last executing test programs: 7m7.336598882s ago: executing program 3 (id=4): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x1cd) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) 7m5.442142847s ago: executing program 3 (id=9): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) readv(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b03000000006100302e"], 0x0, 0x58, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x40010021, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket(0x15, 0x5, 0x0) 7m4.510336299s ago: executing program 3 (id=12): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$eJzs3MtvVFUYAPDv3j5406r4AEGrmEh8tLQ8F24wmrjQxEQXGFe1LQQZqNKaCCGCLnBpSNwblyb+Ba50Y9SViYkr3RsSYtiAJiZj7p1723E6UzvtwFDm90sunDP3DOd8c86Z+zhzCaBnjWR/JBFbI+K3iBiqZf9bYKT2160bF6f+unFxKolq9Y0/k7zczRsXp8qi5fu21DLVapHf0KTeK29HTFYqM+eK/Nj8mffG5s5feP7UmcmTMydnzk4cPXrwwJ7BwxOHOhJnFtfNXR/N7t75yltXX5s6fvWdH7/O2ru12F8fR6eM1D7dpfo6XVP3batLJ/1dbAhtyYZi1l0D+fwfir7YtLBvKF7+pKuNA26rarVabXZ8LlyuAvewJLrdAqA7ygN9dv1bbnfo1OOucP1YxPtHavHfKrbanv5IizIDDde3nTQSEccv//1FtsVtug8BAFDv22MR8Vyz8780Hqort71YQxmOiPsi4v6IeCAidkTEgxF52Ycj4pE2629cIVl6/pNeW1VgK5Sd/71QrG0tnP/9U83jLwz3FbltefwDyYlTlZn9xWeyLwY2ZPnxZer47qVfPmu1r/78L9uy+stzwZr0Wn/DDbrpyfnJNYa94PrHEbv6G+LPJVEu4yQRsTMidrX1Ly9eYZx65qvdrUr9f/zL6MA6U/XLiKdr/X85GuIvJS3XJ8ePHJ44NLYxKjP7x8pRsdRPP195vVX9a4q/A7L+39w4/hd771I25JONEXPnL5zO12vn2q/jyu+ftrymWe34H0zezNODxWsfTs7PnxuPGExeXfr6xOJ7y3xZPot/395m4z/Nv+Oi6P9HIyIbxHsi4rGIeLxo+xMR8WRE7F0m/h9efOrd9uNf5q58B2XxTzfp/7rxP5ylFvu//UTf6e+/aT/+Utb/B/PUvuKVlXz/rbSBa/nsAAAAYL1I89/AJ+noQjpNR0drv+HfEZvTyuzc/LMnZj84O137rfxwDKTlna6huvuh48W94TI/0ZA/UNw3/rxvU54fnZqtTHc7eOhxW1rM/8wf9+BzKkADz2tB7zL/oXeZ/9C7Fuf/4a62A7jzHP+hdzWb/5e60A7gznP8h95l/kPvMv+hd5n/0JNaPhufrumR/3Wb+HX7XdGMdZCItP139Uc32zzY1dpXnehf8X9mscrEhqa7uv3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BgAA//92QvTM") chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r0, 0x0, 0x0, 0x1, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x42}, @local, 0x20, 0x0, 0x1}}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xbe7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x100000000}) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x2017, 0x1fd, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x1040, r4, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"/4096}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 7m4.165955051s ago: executing program 3 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 7m2.680214952s ago: executing program 3 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x7adf, &(0x7f00000001c0)={0x0, 0xd2a, 0x20, 0x2, 0xea}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040)={0x2, 0x5}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000002fc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x7f, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffa, 0x0, 0x2, 0x8000000f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m2.554372076s ago: executing program 32 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x7adf, &(0x7f00000001c0)={0x0, 0xd2a, 0x20, 0x2, 0xea}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040)={0x2, 0x5}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000002fc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x7f, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffa, 0x0, 0x2, 0x8000000f, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m36.656242219s ago: executing program 4 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000001400c2bf5816c26225ac12800c0001006d23b9281261637674060000000002937efee157f7f1ef02973e7957f305e069723aa864aaf04ee4b0dd686b8fb77ff8e802bb5ec4775853d216ad7ca18f12954272d7ca2777eceb000000000000008e48acb979e8b43fe4010ab6a13c8999db7b1b", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) ioctl$SIOCPNGETOBJECT(r10, 0x89e0, &(0x7f0000000140)=0x7) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_DISALLOCATE(r11, 0x5608) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000100)={r8}) ioprio_set$uid(0x3, r2, 0x2007) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) r12 = gettid() r13 = perf_event_open$cgroup(&(0x7f0000000400)={0x2, 0x80, 0x24, 0x1, 0x0, 0xc, 0x0, 0x81, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x8440, 0xfffffffffffffffc, 0x14000000, 0x1, 0xc00000000000000, 0x10, 0x0, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0xd, 0x5, 0x6, 0x0, 0x4, 0x10011, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x8000000000000001, 0x8a81}, 0x20, 0x7fffffff, 0x5, 0x7, 0xd, 0x7, 0xfffa, 0x0, 0x8, 0x0, 0x6}, r12, 0x7, r13, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") 5m35.704397471s ago: executing program 4 (id=619): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000300)=0x8c1, 0x4) (async) r4 = socket$kcm(0x2, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000380)={@empty, r6}, 0x14) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) (async) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 5m35.346431563s ago: executing program 4 (id=620): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) 5m35.210709969s ago: executing program 4 (id=621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x20000800) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r1, 0xabf34bdd027fea1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 5m35.140401241s ago: executing program 4 (id=622): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) r9 = openat(r1, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x5) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvfrom(r11, 0x0, 0x0, 0x10001, &(0x7f0000000400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m33.747570919s ago: executing program 4 (id=626): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="feffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000180)='./file0\x00', r4}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r7, 0x0, 0x840) write$nci(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70060908000600060081f9e143e1030604fd"], 0x14) socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 5m18.198317036s ago: executing program 33 (id=626): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="feffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000180)='./file0\x00', r4}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r7, 0x0, 0x840) write$nci(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="70060908000600060081f9e143e1030604fd"], 0x14) socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 3.371440083s ago: executing program 0 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a9c, 0x4522f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) (async) r2 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x200040) poll(&(0x7f0000000400)=[{r1, 0x2280}, {r2, 0x4000}, {r0, 0x2198}], 0x3, 0x7) 3.307397486s ago: executing program 0 (id=3543): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0xfffffffffffffdaf, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r3, 0x4b34, 0x401) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x3) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\x8bdQ\xa4\xc3\x82\x84\xbe\x94\x15\xe0KF\xf7_\x8c\x92\xf5\x19\xb9\x00a6\xe6\xe0&\x98\xe9\x9fb\x13\x90X\xbe+\xeb\x8cJ\xd3\xe2Y\xdd|\xac\xf18\xdc#\x9a\xc2\xcaD\xac\x1b@8\xa6X\xf9\x9f\xdb!\x1a\\{A\xfeE\xfb\xdf\x0398`\a\x8bg\xe0\xdcH\x86/Gg\xe7'}]}, 0x62) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair(0x1, 0x100000005, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) 3.237082228s ago: executing program 0 (id=3544): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x5}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) 3.228983888s ago: executing program 0 (id=3545): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_io_uring_setup(0x7927, &(0x7f0000000000)={0x0, 0x99d5, 0x10, 0x0, 0x127, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="d3b602004100000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.60227333s ago: executing program 1 (id=3565): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7fff}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.514723043s ago: executing program 2 (id=3568): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d0000000000"], 0x70}}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x840) write$nci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70060908000600060081f9e143e1030604fd"], 0x14) socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 2.459501135s ago: executing program 1 (id=3569): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0xfeffffffffffff, 0x0, 0xfffffffffffffffd) 2.396937857s ago: executing program 1 (id=3570): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) 2.343281579s ago: executing program 1 (id=3573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x1cd) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x64, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040004) 2.278307301s ago: executing program 0 (id=3576): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000040)={r0, r1+10000000}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000680)=""/169, 0xa9}], 0x3, 0x2, 0xc0de, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x82) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.213815603s ago: executing program 5 (id=3578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x4c084) 2.195058454s ago: executing program 5 (id=3579): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$eJzs3c9vHOdfB/D3rO3EcaskbUMpUdtsUpK6rXFshyZEPUBibxIX/0C2IyXi0JTGQVEMhRakNkIilRAHRAUSiAu3ihOnSr3QC+oNbnDigIT6L1Sc8j35q5ldO2t77Y1dx07T18va3fnxmef5zI+dJzvZnSf8tCwfWTO2vFw9djh+/V/3IGOeYpcnvv/q6y/LxxcPciA9ebf4t6Q/ST3pTfJK0jc+MTc73aWge8mtJN8lRZKDab4+llsp/i7PPxr/LsU/l/Vu6sDjlkw3y/ys7ffxBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6NifGJkZLQ4kMmZ6zfqTUl9g/GJudkiy8sb56ws0/Rt1et38e3fPNel3qQoH+nvX+nq+5Vjj2a/nKR+Kq82x16tOiRPf+4/9/LR917qra0sv1k2P8rBTYrtyYYN8+nn9+99uLS0+Mk2q+jfaW5PmauNmcn52cnpS1cb9cn52frF8+dHzl67Ml+/MjnVmL85v9CYro/PNS4tzM7VB8ffqo9evHiu3hi+OXt95urE8FRjZeKF3xgbGTlff3/49xqX5uZnZ86+Pzw/fm1yampy5moVU84uYy6UB+LvTi7UFxqXpuv1O3eXFs+ty2nDbiqDRrutSRk01i1obGRsbHR0bGz0i1bv2asTzr978d0LIyO9I+tkQ8QTOmh5uhzafDc/idM47Eit2f4nU5nMTK7nRuod/8YzkbnMZnqT+S0r7f/ps40t621v/1utfG/b7OPl06m83hrt36T93ySXvfv7NJ/nfu7lwyxlKYv5ZN8z2vhX7pFN5h36sWVfTSMzmcx8ZjOZ6VyqptRbU+q5mPM5n5F8kGs5kfnUcyWTmUoj87mZ+SykUR1R45lLI5eykNnMpZ7BjOet1DOai7mYc6mnkeHczGyuZyZXM5FLVSl3crfa7ue2yHE1aPRxgsa2CNrQmG+7/W9s/DckPzO7fxKHHVputf8HuocOju9FQgAAAMCu+7X/zOFjL/7H/yVFXquuy1+ZnGqM7HdaAAAAwC4qUiSvlk995ehrKXz+BwAAgGdNUf3GrkgykBPNoZVfQrkIAAAAAM+I6nY9r6c48WiCz/8AAADwjFm9x37zSsDqPXZv9KxM7XoX/mJo5fa/9dvN19utiFYRA1cmpxrD47NT743mTHWXgeqXBhtK60mKvurnB2/nZDPq5EAelK8Dj0os6+wvo0aH3xvN2znVWpHBN8qXNwY7RI41I99sRr7ZHtmTNZHnykgAeNad2qI9bt5jv3v7/3aGmhFDx6smv/d4hzZ4RMsKAE+L1T52ftHq0qxD+9+KeH2z9v83t/j8X0a8mDsnml8pGM5H+ThLuZ2htL5xcKJTqSu9ETS/hjDUdjWgsu5qwEDrKwv/faGWoQ3XA/pX17U9djFjGWpdETjUmt+6dlCsxhYrOZxrBvQ8gR0AAPvg1Jbt8OO1/0NdPv8P+EohADxVVnuwf4ID+72OAMBaWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfY91A///OpMsLS0me9BZwOpA/3Yy3Hqglj3K+fP7vXu2fToO9CTZr9p/O9teqtzH+7OhDHQb2OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHuiSHo6Ta8drF5Gkpzd65yepAf7ncBuqe9sseJhHuazHN7tdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfu5a9/+vpfn6XHNSemvJ6SS3kvz+fue4mx7udwL75o+q57b7/9eSviwX6W3u9hR94xNzs9Pl7i8OlvO//+rrL8tH97I39qpQdR9RW9e5RKuGtil9a5d6oVpqYGLx03t/9vGf1CcuVwfm5YUrUxPTV+d+51Hgy8U3zS4Q2rtBWMn3L07/+9+3TT7Qqvybck07W1/vlareiY31/mqnpTep9zHcXVocK2taaNxY+PM/vvtZ26wXczJ5YzAZXFvTH5aPTWo6uX57rlX8UPx1cTj/lFvV/i+3RrFclLvoSLX+h+7cXVoc/ujjpdurOf3lmpyO5kSS20n/4+d0ojqfdFQddbW+staRKqh8OtalvC21lTi6yXZ9oTpkBra1DvXN16HSZbu3MjrXMaN/+NOXcmbbe/pMlxo7Kn4o/re4lv/JX7X1/1Er9//pdHx3diiiimw7UtrnrXl71ZqR1ZqPtc/4YH2Zm74reQL+Nn+Q31rd/7W2839rX+3N+aitxs7vi2T774t/ObKhRXmkapGOrWuRWmefjgv0r+Z5rBm1SZ6/kneS3uPbOqO80+WMsvvv/1Z9Dwbz/3mg/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODpVyQ9nabXktNJjiY5Uo7Xk+X1MQ92UF9toNhJmrtmJzn/9BRtK7p2jYuHeZjPcng/sgIAAAAAAABg912e+P6rr78sH9X/x/fk12utOfWkN8nR4h/7xifmZqe7FNSX3Fr5L/3+7eVwq3x6/tH4d+XYK10W2t+vDwDAT9ovAwAA///ryW3i") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket(0x15, 0x5, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x490, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@loopback}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000080)) 2.090901257s ago: executing program 2 (id=3580): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x7fff}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.823114677s ago: executing program 2 (id=3581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900350200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000009", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="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", @ANYBLOB='\x00'/28], 0x48) r8 = creat(0x0, 0x2) write(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000180), &(0x7f00000002c0)=r7}, 0x20) 1.443448s ago: executing program 6 (id=3582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.334658613s ago: executing program 6 (id=3583): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) 834.746721ms ago: executing program 1 (id=3584): newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r0, r4, 0x1000) setregid(0x0, r4) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x2}}, {@resgid={'resgid', 0x3d, r4}}, {@bh}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 834.497481ms ago: executing program 6 (id=3585): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 796.033332ms ago: executing program 6 (id=3586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 730.485674ms ago: executing program 6 (id=3587): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="feffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) brk(0x800000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x840) write$nci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70060908000600060081f9e143e1030604fd"], 0x14) socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 698.049985ms ago: executing program 2 (id=3588): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0xb000fffd}) 541.741871ms ago: executing program 2 (id=3589): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="feffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r1}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) brk(0x800000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000000000"], 0x70}}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x840) write$nci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="70060908000600060081f9e143e1030604fd"], 0x14) socket$kcm(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000002e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 142.792345ms ago: executing program 5 (id=3590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0xffffffffffffffff, 0x8be6, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x4c084) 117.811755ms ago: executing program 5 (id=3591): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) cachestat(r0, &(0x7f0000000040)={0x7, 0x3}, &(0x7f0000000140), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) semctl$SETVAL(0x0, 0x2c14dc8eb796d816, 0x10, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 62.438217ms ago: executing program 1 (id=3592): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000200), &(0x7f0000000140)=r2}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x7, 0x200400000007, 0x2, 0x7ffffffffffffbff, 0x2000000000000000, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xffffffffffffffea, 0x0, 0x0, 0x200000, 0x4, 0x6}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x7fff, 