last executing test programs: 3.909824042s ago: executing program 3 (id=540): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(r1, r1, 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff134}]}, 0x10) (async) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21031fbd7000fddbdf2501000000080017012600000008000300", @ANYBLOB, @ANYBLOB="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", @ANYBLOB="1eb977912cb1029b4f90a2e89ed9dc58bf743b6dd122378e320b94cd455546888b8d431c2fe1281fd4bbb94307fcd27798186a7fbd3c30ea3d846376e7e932c0229185c6fcc42db176835b3fc590549d8f58aa93f846b3fa0cf82c811b09807951c9f57152b84fe6eaced77e147de3a46442cd5b51f538fac382ed1be2ea65d68e6b2fc7bbf54a7bff53b85aae1fc91c009aecdf0eed8cf15ba18284e1fb9de156c87779cc7084c07c9a4bd1a81914dcbcd7c2dd571c8522dff9efdb8dbdc96325ceab8c55691bf01ec99d06863671fd657b753305d0d322492f05cfa4e5179355d794492d17"], 0x24}, 0x1, 0x0, 0x0, 0x40040d2}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) 3.867897115s ago: executing program 3 (id=541): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x2, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2502000000080003000800000008000300020000000400018008000300060000001c000180060005004e22000008000700", @ANYRES32=0x0, @ANYBLOB="0500020001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") (rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, &(0x7f0000000100)) (async) pwrite64(r3, &(0x7f0000000200)='\"', 0x1, 0x4fed2) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000, 0xa00}]) (async) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000380), &(0x7f0000000400)=0x4) (async) r8 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x8a203) fcntl$dupfd(r8, 0x0, r8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000140)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r10 = open(&(0x7f00000003c0)='./file1\x00', 0x44142, 0x191) sendfile(r10, r10, 0x0, 0x800000009) 2.537789862s ago: executing program 1 (id=561): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) shmctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2102, 0x0) pread64(r3, &(0x7f0000000180)=""/181, 0xb5, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x2}, 0x18) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x2) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x45, &(0x7f0000000040), 0x4) 2.293502037s ago: executing program 4 (id=566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='.\x00', 0x280801f, &(0x7f00000000c0)={[{@oldalloc}, {@nobh}]}, 0xfe, 0x506, &(0x7f0000000400)="$eJzs3VFrHF0ZAOB3Jrvfl7T53FS90IJtsZW0aDdJY9vgRasg3hWUel9jsg0hm2xJNm0Tiqb4AwQRFbzRK28Ef4Ag/QkiFOy9qCiirV4oVEd2d7bGZDdJ6W6WL/s8cLpzZmbnfc+mc3bOzLATwNC6EBGXIyLLsuxKRJTy+WleYqdVGuu9evlkoVGSyLK7f00iyee1t/V+/no6f9toXv9msj/uxtb2yny1WlnP61P11eR1lm1fXV6dX6osVdZmZ2duzN2cuz433ZN2TkTErS//8Qff/dlXbv3qc49+d+/Pl7/VamDL7nb0UqvpxTefRUMhItb7EWxACs0WtlwfcC4AAByscbz/0Yj4dERciVKMNI/mjmC035kBAAAAvZLdHo/XSev6HwAAAHAypRExHklazu/3HY80LZdb9/B+PE6l1dpG/bNZ6c35gokopveXq5Xp/N6BiSgmjfpMfo9tu35tT302Is5ExPdLY816eaFWXRzomQ8AAAAYHqf3jP//UWqN/wEAAIATZmLQCQAAAAB9Z/wPAAAAJ5/xPwAAAJxoX71zp1Gy9vOvFx9uba7UHl5drGyslFc3F0aitv6gvFSrLTV/s2/1sO1Va7UHn4+1zcdT9cpGfWpja/veam1zrX5v2RMDAQAAYFDOnH/2IomInS+MpRGRJbuWFSOykd0rF44/P6B/0rdZ+Q/9ywM4fiODTgAYGIf0MLyKg04AGLjD+oGuN+/8uve5AAAA/TH5yWcvonX9v1ka3suXJYNMDOi7/Pp/Yl+H4eP6Pwwv1/9geBUPOgIwKIATLz3Crv7u1/+z7K2SAgAAem68WZK0nI8DxiNNy+WID5qPBSgm95erlemI+EhE/LZUfL9Rn2m+M3F6AAAAAAAAAAAAAAAAAAAAAAAAAACOKMuSyLoYy58O1m05AAAA8OEQkf4pyZ//NVm6NL73/MB7yT9LzdeIePTjuz98PF+vr8805v/tzfz6j/L5147//AUAAACwX3uc3h7HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvvXr5ZKFdjjPuX74UERO74ieRxy/EaPN1NIoRcervSRR2vS+JiJEexN95GhGf6NT+pJFWTORZ7I2fRsTYgOOf7kF8GGbPGv3PFzvtf2lcaL523v8KeXlX+/q/XfHb/d9Il/7vg04bTPfPOvv8F1Nd4z+NOFvo3P+04ydd4l88Yhu/8fXt7W7Lsp9GTHb8/kn+L9ZUUngwtbG1fXV5dX6pslRZm52duTF3c+763PTU/eVqJf+3Y4zvfeqX/zmo/aciRrv1vwe1/9IR2//v549ffqw1WdyzqBg/ybLLFzt//7Y+/7i9N377u+8z+Z+7UZ9sT++0pnc79/PfnDvfJbexpxGLXT7/Q/7+Hf6ndXbla9/5/VHXBQD6b2Nre2W+Wq2sd5xoHVscvI4JE4dNjMUxBp2Pg9ZpH8QeQz7fzkMdY9v/lfVsgwPslAAAgL7430H/oDMBAAAAAAAAAAAAAAAAAACA4XXYz4BFD35ObG/MncE0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQP8NAAD//1g3xo8=") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000340)=0x8, 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 2.145716485s ago: executing program 2 (id=569): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x803}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 2.07349018s ago: executing program 2 (id=570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x29}, {@loopback, 0x3, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") socketpair(0x2, 0x1, 0x8, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000007c0)={0x0, 'bridge_slave_0\x00', {0x2}, 0x4c05}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000140)={0x8, 0x0}) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000000)) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="57e0099a826f4f86410f1b5992299af827e93a1a0f48878488c86c212c39307a5a", 0x21}, {&(0x7f00000000c0)="65b0d6d1bf1cd0dcd996bf5c9c2cbb3630eb814a8243ed0a7916cf8e19ab6c73715626f020b899f7ec38ac00496d20db3108d11351e3379130c47b93ab554fbe8a755f0aa9e92ad8e4ef5921da6576d86abe8588ad7c0e64624750a64978ecb5aa16da69b62ac3442613", 0x6a}, {&(0x7f00000001c0)="41a12144b7634d0e5129335dfd47f85dd5", 0x11}, {&(0x7f0000000340)="5c5541913e4472ce0e9493cac4c77674e0533bc119da5410424903f375c3f6f72123ba4fddfb4023f96bafc54ca97805fbd3c32a2a0c60edc07441c61ef9cc8af9bff5046a141f66abf355da2e88f596366847ae397997f5273d5f5ed7e95d1a6a5b283ace150983335362432d55870e0b2984423f87d3975d08bcb13bceea5712e572dee5dab85368f874c7d9", 0x8d}, {&(0x7f0000000200)="b6b3528fbd9cca5a43d4970b88d85702d20cb13f098d624366a924d889971332a6b8b0bbbc68bcd99c5521e8cfa27c88c5100e", 0x33}, {&(0x7f0000000400)="1e0222a54dd245da50af7abf71d43f8b98539ab01f55d899ef6b2495c0c27ec9f4f93b7c7325ed7d62a11ec432ffe0fd6eb4f456bc4868157b3f9f3b4b2f1c35c11e06fe4e9da4d5d990fde76841e029b31b315d4a40b45a03b1ff1b3a352829af9eec1b37f8b655a58d8c5f538fa03f2896b41559e84813ce13f6875ec630b11762ad162a28b7150d6d34edbbbf9f44038f4b255da1c8cd62ea90a0792d68fc2b3bcc2c6bcac22f38ef8b12fae3109b69c3ab0a4afdf2bcfbb19731af52187a836405cde868673812185a4bd0", 0xcd}, {&(0x7f0000000240)="75a8c178", 0x4}, {&(0x7f0000000500)="921e04ffc395640f58933191f50eaf1a94e8b83261ce033fe4570b76870005e2241982812cf9c0d715fae673947d0a23e9b1c40f4998d6cd7efa", 0x3a}], 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x7c, r4, 0x109, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe48}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x15}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30d}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x72}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) 1.976765025s ago: executing program 4 (id=571): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x4, 0x0, 0x7c, 0xfff, 0x7}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './cgroup.net/devices.allow'}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r2, 0x0, 0x0, 0x40, &(0x7f0000000dc0)={0x0, 0x989680}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x64}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000b40)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x26d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7dffffffffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x5a05e000) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r7) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x54, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040044}, 0x1) fcntl$lock(r7, 0x5, &(0x7f0000000e00)={0x0, 0x1, 0x3, 0xfffffffffffffffe}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r6, 0x1, 0xff1f, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) 1.974281826s ago: executing program 2 (id=572): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410484, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x580, &(0x7f0000001b40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000010c0)) r1 = creat(0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.928531258s ago: executing program 4 (id=573): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$eJzs3cFqE0EYB/AvTZqsBbVn8bDgxZOobxCkghAQqrkbaL20Imwv0VMeQ/ANfByPPkZPvUXaXVy7LSIl6WS7vx+E/dj/DjuTQCaHmeyHx5+ODj6ffFz++hZZlscgYhFnEbuxFf0o9arj1kU9jGHUFgEAtM3+/mycug+sUO/qqaIYz7YjYnQlm/64pV4BAAAAAAAAAACwYjdZ//836/8BoH2s/7/7imI826l+v11m/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQztly+XD5j1fq/gEAq2f+B4DuMf8DQPeY/wGge949qIo8zyJOF/PpfFoey9Ov30z2nucXdutWp/P5dLuqJ3svyjxv5jtV+5fX5sN4+qTMz7NXbyeNfBQH6xw4AAAAAAAAAAAAAAAAAAAAbJBn+R+N/f39Mj+/YBTX5FnE90v/D9DYvz+IR4PbHAkAAAAAAAAAAAAAAAAAAAC018mXr0ez4+PDorPFz35EsrtHr/wYUr8JjeJe3KBVtmmjaFHRj4jDUQxivfd6f///L079zQQAAAAAAAAAAAAAAAAAAN1Tb/pN3RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASKd+/v/6itRjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhdwAAAP//UhGHcQ==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9101) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) 1.749311058s ago: executing program 4 (id=577): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x8, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xa8d9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) sendfile(r1, r2, &(0x7f00000002c0)=0x9, 0xe) close(r0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.608483167s ago: executing program 4 (id=578): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f00007bc000/0x1000)=nil, 0x1000, 0x1000001) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000140)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x61, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="52a2a04810522f933f5de4f61565c57f9fb16e4ad09cd35fbe67e358965a1daced7588d4cdb11270f794c571e91f31c6cadcccc14bb1f3f7548999098d7246c119cc494be1fb9be8d7a1a4ead014573b6b139b1796c0e2805bdb5e5b4282522b57ed4f4b3f9fd30f57", @ANYRES16=r2, @ANYRESOCT=r2], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x85) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x800b, 0x0, 0x7}, &(0x7f00000001c0)=0x10) 1.567529709s ago: executing program 1 (id=579): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x1, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) unshare(0x400) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 1.469916915s ago: executing program 1 (id=580): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x2, 0x8, 0x3, 0x9, 0xc, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@broadcast, 0x21, 0x10}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in6=@mcast2, 0x29, 0x4, 0x4}]}, 0x60}}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100010, 0x10000, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x5ca0, &(0x7f00000000c0)={0x0, 0x79bf, 0x1, 0x8000, 0xc00251}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) symlinkat(&(0x7f0000004d40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800800010067747000140002800800030001"], 0x40}}, 0x20000000) 1.361383361s ago: executing program 4 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000a8e000/0x1000)=nil, 0x1000, 0x1000008, 0xc5054dee95ab75b8, 0xffffffffffffffff, 0x8000000) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7d336000) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x298, 0xd8, 0x5802, 0x294, 0xd8, 0x294, 0x1f0, 0x378, 0x378, 0x1f0, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0xd0fe29bd2280622e, 0x80}, 0x0, 0xa8, 0xd8, 0x52020000}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x2}, {0x0, 0x5, 0x5}, 0x40, 0x8000}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r9, 0x0, &(0x7f0000000140), 0x40800) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r2) socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.360679461s ago: executing program 0 (id=582): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0x2, 0x80, 0x0, 0x323}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000250500070000000900010073797a30000000004c000000090a01044c1fce14000000000700000108000a40000000000900020073797a300000000008000840010073797a30000000000800034000000506140000001000010000000000000000000084000a"], 0x94}}, 0x20050800) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x2, 0x1, 0xfffffffb}) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x2, 0x1, 0xfffffffb}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001b40)={'gre0\x00', 0x0, 0xc1, 0x7800, 0x1b006178, 0x401, {{0x5, 0x4, 0x1, 0x21, 0x14, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001b40)={'gre0\x00', 0x0, 0xc1, 0x7800, 0x1b006178, 0x401, {{0x5, 0x4, 0x1, 0x21, 0x14, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2}}}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\x00', 0xfffffe84, 0x4fecc) (async) pwrite64(r6, &(0x7f00000005c0)='\x00', 0xfffffe84, 0x4fecc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x2, 0xfffffffe}, {0x14}, {}, {0x6}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r7, 0x8, 0x0, 0x8000) (async) fallocate(r7, 0x8, 0x0, 0x8000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xc82f}, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRESHEX=r0, @ANYRES8=r8, @ANYBLOB="d3ca714e0ee25730dc10cfca083dc1fc5dc434e2c08c5a2a316650c460a408dbabbf9f36a7e144b8ad13bb", @ANYRESDEC=r9], 0x40}}, 0x5) 1.267526987s ago: executing program 0 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000020301040000000000000000000000000800010001000000090002000000000202000000090002000000000201000000080003c0"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x1d4, r5, 0x800, 0x70bc28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc97eba3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000005}, 0x240400c4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff010}, {0x6, 0x0, 0x10}]}, 0x10) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000ec0)={0x9, {{0xa, 0x4e24, 0x19, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8c2}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x0, @loopback, 0x5}}, {{0xa, 0x4e21, 0x40, @remote, 0x1}}, {{0xa, 0x4e20, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}}, {{0xa, 0x4e23, 0x7ff, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x4, @mcast2, 0xe9}}, {{0xa, 0x4e20, 0xff, @mcast2, 0x200}}, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}, {{0xa, 0x4e24, 0x0, @loopback, 0xf}}]}, 0x490) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) setresgid(0x0, 0xffffffffffffffff, 0xee00) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 1.266984117s ago: executing program 3 (id=584): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 1.241561048s ago: executing program 3 (id=585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.196340521s ago: executing program 2 (id=586): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000180)) (async) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="410000000101010500000000000000000200000006001240000300002c00028006000340000400000c00028005000100210000001400018008000100ac1414aa080002007f000001"], 0x48}, 0x1, 0x0, 0x0, 0x20008081}, 0x24040890) shutdown(r1, 0x1) 1.048747489s ago: executing program 3 (id=587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48) pipe(&(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a"], 0xb4}}, 