327062][ T3001] value changed: 0x00300080 -> 0x00004080 [ 93.332761][ T3001] [ 93.335064][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 93.341200][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 93.351603][ T3001] Tainted: [W]=WARN [ 93.355388][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.365600][ T3001] ================================================================== [ 93.478398][ T5088] hub 8-0:1.0: USB hub found [ 93.483417][ T5088] hub 8-0:1.0: 8 ports detected