0x203, 0x7, 0x6, 0x1, 0x5, 0xfff}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x5c4a19f17da70bee) r5 = gettid() openat$dir(0xffffffffffffff9c, 0x0, 0x60000, 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) mq_timedsend(r0, 0x0, 0x27, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000000400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003002800128008000100736974001c00028005080a000000000008000c002fc90000060011004e2100001400030076657468305f766c616e080000000000"], 0x5c}}, 0x0) 62.213828ms ago: executing program 5 (id=3593): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000"], 0x18, 0x20000084}, 0x40880) 61.102088ms ago: executing program 6 (id=3594): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x1cd) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x64, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040004) 38.743358ms ago: executing program 2 (id=3595): socket(0x2, 0x80805, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) 307.78µs ago: executing program 0 (id=3596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000001400c2bf5816c26225ac12800c0001006d23b9281261637674060000000002937efee157f7f1ef02973e7957f305e069723aa864aaf04ee4b0dd686b8fb77ff8e802bb5ec4775853d216ad7ca18f12954272d7ca2777eceb000000000000008e48acb979e8b43fe4010ab6a13c8999db7b", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) ioctl$SIOCPNGETOBJECT(r10, 0x89e0, &(0x7f0000000140)=0x7) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_DISALLOCATE(r11, 0x5608) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000100)={r8}) ioprio_set$uid(0x3, r2, 0x2007) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) r12 = gettid() r13 = perf_event_open$cgroup(&(0x7f0000000400)={0x2, 0x80, 0x24, 0x1, 0x0, 0xc, 0x0, 0x81, 0x1000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x8440, 0xfffffffffffffffc, 0x14000000, 0x1, 0xc00000000000000, 0x10, 0x0, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0xd, 0x5, 0x6, 0x0, 0x4, 0x10011, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x8000000000000001, 0x8a81}, 0x20, 0x7fffffff, 0x5, 0x7, 0xd, 0x7, 0xfffa, 0x0, 0x8, 0x0, 0x6}, r12, 0x7, r13, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") 0s ago: executing program 5 (id=3597): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0xd3ff, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) kernel console output (not intermixed with test programs): : 0000000000000000 R09: 0000000000000000 [ 405.074495][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.074509][T13696] R13: 00007f70a7926038 R14: 00007f70a7925fa0 R15: 00007ffe19f2e828 [ 405.074538][T13696] [ 405.274778][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3086'. [ 406.076204][T13736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.091700][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3095'. [ 406.120327][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.181969][ T28] audit: type=1326 audit(2000000183.693:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.207544][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.241178][T13736] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.259081][ T28] audit: type=1326 audit(2000000183.693:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.274038][T13736] tmpfs: Bad value for 'mpol' [ 406.304225][T13745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=13745 comm=syz.5.3094 [ 406.310213][ T28] audit: type=1326 audit(2000000183.693:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.334987][T13718] EXT4-fs (loop0): 1 orphan inode deleted [ 406.360590][T13718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.363464][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.396959][ T28] audit: type=1326 audit(2000000183.693:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.442122][ T28] audit: type=1326 audit(2000000183.693:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.467650][ T28] audit: type=1326 audit(2000000183.693:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.491754][ T28] audit: type=1326 audit(2000000183.693:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.510154][T13754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13754 comm=syz.1.3098 [ 406.516920][ T28] audit: type=1326 audit(2000000183.693:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.552119][ T28] audit: type=1326 audit(2000000183.693:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.2.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e74afc819 code=0x7ffc0000 [ 406.600914][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.648481][T13757] __nla_validate_parse: 1 callbacks suppressed [ 406.648500][T13757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 407.805292][T13780] bridge0: entered promiscuous mode [ 407.819682][T13780] macvlan2: entered promiscuous mode [ 408.122016][T13792] set_capacity_and_notify: 3 callbacks suppressed [ 408.122063][T13792] loop1: detected capacity change from 0 to 512 [ 408.271959][T13792] EXT4-fs (loop1): 1 orphan inode deleted [ 408.291836][T13792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.372562][T13781] chnl_net:caif_netlink_parms(): no params data found [ 408.478366][ T1720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.565281][ T1720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.660942][ T1720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.671999][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.689565][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3112'. [ 408.718635][T13781] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.744100][T13781] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.751397][T13781] bridge_slave_0: entered allmulticast mode [ 408.758085][T13781] bridge_slave_0: entered promiscuous mode [ 408.778382][ T1720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.803833][T13781] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.811091][T13781] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.818473][T13781] bridge_slave_1: entered allmulticast mode [ 408.825805][T13781] bridge_slave_1: entered promiscuous mode [ 408.845761][T13781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.856640][T13781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.886758][T13781] team0: Port device team_slave_0 added [ 408.893951][T13781] team0: Port device team_slave_1 added [ 408.901183][T13824] tipc: Enabled bearer , priority 0 [ 408.911533][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3114'. [ 408.923829][T13823] tipc: Disabling bearer [ 408.938880][T13822] loop2: detected capacity change from 0 to 512 [ 408.942858][T13781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.953513][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.981044][T13822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.004420][T13822] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.008269][T13781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.040243][T13781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.048749][T13828] loop1: detected capacity change from 0 to 764 [ 409.051113][T13781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.074495][T13828] iso9660: Unknown parameter 'Zx…ÈA¼°e—/¸àFf [ 409.074495][T13828] "—y~¿·_Ixœ0' [ 409.086195][T13781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.132469][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 409.132486][ T28] audit: type=1400 audit(2000000186.453:2984): avc: denied { setopt } for pid=13827 comm="syz.1.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.213612][ T1720] team0: Port device xfrm0 removed [ 409.232133][ T1720] .` (unregistering): Released all slaves [ 409.239746][ T1720] bond1 (unregistering): Released all slaves [ 409.249034][ T1720] bond0 (unregistering): Released all slaves [ 409.318363][T13781] hsr_slave_0: entered promiscuous mode [ 409.324598][T13781] hsr_slave_1: entered promiscuous mode [ 409.331737][ T1720] tipc: Left network mode [ 409.343203][ T1720] hsr_slave_0: left promiscuous mode [ 409.349419][ T1720] hsr_slave_1: left promiscuous mode [ 409.363265][ T1720] veth1_macvtap: left promiscuous mode [ 409.374748][ T1720] veth0_macvtap: left promiscuous mode [ 409.381299][ T1720] veth1_vlan: left promiscuous mode [ 409.386726][ T1720] veth0_vlan: left promiscuous mode [ 409.418426][T13846] loop5: detected capacity change from 0 to 2048 [ 409.447666][ T28] audit: type=1400 audit(2000000186.752:2985): avc: denied { mounton } for pid=13845 comm="syz.5.3121" path="/566/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 409.470467][T13846] usb usb7: usbfs: process 13846 (syz.5.3121) did not claim interface 0 before use [ 409.605952][T13863] FAULT_INJECTION: forcing a failure. [ 409.605952][T13863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.621715][T13863] CPU: 0 UID: 0 PID: 13863 Comm: syz.5.3122 Tainted: G W syzkaller #0 PREEMPT(full) [ 409.621756][T13863] Tainted: [W]=WARN [ 409.621766][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.621881][T13863] Call Trace: [ 409.621890][T13863] [ 409.621900][T13863] __dump_stack+0x1d/0x30 [ 409.622013][T13863] dump_stack_lvl+0x95/0xd0 [ 409.622046][T13863] dump_stack+0x15/0x1b [ 409.622090][T13863] should_fail_ex+0x263/0x280 [ 409.622118][T13863] should_fail+0xb/0x20 [ 409.622142][T13863] should_fail_usercopy+0x1a/0x20 [ 409.622238][T13863] _copy_from_user+0x1c/0xb0 [ 409.622278][T13863] bpf_test_init+0xb9/0x130 [ 409.622322][T13863] bpf_prog_test_run_xdp+0x306/0xa10 [ 409.622429][T13863] ? __rcu_read_unlock+0x4e/0x70 [ 409.622516][T13863] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.622557][T13863] bpf_prog_test_run+0x204/0x340 [ 409.622589][T13863] __sys_bpf+0x52e/0x7e0 [ 409.622620][T13863] __x64_sys_bpf+0x41/0x50 [ 409.622711][T13863] x64_sys_call+0x10cb/0x3020 [ 409.622738][T13863] do_syscall_64+0x12c/0x370 [ 409.622772][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.622819][T13863] RIP: 0033:0x7f0f2edcc819 [ 409.622840][T13863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.622862][T13863] RSP: 002b:00007f0f2d81f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.622952][T13863] RAX: ffffffffffffffda RBX: 00007f0f2f045fa0 RCX: 00007f0f2edcc819 [ 409.622970][T13863] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 409.623004][T13863] RBP: 00007f0f2d81f090 R08: 0000000000000000 R09: 0000000000000000 [ 409.623018][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.623030][T13863] R13: 00007f0f2f046038 R14: 00007f0f2f045fa0 R15: 00007ffcc2fe01c8 [ 409.623051][T13863] [ 409.840514][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.971023][ T1720] IPVS: stop unused estimator thread 0... [ 410.006309][T13886] tipc: Started in network mode [ 410.023940][T13886] tipc: Node identity 1e94fe108a88, cluster identity 4711 [ 410.062572][T13886] tipc: Enabled bearer , priority 0 [ 410.169314][T13885] tipc: Disabling bearer [ 410.667142][T13781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.683060][T13781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.723387][T13781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.766624][T13907] batadv0: entered promiscuous mode [ 410.782783][T13907] batadv0: left promiscuous mode [ 410.800732][T13781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.076108][T13781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.101934][T13781] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.129524][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.136786][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.157492][T13920] loop6: detected capacity change from 0 to 512 [ 411.180062][T13935] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3133'. [ 411.190023][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.197176][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.246359][T13932] loop5: detected capacity change from 0 to 512 [ 411.283573][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'. [ 411.298618][T13781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.318485][T13932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.367014][T13932] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.372057][T13781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.416536][T13920] EXT4-fs (loop6): 1 orphan inode deleted [ 411.438455][T13920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.580141][T13781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.802553][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.044966][T13781] veth0_vlan: entered promiscuous mode [ 412.198671][ T3597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.209045][T13781] veth1_vlan: entered promiscuous mode [ 412.422410][T13781] veth0_macvtap: entered promiscuous mode [ 412.528045][T13781] veth1_macvtap: entered promiscuous mode [ 412.618713][T13781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.784906][T13781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.810930][ T6439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.644249][ T6439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.897364][ T6439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.954145][ T6439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.965744][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3146'. [ 414.018165][T14001] loop2: detected capacity change from 0 to 512 [ 414.202129][T14017] loop6: detected capacity change from 0 to 128 [ 414.315640][T14001] EXT4-fs (loop2): 1 orphan inode deleted [ 414.360073][T14001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.449176][T14022] loop6: detected capacity change from 0 to 1024 [ 414.484817][ T28] audit: type=1400 audit(2000000191.467:2986): avc: denied { mounton } for pid=14016 comm="syz.6.3149" path="/516/file0" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.570078][T14022] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 414.600781][T14030] loop5: detected capacity change from 0 to 2048 [ 414.650211][T14030] usb usb7: usbfs: process 14030 (syz.5.3152) did not claim interface 0 before use [ 414.869125][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.543609][T14017] loop6: detected capacity change from 0 to 128 [ 415.581728][T14047] FAULT_INJECTION: forcing a failure. [ 415.581728][T14047] name failslab, interval 1, probability 0, space 0, times 0 [ 415.600826][T14047] CPU: 1 UID: 0 PID: 14047 Comm: syz.0.3158 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.600869][T14047] Tainted: [W]=WARN [ 415.600878][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.600900][T14047] Call Trace: [ 415.600908][T14047] [ 415.600917][T14047] __dump_stack+0x1d/0x30 [ 415.600946][T14047] dump_stack_lvl+0x95/0xd0 [ 415.600971][T14047] dump_stack+0x15/0x1b [ 415.601028][T14047] should_fail_ex+0x263/0x280 [ 415.601058][T14047] should_failslab+0x8c/0xb0 [ 415.601080][T14047] __kmalloc_cache_node_noprof+0x6b/0x480 [ 415.601108][T14047] ? __get_vm_area_node+0x106/0x1d0 [ 415.601160][T14047] __get_vm_area_node+0x106/0x1d0 [ 415.601188][T14047] __vmalloc_node_range_noprof+0x291/0x12b0 [ 415.601232][T14047] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 415.601258][T14047] ? selinux_file_open+0x2e6/0x330 [ 415.601297][T14047] ? __rcu_read_unlock+0x4e/0x70 [ 415.601405][T14047] ? avc_has_perm_noaudit+0xab/0x130 [ 415.601451][T14047] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 415.601478][T14047] __vmalloc_noprof+0xa4/0xf0 [ 415.601506][T14047] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 415.601573][T14047] bpf_prog_alloc_no_stats+0x47/0x390 [ 415.601643][T14047] ? bpf_prog_alloc+0x2a/0x150 [ 415.601663][T14047] bpf_prog_alloc+0x3c/0x150 [ 415.601692][T14047] bpf_prog_load+0x506/0x1140 [ 415.601734][T14047] ? security_bpf+0x2b/0x90 [ 415.601761][T14047] __sys_bpf+0x505/0x7e0 [ 415.601828][T14047] __x64_sys_bpf+0x41/0x50 [ 415.601909][T14047] x64_sys_call+0x10cb/0x3020 [ 415.601942][T14047] do_syscall_64+0x12c/0x370 [ 415.601973][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.602039][T14047] RIP: 0033:0x7f021be7c819 [ 415.602056][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.602075][T14047] RSP: 002b:00007f021a8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.602097][T14047] RAX: ffffffffffffffda RBX: 00007f021c0f5fa0 RCX: 00007f021be7c819 [ 415.602114][T14047] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 415.602176][T14047] RBP: 00007f021a8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 415.602192][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.602207][T14047] R13: 00007f021c0f6038 R14: 00007f021c0f5fa0 R15: 00007ffdd299da58 [ 415.602231][T14047] [ 415.851661][T14017] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.868683][T14047] syz.0.3158: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 415.885277][T14047] CPU: 1 UID: 0 PID: 14047 Comm: syz.0.3158 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.885317][T14047] Tainted: [W]=WARN [ 415.885326][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.885382][T14047] Call Trace: [ 415.885389][T14047] [ 415.885396][T14047] __dump_stack+0x1d/0x30 [ 415.885428][T14047] dump_stack_lvl+0x95/0xd0 [ 415.885460][T14047] dump_stack+0x15/0x1b [ 415.885483][T14047] warn_alloc+0x145/0x1c0 [ 415.885556][T14047] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 415.885584][T14047] ? selinux_file_open+0x2e6/0x330 [ 415.885623][T14047] ? __rcu_read_unlock+0x4e/0x70 [ 415.885650][T14047] ? avc_has_perm_noaudit+0xab/0x130 [ 415.885762][T14047] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 415.885791][T14047] __vmalloc_noprof+0xa4/0xf0 [ 415.885870][T14047] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 415.885899][T14047] bpf_prog_alloc_no_stats+0x47/0x390 [ 415.885924][T14047] ? bpf_prog_alloc+0x2a/0x150 [ 415.885964][T14047] bpf_prog_alloc+0x3c/0x150 [ 415.885987][T14047] bpf_prog_load+0x506/0x1140 [ 415.886039][T14047] ? security_bpf+0x2b/0x90 [ 415.886069][T14047] __sys_bpf+0x505/0x7e0 [ 415.886109][T14047] __x64_sys_bpf+0x41/0x50 [ 415.886134][T14047] x64_sys_call+0x10cb/0x3020 [ 415.886171][T14047] do_syscall_64+0x12c/0x370 [ 415.886279][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.886346][T14047] RIP: 0033:0x7f021be7c819 [ 415.886373][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.886460][T14047] RSP: 002b:00007f021a8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.886486][T14047] RAX: ffffffffffffffda RBX: 00007f021c0f5fa0 RCX: 00007f021be7c819 [ 415.886504][T14047] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 415.886517][T14047] RBP: 00007f021a8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 415.886529][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.886541][T14047] R13: 00007f021c0f6038 R14: 00007f021c0f5fa0 R15: 00007ffdd299da58 [ 415.886567][T14047] [ 415.886675][T14047] Mem-Info: [ 415.922941][T14017] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.112667][T14047] active_anon:14910 inactive_anon:2085 isolated_anon:0 [ 416.112667][T14047] active_file:15493 inactive_file:12175 isolated_file:0 [ 416.112667][T14047] unevictable:0 dirty:201 writeback:0 [ 416.112667][T14047] slab_reclaimable:3713 slab_unreclaimable:19028 [ 416.112667][T14047] mapped:29773 shmem:6125 pagetables:4330 [ 416.112667][T14047] sec_pagetables:0 bounce:0 [ 416.112667][T14047] kernel_misc_reclaimable:0 [ 416.112667][T14047] free:1855151 free_pcp:13445 free_cma:0 [ 416.158572][T14047] Node 0 active_anon:59524kB inactive_anon:8340kB active_file:61972kB inactive_file:48700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119092kB dirty:804kB writeback:0kB shmem:24500kB kernel_stack:4400kB pagetables:17320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 416.206840][T14047] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.237494][T14047] lowmem_reserve[]: 0 2879 7857 7857 [ 416.243133][T14047] Node 0 DMA32 free:2944624kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948148kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 416.284013][T14047] lowmem_reserve[]: 0 0 4978 4978 [ 416.289657][T14047] Node 0 Normal free:4461492kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59388kB inactive_anon:8340kB active_file:61972kB inactive_file:48732kB unevictable:0kB writepending:836kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:49524kB local_pcp:22888kB free_cma:0kB [ 416.291730][ T6040] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.324537][T14047] lowmem_reserve[]: 0 0 0 0 [ 416.337481][T14047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.351253][T14047] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 1*16kB (M) 4*32kB (M) 5*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944624kB [ 416.370862][T14047] Node 0 Normal: 2429*4kB (UME) 3109*8kB (UME) 1887*16kB (UME) 1159*32kB (UME) 874*64kB (UME) 551*128kB (UME) 417*256kB (UME) 347*512kB (UME) 212*1024kB (UM) 222*2048kB (UME) 800*4096kB (UM) = 4461292kB [ 416.391562][T14047] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 416.409036][T14047] 33734 total pagecache pages [ 416.414050][T14047] 49 pages in swap cache [ 416.418432][T14047] Free swap = 236kB [ 416.422403][T14047] Total swap = 124996kB [ 416.426795][T14047] 2097051 pages RAM [ 416.430655][T14047] 0 pages HighMem/MovableOnly [ 416.444318][T14047] 81614 pages reserved [ 416.608278][T14065] loop6: detected capacity change from 0 to 164 [ 416.668006][T14071] loop0: detected capacity change from 0 to 512 [ 416.714370][T14065] rock: directory entry would overflow storage [ 416.721787][T14065] rock: sig=0x66, size=4, remaining=3 [ 416.739809][T14065] rock: directory entry would overflow storage [ 416.746251][T14065] rock: sig=0x66, size=4, remaining=3 [ 416.753944][T14065] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 416.763738][T14065] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.778009][T14068] tipc: Enabled bearer , priority 0 [ 417.425786][T14067] tipc: Disabling bearer [ 417.438615][T14071] EXT4-fs (loop0): 1 orphan inode deleted [ 417.545024][T14071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.557175][T14088] loop6: detected capacity change from 0 to 1024 [ 417.614246][T14088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.659438][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3172'. [ 417.706808][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3172'. [ 417.756905][ T28] audit: type=1400 audit(2000000194.525:2987): avc: denied { create } for pid=14087 comm="syz.6.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 417.830508][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.865519][ T28] audit: type=1400 audit(2000000194.628:2988): avc: denied { read } for pid=14107 comm="syz.2.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.948269][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.115735][T14128] FAULT_INJECTION: forcing a failure. [ 418.115735][T14128] name failslab, interval 1, probability 0, space 0, times 0 [ 418.162139][T14128] CPU: 1 UID: 0 PID: 14128 Comm: syz.0.3184 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.162176][T14128] Tainted: [W]=WARN [ 418.162231][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.162256][T14128] Call Trace: [ 418.162309][T14128] [ 418.162318][T14128] __dump_stack+0x1d/0x30 [ 418.162354][T14128] dump_stack_lvl+0x95/0xd0 [ 418.162427][T14128] dump_stack+0x15/0x1b [ 418.162457][T14128] should_fail_ex+0x263/0x280 [ 418.162565][T14128] should_failslab+0x8c/0xb0 [ 418.162616][T14128] __kmalloc_noprof+0xb8/0x4e0 [ 418.162646][T14128] ? bpf_test_init+0x86/0x130 [ 418.162751][T14128] bpf_test_init+0x86/0x130 [ 418.162790][T14128] bpf_prog_test_run_xdp+0x306/0xa10 [ 418.162829][T14128] ? __rcu_read_unlock+0x4e/0x70 [ 418.162908][T14128] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.162952][T14128] bpf_prog_test_run+0x204/0x340 [ 418.163031][T14128] __sys_bpf+0x52e/0x7e0 [ 418.163060][T14128] __x64_sys_bpf+0x41/0x50 [ 418.163129][T14128] x64_sys_call+0x10cb/0x3020 [ 418.163157][T14128] do_syscall_64+0x12c/0x370 [ 418.163186][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.163239][T14128] RIP: 0033:0x7f021be7c819 [ 418.163320][T14128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.163341][T14128] RSP: 002b:00007f021a8cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.163421][T14128] RAX: ffffffffffffffda RBX: 00007f021c0f5fa0 RCX: 00007f021be7c819 [ 418.163437][T14128] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 418.163454][T14128] RBP: 00007f021a8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 418.163468][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.163480][T14128] R13: 00007f021c0f6038 R14: 00007f021c0f5fa0 R15: 00007ffdd299da58 [ 418.163504][T14128] [ 418.530954][ T28] audit: type=1400 audit(2000000195.255:2989): avc: denied { create } for pid=14139 comm="syz.2.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 418.559332][T14140] netlink: 'syz.2.3187': attribute type 8 has an invalid length. [ 418.686724][T14140] loop2: detected capacity change from 0 to 512 [ 418.717377][T14140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.748520][T14140] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.766463][ T28] audit: type=1400 audit(2000000195.470:2990): avc: denied { append } for pid=14139 comm="syz.2.3187" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 418.773290][T14140] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 418.854556][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.876617][T14154] FAULT_INJECTION: forcing a failure. [ 418.876617][T14154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.880863][T14153] loop5: detected capacity change from 0 to 512 [ 418.914789][T14154] CPU: 0 UID: 0 PID: 14154 Comm: syz.0.3192 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.914829][T14154] Tainted: [W]=WARN [ 418.914838][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.914854][T14154] Call Trace: [ 418.914862][T14154] [ 418.914870][T14154] __dump_stack+0x1d/0x30 [ 418.915060][T14154] dump_stack_lvl+0x95/0xd0 [ 418.915086][T14154] dump_stack+0x15/0x1b [ 418.915109][T14154] should_fail_ex+0x263/0x280 [ 418.915204][T14154] should_fail+0xb/0x20 [ 418.915235][T14154] should_fail_usercopy+0x1a/0x20 [ 418.915270][T14154] copy_fpstate_to_sigframe+0x650/0x7f0 [ 418.915351][T14154] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 418.915402][T14154] ? x86_task_fpu+0x36/0x60 [ 418.915433][T14154] get_sigframe+0x34c/0x470 [ 418.915480][T14154] ? get_signal+0xdc3/0xf60 [ 418.915525][T14154] x64_setup_rt_frame+0xa7/0x4e0 [ 418.915679][T14154] arch_do_signal_or_restart+0x24b/0x450 [ 418.915724][T14154] exit_to_user_mode_loop+0x6a/0x6f0 [ 418.915756][T14154] ? __x64_sys_recvfrom+0x76/0x90 [ 418.915867][T14154] do_syscall_64+0x249/0x370 [ 418.915904][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.916019][T14154] RIP: 0033:0x7f021be7c817 [ 418.916039][T14154] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 418.916063][T14154] RSP: 002b:00007f021a8cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 418.916088][T14154] RAX: 000000000000002d RBX: 00007f021c0f5fa0 RCX: 00007f021be7c819 [ 418.916106][T14154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 418.916122][T14154] RBP: 00007f021a8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 418.916213][T14154] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 418.916294][T14154] R13: 00007f021c0f6038 R14: 00007f021c0f5fa0 R15: 00007ffdd299da58 [ 418.916322][T14154] [ 419.209805][ T28] audit: type=1400 audit(2000000195.872:2991): avc: denied { write } for pid=14162 comm="syz.0.3197" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 419.291759][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 419.650815][T14168] syz.1.3196 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 419.660752][T14168] CPU: 1 UID: 0 PID: 14168 Comm: syz.1.3196 Tainted: G W syzkaller #0 PREEMPT(full) [ 419.660786][T14168] Tainted: [W]=WARN [ 419.660793][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.660872][T14168] Call Trace: [ 419.660878][T14168] [ 419.660886][T14168] __dump_stack+0x1d/0x30 [ 419.660921][T14168] dump_stack_lvl+0x95/0xd0 [ 419.660955][T14168] dump_stack+0x15/0x1b [ 419.661064][T14168] dump_header+0x80/0x240 [ 419.661097][T14168] oom_kill_process+0x295/0x350 [ 419.661167][T14168] out_of_memory+0x97d/0xb80 [ 419.661202][T14168] try_charge_memcg+0x62e/0xa10 [ 419.661259][T14168] __mem_cgroup_charge+0x65/0x150 [ 419.661348][T14168] do_wp_page+0xf84/0x2590 [ 419.661395][T14168] ? __rcu_read_lock+0x36/0x50 [ 419.661520][T14168] handle_mm_fault+0x8cb/0x3020 [ 419.661632][T14168] ? mt_find+0x291/0x3d0 [ 419.661756][T14168] do_user_addr_fault+0x3fd/0x1050 [ 419.661798][T14168] ? __unix_dgram_recvmsg+0x798/0x870 [ 419.661830][T14168] exc_page_fault+0x62/0xa0 [ 419.661857][T14168] asm_exc_page_fault+0x26/0x30 [ 419.661965][T14168] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 419.662001][T14168] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 a2 01 00 90 90 90 90 90 90 90 90 90 90 [ 419.662071][T14168] RSP: 0018:ffffc90000ec3b60 EFLAGS: 00050202 [ 419.662096][T14168] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000003da030 [ 419.662114][T14168] RDX: ffff88814ad710c0 RSI: 0000000000000002 RDI: 00000000ffffffff [ 419.662144][T14168] RBP: 0000000000000002 R08: 0001c90000ec3e37 R09: 0000000000000000 [ 419.662162][T14168] R10: 0001c90000ec3a10 R11: 0001c90000ec3a17 R12: 00002000003da000 [ 419.662182][T14168] R13: 0000000000000000 R14: ffffc90000ec3e34 R15: 0000000000000000 [ 419.662341][T14168] ____sys_recvmsg+0x1a1/0x280 [ 419.662382][T14168] ___sys_recvmsg+0x11f/0x3b0 [ 419.662423][T14168] do_recvmmsg+0x1ef/0x560 [ 419.662465][T14168] __x64_sys_recvmmsg+0xe5/0x170 [ 419.662494][T14168] x64_sys_call+0x80f/0x3020 [ 419.662654][T14168] do_syscall_64+0x12c/0x370 [ 419.662800][T14168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.662829][T14168] RIP: 0033:0x7f9097dcc819 [ 419.662850][T14168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.662889][T14168] RSP: 002b:00007f909681f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 419.662915][T14168] RAX: ffffffffffffffda RBX: 00007f9098045fa0 RCX: 00007f9097dcc819 [ 419.662934][T14168] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 419.662952][T14168] RBP: 00007f9097e62c91 R08: 0000000000000000 R09: 0000000000000000 [ 419.663047][T14168] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 419.663062][T14168] R13: 00007f9098046038 R14: 00007f9098045fa0 R15: 00007ffd0583e6e8 [ 419.663087][T14168] [ 419.705686][T14161] EXT4-fs (loop2): 1 orphan inode deleted [ 419.707458][T14168] memory: usage 307200kB, limit 307200kB, failcnt 10319 [ 419.707501][T14168] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 419.707516][T14168] kmem: usage 290156kB, limit 9007199254740988kB, failcnt 0 [ 419.707532][T14168] Memory cgroup stats for /syz1: [ 419.707966][T14168] cache 11755520 [ 419.752836][T14153] EXT4-fs (loop5): 1 orphan inode deleted [ 419.755442][T14168] rss 5652480 [ 419.755455][T14168] shmem 11755520 [ 419.755516][T14168] mapped_file 0 [ 419.755526][T14168] dirty 0 [ 419.755535][T14168] writeback 0 [ 419.755545][T14168] workingset_refault_anon 156 [ 