0x24040810) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a"], 0xb4}}, 0x24040810) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r4, 0xef, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e21, @remote}}, 0x8, 0x3ff, 0x9, 0x1, 0x7}, &(0x7f0000000740)=0x98) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0x9, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000080c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, r7, 0x0, 0x0, 0x400a00}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f00000000c0)="e321fb92d586adb266", 0x9, 0x7ff, 0x0, 0x2}]) (async) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, r7, 0x0, 0x0, 0x400a00}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f00000000c0)="e321fb92d586adb266", 0x9, 0x7ff, 0x0, 0x2}]) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300300000fe8000000000000000000000000000aafe8000000000000000000000000000aa89050000000000003126b04faa6f243a113a3fbf8e044f6ca9c00f53a9f67412bf5970cb6ec8ce2900ffba087c7de1a2"], 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2, 0x14, 0x8, 0x2, 0x18, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010100, @in6=@private2, 0x21, 0x0, 0x10}, @sadb_lifetime={0x4, 0x5, 0x9, 0x2, 0xfffffffffffffffd, 0x7}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}]}, 0xc0}}, 0x51) r10 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.010651052s ago: executing program 2 (id=588): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.001168952s ago: executing program 1 (id=589): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@delqdisc={0xfffffffffffffda7, 0x25, 0x200, 0x70bd25, 0x2ddffbff, {0x0, 0x0, 0x0, r2, {0xc, 0x9}, {0x0, 0x1}, {0x4, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4000) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) (async) sendfile(r3, r3, 0x0, 0xe3aa6ea) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="310b2cffffff7fdb57001f"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2ac, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x120, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 912.917147ms ago: executing program 1 (id=590): r0 = socket(0x2a, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x0, 0x7ffff, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000008c000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x8001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 905.420058ms ago: executing program 2 (id=591): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0x9}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) signalfd(r1, &(0x7f00000000c0)={[0x4]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4004000}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r4, 0x10, 0x101}, 0xc) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd26, 0x21dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d58078da822f49f}, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x4, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x49}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000000200)="000bda", 0x3) sendfile(r9, r7, 0x0, 0x40001) sendfile(r9, r8, 0x0, 0x7ffff000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000000)="3260cad1dca1", 0x6}], 0x1}, 0x880) 653.250053ms ago: executing program 0 (id=592): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x7) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x523800, 0x0) getdents(r1, &(0x7f0000000180)=""/141, 0x8d) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x1b, 0x1, '/@x\'\x04#\xe2+.*&\xc1#[({^]-&:%\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x19, 0x1, '/dev/bus/usb/00#/00#\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x8880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x102}, 0x80c1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x4010) sendmsg$NFC_CMD_GET_SE(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x3, 0x3, 0x2a, @dev={0xfe, 0x80, '\x00', 0xc}, @local, 0x7800, 0x40, 0x6, 0xffffff00}}) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r10, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000040) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000a00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x45}, @ldst={0x0, 0x2, 0x4, 0xa, 0x5, 0x8, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000a40)='GPL\x00', 0xfdb, 0xf8, &(0x7f0000000a80)=""/248, 0x40f00, 0x18, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0x5, 0x5, 0x9}, 0x10, 0x20ad9, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000bc0)=[{0x4, 0x3, 0x0, 0x2}, {0x4, 0x1, 0x0, 0x7}, {0x4, 0x2, 0xc, 0x2}, {0x2, 0x4, 0x1, 0x5}, {0x2, 0x1, 0xc, 0xa}, {0x0, 0x1, 0xd, 0x1}, {0x3, 0x2, 0x4, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r11, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000dc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r12, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x4005010) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r14, 0x890c, &(0x7f00000011c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0xd000, &(0x7f0000001180)='pim6reg0\x00', 0x81, 0x68, 0x1}) r15 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, 0xffffffffffffffff, &(0x7f0000001280)={0x10002000}) 604.677165ms ago: executing program 1 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x8, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r4, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800"], 0x90}, 0x1, 0xba01}, 0x810) 424.772166ms ago: executing program 0 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x20020080, &(0x7f0000000480)={0xa, 0x4e23, 0x3f, @loopback, 0x3}, 0x1c) sendmmsg$sock(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000300000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010003000000fbdbdf25250000000e0001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x8, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x16, 0x2fa, &(0x7f0000000c80)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08000402907800000000e000000211009078e0000002000100010000000000000000a8ba712fd9841a2fa92b3e92e404dbac244225cacde7a354cf7b14fe07c5f94d53ae698382e8dd88767adb515d0379c5161317e30d9cb8b30d900f2ba9db11d22590fea7f09e2a7e78579fa8dcb54934df6f7bb3f4cf3c42f73117dd49bf6931fab5254a9e1230ed72adae609b842d10348e211527685bfb56ce0a53"], 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) prctl$PR_SET_THP_DISABLE(0x29, 0x2000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) 257.540266ms ago: executing program 0 (id=595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbcc7f89f40000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 257.013766ms ago: executing program 3 (id=596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010c25"], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=597): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82803, 0x130) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', r6, r3, 0x1, 0x1, 0x2}, 0x50) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x1000, {0x0, 0x0, 0x0, 0x10000032, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237600a8ca5b07dcc14fa02c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r8, &(0x7f0000000280), 0x0}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x78}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2044094}, 0x2c044c44) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$SIOCGSKNS(r9, 0x894c, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) eventfd2(0x4f9e1aa, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c0056833463dba3e5e7d24cf9a637e9db340b"]) kernel console output (not intermixed with test programs): eam0: Port device team_slave_0 added [ 26.931500][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.938727][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.946066][ T3329] bridge_slave_1: entered allmulticast mode [ 26.953033][ T3329] bridge_slave_1: entered promiscuous mode [ 26.960256][ T3316] team0: Port device team_slave_1 added [ 26.970085][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.977087][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.003441][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.018771][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.026140][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.033298][ T3325] bridge_slave_0: entered allmulticast mode [ 27.039725][ T3325] bridge_slave_0: entered promiscuous mode [ 27.051021][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.058271][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.066352][ T3325] bridge_slave_1: entered allmulticast mode [ 27.072978][ T3325] bridge_slave_1: entered promiscuous mode [ 27.084439][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.091479][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.118338][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.129917][ T3312] team0: Port device team_slave_0 added [ 27.145476][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.157499][ T3312] team0: Port device team_slave_1 added [ 27.164492][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.176906][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.184006][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.210524][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.231423][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.250866][ T3329] team0: Port device team_slave_0 added [ 27.256697][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.263661][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.292203][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.308845][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.319386][ T3329] team0: Port device team_slave_1 added [ 27.333598][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.340922][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.367409][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.396502][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.403716][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.430135][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.450887][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.457978][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.484726][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.503751][ T3325] team0: Port device team_slave_0 added [ 27.510753][ T3325] team0: Port device team_slave_1 added [ 27.516769][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.523736][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.549945][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.566788][ T3313] hsr_slave_0: entered promiscuous mode [ 27.572899][ T3313] hsr_slave_1: entered promiscuous mode [ 27.594775][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.602285][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.629328][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.640931][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.648102][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.674627][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.710833][ T3316] hsr_slave_0: entered promiscuous mode [ 27.717025][ T3316] hsr_slave_1: entered promiscuous mode [ 27.723096][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.728852][ T3316] Cannot create hsr debugfs directory [ 27.741411][ T3312] hsr_slave_0: entered promiscuous mode [ 27.747595][ T3312] hsr_slave_1: entered promiscuous mode [ 27.753363][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.759110][ T3312] Cannot create hsr debugfs directory [ 27.775708][ T3329] hsr_slave_0: entered promiscuous mode [ 27.781888][ T3329] hsr_slave_1: entered promiscuous mode [ 27.788151][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 27.794181][ T3329] Cannot create hsr debugfs directory [ 27.825997][ T3325] hsr_slave_0: entered promiscuous mode [ 27.839685][ T3325] hsr_slave_1: entered promiscuous mode [ 27.845665][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 27.851573][ T3325] Cannot create hsr debugfs directory [ 28.020786][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.036605][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.048832][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.058410][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.078602][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.090040][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.104752][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.119155][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.138190][ T3329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.148642][ T3329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.158747][ T3329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.180022][ T3329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.195720][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.225609][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.249222][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.258858][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.269213][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.281540][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.292557][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.303408][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.319736][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.346969][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.357249][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.369868][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.382047][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.389423][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.419178][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.426551][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.436354][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.443851][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.454178][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.462414][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.492744][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.511082][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.524887][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.535714][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.574017][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.582891][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.605682][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.612747][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.630598][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.640564][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.649758][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.660688][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.669332][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.676443][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.692396][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.699577][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.714567][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.725436][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.733039][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.741856][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.749232][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.768098][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.775540][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.802453][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.844446][ T3329] veth0_vlan: entered promiscuous mode [ 28.878387][ T3329] veth1_vlan: entered promiscuous mode [ 28.929877][ T3313] veth0_vlan: entered promiscuous mode [ 28.937818][ T3329] veth0_macvtap: entered promiscuous mode [ 28.953001][ T3329] veth1_macvtap: entered promiscuous mode [ 28.970614][ T3313] veth1_vlan: entered promiscuous mode [ 28.980350][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.988930][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.004946][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.013994][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.023410][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.047527][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.063685][ T3313] veth0_macvtap: entered promiscuous mode [ 29.075585][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.086275][ T3313] veth1_macvtap: entered promiscuous mode [ 29.112935][ T3329] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.129561][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.140132][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.158073][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.189908][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.210713][ T3472] loop3: detected capacity change from 0 to 512 [ 29.224505][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.233626][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.253532][ T3312] veth0_vlan: entered promiscuous mode [ 29.260567][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.270552][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.271775][ T3312] veth1_vlan: entered promiscuous mode [ 29.294507][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.316536][ T3472] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.319550][ T3312] veth0_macvtap: entered promiscuous mode [ 29.352281][ T3312] veth1_macvtap: entered promiscuous mode [ 29.385011][ T3316] veth0_vlan: entered promiscuous mode [ 29.403114][ T3486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.412774][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.430761][ T3325] veth0_vlan: entered promiscuous mode [ 29.456441][ T3316] veth1_vlan: entered promiscuous mode [ 29.463302][ T3325] veth1_vlan: entered promiscuous mode [ 29.463809][ C1] hrtimer: interrupt took 27112 ns [ 29.470547][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.504900][ T3325] veth0_macvtap: entered promiscuous mode [ 29.512366][ T3325] veth1_macvtap: entered promiscuous mode [ 29.539709][ T3316] veth0_macvtap: entered promiscuous mode [ 29.548419][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.572208][ T3316] veth1_macvtap: entered promiscuous mode [ 29.584520][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.602134][ T3486] loop2: detected capacity change from 0 to 512 [ 29.639786][ T3458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.654402][ T3486] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 29.655770][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.670808][ T3502] sctp: [Deprecated]: syz.3.10 (pid 3502) Use of int in max_burst socket option deprecated. [ 29.670808][ T3502] Use struct sctp_assoc_value instead [ 29.688900][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.709175][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.728804][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.745229][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.766723][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.785857][ T3506] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 29.788410][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 29.788425][ T29] audit: type=1400 audit(1769413677.460:156): avc: denied { write } for pid=3505 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.838870][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.873700][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.902303][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.921670][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.960319][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.993665][ T29] audit: type=1400 audit(1769413677.660:157): avc: denied { getopt } for pid=3512 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.030692][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.054700][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.063853][ T29] audit: type=1326 audit(1769413677.670:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 30.079506][ T3522] loop0: detected capacity change from 0 to 512 [ 30.088308][ T29] audit: type=1326 audit(1769413677.690:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 30.114450][ T3522] EXT4-fs: Ignoring removed orlov option [ 30.117930][ T29] audit: type=1326 audit(1769413677.690:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 30.151215][ T29] audit: type=1326 audit(1769413677.690:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 30.175724][ T29] audit: type=1326 audit(1769413677.700:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61423f4ad7 code=0x7ffc0000 [ 30.199028][ T29] audit: type=1326 audit(1769413677.700:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f614239c0d9 code=0x7ffc0000 [ 30.222263][ T29] audit: type=1326 audit(1769413677.700:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 30.245502][ T29] audit: type=1326 audit(1769413677.700:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 30.273948][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.287100][ T3522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.322385][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.338150][ T3526] Zero length message leads to an empty skb [ 30.354432][ T3522] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1: invalid indirect mapped block 83886080 (level 1) [ 30.381538][ T3537] capability: warning: `syz.1.18' uses 32-bit capabilities (legacy support in use) [ 30.397276][ T3535] loop4: detected capacity change from 0 to 512 [ 30.419184][ T3535] ======================================================= [ 30.419184][ T3535] WARNING: The mand mount option has been deprecated and [ 30.419184][ T3535] and is ignored by this kernel. Remove the mand [ 30.419184][ T3535] option from the mount to silence this warning. [ 30.419184][ T3535] ======================================================= [ 30.464106][ T3522] EXT4-fs (loop0): 1 orphan inode deleted [ 30.469994][ T3522] EXT4-fs (loop0): 1 truncate cleaned up [ 30.486289][ T3547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.495150][ T3547] netlink: 'syz.3.17': attribute type 5 has an invalid length. [ 30.496260][ T3522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.502733][ T3547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.551833][ T3547] geneve2: entered promiscuous mode [ 30.557368][ T3547] geneve2: entered allmulticast mode [ 30.585565][ T2256] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 30.613663][ T2256] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 30.622335][ T2256] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 30.636337][ T3550] loop1: detected capacity change from 0 to 2048 [ 30.654335][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.665659][ T3550] ext4: Unknown parameter 'smackfsdef' [ 30.674218][ T3552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 30.676810][ T2256] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 30.705210][ T3552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 30.731030][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.737349][ T3550] loop1: detected capacity change from 0 to 8192 [ 30.758471][ T3535] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.800412][ T3550] loop1: p1 < > p2 p4 < p5 > [ 30.805188][ T3550] loop1: partition table partially beyond EOD, truncated [ 30.833372][ T3550] loop1: p1 start 134217728 is beyond EOD, truncated [ 30.838580][ T3567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 30.840197][ T3550] loop1: p2 size 591360 extends beyond EOD, truncated [ 30.857278][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.861264][ T3563] netlink: 6012 bytes leftover after parsing attributes in process `syz.0.26'. [ 30.878198][ T3550] loop1: p5 size 591360 extends beyond EOD, truncated [ 30.938205][ T3572] loop0: detected capacity change from 0 to 1024 [ 30.945110][ T3572] EXT4-fs: Ignoring removed oldalloc option [ 30.955493][ T3572] EXT4-fs: inline encryption not supported [ 30.978341][ T3572] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.990059][ T3572] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.010350][ T3574] loop1: detected capacity change from 0 to 2048 [ 31.020509][ T3570] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 31.045216][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 31.045654][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 31.056611][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 31.082134][ T3572] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.30: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.098952][ T3572] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.30: Failed to acquire dquot type 0 [ 31.117409][ T3572] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.30: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.132197][ T3572] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.30: Invalid inode bitmap blk 0 in block_group 0 [ 31.146195][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.158905][ T3572] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 31.159112][ T2256] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.168232][ T3578] loop4: detected capacity change from 0 to 1024 [ 31.192465][ T3572] EXT4-fs (loop0): 1 orphan inode deleted [ 31.199450][ T3572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.213201][ T3578] EXT4-fs: Ignoring removed nobh option [ 31.218923][ T3578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.238879][ T2256] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 31.257944][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.268136][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.268410][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.333334][ T3567] loop2: detected capacity change from 0 to 512 [ 31.347279][ T3567] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 31.405460][ T3595] tmpfs: Unknown parameter 'fsuuid' [ 31.414189][ T3596] xt_hashlimit: size too large, truncated to 1048576 [ 31.472746][ T3606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.609958][ T3578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 31.649011][ T3616] syz.1.39 uses obsolete (PF_INET,SOCK_PACKET) [ 31.680494][ T3616] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 31.715951][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.779082][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.919543][ T3641] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.976425][ T3677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'. [ 32.020398][ T3641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.033457][ T3675] ------------[ cut here ]------------ [ 32.039621][ T3675] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 32.059804][ T3675] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.0.44/3675 [ 32.059944][ T3641] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.081109][ T3675] Modules linked in: [ 32.085044][ T3675] CPU: 1 UID: 0 PID: 3675 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.094679][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.104838][ T3675] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 32.111122][ T3675] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 32.130780][ T3675] RSP: 0018:ffffc9000f6cf388 EFLAGS: 00010246 [ 32.136870][ T3675] RAX: ffff88811b624c90 RBX: 00000000ffffffff RCX: 0000000000000000 [ 32.144960][ T3675] RDX: ffffffff867f0650 RSI: ffffffff8680489f RDI: ffffffff86fb96f0 [ 32.153032][ T3675] RBP: ffff88811d2fb840 R08: 0000007800000000 R09: 0000000000000000 [ 32.161191][ T3675] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811d2fb800 [ 32.169237][ T3675] R13: 0000000000000000 R14: ffff88811d2fb84c R15: ffff88811d2fb838 [ 32.177373][ T3675] FS: 00007f90cd8366c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 32.186450][ T3675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.193055][ T3675] CR2: 00002000000054c0 CR3: 000000011bc08000 CR4: 00000000003506f0 [ 32.201314][ T3675] Call Trace: [ 32.204651][ T3675] [ 32.207642][ T3675] reg_set_min_max+0x1f2/0x260 [ 32.212449][ T3675] check_cond_jmp_op+0x13bd/0x1a80 [ 32.217653][ T3675] do_check+0x440c/0x9060 [ 32.222043][ T3675] do_check_common+0xd0f/0x1630 [ 32.227031][ T3675] bpf_check+0x2f6d/0xc7e0 [ 32.231624][ T3675] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 32.237779][ T3675] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 32.243460][ T3675] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 32.249761][ T3675] ? pcpu_block_update+0x232/0x3b0 [ 32.254968][ T3675] ? _find_next_zero_bit+0x64/0xa0 [ 32.260095][ T3675] ? pcpu_block_refresh_hint+0x157/0x170 [ 32.265787][ T3675] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 32.271961][ T3675] ? css_rstat_updated+0xbb/0x280 [ 32.277407][ T3675] ? mod_memcg_state+0x182/0x260 [ 32.283075][ T3675] ? __rcu_read_unlock+0x4e/0x70 [ 32.288274][ T3675] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 32.294464][ T3675] ? pcpu_alloc_noprof+0xb08/0x1010 [ 32.299711][ T3675] ? should_fail_ex+0x30/0x280 [ 32.304571][ T3675] ? __kmalloc_noprof+0x2a3/0x580 [ 32.309643][ T3675] ? security_bpf_prog_load+0x60/0x140 [ 32.315376][ T3675] ? selinux_bpf_prog_load+0xac/0xd0 [ 32.320702][ T3675] ? security_bpf_prog_load+0x9e/0x140 [ 32.326222][ T3675] bpf_prog_load+0xf76/0x1140 [ 32.330958][ T3675] ? security_bpf+0x2b/0x90 [ 32.335635][ T3675] __sys_bpf+0x469/0x7b0 [ 32.339919][ T3675] __x64_sys_bpf+0x41/0x50 [ 32.344555][ T3675] x64_sys_call+0x28e1/0x3000 [ 32.349329][ T3675] do_syscall_64+0xc0/0x2a0 [ 32.354041][ T3675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.359953][ T3675] RIP: 0033:0x7f90cedfacb9 [ 32.364437][ T3675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.368558][ T3677] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 32.384232][ T3675] RSP: 002b:00007f90cd836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.384262][ T3675] RAX: ffffffffffffffda RBX: 00007f90cf076090 RCX: 00007f90cedfacb9 [ 32.384305][ T3675] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 32.384320][ T3675] RBP: 00007f90cee68bf7 R08: 0000000000000000 R09: 0000000000000000 [ 32.384335][ T3675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.384428][ T3675] R13: 00007f90cf076128 R14: 00007f90cf076090 R15: 00007ffcaab35898 [ 32.384452][ T3675] [ 32.384472][ T3675] ---[ end trace 0000000000000000 ]--- [ 32.420129][ T3675] syz.0.44 (3675) used greatest stack depth: 10008 bytes left [ 32.456649][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.475930][ T3682] Illegal XDP return value 3856727913 on prog (id 12) dev N/A, expect packet loss! [ 32.562730][ T3694] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.581423][ T3696] netlink: 2 bytes leftover after parsing attributes in process `syz.2.52'. [ 32.590760][ T3694] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.599578][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 32.683457][ T3709] can0: slcan on ptm0. [ 32.730572][ T3718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.826950][ T3733] EXT4-fs: Ignoring removed bh option [ 32.851283][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.893882][ T3709] can0 (unregistered): slcan off ptm0. [ 32.943586][ T3747] netem: incorrect gi model size [ 32.948655][ T3747] netem: change failed [ 32.973030][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.050147][ T3763] @0Ù: renamed from dummy0 (while UP) [ 33.060589][ T3764] process 'syz.1.64' launched './file0' with NULL argv: empty string added [ 33.081378][ T3767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.104330][ T3768] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.135883][ T3768] EXT4-fs: Ignoring removed oldalloc option [ 33.141888][ T3768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.159773][ T3778] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 33.219971][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.253782][ T3768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.284007][ T3796] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.291955][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.316467][ T3796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.332041][ T3796] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.347238][ T3796] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.71: bg 0: block 345: padding at end of block bitmap is not set [ 33.382067][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.422461][ T3808] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 33.433942][ T3808] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 33.437965][ T3805] Unknown options in mask 20 [ 33.449475][ T3808] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.460231][ T3808] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.76: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 33.479302][ T3808] EXT4-fs (loop4): no journal found [ 33.484599][ T3808] EXT4-fs (loop4): can't get journal size [ 33.496710][ T3808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.522717][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.572103][ T3821] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.606819][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.614375][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.621895][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.629432][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.636897][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.644311][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.651707][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.659181][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.667245][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.674920][ T3409] hid-generic 0006:D04A:0001.0001: unknown main item tag 0x0 [ 33.682628][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.719623][ T3409] hid-generic 0006:D04A:0001.0001: hidraw0: VIRTUAL HID v5.88 Device [syz0] on syz1 [ 33.735039][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.785265][ T3830] fido_id[3830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.955848][ T3850] bridge0: entered promiscuous mode [ 33.962813][ T3850] bridge0: port 3(macsec1) entered blocking state [ 33.969519][ T3850] bridge0: port 3(macsec1) entered disabled state [ 33.978751][ T3850] macsec1: entered allmulticast mode [ 33.984197][ T3850] bridge0: entered allmulticast mode [ 33.990954][ T3850] macsec1: left allmulticast mode [ 33.996561][ T3850] bridge0: left allmulticast mode [ 34.002647][ T3850] bridge0: left promiscuous mode [ 34.056376][ T3866] random: crng reseeded on system resumption [ 34.201451][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.209333][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.232174][ T3889] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 34.268763][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.279920][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.297437][ T3896] xt_socket: unknown flags 0x4c [ 34.324516][ T3665] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.352758][ T3904] set_capacity_and_notify: 11 callbacks suppressed [ 34.352775][ T3904] loop3: detected capacity change from 0 to 512 [ 34.353206][ T3665] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.368623][ T3904] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 34.380770][ T3665] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.396451][ T3904] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.403331][ T3904] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.101: bad orphan inode 15 [ 34.414270][ T3665] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.424219][ T3904] ext4_test_bit(bit=14, block=18) = 1 [ 34.429732][ T3904] is_bad_inode(inode)=0 [ 34.434443][ T3904] NEXT_ORPHAN(inode)=1023 [ 34.439003][ T3904] max_ino=32 [ 34.443306][ T3904] i_nlink=0 [ 34.454532][ T3907] loop4: detected capacity change from 0 to 512 [ 34.490653][ T3907] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 34.499082][ T3907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.506087][ T3907] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.521076][ T3907] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 34.540678][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.99: corrupted inode contents [ 34.553050][ T3907] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.99: mark_inode_dirty error [ 34.593687][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.99: corrupted inode contents [ 34.618757][ T3907] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.99: mark_inode_dirty error [ 34.632324][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.99: corrupted inode contents [ 34.646892][ T3907] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 34.656243][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.99: corrupted inode contents [ 34.668598][ T3907] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.99: mark_inode_dirty error [ 34.679902][ T3907] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 34.690143][ T3907] EXT4-fs (loop4): 1 truncate cleaned up [ 34.697612][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.813634][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 34.813653][ T29] audit: type=1400 audit(1769413682.400:607): avc: denied { create } for pid=3897 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 34.840412][ T29] audit: type=1326 audit(1769413682.400:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd12deacb9 code=0x7ffc0000 [ 34.864247][ T29] audit: type=1326 audit(1769413682.400:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd12deacb9 code=0x7ffc0000 [ 34.888288][ T29] audit: type=1400 audit(1769413682.400:610): avc: denied { sys_admin } for pid=3897 comm="syz.4.99" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 34.911471][ T3904] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.101: corrupted xattr block 19: e_value size too large [ 34.965110][ T3904] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 34.975317][ T3904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.008676][ T3904] bridge0: port 3(veth0_to_bridge) entered blocking state [ 35.016231][ T3904] bridge0: port 3(veth0_to_bridge) entered disabled state [ 35.030610][ T3904] veth0_to_bridge: entered allmulticast mode [ 35.049670][ T3904] veth0_to_bridge: entered promiscuous mode [ 35.055996][ T3904] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 35.070670][ T3904] bridge0: port 3(veth0_to_bridge) entered blocking state [ 35.077894][ T3904] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 35.089874][ T3919] tipc: Started in network mode [ 35.094934][ T3919] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 35.100893][ T29] audit: type=1400 audit(1769413682.780:611): avc: denied { watch watch_reads } for pid=3903 comm="syz.3.101" path=2F32302FE91F7189591E9233614B dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.104036][ T3919] tipc: Enabling of bearer rejected, failed to enable media [ 35.129306][ T29] audit: type=1400 audit(1769413682.780:612): avc: denied { getopt } for pid=3903 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.129367][ T29] audit: type=1400 audit(1769413682.780:613): avc: denied { mounton } for pid=3903 comm="syz.3.101" path=2F32302FE91F7189591E9233614B2F66696C6530 dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.200939][ T29] audit: type=1326 audit(1769413682.880:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cedfacb9 code=0x7ffc0000 [ 35.224559][ T29] audit: type=1326 audit(1769413682.880:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f90cedfacb9 code=0x7ffc0000 [ 35.237039][ T3923] loop2: detected capacity change from 0 to 512 [ 35.248399][ T29] audit: type=1326 audit(1769413682.880:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cedfacb9 code=0x7ffc0000 [ 35.260346][ T3923] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 35.295557][ T3927] ip6erspan0: entered promiscuous mode [ 35.306441][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.325735][ T3923] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 35.336379][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.368527][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.387927][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.428746][ T3940] loop3: detected capacity change from 0 to 1024 [ 35.435936][ T3940] EXT4-fs: Ignoring removed orlov option [ 35.443900][ T3940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.461803][ T3940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.505945][ T3935] EXT4-fs (loop3): shut down requested (0) [ 35.519684][ T3935] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 35.549959][ T3935] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 35.573519][ T3940] tc_dump_action: action bad kind [ 35.578875][ T3935] tc_dump_action: action bad kind [ 35.588218][ T3950] loop0: detected capacity change from 0 to 2048 [ 35.596597][ T3964] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 35.603445][ T3964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 35.691000][ T3969] __nla_validate_parse: 6 callbacks suppressed [ 35.691025][ T3969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 35.706558][ T3969] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 35.733148][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.757941][ T3971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'. [ 35.767026][ T3971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.123'. [ 36.161688][ T3981] loop3: detected capacity change from 0 to 512 [ 36.192275][ T3981] EXT4-fs: Ignoring removed oldalloc option [ 36.198365][ T3981] EXT4-fs: inline encryption not supported [ 36.253687][ T3981] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.266447][ T3984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.126'. [ 36.296250][ T3981] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.125: bg 0: block 64: padding at end of block bitmap is not set [ 36.332338][ T3981] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.125: Failed to acquire dquot type 0 [ 36.387271][ T3981] EXT4-fs (loop3): 1 truncate cleaned up [ 36.393452][ T3981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.539234][ T4000] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 36.550392][ T3992] bridge0: entered promiscuous mode [ 36.560742][ T3992] bridge0: port 3(macvtap1) entered blocking state [ 36.567702][ T3992] bridge0: port 3(macvtap1) entered disabled state [ 36.575913][ T4000] loop2: detected capacity change from 0 to 512 [ 36.582635][ T4000] EXT4-fs: Ignoring removed orlov option [ 36.588434][ T4000] EXT4-fs: Ignoring removed i_version option [ 36.594610][ T4000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.611656][ T3992] macvtap1: entered allmulticast mode [ 36.617165][ T3992] bridge0: entered allmulticast mode [ 36.625753][ T4002] loop0: detected capacity change from 0 to 2048 [ 36.634940][ T3992] macvtap1: left allmulticast mode [ 36.640432][ T3992] bridge0: left allmulticast mode [ 36.647015][ T3992] bridge0: left promiscuous mode [ 36.668587][ T4000] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 36.677097][ T4000] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 36.687748][ T4000] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.694312][ T4000] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 36.709085][ T4000] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 36.725042][ T4000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.131: bg 0: block 40: padding at end of block bitmap is not set [ 36.762983][ T4000] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 36.777513][ T4005] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 36.783920][ T4000] EXT4-fs (loop2): 1 truncate cleaned up [ 36.791274][ T4000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.816592][ T4005] @ÿ: renamed from bond_slave_0 (while UP) [ 36.826444][ T4000] EXT4-fs (loop2): shut down requested (1) [ 36.833135][ T4000] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 36.842863][ T4000] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 36.907545][ T4010] loop0: detected capacity change from 0 to 1024 [ 36.914689][ T4000] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.916703][ T4010] EXT4-fs: Ignoring removed orlov option [ 36.929624][ T4010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.944012][ T4010] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 37.022720][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.033499][ T3981] syz.3.125 (3981) used greatest stack depth: 9200 bytes left [ 37.091913][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 37.100919][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 37.124282][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.138364][ T4015] loop1: detected capacity change from 0 to 512 [ 37.206063][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.135: corrupted inode contents [ 37.225620][ T4015] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.135: mark_inode_dirty error [ 37.238549][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 37.265083][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.135: corrupted inode contents [ 37.288232][ T4015] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.135: mark_inode_dirty error [ 37.310125][ T4015] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.135: Failed to acquire dquot type 0 [ 37.332377][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.135: corrupted inode contents [ 37.363603][ T4015] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.135: mark_inode_dirty error [ 37.381872][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 37.391627][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.135: corrupted inode contents [ 37.408742][ T4030] bridge0: port 3(veth0_to_bridge) entered disabled state [ 37.416405][ T4015] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.135: mark_inode_dirty error [ 37.418549][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.437952][ T4038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25628 sclass=netlink_route_socket pid=4038 comm=syz.3.138 [ 37.451626][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.135: corrupted inode contents [ 37.466807][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.479180][ T4015] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 37.553831][ T4015] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.135: corrupted inode contents [ 37.570707][ T4041] Invalid ELF header magic: != ELF [ 37.575276][ T4015] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.135: mark_inode_dirty error [ 37.651467][ T4050] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.664234][ T4015] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 37.681610][ T4050] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.694155][ T4015] EXT4-fs (loop1): 1 truncate cleaned up [ 37.695910][ T4050] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.145: Allocating blocks 41-42 which overlap fs metadata [ 37.724998][ T4015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.739161][ T4015] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.765860][ T4054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.781660][ T4050] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.145: Allocating blocks 41-42 which overlap fs metadata [ 37.814015][ T4050] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.145: Failed to acquire dquot type 1 [ 37.826294][ T4054] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.847046][ T4050] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 37.874066][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.145: corrupted inode contents [ 37.897464][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.921744][ T4054] netlink: 'syz.3.146': attribute type 30 has an invalid length. [ 37.945251][ T4054] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.955439][ T4062] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.147: inode has both inline data and extents flags [ 37.968172][ T4050] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.145: mark_inode_dirty error [ 37.980924][ T4062] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.147: couldn't read orphan inode 15 (err -117) [ 38.004303][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.018313][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 38.022179][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.145: corrupted inode contents [ 38.041735][ T4050] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.145: mark_inode_dirty error [ 38.042084][ T4065] macvlan2: entered promiscuous mode [ 38.054271][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.145: corrupted inode contents [ 38.058880][ T4065] macvlan2: entered allmulticast mode [ 38.072496][ T4050] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 38.077702][ T4065] veth0_virt_wifi: entered allmulticast mode [ 38.093748][ T4050] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.145: corrupted inode contents [ 38.125126][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 38.143254][ T4050] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.145: mark_inode_dirty error [ 38.163880][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.181423][ T4050] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 38.209975][ T4050] EXT4-fs (loop4): 1 truncate cleaned up [ 38.222959][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.245044][ T4050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.263506][ T4076] pimreg: entered allmulticast mode [ 38.395906][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.498565][ T4096] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 38.522313][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.543051][ T4096] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.589606][ T4096] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.160: Failed to acquire dquot type 0 [ 38.612900][ T4096] EXT4-fs (loop1): 1 truncate cleaned up [ 38.623285][ T4096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.684753][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.894867][ T4121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.918348][ T4121] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.932618][ T4121] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 3: comm syz.3.168: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 38.985412][ T4132] netlink: 'syz.3.168': attribute type 19 has an invalid length. [ 38.993332][ T4132] netlink: 'syz.3.168': attribute type 20 has an invalid length. [ 39.055883][ T4134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.068790][ T4134] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.081840][ T4134] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.173: corrupted inode contents [ 39.094559][ T4134] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.173: mark_inode_dirty error [ 39.107155][ T4134] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.173: corrupted inode contents [ 39.120466][ T4134] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.173: mark_inode_dirty error [ 39.193017][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.454905][ T4155] bond1: option lacp_rate: invalid value (20) [ 39.462430][ T4155] bond1 (unregistering): Released all slaves [ 39.642254][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.660766][ T4168] set_capacity_and_notify: 10 callbacks suppressed [ 39.660781][ T4168] loop3: detected capacity change from 0 to 128 [ 39.751089][ T4176] loop3: detected capacity change from 0 to 512 [ 39.764335][ T4176] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.184: bad orphan inode 15 [ 39.779907][ T4176] ext4_test_bit(bit=14, block=5) = 0 [ 39.787174][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.806028][ T4176] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.842345][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 39.842361][ T29] audit: type=1400 audit(1769413687.520:814): avc: denied { execute } for pid=4178 comm="syz.1.185" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 39.900483][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.943611][ T29] audit: type=1400 audit(1769413687.600:815): avc: denied { accept } for pid=4165 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 39.964069][ T4194] openvswitch: netlink: Flow actions attr not present in new flow. [ 39.977381][ T29] audit: type=1400 audit(1769413687.660:816): avc: denied { getopt } for pid=4195 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.017240][ T4203] loop3: detected capacity change from 0 to 512 [ 40.034101][ T4203] EXT4-fs: Ignoring removed nobh option [ 40.042247][ T4203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.061921][ T4210] tipc: Invalid UDP bearer configuration [ 40.061938][ T4210] tipc: Enabling of bearer rejected, failed to enable media [ 40.091977][ T4209] bridge_slave_0: left allmulticast mode [ 40.098322][ T4209] bridge_slave_0: left promiscuous mode [ 40.104158][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.119400][ T4209] bridge_slave_1: left allmulticast mode [ 40.125281][ T4209] bridge_slave_1: left promiscuous mode [ 40.131078][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.139081][ T4203] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 40.157735][ T4203] System zones: 1-12 [ 40.162661][ T4203] EXT4-fs (loop3): 1 truncate cleaned up [ 40.171941][ T4209] bond0: (slave 5@ÿ): Releasing backup interface [ 40.180564][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.196098][ T4209] bond0: (slave bond_slave_1): Releasing backup interface [ 40.245330][ T29] audit: type=1400 audit(1769413687.930:817): avc: denied { bind } for pid=4202 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.267709][ T4209] team0: Port device team_slave_0 removed [ 40.277471][ T4209] team0: Port device team_slave_1 removed [ 40.284586][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.292056][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.300980][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.301593][ T4209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.317845][ T4209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.336370][ T4222] loop3: detected capacity change from 0 to 2048 [ 40.347882][ T4209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.378983][ T4222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.399230][ T29] audit: type=1400 audit(1769413688.080:818): avc: denied { create } for pid=4227 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.419750][ T29] audit: type=1400 audit(1769413688.080:819): avc: denied { connect } for pid=4227 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.449055][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.490965][ T4233] loop1: detected capacity change from 0 to 1024 [ 40.512939][ T29] audit: type=1400 audit(1769413688.190:820): avc: denied { setopt } for pid=4238 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.599218][ T29] audit: type=1400 audit(1769413688.270:821): avc: denied { bind } for pid=4244 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.619338][ T29] audit: type=1400 audit(1769413688.270:822): avc: denied { name_bind } for pid=4244 comm="syz.1.202" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 40.641335][ T29] audit: type=1400 audit(1769413688.270:823): avc: denied { node_bind } for pid=4244 comm="syz.1.202" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.693244][ T4254] loop1: detected capacity change from 0 to 1024 [ 40.742561][ T4239] loop3: detected capacity change from 0 to 164 [ 40.864453][ T4269] loop1: detected capacity change from 0 to 512 [ 40.871468][ T4269] ext2: Unknown parameter 'appraise' [ 40.928860][ T3409] hid_parser_main: 188 callbacks suppressed [ 40.928880][ T3409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.970579][ T4279] loop2: detected capacity change from 0 to 2048 [ 41.003891][ T3409] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.033014][ T4283] __nla_validate_parse: 77 callbacks suppressed [ 41.033031][ T4283] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.210'. [ 41.154844][ T4290] loop1: detected capacity change from 0 to 512 [ 41.169311][ T4290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.179750][ T4290] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.191302][ T4290] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 41.393738][ T4310] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 41.404727][ T4311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1804 sclass=netlink_route_socket pid=4311 comm=syz.3.221 [ 41.730342][ T4329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.738461][ T4329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.751121][ T4329] EXT4-fs (loop0): 1 truncate cleaned up [ 41.759465][ T4329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.865502][ T4338] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.896914][ T4324] 9p: Bad value for 'wfdno' [ 41.897027][ T4338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.907159][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 41.921084][ T4338] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.955640][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 41.971504][ T4324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.226'. [ 41.987987][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.018531][ T4353] mmap: syz.4.235 (4353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.037373][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.071780][ T4345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4345 comm=syz.2.232 [ 42.103741][ T4358] netlink: 84 bytes leftover after parsing attributes in process `syz.1.234'. [ 42.126807][ T4358] netlink: 'syz.1.234': attribute type 3 has an invalid length. [ 42.136611][ T4358] netlink: 'syz.1.234': attribute type 4 has an invalid length. [ 42.145192][ T4358] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.234'. [ 42.166555][ T4360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.182869][ T4369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 42.196058][ T4360] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.202035][ T4369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 42.235864][ T4369] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 42.304971][ T4384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 42.349718][ T4388] capability: warning: `syz.2.246' uses deprecated v2 capabilities in a way that may be insecure [ 42.372060][ T4388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=4388 comm=syz.2.246 [ 42.387067][ T4389] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.406751][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.450712][ T4389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.471001][ T4389] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.497433][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.544150][ T4392] Unknown options in mask 20 [ 42.594837][ T4398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.595753][ T4404] Cannot find set identified by id 0 to match [ 42.648908][ T4406] Cannot find add_set index 3 as target [ 42.668949][ T4398] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 42.726605][ T4384] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 42.737618][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.824143][ T4413] msdos: Unknown parameter '' [ 42.910981][ T4428] netlink: 'syz.3.259': attribute type 7 has an invalid length. [ 42.936731][ T4428] netlink: 'syz.3.259': attribute type 7 has an invalid length. [ 42.960411][ T3668] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.989355][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.019604][ T3672] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.092707][ T3672] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.151062][ T3672] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.151955][ T4445] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.265: bad orphan inode 11862016 [ 43.173697][ T4442] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.236907][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.259402][ T4445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.264283][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 43.282364][ T4442] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.305371][ T4445] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.320510][ T4442] FAULT_INJECTION: forcing a failure. [ 43.320510][ T4442] name failslab, interval 1, probability 0, space 0, times 1 [ 43.334554][ T4442] CPU: 0 UID: 0 PID: 4442 Comm: syz.3.264 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 43.334586][ T4442] Tainted: [W]=WARN [ 43.334593][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.334604][ T4442] Call Trace: [ 43.334611][ T4442] [ 43.334657][ T4442] __dump_stack+0x1d/0x30 [ 43.334680][ T4442] dump_stack_lvl+0x95/0xd0 [ 43.334700][ T4442] dump_stack+0x15/0x1b [ 43.334723][ T4442] should_fail_ex+0x263/0x280 [ 43.334750][ T4442] should_failslab+0x8c/0xb0 [ 43.334772][ T4442] kmem_cache_alloc_noprof+0x68/0x490 [ 43.334795][ T4442] ? mb_cache_entry_create+0xf0/0x540 [ 43.334938][ T4442] mb_cache_entry_create+0xf0/0x540 [ 43.334967][ T4442] ext4_listxattr+0x32f/0x3d0 [ 43.334995][ T4442] ? __pfx_ext4_listxattr+0x10/0x10 [ 43.335020][ T4442] listxattr+0xd6/0x260 [ 43.335148][ T4442] __x64_sys_flistxattr+0xc7/0x120 [ 43.335180][ T4442] x64_sys_call+0x2a78/0x3000 [ 43.335203][ T4442] do_syscall_64+0xc0/0x2a0 [ 43.335293][ T4442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.335314][ T4442] RIP: 0033:0x7f61423facb9 [ 43.335365][ T4442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.335382][ T4442] RSP: 002b:00007f6140e57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 43.335401][ T4442] RAX: ffffffffffffffda RBX: 00007f6142675fa0 RCX: 00007f61423facb9 [ 43.335414][ T4442] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004 [ 43.335477][ T4442] RBP: 00007f6140e57090 R08: 0000000000000000 R09: 0000000000000000 [ 43.335489][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.335501][ T4442] R13: 00007f6142676038 R14: 00007f6142675fa0 R15: 00007ffe1aedb938 [ 43.335518][ T4442] [ 43.605445][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.617287][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.846508][ T4471] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.907774][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.928005][ T4471] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.062070][ T4478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.098799][ T4457] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 44.164308][ T4482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.183225][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.221730][ T4484] EXT4-fs (loop2): unsupported descriptor size 0 [ 44.282667][ T4484] kernel profiling enabled (shift: 17) [ 44.294993][ T4493] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.325841][ T4493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.339633][ T4493] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.360878][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.377538][ T23] kernel read not supported for file /vcsa (pid: 23 comm: kworker/1:0) [ 44.386803][ T4490] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 44.408157][ T4482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.443832][ T4493] FAULT_INJECTION: forcing a failure. [ 44.443832][ T4493] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.457619][ T4493] CPU: 1 UID: 0 PID: 4493 Comm: syz.4.280 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.457668][ T4493] Tainted: [W]=WARN [ 44.457676][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.457689][ T4493] Call Trace: [ 44.457695][ T4493] [ 44.457702][ T4493] __dump_stack+0x1d/0x30 [ 44.457733][ T4493] dump_stack_lvl+0x95/0xd0 [ 44.457752][ T4493] dump_stack+0x15/0x1b [ 44.457774][ T4493] should_fail_ex+0x263/0x280 [ 44.457809][ T4493] should_fail+0xb/0x20 [ 44.457875][ T4493] should_fail_usercopy+0x1a/0x20 [ 44.457996][ T4493] _copy_to_user+0x20/0xa0 [ 44.458020][ T4493] simple_read_from_buffer+0xb5/0x130 [ 44.458056][ T4493] proc_fail_nth_read+0x10e/0x150 [ 44.458138][ T4493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.458177][ T4493] vfs_read+0x1ab/0x7f0 [ 44.458198][ T4493] ? __rcu_read_unlock+0x4e/0x70 [ 44.458272][ T4493] ? __fget_files+0x184/0x1c0 [ 44.458298][ T4493] ? mutex_lock+0x57/0x90 [ 44.458325][ T4493] ksys_read+0xdc/0x1a0 [ 44.458344][ T4493] __x64_sys_read+0x40/0x50 [ 44.458388][ T4493] x64_sys_call+0x2889/0x3000 [ 44.458416][ T4493] do_syscall_64+0xc0/0x2a0 [ 44.458499][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.458524][ T4493] RIP: 0033:0x7fa3b818b58e [ 44.458542][ T4493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.458584][ T4493] RSP: 002b:00007fa3b6c26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.458607][ T4493] RAX: ffffffffffffffda RBX: 00007fa3b6c276c0 RCX: 00007fa3b818b58e [ 44.458622][ T4493] RDX: 000000000000000f RSI: 00007fa3b6c270a0 RDI: 0000000000000005 [ 44.458634][ T4493] RBP: 00007fa3b6c27090 R08: 0000000000000000 R09: 0000000000000000 [ 44.458684][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.458698][ T4493] R13: 00007fa3b8446038 R14: 00007fa3b8445fa0 R15: 00007ffc0393e4e8 [ 44.458768][ T4493] [ 44.502761][ T4502] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.674010][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.700529][ T4502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.733491][ T4502] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.796999][ T4482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.863894][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.926517][ T4482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.978440][ T4521] SELinux: policydb string length -872415224 does not match expected length 8 [ 44.978666][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 44.978679][ T29] audit: type=1400 audit(1769413692.660:1065): avc: denied { load_policy } for pid=4519 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.992160][ T4521] SELinux: failed to load policy [ 45.045684][ T4526] set_capacity_and_notify: 18 callbacks suppressed [ 45.045701][ T4526] loop2: detected capacity change from 0 to 512 [ 45.058908][ T29] audit: type=1326 audit(1769413692.710:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.082811][ T29] audit: type=1326 audit(1769413692.710:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.107278][ T29] audit: type=1326 audit(1769413692.710:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.131383][ T29] audit: type=1326 audit(1769413692.710:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.155495][ T29] audit: type=1326 audit(1769413692.710:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.179935][ T29] audit: type=1326 audit(1769413692.710:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.204526][ T29] audit: type=1326 audit(1769413692.710:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.222857][ T4526] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.289: invalid indirect mapped block 256 (level 2) [ 45.232425][ T29] audit: type=1326 audit(1769413692.710:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.257769][ T4526] EXT4-fs (loop2): 2 truncates cleaned up [ 45.269410][ T29] audit: type=1326 audit(1769413692.710:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4522 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 45.286165][ T4526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.406135][ T4535] loop1: detected capacity change from 0 to 512 [ 45.424755][ T3671] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.433666][ T3665] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.441993][ T3665] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.454105][ T4535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.462773][ T3665] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.474280][ T4536] netlink: 'syz.4.293': attribute type 10 has an invalid length. [ 45.482381][ T4536] dummy0: entered promiscuous mode [ 45.487602][ T4536] dummy0: entered allmulticast mode [ 45.493305][ T4536] bridge0: port 3(dummy0) entered blocking state [ 45.499962][ T4536] bridge0: port 3(dummy0) entered disabled state [ 45.509046][ T4535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.522977][ T4536] bridge0: port 3(dummy0) entered blocking state [ 45.529495][ T4536] bridge0: port 3(dummy0) entered forwarding state [ 45.536211][ T4536] bridge0: mtu less than device minimum [ 45.543823][ T4535] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.557617][ T4535] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.294: Failed to acquire dquot type 0 [ 45.619143][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.623119][ T4545] loop4: detected capacity change from 0 to 2048 [ 45.655457][ T4545] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.656224][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.709733][ T4545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.723745][ T4548] loop1: detected capacity change from 0 to 2048 [ 45.730705][ T4548] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.742351][ T4545] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.745109][ T4555] loop2: detected capacity change from 0 to 256 [ 45.761247][ T4545] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.296: bg 0: block 345: padding at end of block bitmap is not set [ 45.799391][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.808194][ T4555] FAT-fs (loop2): Filesystem has been set read-only [ 45.823473][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.825088][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.841683][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.852052][ T4560] loop0: detected capacity change from 0 to 128 [ 45.859190][ T4560] vfat: Unknown parameter 'shortntls' [ 45.861879][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.873866][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.882757][ T4548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.896424][ T4548] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.907488][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.917448][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.926445][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.935494][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.944369][ T4555] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.990160][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.116240][ T4584] __nla_validate_parse: 6 callbacks suppressed [ 46.116254][ T4584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'. [ 46.195684][ T4591] dvmrp0: entered allmulticast mode [ 46.237290][ T4596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.283419][ T4606] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 46.323634][ T3672] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 46.393101][ T4616] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 46.406898][ T4617] loop3: detected capacity change from 0 to 1024 [ 46.430563][ T4617] EXT4-fs: Ignoring removed bh option [ 46.443761][ T3668] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 46.457434][ T4621] xt_TCPMSS: Only works on TCP SYN packets [ 46.463467][ T4601] xt_TCPMSS: Only works on TCP SYN packets [ 46.484120][ T4617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.546123][ T4617] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.581143][ T4600] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 46.617261][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'. [ 46.633894][ T4633] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 46.679235][ T4633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.708577][ T4633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 46.759300][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.795969][ T4640] loop3: detected capacity change from 0 to 512 [ 46.869018][ T4643] loop2: detected capacity change from 0 to 1024 [ 46.989467][ T4631] loop1: detected capacity change from 0 to 512 [ 47.039921][ T4631] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 47.125574][ T4658] dvmrp6: entered allmulticast mode [ 47.132196][ T4640] EXT4-fs: Ignoring removed bh option [ 47.160236][ T4640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.187693][ T4640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.197114][ T4661] EXT4-fs (loop0): orphan cleanup on readonly fs [ 47.226072][ T4661] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.327: bg 0: block 248: padding at end of block bitmap is not set [ 47.245880][ T4668] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 47.272271][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 47.286919][ T4673] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 47.304388][ T4661] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.327: Failed to acquire dquot type 1 [ 47.311261][ T4668] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 47.325129][ T4661] EXT4-fs (loop0): 1 truncate cleaned up [ 47.333527][ T4661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.360886][ T4656] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.327: deleted inode referenced: 12 [ 47.468486][ T4688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 47.498688][ T4684] Unknown options in mask 20 [ 47.588734][ T4693] netlink: 56 bytes leftover after parsing attributes in process `syz.3.340'. [ 47.622085][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.656258][ T4695] netlink: 'syz.0.341': attribute type 12 has an invalid length. [ 47.664047][ T4695] netlink: 'syz.0.341': attribute type 29 has an invalid length. [ 47.671790][ T4695] netlink: 148 bytes leftover after parsing attributes in process `syz.0.341'. [ 47.680893][ T4695] netlink: 59 bytes leftover after parsing attributes in process `syz.0.341'. [ 47.760337][ T4688] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 47.819944][ T4717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 47.923952][ T4728] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 47.948257][ T4732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'. [ 47.956002][ T4725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 47.967132][ T4725] Unknown options in mask 20 [ 48.060203][ T4737] EXT4-fs: test_dummy_encryption option not supported [ 48.126348][ T4744] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 48.212324][ T4762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.358: bg 0: block 393: padding at end of block bitmap is not set [ 48.227975][ T4762] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 48.237219][ T4762] EXT4-fs (loop1): 2 truncates cleaned up [ 48.254544][ T4762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 48.260930][ T4762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 48.267668][ T4762] hsr_slave_0: left promiscuous mode [ 48.273245][ T4762] hsr_slave_1: left promiscuous mode [ 48.490486][ T4778] syzkaller0: entered promiscuous mode [ 48.496100][ T4778] syzkaller0: entered allmulticast mode [ 48.570836][ T4776] Unknown options in mask 20 [ 48.668546][ T4787] netlink: 'syz.2.365': attribute type 13 has an invalid length. [ 48.882735][ T4801] EXT4-fs: Ignoring removed bh option [ 48.888384][ T4801] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.942445][ T4807] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 49.181807][ T4817] Unknown options in mask 20 [ 49.235618][ T4821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.575502][ T4871] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 49.677122][ T4890] sctp: [Deprecated]: syz.0.392 (pid 4890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 49.677122][ T4890] Use struct sctp_sack_info instead [ 49.906261][ T4894] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.031616][ T4907] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.046672][ T4907] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.060662][ T4907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 50.069386][ T4907] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.077642][ T4907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.396: bg 0: block 361: padding at end of block bitmap is not set [ 50.094658][ T4907] EXT4-fs (loop4): Remounting filesystem read-only [ 50.102611][ T4907] EXT4-fs (loop4): 1 truncate cleaned up [ 50.175935][ T4924] set_capacity_and_notify: 13 callbacks suppressed [ 50.175947][ T4924] loop4: detected capacity change from 0 to 512 [ 50.189276][ T4924] EXT4-fs: Ignoring removed nobh option [ 50.195682][ T4924] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 50.205259][ T4924] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.401: casefold flag without casefold feature [ 50.220161][ T4924] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.401: couldn't read orphan inode 15 (err -117) [ 50.250469][ T4928] macvlan1: entered promiscuous mode [ 50.257662][ T4928] macvlan1: left promiscuous mode [ 50.280301][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 50.280315][ T29] audit: type=1400 audit(1769413697.960:1445): avc: denied { read } for pid=3040 comm="dhcpcd" name="n26" dev="tmpfs" ino=3648 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.308455][ T29] audit: type=1400 audit(1769413697.960:1446): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=3648 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.331919][ T29] audit: type=1400 audit(1769413697.980:1447): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=3648 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.409583][ T4945] dvmrp6: left allmulticast mode [ 50.447999][ T4955] loop0: detected capacity change from 0 to 128 [ 50.472586][ T4955] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.498715][ T29] audit: type=1400 audit(1769413698.180:1448): avc: denied { create } for pid=4938 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.521112][ T29] audit: type=1400 audit(1769413698.180:1449): avc: denied { write } for pid=4938 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3682 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.547310][ T29] audit: type=1400 audit(1769413698.180:1450): avc: denied { append } for pid=4938 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3682 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.613761][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.621358][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.628794][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.636381][ T29] audit: type=1400 audit(1769413698.330:1451): avc: denied { unlink } for pid=4969 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3682 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.636402][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.636429][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.674306][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.681773][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.689255][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.696710][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.704131][ T3376] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 50.736673][ T4972] loop4: detected capacity change from 0 to 512 [ 50.785281][ T3376] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 50.809114][ T29] audit: type=1326 audit(1769413698.490:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 50.832559][ T29] audit: type=1326 audit(1769413698.490:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 50.856314][ T29] audit: type=1326 audit(1769413698.490:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f61423facb9 code=0x7ffc0000 [ 50.901027][ T5003] fido_id[5003]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.923453][ T4972] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.933487][ T4996] bond1: option xmit_hash_policy: invalid value (8) [ 50.944777][ T4996] bond1 (unregistering): Released all slaves [ 50.952058][ T4972] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.410: Failed to acquire dquot type 0 [ 51.081669][ T4968] 9p: Bad value for 'rfdno' [ 51.112223][ T5029] netlink: 'syz.3.425': attribute type 6 has an invalid length. [ 51.213168][ T5038] loop3: detected capacity change from 0 to 512 [ 51.225442][ T5036] loop0: detected capacity change from 0 to 4096 [ 51.253457][ T5038] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 51.293028][ T5038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.365196][ T5038] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.426: Block bitmap for bg 0 marked uninitialized [ 51.378761][ T5038] EXT4-fs (loop3): Remounting filesystem read-only [ 51.385391][ T5038] EXT4-fs (loop3): 1 orphan inode deleted [ 51.407634][ T5016] __nla_validate_parse: 15 callbacks suppressed [ 51.407715][ T5016] netlink: 112 bytes leftover after parsing attributes in process `syz.2.420'. [ 51.426021][ T5016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 51.584580][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 51.593413][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 51.610128][ T5067] macsec2: entered promiscuous mode [ 51.615473][ T5067] vlan0: entered promiscuous mode [ 51.620986][ T5067] macsec2: entered allmulticast mode [ 51.626416][ T5067] vlan0: entered allmulticast mode [ 51.631532][ T5067] veth0_vlan: entered allmulticast mode [ 51.641794][ T5067] vlan0: left allmulticast mode [ 51.646723][ T5067] veth0_vlan: left allmulticast mode [ 51.652042][ T5067] vlan0: left promiscuous mode [ 51.709210][ T5080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 51.744041][ T5083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=5083 comm=syz.1.441 [ 52.009644][ T5116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 52.075309][ T5121] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 52.084911][ T5121] team0: Port device bridge0 added [ 52.217727][ T5128] loop2: detected capacity change from 0 to 512 [ 52.227695][ T5128] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.255599][ T5128] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.286395][ T5128] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.455: bg 0: block 248: padding at end of block bitmap is not set [ 52.301115][ T5128] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.455: Failed to acquire dquot type 1 [ 52.313144][ T5128] EXT4-fs (loop2): 1 truncate cleaned up [ 52.330364][ T5130] Unknown options in mask 20 [ 52.350251][ T5128] syz.2.455 (5128) used greatest stack depth: 8992 bytes left [ 52.401926][ T5151] loop1: detected capacity change from 0 to 2048 [ 52.417088][ T5151] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.451783][ T5151] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.462763][ T5165] loop0: detected capacity change from 0 to 1024 [ 52.494271][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 52.504294][ T5170] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.466: Allocating blocks 481-513 which overlap fs metadata [ 52.551916][ T5165] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 52.560227][ T5165] team0: Port device batadv1 added [ 52.594390][ T5174] loop0: detected capacity change from 0 to 128 [ 52.631141][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 52.653405][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 52.672869][ T5182] loop4: detected capacity change from 0 to 1024 [ 52.679845][ T5174] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 52.688057][ T5174] FAT-fs (loop0): Filesystem has been set read-only [ 52.696546][ T5183] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.696624][ T5182] EXT4-fs: inline encryption not supported [ 52.704535][ T5183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 52.704825][ T5183] System zones: [ 52.710809][ T5174] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 52.718462][ T5183] 0-1, 15-15, 18-18, 34-34 [ 52.738275][ T5183] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.744805][ T5183] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 52.759420][ T5183] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 52.767161][ T5183] EXT4-fs (loop1): 1 truncate cleaned up [ 52.806027][ T5188] EXT4-fs (loop3): unsupported inode size: 61867 [ 52.812505][ T5188] EXT4-fs (loop3): blocksize: 1024 [ 52.838874][ T5198] EXT4-fs (loop3): unsupported inode size: 61867 [ 52.845309][ T5198] EXT4-fs (loop3): blocksize: 1024 [ 52.888095][ T5202] netlink: 13 bytes leftover after parsing attributes in process `syz.3.476'. [ 52.910174][ T5205] ext4: Bad value for 'commit' [ 52.950371][ T5196] Unknown options in mask 20 [ 53.227538][ T5262] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.245040][ T5262] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.493: invalid indirect mapped block 4294967295 (level 0) [ 53.268490][ T5262] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.493: invalid indirect mapped block 4294967295 (level 1) [ 53.282794][ T5262] EXT4-fs (loop0): 1 orphan inode deleted [ 53.288754][ T5262] EXT4-fs (loop0): 1 truncate cleaned up [ 53.322120][ T5266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5266 comm=syz.4.494 [ 53.352801][ T5266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5266 comm=syz.4.494 [ 53.436540][ T5275] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.544814][ T5281] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.552070][ T5281] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.584493][ T5289] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 53.690256][ T5281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.710731][ T5281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.789899][ T5275] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.800861][ T3665] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.813243][ T5289] team0: Port device netdevsim1 added [ 53.848259][ T3665] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.879106][ T5298] bond2: entered promiscuous mode [ 53.899298][ T5298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.925774][ T5298] team0: Port device bond2 added [ 53.983951][ T3306] loop2: p1 p3 p4 [ 53.989932][ T3306] loop2: p4 size 589824 extends beyond EOD, truncated [ 54.007711][ T5306] loop2: p1 p3 p4 [ 54.016386][ T5306] loop2: p4 size 589824 extends beyond EOD, truncated [ 54.098229][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 54.116687][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 54.134320][ T5277] Cannot find add_set index 4 as target [ 54.153690][ T5313] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 54.155751][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 54.179355][ T5265] syz.4.494 (5265) used greatest stack depth: 7120 bytes left [ 54.232398][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 54.249255][ T5309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 54.257759][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 54.263466][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 54.288112][ T5309] team0: Port device bond3 added [ 54.348180][ T3403] IPVS: starting estimator thread 0... [ 54.359032][ T5333] ext4: Unknown parameter 'euid' [ 54.453683][ T5339] IPVS: using max 2496 ests per chain, 124800 per kthread [ 54.468813][ T5355] tmpfs: Unknown parameter 'mXol' [ 54.484177][ T5348] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 54.752348][ T5388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28701 sclass=netlink_route_socket pid=5388 comm=syz.3.525 [ 54.855872][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.897553][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.023922][ T5415] Cannot find del_set index 4 as target [ 55.065451][ T5374] geneve2: left promiscuous mode [ 55.070513][ T5374] geneve2: left allmulticast mode [ 55.105228][ T5374] macvlan2: left promiscuous mode [ 55.110316][ T5374] macvlan2: left allmulticast mode [ 55.144203][ T5395] tipc: Started in network mode [ 55.149198][ T5395] tipc: Node identity 7a5c9b62d379, cluster identity 4711 [ 55.156435][ T5395] tipc: Enabled bearer , priority 0 [ 55.192220][ T5423] set_capacity_and_notify: 8 callbacks suppressed [ 55.192237][ T5423] loop2: detected capacity change from 0 to 1024 [ 55.204125][ T5404] syzkaller0: entered promiscuous mode [ 55.210620][ T5404] syzkaller0: entered allmulticast mode [ 55.217900][ T3672] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.226899][ T3672] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.235927][ T3672] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 55.247754][ T5415] tipc: Resetting bearer [ 55.268029][ T5378] tipc: Resetting bearer [ 55.314990][ T5378] tipc: Disabling bearer [ 55.328849][ T3672] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.337804][ T3672] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.346700][ T3672] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 55.383672][ T3672] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.392654][ T3672] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.401606][ T3672] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 55.411194][ T3672] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.420153][ T3672] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.429204][ T3672] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 55.613681][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 55.613698][ T29] audit: type=1400 audit(1769413703.280:1974): avc: denied { accept } for pid=5438 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 55.639510][ T29] audit: type=1400 audit(1769413703.280:1975): avc: denied { ioctl } for pid=5438 comm="syz.1.534" path="socket:[10933]" dev="sockfs" ino=10933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.725883][ T5443] loop1: detected capacity change from 0 to 1024 [ 55.732989][ T5443] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 55.742700][ T5443] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.765378][ T5443] EXT4-fs (loop1): invalid journal inode [ 55.776541][ T5443] EXT4-fs (loop1): can't get journal size [ 55.778638][ T29] audit: type=1326 audit(1769413703.460:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 55.806612][ T5443] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 17104912: comm syz.1.535: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 55.822883][ T29] audit: type=1326 audit(1769413703.500:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 55.846244][ T29] audit: type=1326 audit(1769413703.500:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 55.870221][ T5443] EXT4-fs (loop1): Remounting filesystem read-only [ 55.877574][ T5443] EXT4-fs (loop1): failed