419.755556][T14168] workingset_refault_file 2390 [ 419.755568][T14168] swap 0 [ 419.755577][T14168] swapcached 28844032 [ 419.755586][T14168] pgpgin 424376 [ 419.755594][T14168] pgpgout 420115 [ 419.755604][T14168] pgfault 421375 [ 419.755614][T14168] pgmajfault 53 [ 419.755640][T14168] inactive_anon 1970176 [ 419.755651][T14168] active_anon 15437824 [ 419.755660][T14168] inactive_file 45056 [ 419.755668][T14168] active_file 0 [ 419.755675][T14168] unevictable 0 [ 419.755685][T14168] hierarchical_memory_limit 314572800 [ 419.755698][T14168] hierarchical_memsw_limit 9223372036854771712 [ 419.755725][T14168] total_cache 11755520 [ 419.755735][T14168] total_rss 5652480 [ 419.755745][T14168] total_shmem 11755520 [ 419.755756][T14168] total_mapped_file 0 [ 419.755766][T14168] total_dirty 0 [ 419.755773][T14168] total_writeback 0 [ 419.755782][T14168] total_workingset_refault_anon 156 [ 419.755794][T14168] total_workingset_refault_file 2390 [ 419.755806][T14168] total_swap 0 [ 419.755815][T14168] total_swapcached 28844032 [ 419.755823][T14168] total_pgpgin 424376 [ 419.755832][T14168] total_pgpgout 420115 [ 419.755920][T14168] total_pgfault 421375 [ 419.755931][T14168] total_pgmajfault 53 [ 419.755941][T14168] total_inactive_anon 1970176 [ 419.755952][T14168] total_active_anon 15437824 [ 419.755963][T14168] total_inactive_file 45056 [ 419.755973][T14168] total_active_file 0 [ 419.756058][T14168] total_unevictable 0 [ 419.756077][T14168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3196,pid=14165,uid=0 [ 419.756241][T14168] Memory cgroup out of memory: Killed process 14165 (syz.1.3196) total-vm:96212kB, anon-rss:5360kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 419.849453][T14161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.956074][T14180] bridge0: port 3(team0) entered blocking state [ 420.017956][T14153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.062410][T14180] bridge0: port 3(team0) entered disabled state [ 420.279129][T14180] team0: entered allmulticast mode [ 420.284488][T14180] team_slave_0: entered allmulticast mode [ 420.290251][T14180] team_slave_1: entered allmulticast mode [ 420.297934][T14180] team0: entered promiscuous mode [ 420.303230][T14180] team_slave_0: entered promiscuous mode [ 420.315157][T14180] team_slave_1: entered promiscuous mode [ 420.321303][T14180] bridge0: port 3(team0) entered blocking state [ 420.327669][T14180] bridge0: port 3(team0) entered forwarding state [ 420.387924][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.532291][ T3597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.621984][T14209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3208'. [ 420.638679][T14208] set_capacity_and_notify: 1 callbacks suppressed [ 420.638699][T14208] loop2: detected capacity change from 0 to 512 [ 420.699810][T14210] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3209'. [ 420.717034][T14210] loop5: detected capacity change from 0 to 512 [ 420.773220][T14210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.787746][T14208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.805100][T14208] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.818339][T14210] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.286243][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3211'. [ 421.357417][T14220] loop1: detected capacity change from 0 to 1024 [ 421.364438][T14220] EXT4-fs: Ignoring removed orlov option [ 421.383604][T14220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.425717][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.437116][ T3597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.519804][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.532947][T14229] loop5: detected capacity change from 0 to 512 [ 421.544799][T14232] loop2: detected capacity change from 0 to 128 [ 421.551795][T14230] IPVS: set_ctl: invalid protocol: 3 172.20.20.19:20000 [ 421.572587][T14229] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 421.592661][T14235] loop1: detected capacity change from 0 to 256 [ 421.600429][T14229] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 421.600888][T14229] EXT4-fs: failed to create workqueue [ 421.618384][T14229] EXT4-fs (loop5): mount failed [ 421.650650][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'. [ 421.659317][ T28] audit: type=1400 audit(2000000198.164:2992): avc: denied { ioctl } for pid=14231 comm="syz.2.3216" path="socket:[39154]" dev="sockfs" ino=39154 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.692241][T14235] ip6gretap0: entered promiscuous mode [ 421.703400][T14235] macvtap1: entered promiscuous mode [ 421.716284][T14235] macvtap1: entered allmulticast mode [ 421.722326][T14241] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 421.730811][T14235] ip6gretap0: entered allmulticast mode [ 423.924988][T14224] loop6: detected capacity change from 0 to 4096 [ 423.942990][T14249] loop0: detected capacity change from 0 to 512 [ 424.217779][T14224] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.3214: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 424.514090][T14224] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 424.515181][T14224] EXT4-fs (loop6): get root inode failed [ 424.525260][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 424.525306][ C0] EXT4-fs (loop6): initial error at time 2000000200: ext4_ext_check_inode:521: inode 2 [ 424.525584][ C0] EXT4-fs (loop6): last error at time 2000000200: ext4_ext_check_inode:521: inode 2 [ 424.577561][T14260] loop2: detected capacity change from 0 to 512 [ 424.607509][T14260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 424.661252][T14260] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.3223: orphan file block 0: bad magic [ 424.683196][T14262] loop1: detected capacity change from 0 to 4096 [ 424.695966][T14249] EXT4-fs (loop0): 1 orphan inode deleted [ 424.702771][T14224] EXT4-fs (loop6): mount failed [ 424.710099][T14260] loop2: lost filesystem error report for type 5 error -117 [ 424.710528][T14260] EXT4-fs (loop2): mount failed [ 424.722774][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 424.722802][ C0] EXT4-fs (loop2): initial error at time 2000000201: ext4_init_orphan_info:618 [ 424.722833][ C0] EXT4-fs (loop2): last error at time 2000000201: ext4_init_orphan_info:618 [ 424.769362][T14249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.794348][T14262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.906889][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.941450][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.007266][T14272] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3225'. [ 425.035301][T14271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.058207][T14271] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.196870][T14277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3226'. [ 425.219668][T14260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3223'. [ 425.283172][T14279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.366858][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3230'. [ 425.675667][T14289] EXT4-fs (loop1): 1 orphan inode deleted [ 425.697246][T14289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.779212][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.962064][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.993142][T14301] set_capacity_and_notify: 4 callbacks suppressed [ 425.993264][T14301] loop6: detected capacity change from 0 to 1024 [ 426.028844][ T28] audit: type=1400 audit(2000000202.252:2993): avc: denied { mount } for pid=14302 comm="syz.1.3235" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 426.068558][ T35] IPVS: starting estimator thread 0... [ 426.083379][T14306] FAULT_INJECTION: forcing a failure. [ 426.083379][T14306] name failslab, interval 1, probability 0, space 0, times 0 [ 426.100745][T14306] CPU: 1 UID: 0 PID: 14306 Comm: syz.1.3236 Tainted: G W syzkaller #0 PREEMPT(full) [ 426.100783][T14306] Tainted: [W]=WARN [ 426.100844][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.100860][T14306] Call Trace: [ 426.100868][T14306] [ 426.100878][T14306] __dump_stack+0x1d/0x30 [ 426.100913][T14306] dump_stack_lvl+0x95/0xd0 [ 426.100968][T14306] dump_stack+0x15/0x1b [ 426.101029][T14306] should_fail_ex+0x263/0x280 [ 426.101122][T14306] should_failslab+0x8c/0xb0 [ 426.101151][T14306] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 426.101226][T14306] ? kvasprintf_const+0xb3/0x130 [ 426.101318][T14306] kvasprintf+0x8a/0x110 [ 426.101382][T14306] kvasprintf_const+0xb3/0x130 [ 426.101402][T14306] kobject_set_name_vargs+0x44/0xe0 [ 426.101434][T14306] dev_set_name+0x83/0xb0 [ 426.101474][T14306] ? hrtimer_setup+0x33/0x110 [ 426.101555][T14306] ? wakeup_source_sysfs_add+0x11e/0x1d0 [ 426.101669][T14306] ? device_initialize+0x206/0x220 [ 426.101696][T14306] wakeup_source_sysfs_add+0x130/0x1d0 [ 426.101801][T14306] wakeup_source_register+0xfd/0x240 [ 426.101824][T14306] ep_insert+0x82f/0xe00 [ 426.101893][T14306] do_epoll_ctl+0x686/0x8a0 [ 426.101930][T14306] __x64_sys_epoll_ctl+0xcb/0x100 [ 426.101981][T14306] x64_sys_call+0x2a8b/0x3020 [ 426.102017][T14306] do_syscall_64+0x12c/0x370 [ 426.102106][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.102135][T14306] RIP: 0033:0x7f9097dcc819 [ 426.102157][T14306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.102182][T14306] RSP: 002b:00007f909681f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 426.102208][T14306] RAX: ffffffffffffffda RBX: 00007f9098045fa0 RCX: 00007f9097dcc819 [ 426.102237][T14306] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 426.102253][T14306] RBP: 00007f909681f090 R08: 0000000000000000 R09: 0000000000000000 [ 426.102271][T14306] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.102288][T14306] R13: 00007f9098046038 R14: 00007f9098045fa0 R15: 00007ffd0583e6e8 [ 426.102316][T14306] [ 426.324215][T14304] IPVS: using max 2400 ests per chain, 120000 per kthread [ 426.393652][T14301] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 426.415875][T14301] System zones: 0-1, 3-36 [ 426.452601][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.462336][T14301] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3234: bad orphan inode 134217728 [ 426.507221][T14318] loop5: detected capacity change from 0 to 128 [ 426.515673][T14301] loop6: lost filesystem error report for type 5 error -117 [ 426.534640][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'. [ 426.565222][T14301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.593691][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3241'. [ 426.636189][T14320] loop0: detected capacity change from 0 to 128 [ 426.651007][T14320] msdos: Unknown parameter '\-†8a|G~üIÒdos1xfloppy' [ 426.706171][T14326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3243'. [ 426.730731][T14324] loop2: detected capacity change from 0 to 512 [ 426.731092][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.923696][T14324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.953190][T14324] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.398407][T14342] syz.1.3246 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 427.408379][T14342] CPU: 0 UID: 0 PID: 14342 Comm: syz.1.3246 Tainted: G W syzkaller #0 PREEMPT(full) [ 427.408513][T14342] Tainted: [W]=WARN [ 427.408523][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.408539][T14342] Call Trace: [ 427.408548][T14342] [ 427.408565][T14342] __dump_stack+0x1d/0x30 [ 427.408670][T14342] dump_stack_lvl+0x95/0xd0 [ 427.408699][T14342] dump_stack+0x15/0x1b [ 427.408751][T14342] dump_header+0x80/0x240 [ 427.408781][T14342] oom_kill_process+0x295/0x350 [ 427.408859][T14342] out_of_memory+0x97d/0xb80 [ 427.408892][T14342] try_charge_memcg+0x62e/0xa10 [ 427.408956][T14342] __mem_cgroup_charge+0x65/0x150 [ 427.408991][T14342] handle_mm_fault+0x114a/0x3020 [ 427.409030][T14342] ? vma_start_read+0x1c7/0x2c0 [ 427.409202][T14342] do_user_addr_fault+0x62f/0x1050 [ 427.409247][T14342] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 427.409315][T14342] ? trace_page_fault_user+0x1f/0xe0 [ 427.409358][T14342] exc_page_fault+0x62/0xa0 [ 427.409436][T14342] asm_exc_page_fault+0x26/0x30 [ 427.409460][T14342] RIP: 0033:0x7f9097d7ad5f [ 427.409501][T14342] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 427.409525][T14342] RSP: 002b:00007f9095f96ff0 EFLAGS: 00010246 [ 427.409542][T14342] RAX: 00007f9095f970d0 RBX: 0000000000020000 RCX: 00007f9095f96ff0 [ 427.409563][T14342] RDX: 00007f9097e7edd5 RSI: 0000000000000023 RDI: 00007f9095f970d0 [ 427.409580][T14342] RBP: 00007f9095f78000 R08: 0000000000000000 R09: 00007ffd0583e6e7 [ 427.409594][T14342] R10: 0000000000000008 R11: 0000000000000206 R12: 00007f9095f970d0 [ 427.409607][T14342] R13: 000000000000006e R14: 00007ffd0583e600 R15: 00007ffd0583e6e8 [ 427.409628][T14342] [ 427.409645][T14342] memory: usage 307200kB, limit 307200kB, failcnt 10646 [ 427.594894][T14342] memory+swap: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 427.594914][T14342] kmem: usage 282492kB, limit 9007199254740988kB, failcnt 0 [ 427.594926][T14342] Memory cgroup stats for /syz1: [ 427.595291][T14342] cache 23556096 [ 427.595303][T14342] rss 1626112 [ 427.595312][T14342] shmem 23511040 [ 427.595322][T14342] mapped_file 11800576 [ 427.595409][T14342] dirty 45056 [ 427.595419][T14342] writeback 0 [ 427.595429][T14342] workingset_refault_anon 156 [ 427.595440][T14342] workingset_refault_file 2646 [ 427.595451][T14342] swap 0 [ 427.595459][T14342] swapcached 28844032 [ 427.595469][T14342] pgpgin 431694 [ 427.595478][T14342] pgpgout 425529 [ 427.595488][T14342] pgfault 433324 [ 427.595498][T14342] pgmajfault 55 [ 427.595507][T14342] inactive_anon 11976704 [ 427.595600][T14342] active_anon 13180928 [ 427.595609][T14342] inactive_file 45056 [ 427.595618][T14342] active_file 49152 [ 427.595636][T14342] unevictable 0 [ 427.595644][T14342] hierarchical_memory_limit 314572800 [ 427.595655][T14342] hierarchical_memsw_limit 9223372036854771712 [ 427.595666][T14342] total_cache 23556096 [ 427.595675][T14342] total_rss 1626112 [ 427.595724][T14342] total_shmem 23511040 [ 427.595733][T14342] total_mapped_file 11800576 [ 427.595742][T14342] total_dirty 45056 [ 427.595772][T14342] total_writeback 0 [ 427.595781][T14342] total_workingset_refault_anon 156 [ 427.595791][T14342] total_workingset_refault_file 2646 [ 427.595801][T14342] total_swap 0 [ 427.595809][T14342] total_swapcached 28844032 [ 427.595887][T14342] total_pgpgin 431694 [ 427.595897][T14342] total_pgpgout 425529 [ 427.595908][T14342] total_pgfault 433324 [ 427.595918][T14342] total_pgmajfault 55 [ 427.595928][T14342] total_inactive_anon 11976704 [ 427.595939][T14342] total_active_anon 13180928 [ 427.595985][T14342] total_inactive_file 45056 [ 427.595996][T14342] total_active_file 49152 [ 427.596006][T14342] total_unevictable 0 [ 427.596017][T14342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3246,pid=14328,uid=0 [ 427.596153][T14342] Memory cgroup out of memory: Killed process 14328 (syz.1.3246) total-vm:104816kB, anon-rss:1428kB, file-rss:30492kB, shmem-rss:11480kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 427.675165][T14345] loop1: detected capacity change from 0 to 1024 [ 427.722177][T14337] loop6: detected capacity change from 0 to 512 [ 427.959758][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.012593][T14345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.086766][T14345] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.1.3250: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 428.108515][T14345] EXT4-fs (loop1): Remounting filesystem read-only [ 428.129854][ T28] audit: type=1400 audit(2000000204.188:2994): avc: denied { unlink } for pid=14344 comm="syz.1.3250" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 428.217253][T14337] EXT4-fs (loop6): 1 orphan inode deleted [ 428.219165][T14355] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 428.229645][T14337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.256161][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.563071][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.764129][T14382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=14382 comm=syz.6.3258 [ 428.789989][T14320] Set syz1 is full, maxelem 65536 reached [ 429.102045][T14372] syz.2.3260 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 429.112012][T14372] CPU: 1 UID: 0 PID: 14372 Comm: syz.2.3260 Tainted: G W syzkaller #0 PREEMPT(full) [ 429.112052][T14372] Tainted: [W]=WARN [ 429.112059][T14372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.112072][T14372] Call Trace: [ 429.112078][T14372] [ 429.112087][T14372] __dump_stack+0x1d/0x30 [ 429.112114][T14372] dump_stack_lvl+0x95/0xd0 [ 429.112144][T14372] dump_stack+0x15/0x1b [ 429.112173][T14372] dump_header+0x80/0x240 [ 429.112204][T14372] oom_kill_process+0x295/0x350 [ 429.112232][T14372] out_of_memory+0x97d/0xb80 [ 429.112257][T14372] try_charge_memcg+0x62e/0xa10 [ 429.112309][T14372] obj_cgroup_charge_pages+0x23/0xc0 [ 429.112339][T14372] obj_cgroup_charge_account+0x73/0x1a0 [ 429.112370][T14372] __memcg_slab_post_alloc_hook+0x392/0x540 [ 429.112418][T14372] kmem_cache_alloc_noprof+0x1e2/0x400 [ 429.112448][T14372] ? vm_area_dup+0x33/0x2c0 [ 429.112482][T14372] vm_area_dup+0x33/0x2c0 [ 429.112509][T14372] __split_vma+0xe9/0x640 [ 429.112540][T14372] vms_gather_munmap_vmas+0x184/0x850 [ 429.112589][T14372] ? mas_find+0x608/0x700 [ 429.112619][T14372] ? __mmap_complete+0x1f2/0x220 [ 429.112658][T14372] mmap_region+0x718/0x2050 [ 429.112686][T14372] ? __sanitizer_cov_trace_switch+0x7/0x130 [ 429.112749][T14372] do_mmap+0x9b2/0xbd0 [ 429.112783][T14372] vm_mmap_pgoff+0x183/0x2d0 [ 429.112811][T14372] ksys_mmap_pgoff+0x267/0x310 [ 429.112842][T14372] x64_sys_call+0x14df/0x3020 [ 429.112878][T14372] do_syscall_64+0x12c/0x370 [ 429.112911][T14372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.112939][T14372] RIP: 0033:0x7f5e74afc582 [ 429.112960][T14372] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 429.112983][T14372] RSP: 002b:00007ffc5ff65568 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 429.113004][T14372] RAX: ffffffffffffffda RBX: 00007f5e72cd1000 RCX: 00007f5e74afc582 [ 429.113017][T14372] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f5e72cd1000 [ 429.113031][T14372] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 429.113047][T14372] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 429.113063][T14372] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f5e74d75fa0 [ 429.113094][T14372] [ 429.113124][T14372] memory: usage 307200kB, limit 307200kB, failcnt 10802 [ 429.369294][T14372] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0 [ 429.377415][T14372] kmem: usage 283548kB, limit 9007199254740988kB, failcnt 0 [ 429.384760][T14372] Memory cgroup stats for /syz2: [ 429.384954][T14372] cache 23601152 [ 429.393542][T14372] rss 397312 [ 429.396773][T14372] shmem 23511040 [ 429.400342][T14372] mapped_file 11845632 [ 429.404475][T14372] dirty 90112 [ 429.407792][T14372] writeback 0 [ 429.411100][T14372] workingset_refault_anon 131 [ 429.415855][T14372] workingset_refault_file 2278 [ 429.420643][T14372] swap 8192 [ 429.423806][T14372] swapcached 37982208 [ 429.427899][T14372] pgpgin 422011 [ 429.431382][T14372] pgpgout 416145 [ 429.434998][T14372] pgfault 458976 [ 429.438568][T14372] pgmajfault 121 [ 429.442133][T14372] inactive_anon 23900160 [ 429.446449][T14372] active_anon 8192 [ 429.450237][T14372] inactive_file 118784 [ 429.454334][T14372] active_file 0 [ 429.457874][T14372] unevictable 0 [ 429.461367][T14372] hierarchical_memory_limit 314572800 [ 429.466859][T14372] hierarchical_memsw_limit 9223372036854771712 [ 429.473036][T14372] total_cache 23601152 [ 429.477170][T14372] total_rss 397312 [ 429.480908][T14372] total_shmem 23511040 [ 429.485001][T14372] total_mapped_file 11845632 [ 429.489635][T14372] total_dirty 90112 [ 429.493472][T14372] total_writeback 0 [ 429.497301][T14372] total_workingset_refault_anon 131 [ 429.502564][T14372] total_workingset_refault_file 2278 [ 429.507879][T14372] total_swap 8192 [ 429.511577][T14372] total_swapcached 37982208 [ 429.516101][T14372] total_pgpgin 422011 [ 429.520148][T14372] total_pgpgout 416145 [ 429.524252][T14372] total_pgfault 458976 [ 429.528351][T14372] total_pgmajfault 121 [ 429.532486][T14372] total_inactive_anon 23900160 [ 429.535475][T14386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3264'. [ 429.537275][T14372] total_active_anon 8192 [ 429.537288][T14372] total_inactive_file 118784 [ 429.555194][T14372] total_active_file 0 [ 429.559197][T14372] total_unevictable 0 [ 429.563243][T14372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3260,pid=14372,uid=0 [ 429.577999][T14372] Memory cgroup out of memory: Killed process 14372 (syz.2.3260) total-vm:102636kB, anon-rss:1424kB, file-rss:26380kB, shmem-rss:11480kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 429.612017][T14392] loop0: detected capacity change from 0 to 1024 [ 429.666325][T14392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.681416][T14397] FAULT_INJECTION: forcing a failure. [ 429.681416][T14397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.699077][T14397] CPU: 0 UID: 0 PID: 14397 Comm: syz.2.3267 Tainted: G W syzkaller #0 PREEMPT(full) [ 429.699145][T14397] Tainted: [W]=WARN [ 429.699152][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.699165][T14397] Call Trace: [ 429.699171][T14397] [ 429.699180][T14397] __dump_stack+0x1d/0x30 [ 429.699207][T14397] dump_stack_lvl+0x95/0xd0 [ 429.699231][T14397] dump_stack+0x15/0x1b [ 429.699413][T14397] should_fail_ex+0x263/0x280 [ 429.699458][T14397] should_fail+0xb/0x20 [ 429.699561][T14397] should_fail_usercopy+0x1a/0x20 [ 429.699596][T14397] strncpy_from_user+0x27/0x250 [ 429.699629][T14397] __se_sys_memfd_create+0x20f/0x3b0 [ 429.699731][T14397] __x64_sys_memfd_create+0x31/0x40 [ 429.699788][T14397] x64_sys_call+0x1f22/0x3020 [ 429.699884][T14397] do_syscall_64+0x12c/0x370 [ 429.699919][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.699947][T14397] RIP: 0033:0x7f5e74afc819 [ 429.699967][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.699990][T14397] RSP: 002b:00007f5e73556e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 429.700014][T14397] RAX: ffffffffffffffda RBX: 0000000000000541 RCX: 00007f5e74afc819 [ 429.700098][T14397] RDX: 00007f5e73556ee0 RSI: 0000000000000000 RDI: 00007f5e74b92e71 [ 429.700116][T14397] RBP: 0000200000000600 R08: 00000000ffffffff R09: 0000000000000000 [ 429.700134][T14397] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 429.700151][T14397] R13: 00007f5e73556ee0 R14: 00007f5e73556ea0 R15: 0000200000000340 [ 429.700227][T14397] [ 429.888600][T14388] loop6: detected capacity change from 0 to 1024 [ 429.895487][ T28] audit: type=1400 audit(2000000205.703:2995): avc: denied { setopt } for pid=14391 comm="syz.0.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.951522][T14388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.077485][T14399] loop5: detected capacity change from 0 to 512 [ 430.134629][T14399] EXT4-fs (loop5): 1 orphan inode deleted [ 430.156161][T14399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.183685][T14407] loop1: detected capacity change from 0 to 512 [ 430.242322][ T3597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.277796][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.318095][T14407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.439130][T14407] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.568186][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.607481][ T28] audit: type=1400 audit(2000000206.545:2996): avc: denied { bind } for pid=14426 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 430.631829][T14427] batadv_slave_0: entered promiscuous mode [ 430.654536][T14426] batadv_slave_0: left promiscuous mode [ 430.668177][ T28] audit: type=1400 audit(2000000206.573:2997): avc: denied { name_bind } for pid=14426 comm="syz.1.3275" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 430.719923][T12530] syz_tun (unregistering): left allmulticast mode [ 430.726470][T12530] syz_tun (unregistering): left promiscuous mode [ 430.734755][ T28] audit: type=1400 audit(2000000206.573:2998): avc: denied { node_bind } for pid=14426 comm="syz.1.3275" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 430.770529][T12530] bridge0: port 3(syz_tun) entered disabled state [ 430.793450][T14433] tipc: Enabled bearer , priority 28 [ 430.990995][T14448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.030910][T14448] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.058610][T14416] chnl_net:caif_netlink_parms(): no params data found [ 431.088733][T14448] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #12: comm syz.1.3279: Directory hole found for htree leaf block 0 [ 431.193557][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.253766][T14461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=14461 comm=syz.1.3282 [ 431.281995][T14416] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.308543][T14416] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.316093][T14416] bridge_slave_0: entered allmulticast mode [ 431.322807][T14416] bridge_slave_0: entered promiscuous mode [ 431.329931][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.330429][T14416] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.346144][T14416] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.353525][T14416] bridge_slave_1: entered allmulticast mode [ 431.360421][T14416] bridge_slave_1: entered promiscuous mode [ 431.367747][T14452] EXT4-fs (loop2): 1 orphan inode deleted [ 431.413563][T14463] set_capacity_and_notify: 2 callbacks suppressed [ 431.413598][T14463] loop1: detected capacity change from 0 to 1024 [ 431.447211][T14416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.449565][T14463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 431.467804][T14463] System zones: 0-1, 3-36 [ 431.473385][T14452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.490918][T14463] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3283: bad orphan inode 134217728 [ 431.503185][T14463] loop1: lost filesystem error report for type 5 error -117 [ 431.503331][T14416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.536306][T14416] team0: Port device team_slave_0 added [ 431.551559][T14416] team0: Port device team_slave_1 added [ 431.601213][T14416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.615223][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.648598][T14416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.665159][T14416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.681278][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.724487][T14416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.755125][T14416] hsr_slave_0: entered promiscuous mode [ 431.761418][T14416] hsr_slave_1: entered promiscuous mode [ 431.767502][T14416] debugfs: 'hsr0' already exists in 'hsr' [ 431.773451][T14416] Cannot create hsr debugfs directory [ 431.790705][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3287'. [ 431.822457][T14476] loop0: detected capacity change from 0 to 512 [ 431.864211][T14476] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.411896][ T3402] tipc: Node number set to 1686671050 [ 433.753069][T14497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3293'. [ 433.916756][T14502] FAULT_INJECTION: forcing a failure. [ 433.916756][T14502] name failslab, interval 1, probability 0, space 0, times 0 [ 433.929532][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.6.3297 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.929581][T14502] Tainted: [W]=WARN [ 433.929590][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.929605][T14502] Call Trace: [ 433.929613][T14502] [ 433.929622][T14502] __dump_stack+0x1d/0x30 [ 433.929653][T14502] dump_stack_lvl+0x95/0xd0 [ 433.929760][T14502] dump_stack+0x15/0x1b [ 433.929789][T14502] should_fail_ex+0x263/0x280 [ 433.929825][T14502] should_failslab+0x8c/0xb0 [ 433.929911][T14502] __kmalloc_cache_node_noprof+0x6b/0x480 [ 433.929947][T14502] ? __get_vm_area_node+0x106/0x1d0 [ 433.929980][T14502] __get_vm_area_node+0x106/0x1d0 [ 433.930015][T14502] __vmalloc_node_range_noprof+0x291/0x12b0 [ 433.930126][T14502] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 433.930149][T14502] ? selinux_file_open+0x2e6/0x330 [ 433.930186][T14502] ? __rcu_read_unlock+0x4e/0x70 [ 433.930214][T14502] ? avc_has_perm_noaudit+0xab/0x130 [ 433.930314][T14502] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 433.930340][T14502] __vmalloc_noprof+0xa4/0xf0 [ 433.930372][T14502] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 433.930400][T14502] bpf_prog_alloc_no_stats+0x47/0x390 [ 433.930491][T14502] ? bpf_prog_alloc+0x2a/0x150 [ 433.930511][T14502] bpf_prog_alloc+0x3c/0x150 [ 433.930531][T14502] bpf_prog_load+0x506/0x1140 [ 433.930582][T14502] ? security_bpf+0x2b/0x90 [ 433.930610][T14502] __sys_bpf+0x505/0x7e0 [ 433.930695][T14502] __x64_sys_bpf+0x41/0x50 [ 433.930718][T14502] x64_sys_call+0x10cb/0x3020 [ 433.930756][T14502] do_syscall_64+0x12c/0x370 [ 433.930791][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.930907][T14502] RIP: 0033:0x7f70a76ac819 [ 433.930929][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.930953][T14502] RSP: 002b:00007f70a6107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.930979][T14502] RAX: ffffffffffffffda RBX: 00007f70a7925fa0 RCX: 00007f70a76ac819 [ 433.930996][T14502] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 433.931022][T14502] RBP: 00007f70a6107090 R08: 0000000000000000 R09: 0000000000000000 [ 433.931039][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.931055][T14502] R13: 00007f70a7926038 R14: 00007f70a7925fa0 R15: 00007ffe19f2e828 [ 433.931135][T14502] [ 433.931183][T14502] syz.6.3297: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 434.190718][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.6.3297 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.190751][T14502] Tainted: [W]=WARN [ 434.190759][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.190776][T14502] Call Trace: [ 434.190784][T14502] [ 434.190795][T14502] __dump_stack+0x1d/0x30 [ 434.190830][T14502] dump_stack_lvl+0x95/0xd0 [ 434.190941][T14502] dump_stack+0x15/0x1b [ 434.190966][T14502] warn_alloc+0x145/0x1c0 [ 434.190997][T14502] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 434.191032][T14502] ? selinux_file_open+0x2e6/0x330 [ 434.191089][T14502] ? __rcu_read_unlock+0x4e/0x70 [ 434.191116][T14502] ? avc_has_perm_noaudit+0xab/0x130 [ 434.191167][T14502] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 434.191247][T14502] __vmalloc_noprof+0xa4/0xf0 [ 434.191329][T14502] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 434.191353][T14502] bpf_prog_alloc_no_stats+0x47/0x390 [ 434.191379][T14502] ? bpf_prog_alloc+0x2a/0x150 [ 434.191472][T14502] bpf_prog_alloc+0x3c/0x150 [ 434.191499][T14502] bpf_prog_load+0x506/0x1140 [ 434.191530][T14502] ? security_bpf+0x2b/0x90 [ 434.191556][T14502] __sys_bpf+0x505/0x7e0 [ 434.191589][T14502] __x64_sys_bpf+0x41/0x50 [ 434.191637][T14502] x64_sys_call+0x10cb/0x3020 [ 434.191675][T14502] do_syscall_64+0x12c/0x370 [ 434.191719][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.191804][T14502] RIP: 0033:0x7f70a76ac819 [ 434.191820][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.191839][T14502] RSP: 002b:00007f70a6107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.191930][T14502] RAX: ffffffffffffffda RBX: 00007f70a7925fa0 RCX: 00007f70a76ac819 [ 434.191984][T14502] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005 [ 434.192001][T14502] RBP: 00007f70a6107090 R08: 0000000000000000 R09: 0000000000000000 [ 434.192018][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.192034][T14502] R13: 00007f70a7926038 R14: 00007f70a7925fa0 R15: 00007ffe19f2e828 [ 434.192057][T14502] [ 434.412608][T14502] Mem-Info: [ 434.415954][T14502] active_anon:17760 inactive_anon:3701 isolated_anon:0 [ 434.415954][T14502] active_file:14122 inactive_file:10892 isolated_file:0 [ 434.415954][T14502] unevictable:0 dirty:93 writeback:0 [ 434.415954][T14502] slab_reclaimable:3717 slab_unreclaimable:20190 [ 434.415954][T14502] mapped:32583 shmem:11736 pagetables:3839 [ 434.415954][T14502] sec_pagetables:0 bounce:0 [ 434.415954][T14502] kernel_misc_reclaimable:0 [ 434.415954][T14502] free:1806490 free_pcp:19700 free_cma:0 [ 434.467033][T14416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 434.510296][T14517] FAULT_INJECTION: forcing a failure. [ 434.510296][T14517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.560801][T14502] Node 0 active_anon:70868kB inactive_anon:14804kB active_file:56488kB inactive_file:43520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130284kB dirty:404kB writeback:0kB shmem:46920kB kernel_stack:4128kB pagetables:15296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.561197][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.1.3300 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.561338][T14517] Tainted: [W]=WARN [ 434.561359][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.561402][T14517] Call Trace: [ 434.561424][T14517] [ 434.561453][T14517] __dump_stack+0x1d/0x30 [ 434.561541][T14517] dump_stack_lvl+0x95/0xd0 [ 434.561617][T14517] dump_stack+0x15/0x1b [ 434.561691][T14517] should_fail_ex+0x263/0x280 [ 434.561869][T14517] should_fail_alloc_page+0xf2/0x100 [ 434.561946][T14517] __alloc_frozen_pages_noprof+0x108/0x360 [ 434.562046][T14517] alloc_pages_mpol+0xb3/0x260 [ 434.562174][T14517] ? obj_cgroup_charge_account+0x122/0x1a0 [ 434.562300][T14517] alloc_pages_noprof+0x8f/0x130 [ 434.562403][T14517] get_free_pages_noprof+0xc/0x40 [ 434.562553][T14517] selinux_genfs_get_sid+0x33/0x180 [ 434.562610][T14517] inode_doinit_with_dentry+0x5fd/0x7a0 [ 434.562772][T14517] selinux_d_instantiate+0x27/0x40 [ 434.562870][T14517] security_d_instantiate+0x76/0x90 [ 434.562967][T14517] d_make_persistent+0x4f/0x110 [ 434.563122][T14517] __debugfs_create_file+0x14e/0x2b0 [ 434.563268][T14517] debugfs_create_file_full+0x3f/0x60 [ 434.563370][T14517] ? __pfx_sl_setup+0x10/0x10 [ 434.563523][T14517] ref_tracker_dir_debugfs+0x10e/0x220 [ 434.563641][T14517] alloc_netdev_mqs+0x1a7/0xa40 [ 434.563763][T14517] slip_open+0x2d1/0x930 [ 434.563887][T14517] ? vfree+0x295/0x3a0 [ 434.563962][T14517] ? up_write+0x18/0x60 [ 434.564098][T14517] tty_ldisc_open+0x5d/0xb0 [ 434.564241][T14517] tty_set_ldisc+0x1db/0x380 [ 434.564338][T14517] tiocsetd+0x51/0x60 [ 434.564433][T14517] tty_ioctl+0xa78/0xb80 [ 434.564680][T14517] ? __pfx_tty_ioctl+0x10/0x10 [ 434.564767][T14517] __se_sys_ioctl+0xce/0x140 [ 434.564831][T14517] __x64_sys_ioctl+0x43/0x50 [ 434.564956][T14517] x64_sys_call+0x1563/0x3020 [ 434.565129][T14517] do_syscall_64+0x12c/0x370 [ 434.565232][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.565313][T14517] RIP: 0033:0x7f9097dcc819 [ 434.565440][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.565556][T14517] RSP: 002b:00007f909681f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.565653][T14517] RAX: ffffffffffffffda RBX: 00007f9098045fa0 RCX: 00007f9097dcc819 [ 434.565696][T14517] RDX: 0000200000000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 434.565798][T14517] RBP: 00007f909681f090 R08: 0000000000000000 R09: 0000000000000000 [ 434.565840][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.565882][T14517] R13: 00007f9098046038 R14: 00007f9098045fa0 R15: 00007ffd0583e6e8 [ 434.566006][T14517] [ 434.637860][T14416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.864390][T14502] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.931191][T14502] lowmem_reserve[]: 0 2879 7857 7857 [ 434.937087][T14502] Node 0 DMA32 free:2944624kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948148kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 434.970891][T14502] lowmem_reserve[]: 0 0 4978 4978 [ 434.976243][T14502] Node 0 Normal free:4442992kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70868kB inactive_anon:14804kB active_file:56488kB inactive_file:43520kB unevictable:0kB writepending:404kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:58540kB local_pcp:26244kB free_cma:0kB [ 435.009950][T14502] lowmem_reserve[]: 0 0 0 0 [ 435.014626][T14502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 435.027972][T14502] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 1*16kB (M) 4*32kB (M) 5*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944624kB [ 435.045493][T14502] Node 0 Normal: 1363*4kB (UME) 1826*8kB (UME) 2214*16kB (UME) 1421*32kB (UME) 1011*64kB (UME) 629*128kB (UME) 458*256kB (UME) 378*512kB (UME) 259*1024kB (UM) 252*2048kB (UME) 758*4096kB (UM) = 4443036kB [ 435.065841][T14502] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 435.075334][T14502] 36676 total pagecache pages [ 435.082560][T14502] 49 pages in swap cache [ 435.086879][T14502] Free swap = 104356kB [ 435.136390][T14502] Total swap = 124996kB [ 435.140791][T14502] 2097051 pages RAM [ 435.145055][T14502] 0 pages HighMem/MovableOnly [ 435.149759][T14502] 81614 pages reserved [ 435.150896][T14416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 435.193188][T14416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.217206][T14525] FAULT_INJECTION: forcing a failure. [ 435.217206][T14525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.245275][T14527] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3305'. [ 435.257816][T14525] CPU: 0 UID: 0 PID: 14525 Comm: syz.1.3304 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.257929][T14525] Tainted: [W]=WARN [ 435.257938][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.257952][T14525] Call Trace: [ 435.257971][T14525] [ 435.257979][T14525] __dump_stack+0x1d/0x30 [ 435.258008][T14525] dump_stack_lvl+0x95/0xd0 [ 435.258032][T14525] dump_stack+0x15/0x1b [ 435.258156][T14525] should_fail_ex+0x263/0x280 [ 435.258184][T14525] should_fail+0xb/0x20 [ 435.258214][T14525] should_fail_usercopy+0x1a/0x20 [ 435.258275][T14525] _copy_from_user+0x1c/0xb0 [ 435.258308][T14525] __sys_bind+0x106/0x290 [ 435.258344][T14525] __x64_sys_bind+0x3f/0x50 [ 435.258392][T14525] x64_sys_call+0x2b30/0x3020 [ 435.258426][T14525] do_syscall_64+0x12c/0x370 [ 435.258527][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.258581][T14525] RIP: 0033:0x7f9097dcc819 [ 435.258597][T14525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.258615][T14525] RSP: 002b:00007f909681f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 435.258635][T14525] RAX: ffffffffffffffda RBX: 00007f9098045fa0 RCX: 00007f9097dcc819 [ 435.258649][T14525] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 435.258731][T14525] RBP: 00007f909681f090 R08: 0000000000000000 R09: 0000000000000000 [ 435.258748][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.258763][T14525] R13: 00007f9098046038 R14: 00007f9098045fa0 R15: 00007ffd0583e6e8 [ 435.258787][T14525] [ 435.544780][T14416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.556048][T14543] loop0: detected capacity change from 0 to 512 [ 435.580299][T14416] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.594063][T14544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.602645][T14543] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.621833][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.629054][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.638935][T14543] EXT4-fs (loop0): orphan cleanup on readonly fs [ 435.645580][T14543] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 435.656041][T14543] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3310: attempt to clear invalid blocks 2 len 1 [ 435.669174][T14543] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 435.669341][T14543] EXT4-fs (loop0): Remounting filesystem read-only [ 435.678517][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 435.678544][ C0] EXT4-fs (loop0): initial error at time 2000000211: ext4_clear_blocks:876: inode 13 [ 435.678593][ C0] EXT4-fs (loop0): last error at time 2000000211: ext4_clear_blocks:876: inode 13 [ 435.714035][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.719301][T14543] EXT4-fs (loop0): 1 truncate cleaned up [ 435.721260][ T6440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.795124][ T28] audit: type=1400 audit(2000000211.400:2999): avc: denied { listen } for pid=14550 comm="syz.0.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.819290][T14416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.882240][T14560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3316'. [ 435.902051][T14561] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 435.914469][T14549] loop6: detected capacity change from 0 to 512 [ 435.953449][T14567] FAULT_INJECTION: forcing a failure. [ 435.953449][T14567] name failslab, interval 1, probability 0, space 0, times 0 [ 435.975384][T14569] loop0: detected capacity change from 0 to 512 [ 436.002913][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.2.3319 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.002956][T14567] Tainted: [W]=WARN [ 436.002965][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.002982][T14567] Call Trace: [ 436.002990][T14567] [ 436.003026][T14567] __dump_stack+0x1d/0x30 [ 436.003062][T14567] dump_stack_lvl+0x95/0xd0 [ 436.003093][T14567] dump_stack+0x15/0x1b [ 436.003122][T14567] should_fail_ex+0x263/0x280 [ 436.003183][T14567] should_failslab+0x8c/0xb0 [ 436.003212][T14567] __kmalloc_noprof+0xb8/0x4e0 [ 436.003240][T14567] ? io_cache_alloc_new+0x2a/0xb0 [ 436.003283][T14567] io_cache_alloc_new+0x2a/0xb0 [ 436.003339][T14567] __io_prep_rw+0x116/0x710 [ 436.003384][T14567] ? __io_alloc_req_refill+0x141/0x1e0 [ 436.003427][T14567] io_prep_write+0x34/0xe0 [ 436.003471][T14567] ? blk_start_plug_nr_ios+0xc2/0xe0 [ 436.003506][T14567] io_submit_sqes+0x756/0x1230 [ 436.003544][T14567] __se_sys_io_uring_enter+0x1c9/0xf50 [ 436.003570][T14567] ? __fget_files+0x184/0x1c0 [ 436.003639][T14567] ? mutex_unlock+0x4e/0x90 [ 436.003663][T14567] ? fput+0x8f/0xc0 [ 436.003731][T14567] __x64_sys_io_uring_enter+0x78/0x90 [ 436.003772][T14567] x64_sys_call+0x1e16/0x3020 [ 436.003810][T14567] do_syscall_64+0x12c/0x370 [ 436.003845][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.003929][T14567] RIP: 0033:0x7f5e74afc819 [ 436.004011][T14567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.004036][T14567] RSP: 002b:00007f5e73557028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 436.004064][T14567] RAX: ffffffffffffffda RBX: 00007f5e74d75fa0 RCX: 00007f5e74afc819 [ 436.004082][T14567] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 436.004123][T14567] RBP: 00007f5e73557090 R08: 0000000000000000 R09: 0000000000000000 [ 436.004141][T14567] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 436.004214][T14567] R13: 00007f5e74d76038 R14: 00007f5e74d75fa0 R15: 00007ffc5ff654b8 [ 436.004310][T14567] [ 436.026745][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.207029][T14549] EXT4-fs (loop6): 1 orphan inode deleted [ 436.269310][T14569] EXT4-fs mount: 7 callbacks suppressed [ 436.269328][T14569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.303588][T14549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.399520][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.479582][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.581443][T14416] veth0_vlan: entered promiscuous mode [ 436.592390][T14600] hub 8-0:1.0: USB hub found [ 436.606332][T14600] hub 8-0:1.0: 8 ports detected [ 436.617252][T14416] veth1_vlan: entered promiscuous mode [ 436.651708][T14416] veth0_macvtap: entered promiscuous mode [ 436.660294][T14416] veth1_macvtap: entered promiscuous mode [ 436.685972][T14416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.700333][T14416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.713237][ T3692] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.730762][ T3692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.755039][ T3692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.772507][ T3692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.786629][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3331'. [ 437.036256][T14620] loop5: detected capacity change from 0 to 1024 [ 437.082553][T14620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 437.094152][T14620] System zones: 0-1, 3-36 [ 437.106492][T14620] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3271: bad orphan inode 134217728 [ 437.119704][T14620] loop5: lost filesystem error report for type 5 error -117 [ 437.120465][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 437.134270][ C1] EXT4-fs (loop5): initial error at time 2000000212: ext4_orphan_get:1417 [ 437.142866][ C1] EXT4-fs (loop5): last error at time 2000000212: ext4_orphan_get:1417 [ 437.368246][T14620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.713786][T14416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.736126][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3338'. [ 437.872160][T14638] loop6: detected capacity change from 0 to 512 [ 437.900808][T14638] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.938792][T14638] EXT4-fs: inline encryption not supported [ 437.965234][T14638] EXT4-fs: test_dummy_encryption option not supported [ 437.996866][T14639] loop2: detected capacity change from 0 to 512 [ 438.007962][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3338'. [ 438.212671][T14639] EXT4-fs (loop2): 1 orphan inode deleted [ 438.243308][T14642] tipc: Started in network mode [ 438.264596][T14642] tipc: Node identity 7ee1ac1c2aff, cluster identity 4711 [ 438.271891][T14642] tipc: Enabled bearer , priority 0 [ 438.291327][T14639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.475950][T14641] tipc: Disabling bearer [ 439.113192][T14652] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 439.604608][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.998777][T14665] loop1: detected capacity change from 0 to 4096 [ 441.066062][T14665] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.3348: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 441.121182][T14665] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 441.122693][T14665] EXT4-fs (loop1): get root inode failed [ 441.132311][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 441.132495][ C0] EXT4-fs (loop1): initial error at time 2000000216: ext4_ext_check_inode:521: inode 2 [ 441.132702][ C0] EXT4-fs (loop1): last error at time 2000000216: ext4_ext_check_inode:521: inode 2 [ 441.213887][T14665] EXT4-fs (loop1): mount failed [ 