to initialize system zone (-117) [ 55.886572][ T5443] EXT4-fs (loop1): mount failed [ 55.924254][ T5451] loop1: detected capacity change from 0 to 512 [ 55.930870][ T5451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.952267][ T29] audit: type=1326 audit(1769413703.630:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 55.975896][ T29] audit: type=1326 audit(1769413703.630:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 56.016156][ T5447] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 56.028410][ T5451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 56.032813][ T29] audit: type=1326 audit(1769413703.690:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 56.037626][ T5451] System zones: 0-2, 18-18, 34-34 [ 56.060204][ T29] audit: type=1326 audit(1769413703.700:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 56.088685][ T29] audit: type=1326 audit(1769413703.700:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3b81cacb9 code=0x7ffc0000 [ 56.100892][ T5457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5457 comm=syz.2.539 [ 56.124575][ T5451] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.131678][ T5451] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.537: bg 0: block 248: padding at end of block bitmap is not set [ 56.159744][ T5457] batadv_slave_0: entered promiscuous mode [ 56.178088][ T5456] batadv_slave_0: left promiscuous mode [ 56.184592][ T5451] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.537: Failed to acquire dquot type 1 [ 56.199300][ T5451] EXT4-fs (loop1): 1 truncate cleaned up [ 56.206463][ T5463] netlink: 'syz.3.541': attribute type 2 has an invalid length. [ 56.223328][ T5465] loop3: detected capacity change from 0 to 512 [ 56.234700][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.273678][ T5451] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 56.286278][ T5465] EXT4-fs (loop3): get root inode failed [ 56.292015][ T5465] EXT4-fs (loop3): mount failed [ 56.293329][ T5451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 56.314152][ T5451] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 56.326512][ T5451] ext4 filesystem being remounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.342055][ T5465] loop3: detected capacity change from 0 to 512 [ 56.354249][ T5451] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.364906][ T5451] ext4: Unknown parameter 'ÅХĚu£ ¬h†ŒŒe.w!ãéP ' [ 56.378052][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.405894][ T5465] EXT4-fs (loop3): get root inode failed [ 56.411781][ T5465] EXT4-fs (loop3): mount failed [ 56.427283][ T5465] loop3: detected capacity change from 0 to 512 [ 56.435991][ T5474] loop2: detected capacity change from 0 to 8192 [ 56.454679][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.475284][ T5483] x_tables: duplicate underflow at hook 2 [ 56.481899][ T5481] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 56.510306][ T5465] EXT4-fs (loop3): get root inode failed [ 56.516054][ T5465] EXT4-fs (loop3): mount failed [ 56.537687][ T5465] loop3: detected capacity change from 0 to 512 [ 56.555870][ T5490] loop1: detected capacity change from 0 to 2048 [ 56.555926][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.562672][ T5490] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.589011][ T5465] EXT4-fs (loop3): get root inode failed [ 56.594799][ T5465] EXT4-fs (loop3): mount failed [ 56.608581][ T5490] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.619301][ T5465] loop3: detected capacity change from 0 to 512 [ 56.645594][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.668560][ T5465] EXT4-fs (loop3): get root inode failed [ 56.674276][ T5465] EXT4-fs (loop3): mount failed [ 56.708146][ T5505] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.737378][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.759020][ T5465] EXT4-fs (loop3): get root inode failed [ 56.764842][ T5465] EXT4-fs (loop3): mount failed [ 56.772171][ T5505] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.550: inode has both inline data and extents flags [ 56.785810][ T5505] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.550: couldn't read orphan inode 17 (err -117) [ 56.834453][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.852428][ T5465] EXT4-fs (loop3): get root inode failed [ 56.853142][ T5505] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.550: bg 0: block 65: padding at end of block bitmap is not set [ 56.858133][ T5465] EXT4-fs (loop3): mount failed [ 56.875276][ T5505] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.550: Failed to acquire dquot type 0 [ 56.891614][ T5518] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.550: Failed to acquire dquot type 0 [ 56.915897][ T5518] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 56.925929][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.962907][ T5465] EXT4-fs (loop3): get root inode failed [ 56.968646][ T5465] EXT4-fs (loop3): mount failed [ 56.981078][ T5505] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 56.991977][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.010602][ T5465] EXT4-fs (loop3): get root inode failed [ 57.016397][ T5465] EXT4-fs (loop3): mount failed [ 57.045067][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.047318][ T5527] EXT4-fs: inline encryption not supported [ 57.069453][ T5527] EXT4-fs: quotafile must be on filesystem root [ 57.076650][ T5531] syz_tun: entered allmulticast mode [ 57.085030][ T5465] EXT4-fs (loop3): get root inode failed [ 57.090707][ T5465] EXT4-fs (loop3): mount failed [ 57.126414][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.145810][ T5465] EXT4-fs (loop3): get root inode failed [ 57.151608][ T5465] EXT4-fs (loop3): mount failed [ 57.154118][ T5532] syz_tun: left allmulticast mode [ 57.195436][ T5538] __nla_validate_parse: 10 callbacks suppressed [ 57.195455][ T5538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.556'. [ 57.213790][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.241401][ T5465] EXT4-fs (loop3): get root inode failed [ 57.247214][ T5465] EXT4-fs (loop3): mount failed [ 57.247711][ T5542] netlink: 76 bytes leftover after parsing attributes in process `syz.0.555'. [ 57.281663][ T5538] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 57.320857][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.354230][ T5465] EXT4-fs (loop3): get root inode failed [ 57.359890][ T5465] EXT4-fs (loop3): mount failed [ 57.375863][ T5544] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 57.395027][ T5544] EXT4-fs (loop4): mount failed [ 57.402236][ T5538] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000J»¦¬È¶ÈÇ[ã"-÷' [ 57.411396][ T5552] EXT4-fs: Ignoring removed nobh option [ 57.418757][ T5552] ext4: Unknown parameter 'subj_type' [ 57.427723][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.463609][ T5465] EXT4-fs (loop3): get root inode failed [ 57.469402][ T5465] EXT4-fs (loop3): mount failed [ 57.546340][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.580568][ T5465] EXT4-fs (loop3): get root inode failed [ 57.586576][ T5465] EXT4-fs (loop3): mount failed [ 57.610384][ T5580] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 57.624049][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.657764][ T5465] EXT4-fs (loop3): get root inode failed [ 57.662502][ T5586] 9p: Bad value for 'wfdno' [ 57.663653][ T5465] EXT4-fs (loop3): mount failed [ 57.691314][ T5589] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 57.723798][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.745049][ T5465] EXT4-fs (loop3): get root inode failed [ 57.750809][ T5465] EXT4-fs (loop3): mount failed [ 57.760049][ T5595] EXT4-fs: Ignoring removed oldalloc option [ 57.766134][ T5595] EXT4-fs: Ignoring removed nobh option [ 57.786482][ T5595] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.797232][ T5595] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.818401][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.828806][ T5595] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.851957][ T5595] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 57.863830][ T5465] EXT4-fs (loop3): get root inode failed [ 57.869508][ T5465] EXT4-fs (loop3): mount failed [ 57.873822][ T5595] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.566: invalid fast symlink length 9000 [ 57.886647][ T5595] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.566: couldn't read orphan inode 16 (err -117) [ 57.902960][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 57.918385][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.940873][ T5612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.951632][ T5465] EXT4-fs (loop3): get root inode failed [ 57.953874][ T5612] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.570: invalid indirect mapped block 32768 (level 2) [ 57.957397][ T5465] EXT4-fs (loop3): mount failed [ 57.976372][ T5612] EXT4-fs (loop2): Remounting filesystem read-only [ 57.993937][ T5612] EXT4-fs (loop2): 1 orphan inode deleted [ 57.999733][ T5612] EXT4-fs (loop2): 1 truncate cleaned up [ 58.018513][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.037406][ T5465] EXT4-fs (loop3): get root inode failed [ 58.043054][ T5465] EXT4-fs (loop3): mount failed [ 58.128745][ T5623] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 58.138010][ T5628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.574'. [ 58.142598][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.179369][ T5623] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 58.183883][ T5465] EXT4-fs (loop3): get root inode failed [ 58.193609][ T5465] EXT4-fs (loop3): mount failed [ 58.239381][ T5639] netlink: 'syz.0.576': attribute type 13 has an invalid length. [ 58.258522][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.297973][ T5639] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.576: corrupted inode contents [ 58.323355][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 58.332210][ T5644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 58.343676][ T5465] EXT4-fs (loop3): get root inode failed [ 58.349364][ T5465] EXT4-fs (loop3): mount failed [ 58.360122][ T5639] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.576: mark_inode_dirty error [ 58.373778][ T5646] EXT4-fs (loop0): shut down requested (1) [ 58.393757][ T3666] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.407077][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.438626][ T5465] EXT4-fs (loop3): get root inode failed [ 58.444378][ T5465] EXT4-fs (loop3): mount failed [ 58.490131][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.543847][ T5465] EXT4-fs (loop3): get root inode failed [ 58.549528][ T5465] EXT4-fs (loop3): mount failed [ 58.584813][ T5651] FAT-fs (loop4): codepage cp949 not found [ 58.649838][ T5465] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 58.702632][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 58.711818][ T5465] EXT4-fs (loop3): get root inode failed [ 58.717656][ T5465] EXT4-fs (loop3): mount failed [ 58.726491][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 58.824155][ T5677] sit0: entered promiscuous mode [ 58.829252][ T5677] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 58.836922][ T5677] netlink: 1 bytes leftover after parsing attributes in process `syz.3.585'. [ 59.130172][ T5686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.170012][ T1035] hid_parser_main: 2 callbacks suppressed [ 59.170028][ T1035] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 59.189682][ T5705] bond2: invalid ARP target 0.0.0.0 specified for addition [ 59.197957][ T5705] bond2: option arp_ip_target: invalid value (0) [ 59.205586][ T5705] bond2 (unregistering): Released all slaves [ 59.247834][ T1035] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.601907][ T5708] fido_id[5708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.798847][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.835326][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.857902][ T5725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.926664][ T5726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.072635][ T5707] ================================================================== [ 60.073992][ T5730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.080753][ T5707] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 60.095289][ T5707] [ 60.097644][ T5707] write to 0xffff8881077fce14 of 4 bytes by task 5705 on cpu 1: [ 60.105364][ T5707] xas_set_mark+0x12b/0x140 [ 60.109906][ T5707] __folio_start_writeback+0x17b/0x370 [ 60.110761][ T5730] bond1: Unable to set up delay as MII monitoring is disabled [ 60.115375][ T5707] __block_write_full_folio+0x53a/0x8f0 [ 60.115409][ T5707] block_write_full_folio+0x2c1/0x2e0 [ 60.134041][ T5707] mpage_writepages+0x710/0x1310 [ 60.139532][ T5707] fat_writepages+0x24/0x30 [ 60.144151][ T5707] do_writepages+0x1c6/0x310 [ 60.148759][ T5707] file_write_and_wait_range+0x178/0x2f0 [ 60.154484][ T5707] __generic_file_fsync+0x46/0x160 [ 60.159588][ T5707] fat_file_fsync+0x49/0x100 [ 60.164173][ T5707] vfs_fsync_range+0x10d/0x130 [ 60.168936][ T5707] generic_file_write_iter+0x1ba/0x310 [ 60.174400][ T5707] iter_file_splice_write+0x6bc/0xa80 [ 60.179777][ T5707] direct_splice_actor+0x156/0x2a0 [ 60.184889][ T5707] splice_direct_to_actor+0x311/0x670 [ 60.190256][ T5707] do_splice_direct+0x119/0x1a0 [ 60.195105][ T5707] do_sendfile+0x382/0x650 [ 60.199547][ T5707] __x64_sys_sendfile64+0x105/0x150 [ 60.204854][ T5707] x64_sys_call+0x2db1/0x3000 [ 60.209537][ T5707] do_syscall_64+0xc0/0x2a0 [ 60.214486][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.221496][ T5707] [ 60.224178][ T5707] read to 0xffff8881077fce14 of 4 bytes by task 5707 on cpu 0: [ 60.232118][ T5707] __writeback_single_inode+0x201/0x7b0 [ 60.238141][ T5707] writeback_single_inode+0x16d/0x3f0 [ 60.243716][ T5707] sync_inode_metadata+0x6e/0xa0 [ 60.248700][ T5707] __generic_file_fsync+0x109/0x160 [ 60.254095][ T5707] fat_file_fsync+0x49/0x100 [ 60.258864][ T5707] vfs_fsync_range+0x10d/0x130 [ 60.263805][ T5707] generic_file_write_iter+0x1ba/0x310 [ 60.269275][ T5707] iter_file_splice_write+0x6bc/0xa80 [ 60.274642][ T5707] direct_splice_actor+0x156/0x2a0 [ 60.279923][ T5707] splice_direct_to_actor+0x311/0x670 [ 60.285307][ T5707] do_splice_direct+0x119/0x1a0 [ 60.290328][ T5707] do_sendfile+0x382/0x650 [ 60.294753][ T5707] __x64_sys_sendfile64+0x105/0x150 [ 60.299953][ T5707] x64_sys_call+0x2db1/0x3000 [ 60.304639][ T5707] do_syscall_64+0xc0/0x2a0 [ 60.309236][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.315484][ T5707] [ 60.317796][ T5707] value changed: 0x0a000021 -> 0x04000021 [ 60.324026][ T5707] [ 60.326347][ T5707] Reported by Kernel Concurrency Sanitizer on: [ 60.332498][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: syz.2.591 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.343704][ T5707] Tainted: [W]=WARN [ 60.347496][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.357546][ T5707] ==================================================================