441.272047][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3349'. [ 441.435183][T14681] loop6: detected capacity change from 0 to 512 [ 441.451179][T14681] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 441.464206][T14681] EXT4-fs (loop6): orphan cleanup on readonly fs [ 441.494454][T14681] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3353: corrupted inode contents [ 441.536051][T14688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3352'. [ 441.553803][T14687] loop5: detected capacity change from 0 to 512 [ 441.566449][T14687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.589485][T14681] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 441.589769][T14681] EXT4-fs (loop6): Remounting filesystem read-only [ 441.605781][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 441.605802][ C0] EXT4-fs (loop6): initial error at time 2000000216: ext4_do_update_inode:5569: inode 16 [ 441.605842][ C0] EXT4-fs (loop6): last error at time 2000000216: ext4_do_update_inode:5569: inode 16 [ 441.682105][T14687] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.796627][T14681] EXT4-fs (loop6): 1 truncate cleaned up [ 441.804402][T14697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.814643][ T3692] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 441.937675][ T3692] Quota error (device loop6): write_blk: dquota write failed [ 441.937723][ T3692] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 441.937752][ T3692] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 441.937775][ T3692] Quota error (device loop6): write_blk: dquota write failed [ 441.937888][ T3692] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 441.937912][ T3692] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 441.937932][ T3692] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 441.937984][ T3692] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 441.938490][T14681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.951374][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.192794][T14709] loop6: detected capacity change from 0 to 512 [ 442.247679][T14709] EXT4-fs (loop6): 1 orphan inode deleted [ 442.263312][T14709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.300133][T14416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.785615][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.809201][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 442.900023][T14729] loop6: detected capacity change from 0 to 512 [ 442.987412][T14729] EXT4-fs (loop6): 1 orphan inode deleted [ 443.003937][T14729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.291568][T14743] netlink: 'syz.0.3369': attribute type 21 has an invalid length. [ 443.295306][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.299479][T14743] netlink: 'syz.0.3369': attribute type 6 has an invalid length. [ 443.341631][T14743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3369'. [ 443.392829][T14747] loop0: detected capacity change from 0 to 128 [ 443.671306][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3373'. [ 443.688550][T14757] loop0: detected capacity change from 0 to 512 [ 443.699414][T14757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.782244][T14757] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.939543][T14776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3382'. [ 444.149056][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 444.406220][T14803] loop5: detected capacity change from 0 to 164 [ 444.427076][T14803] rock: directory entry would overflow storage [ 444.434005][T14803] rock: sig=0x66, size=4, remaining=3 [ 444.447431][T14803] rock: directory entry would overflow storage [ 444.454544][T14803] rock: sig=0x66, size=4, remaining=3 [ 444.469939][T14803] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 444.480406][T14803] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.630433][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.187434][ T28] audit: type=1400 audit(2000000221.128:3000): avc: denied { execute } for pid=14824 comm="syz.1.3400" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 446.394396][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3402'. [ 446.526113][T14834] loop0: detected capacity change from 0 to 512 [ 446.692930][T14834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.770020][T14840] loop5: detected capacity change from 0 to 128 [ 446.794567][T14834] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.974626][T14850] netlink: 'syz.2.3409': attribute type 28 has an invalid length. [ 446.984833][T14850] netlink: 'syz.2.3409': attribute type 3 has an invalid length. [ 446.994776][T14846] hub 8-0:1.0: USB hub found [ 446.999508][T14846] hub 8-0:1.0: 8 ports detected [ 447.004493][T14850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3409'. [ 447.015582][T14848] loop5: detected capacity change from 0 to 512 [ 447.101134][T14852] loop1: detected capacity change from 0 to 512 [ 447.121348][T14852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3410: bg 0: block 5: invalid block bitmap [ 447.135479][T14852] loop1: lost filesystem error report for type 5 error -117 [ 447.137579][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 447.151400][ C0] EXT4-fs (loop1): initial error at time 2000000222: ext4_validate_block_bitmap:432 [ 447.160927][ C0] EXT4-fs (loop1): last error at time 2000000222: ext4_validate_block_bitmap:432 [ 447.177286][T14848] EXT4-fs (loop5): 1 orphan inode deleted [ 447.185172][T14852] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 447.204522][T14852] loop1: lost filesystem error report for type 5 error -117 [ 447.204826][T14852] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3410: invalid indirect mapped block 3 (level 2) [ 447.210538][T14858] loop6: detected capacity change from 0 to 512 [ 447.223606][T14852] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.232565][T14852] EXT4-fs (loop1): 1 orphan inode deleted [ 447.250876][T14858] EXT4-fs: Ignoring removed oldalloc option [ 447.255616][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.271570][T14848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.287460][T14852] EXT4-fs (loop1): 1 truncate cleaned up [ 447.289734][T14858] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.3412: corrupted in-inode xattr: overlapping e_value [ 447.307288][T14858] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 447.311908][T14852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.321112][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 447.321160][ C1] EXT4-fs (loop6): initial error at time 2000000222: ext4_iget_extra_inode:5025: inode 15 [ 447.321202][ C1] EXT4-fs (loop6): last error at time 2000000222: ext4_iget_extra_inode:5025: inode 15 [ 447.340918][T14858] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3412: couldn't read orphan inode 15 (err -117) [ 447.384664][T14858] loop6: lost filesystem error report for type 5 error -117 [ 447.386111][T14858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.428754][ T28] audit: type=1400 audit(2000000222.288:3001): avc: denied { create } for pid=14851 comm="syz.1.3410" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 447.480297][T14858] 9pnet: p9_errstr2errno: server reported unknown error _alloc,olda [ 447.600599][T14416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.610111][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.620242][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.648630][T14879] loop2: detected capacity change from 0 to 1024 [ 447.658844][T14879] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 447.787416][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3416'. [ 447.837328][T14879] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 448.076346][T14879] EXT4-fs (loop2): invalid journal inode [ 448.145959][T14879] EXT4-fs (loop2): can't get journal size [ 448.170841][T14888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.216652][T14879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 448.256301][T14888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.332242][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'. [ 448.471642][T14890] set_capacity_and_notify: 1 callbacks suppressed [ 448.471710][T14890] loop5: detected capacity change from 0 to 512 [ 448.490225][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.556195][ T28] audit: type=1400 audit(2000000223.326:3002): avc: denied { connect } for pid=14878 comm="syz.2.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 448.603655][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.730671][T14890] EXT4-fs (loop5): 1 orphan inode deleted [ 448.745756][T14904] delete_channel: no stack [ 448.780255][T14890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.805815][ T28] audit: type=1400 audit(2000000223.560:3003): avc: denied { write } for pid=14903 comm="syz.1.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 448.935529][T14919] loop1: detected capacity change from 0 to 256 [ 449.027322][T14916] loop6: detected capacity change from 0 to 512 [ 449.170500][T14416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.777901][T14916] EXT4-fs (loop6): 1 orphan inode deleted [ 449.826116][T14916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.965035][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.045476][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 450.065661][T14939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.072976][T14939] IPv6: NLM_F_CREATE should be set when creating new route [ 450.218088][T14956] loop5: detected capacity change from 0 to 512 [ 450.230132][T14956] EXT4-fs: Ignoring removed oldalloc option [ 450.243150][T14960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 450.243986][T14956] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3440: invalid block [ 450.255312][T14960] netlink: 'syz.6.3442': attribute type 1 has an invalid length. [ 450.274008][T14956] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.274212][T14956] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3440: invalid indirect mapped block 4294967295 (level 1) [ 450.283509][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 450.283528][ C1] EXT4-fs (loop5): initial error at time 2000000224: ext4_get_branch:178: inode 11: block 4294967295 [ 450.283570][ C1] EXT4-fs (loop5): last error at time 2000000224: ext4_get_branch:178: inode 11: block 4294967295 [ 450.327722][T14956] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.327967][T14956] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3440: invalid indirect mapped block 4294967295 (level 1) [ 450.353832][T14956] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 450.357802][T14956] EXT4-fs (loop5): 2 truncates cleaned up [ 450.386632][T14965] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.421604][T14956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.446446][T14965] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 450.465461][T14960] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 450.498624][ T28] audit: type=1400 audit(2000000225.150:3004): avc: denied { create } for pid=14958 comm="syz.6.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 450.515139][T14960] bond2: (slave gretap1): making interface the new active one [ 450.527521][T14960] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 450.551099][T14960] macvlan3: entered promiscuous mode [ 450.556503][T14960] macvlan3: entered allmulticast mode [ 450.562991][T14960] bond2: entered promiscuous mode [ 450.568107][T14960] gretap1: entered promiscuous mode [ 450.574138][T14416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.580283][ T28] audit: type=1400 audit(2000000225.150:3005): avc: denied { write } for pid=14958 comm="syz.6.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 450.586614][T14960] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 450.617578][T14960] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 450.645415][T14965] xt_CT: No such helper "snmp_trap" [ 450.668676][T14960] bond2: left promiscuous mode [ 450.673565][T14960] gretap1: left promiscuous mode [ 450.729518][T14975] bond1: entered promiscuous mode [ 450.738337][T14975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.766874][T14976] bridge1: entered promiscuous mode [ 450.773180][T14976] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 450.887266][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3451'. [ 450.900694][ T3500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 450.900710][T14906] Bluetooth: hci0: command 0x1003 tx timeout [ 451.376512][T14991] xt_recent: Unsupported userspace flags (000000b1) [ 451.411630][T14990] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3451'. [ 451.451703][T14990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3451'. [ 451.596596][T15009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3457'. [ 451.612816][T15008] loop2: detected capacity change from 0 to 1024 [ 451.691662][T15008] EXT4-fs: inline encryption not supported [ 451.697669][T15008] EXT4-fs: dax option not supported [ 451.890305][ T28] audit: type=1400 audit(2000000226.450:3006): avc: denied { write } for pid=15021 comm="syz.1.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 451.938678][T15018] loop0: detected capacity change from 0 to 512 [ 451.948393][T15026] netlink: 'syz.5.3462': attribute type 1 has an invalid length. [ 451.970217][T15026] bond1: entered promiscuous mode [ 452.066215][T15026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.109561][T15029] bridge1: entered promiscuous mode [ 452.164550][T15029] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 452.476376][T15036] loop1: detected capacity change from 0 to 512 [ 452.518009][T15018] EXT4-fs (loop0): 1 orphan inode deleted [ 452.671435][T15018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.727918][T15036] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 452.801163][T15036] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 453.014696][T15036] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3466: Failed to acquire dquot type 1 [ 453.054756][T15036] loop1: lost filesystem error report for type 5 error -117 [ 453.055015][T15036] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 453.062411][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 453.062427][ C0] EXT4-fs (loop1): last error at time 2000000227: ext4_acquire_dquot:7001 [ 453.157258][T15036] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 453.187676][T15036] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3466: Failed to acquire dquot type 1 [ 453.227566][T15036] loop1: lost filesystem error report for type 5 error -117 [ 453.228047][T15036] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3466: bg 0: block 248: padding at end of block bitmap is not set [ 453.283454][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.300765][T15036] loop1: lost filesystem error report for type 5 error -117 [ 453.301002][T15036] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 453.336760][T15036] loop1: lost filesystem error report for type 5 error -117 [ 453.337145][T15036] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 453.373089][T15036] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 453.395483][T15036] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3466: Failed to acquire dquot type 1 [ 453.418886][T15036] loop1: lost filesystem error report for type 5 error -117 [ 453.419504][T15036] EXT4-fs (loop1): 1 orphan inode deleted [ 453.448863][T15036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.474899][T15036] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.530421][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.951667][T15054] FAULT_INJECTION: forcing a failure. [ 453.951667][T15054] name failslab, interval 1, probability 0, space 0, times 0 [ 454.001004][T15054] CPU: 1 UID: 0 PID: 15054 Comm: syz.0.3469 Tainted: G W syzkaller #0 PREEMPT(full) [ 454.001045][T15054] Tainted: [W]=WARN [ 454.001054][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.001072][T15054] Call Trace: [ 454.001080][T15054] [ 454.001090][T15054] __dump_stack+0x1d/0x30 [ 454.001200][T15054] dump_stack_lvl+0x95/0xd0 [ 454.001234][T15054] dump_stack+0x15/0x1b [ 454.001259][T15054] should_fail_ex+0x263/0x280 [ 454.001287][T15054] ? __pfx_sock_alloc_inode+0x10/0x10 [ 454.001460][T15054] should_failslab+0x8c/0xb0 [ 454.001492][T15054] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 454.001525][T15054] ? sock_alloc_inode+0x34/0xa0 [ 454.001560][T15054] ? __pfx_sock_alloc_inode+0x10/0x10 [ 454.001594][T15054] sock_alloc_inode+0x34/0xa0 [ 454.001777][T15054] alloc_inode+0x40/0x170 [ 454.001805][T15054] __sock_create+0x120/0x580 [ 454.001882][T15054] __sys_socketpair+0x1bb/0x420 [ 454.001929][T15054] __x64_sys_socketpair+0x52/0x60 [ 454.002024][T15054] x64_sys_call+0x2de5/0x3020 [ 454.002052][T15054] do_syscall_64+0x12c/0x370 [ 454.002089][T15054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.002162][T15054] RIP: 0033:0x7f021be7e0ba [ 454.002187][T15054] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.002268][T15054] RSP: 002b:00007f021a8cef68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 454.002289][T15054] RAX: ffffffffffffffda RBX: 00007f021c0f5f01 RCX: 00007f021be7e0ba [ 454.002352][T15054] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 454.002370][T15054] RBP: 00007f021a8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 454.002388][T15054] R10: 00007f021a8cef88 R11: 0000000000000246 R12: 0000000000000005 [ 454.002401][T15054] R13: 00007f021c0f6038 R14: 00007f021c0f5fa0 R15: 00007ffdd299da58 [ 454.002491][T15054] [ 454.002536][T15054] socket: no more sockets [ 454.133304][T15058] loop2: detected capacity change from 0 to 4096 [ 454.222072][T15058] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.3472: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 454.255885][T15058] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 454.257535][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 454.273114][ C0] EXT4-fs (loop2): initial error at time 2000000228: ext4_ext_check_inode:521: inode 2 [ 454.282855][ C0] EXT4-fs (loop2): last error at time 2000000228: ext4_ext_check_inode:521: inode 2 [ 454.294957][T15058] EXT4-fs (loop2): get root inode failed [ 454.300918][T15058] EXT4-fs (loop2): mount failed [ 454.418025][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 454.432861][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 454.481065][T15068] loop2: detected capacity change from 0 to 128 [ 454.488930][T15068] msdos: Unknown parameter '00000000000000000000004' [ 454.587367][T15076] loop1: detected capacity change from 0 to 512 [ 454.614504][T15077] loop5: detected capacity change from 0 to 256 [ 454.798690][T15068] loop2: detected capacity change from 0 to 32768 [ 454.857371][ T3643] loop2: p1 < > p3 < p5 p6 > [ 454.867249][ T3643] loop2: partition table partially beyond EOD, truncated [ 454.883712][ T3643] loop2: p6 size 655360 extends beyond EOD, truncated [ 454.893978][T15076] EXT4-fs (loop1): 1 orphan inode deleted [ 454.929387][T15076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.959353][T15086] loop6: detected capacity change from 0 to 1764 [ 454.966270][T15086] iso9660: Unknown parameter 'utF8' [ 455.051899][ T28] audit: type=1400 audit(2000000229.416:3007): avc: denied { map } for pid=15082 comm="syz.0.3480" path="socket:[41734]" dev="sockfs" ino=41734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 455.109875][ T35] IPVS: starting estimator thread 0... [ 455.219803][T15088] IPVS: using max 2400 ests per chain, 120000 per kthread [ 455.441055][T12753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.682022][T15095] loop0: detected capacity change from 0 to 512 [ 455.693653][T15097] hub 8-0:1.0: USB hub found [ 455.708584][T15097] hub 8-0:1.0: 8 ports detected [ 455.889014][T15068] loop2: p1 < > p3 < > [ 455.996235][T15095] EXT4-fs (loop0): 1 orphan inode deleted [ 456.817161][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 456.829357][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 456.940261][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 456.950708][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 456.985960][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'. [ 457.001050][T15095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.098901][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 457.113337][ T3643] udevd[3643]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 457.140578][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 457.157151][T15129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.164427][T15129] IPv6: NLM_F_CREATE should be set when creating new route [ 457.260468][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.380486][T15138] FAULT_INJECTION: forcing a failure. [ 457.380486][T15138] name failslab, interval 1, probability 0, space 0, times 0 [ 457.421517][T15138] CPU: 0 UID: 0 PID: 15138 Comm: syz.2.3497 Tainted: G W syzkaller #0 PREEMPT(full) [ 457.421561][T15138] Tainted: [W]=WARN [ 457.421571][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.421585][T15138] Call Trace: [ 457.421592][T15138] [ 457.421601][T15138] __dump_stack+0x1d/0x30 [ 457.421658][T15138] dump_stack_lvl+0x95/0xd0 [ 457.421690][T15138] dump_stack+0x15/0x1b [ 457.421797][T15138] should_fail_ex+0x263/0x280 [ 457.421835][T15138] should_failslab+0x8c/0xb0 [ 457.421912][T15138] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 457.421938][T15138] ? __alloc_skb+0x2d6/0x690 [ 457.421974][T15138] __alloc_skb+0x2d6/0x690 [ 457.422006][T15138] ? __alloc_skb+0x200/0x690 [ 457.422079][T15138] netlink_alloc_large_skb+0xbf/0xf0 [ 457.422151][T15138] netlink_sendmsg+0x40c/0x6f0 [ 457.422179][T15138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.422205][T15138] ____sys_sendmsg+0x563/0x5b0 [ 457.422248][T15138] ___sys_sendmsg+0x195/0x1e0 [ 457.422296][T15138] __x64_sys_sendmsg+0xd4/0x160 [ 457.422400][T15138] x64_sys_call+0x194c/0x3020 [ 457.422428][T15138] do_syscall_64+0x12c/0x370 [ 457.422528][T15138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.422550][T15138] RIP: 0033:0x7f5e74afc819 [ 457.422567][T15138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.422592][T15138] RSP: 002b:00007f5e73536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.422619][T15138] RAX: ffffffffffffffda RBX: 00007f5e74d76090 RCX: 00007f5e74afc819 [ 457.422676][T15138] RDX: 0000000000000700 RSI: 0000200000000240 RDI: 0000000000000003 [ 457.422692][T15138] RBP: 00007f5e73536090 R08: 0000000000000000 R09: 0000000000000000 [ 457.422705][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.422717][T15138] R13: 00007f5e74d76128 R14: 00007f5e74d76090 R15: 00007ffc5ff654b8 [ 457.422738][T15138] [ 457.650041][T15111] loop6: detected capacity change from 0 to 4096 [ 457.690569][ T28] audit: type=1400 audit(2000000001.627:3008): avc: denied { append } for pid=15140 comm="syz.1.3498" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 457.749896][T15111] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.3487: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 458.073919][T15111] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 458.084754][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 458.100329][ C1] EXT4-fs (loop6): initial error at time 2000000002: ext4_ext_check_inode:521: inode 2 [ 458.110037][ C1] EXT4-fs (loop6): last error at time 2000000002: ext4_ext_check_inode:521: inode 2 [ 458.123980][T15111] EXT4-fs (loop6): get root inode failed [ 458.178909][T15111] EXT4-fs (loop6): mount failed [ 458.305228][T15150] loop1: detected capacity change from 0 to 1024 [ 458.329145][T15150] EXT4-fs: Ignoring removed oldalloc option [ 458.335684][T15150] EXT4-fs: Ignoring removed nobh option [ 458.405870][T15150] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 460.072183][T15188] loop2: detected capacity change from 0 to 164 [ 460.119507][T15189] loop6: detected capacity change from 0 to 164 [ 461.698233][ T28] audit: type=1326 audit(2000000003.657:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 461.745256][T15195] loop5: detected capacity change from 0 to 128 [ 462.357880][T15188] rock: directory entry would overflow storage [ 462.364810][T15188] rock: sig=0x66, size=4, remaining=3 [ 462.461767][T15186] rock: directory entry would overflow storage [ 462.468197][T15186] rock: sig=0x66, size=4, remaining=3 [ 462.476611][T15186] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 462.484610][T15186] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.497598][ T28] audit: type=1326 audit(2000000003.657:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.507491][T15189] rock: directory entry would overflow storage [ 462.528407][T15189] rock: sig=0x66, size=4, remaining=3 [ 462.535106][ T28] audit: type=1326 audit(2000000003.657:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.559412][ T28] audit: type=1326 audit(2000000003.657:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.583225][ T28] audit: type=1326 audit(2000000003.657:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.623888][T15187] rock: directory entry would overflow storage [ 462.630140][T15187] rock: sig=0x66, size=4, remaining=3 [ 462.635627][T15187] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 462.643408][T15187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.673328][ T28] audit: type=1326 audit(2000000003.657:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.715814][ T28] audit: type=1326 audit(2000000003.657:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.744451][ T28] audit: type=1326 audit(2000000006.173:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.771349][ T28] audit: type=1326 audit(2000000006.173:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.795831][ T28] audit: type=1326 audit(2000000006.173:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.0.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021be7c819 code=0x7ffc0000 [ 462.919474][T15202] tipc: Enabled bearer , priority 0 [ 462.943763][T15201] tipc: Disabling bearer [ 463.034453][T15221] netlink: 'syz.0.3525': attribute type 1 has an invalid length. [ 463.098572][T15221] bond1: entered promiscuous mode [ 463.107812][T15221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.127376][T15221] bridge1: entered promiscuous mode [ 463.133712][T15221] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 463.168798][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3527'. [ 463.249755][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'. [ 463.438611][T15250] loop2: detected capacity change from 0 to 512 [ 463.469600][T15261] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 463.483355][T15262] geneve2: entered allmulticast mode [ 463.552297][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3540'. [ 463.587973][T15252] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3540'. [ 463.600348][T15250] EXT4-fs (loop2): 1 orphan inode deleted [ 463.620041][T15250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.759931][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.815619][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 463.890772][T15289] netlink: 'syz.5.3551': attribute type 1 has an invalid length. [ 464.164353][T15317] cgroup: noprefix used incorrectly [ 464.228047][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 464.263840][T15327] netlink: 'syz.5.3567': attribute type 1 has an invalid length. [ 464.303901][T15327] bond2: entered promiscuous mode [ 464.309377][T15327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.338448][T15327] bridge2: entered promiscuous mode [ 464.345407][T15327] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 464.384239][T15331] loop2: detected capacity change from 0 to 512 [ 464.532856][T15331] EXT4-fs (loop2): 1 orphan inode deleted [ 464.558142][T15331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.592580][T15353] netlink: 'syz.5.3577': attribute type 29 has an invalid length. [ 464.736509][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.909150][T15364] loop5: detected capacity change from 0 to 1764 [ 464.916456][T15364] iso9660: Unknown parameter 'utF8' [ 465.939321][ T35] IPVS: starting estimator thread 0... [ 466.072863][T15383] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 466.081496][T15365] IPVS: using max 2400 ests per chain, 120000 per kthread [ 466.139867][T15384] loop6: detected capacity change from 0 to 512 [ 466.147358][T15383] loop1: detected capacity change from 0 to 512 [ 466.172666][T15383] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 466.210172][T15384] EXT4-fs (loop6): 1 orphan inode deleted [ 466.239392][T15384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.356747][T15395] loop2: detected capacity change from 0 to 512 [ 466.377393][T15395] EXT4-fs (loop2): 1 orphan inode deleted [ 466.400818][T15395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.718969][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3591'. [ 466.764953][ T6040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.788514][T13041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.845937][ T3000] ================================================================== [ 466.854189][ T3000] BUG: KCSAN: data-race in d_delete / path_lookupat [ 466.860875][ T3000] [ 466.863233][ T3000] read-write to 0xffff88810068ac00 of 4 bytes by task 3643 on cpu 1: [ 466.871323][ T3000] d_delete+0xbe/0xe0 [ 466.875359][ T3000] d_delete_notify+0x32/0x100 [ 466.880077][ T3000] vfs_unlink+0x289/0x490 [ 466.884457][ T3000] filename_unlinkat+0x1e2/0x410 [ 466.889439][ T3000] __se_sys_unlink+0x2b/0xe0 [ 466.894081][ T3000] __x64_sys_unlink+0x1f/0x30 [ 466.898800][ T3000] x64_sys_call+0x2eb6/0x3020 [ 466.903525][ T3000] do_syscall_64+0x12c/0x370 [ 466.908152][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.914081][ T3000] [ 466.916438][ T3000] read to 0xffff88810068ac00 of 4 bytes by task 3000 on cpu 0: [ 466.924002][ T3000] path_lookupat+0x1d8/0x500 [ 466.928631][ T3000] filename_lookup+0x190/0x390 [ 466.933426][ T3000] do_readlinkat+0x74/0x2f0 [ 466.937966][ T3000] __x64_sys_readlink+0x47/0x60 [ 466.942865][ T3000] x64_sys_call+0x2b51/0x3020 [ 466.947588][ T3000] do_syscall_64+0x12c/0x370 [ 466.952214][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.958134][ T3000] [ 466.960475][ T3000] value changed: 0x00300180 -> 0x00004080 [ 466.966212][ T3000] [ 466.968554][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 466.974725][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 466.985173][ T3000] Tainted: [W]=WARN [ 466.989105][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.999202][ T3000] ================================================================== [ 467.062054][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3596'. [ 467.081170][T15410] loop0: detected capacity change from 0 to 512 [ 467.092930][T15410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.105709][T15410] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 467.710675][T13781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.