last executing test programs: 15.742255862s ago: executing program 3 (id=109): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0xa4, 0xa, &(0x7f00000001c0)="f752aa7ef18721eae489293352deefb9cfdeb40c918018c75fcd3c2e6538868d6a8a391c373e0a57e0f39b0ceacdc7fa06c22163670b379f8e41b1074f759a72c5342dd5cca3c5fa2fe710b5e9f10c41c8e1f8c9c6d382821723acb15080d35b5c4d6a8654845fa4686f57ab87fc701e8a386230f6f92d975958e53960ad9fd9393dedce9454e405d031497e6a2de071ac3da106c2541637b667cdd24ee891736f0a8d71"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r1, &(0x7f00000002c0)=""/174, 0xae, 0xe0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0xa4, 0xa, &(0x7f00000001c0)="f752aa7ef18721eae489293352deefb9cfdeb40c918018c75fcd3c2e6538868d6a8a391c373e0a57e0f39b0ceacdc7fa06c22163670b379f8e41b1074f759a72c5342dd5cca3c5fa2fe710b5e9f10c41c8e1f8c9c6d382821723acb15080d35b5c4d6a8654845fa4686f57ab87fc701e8a386230f6f92d975958e53960ad9fd9393dedce9454e405d031497e6a2de071ac3da106c2541637b667cdd24ee891736f0a8d71"}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') (async) pread64(r1, &(0x7f00000002c0)=""/174, 0xae, 0xe0) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) (async) 15.540381414s ago: executing program 3 (id=113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 15.43997701s ago: executing program 3 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = semget$private(0x0, 0x7, 0x180) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) semtimedop(r4, &(0x7f0000000100)=[{0x3, 0x86ac, 0x1000}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="000000000100000014001280090001007663616e00000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x8000) 14.400389712s ago: executing program 3 (id=144): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40100001b00674c0000000000000000fe80080000000000000000000000001a2001000000000000000000000006000000000000000000100a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000000000000000000000000000000000001000000ffffffffffffff7f00000000000000000700000000000000020000000000000004000000000000000000000000000000060000000000000000000000000000040000000000000000000002000000000008001e00fe7900000c0015005d"], 0x1a4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@dioread_lock}, {@nojournal_checksum}, {@acl}, {@usrjquota}, {@acl}, {@delalloc}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$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") chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setsig(0x4203, r3, 0x400, &(0x7f0000000140)={0x3a, 0xb, 0xfffffffa}) readlink(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000300)=""/11, 0xb) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000304000300000000010000000000", @ANYRES32=0x0, @ANYBLOB="a430060001000000603a91b509000100766c616e00000000180002800c0002000b0000001f00000006000100fc0f0000ce010000", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x58}}, 0x8000) 14.235483541s ago: executing program 3 (id=147): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0xfffffffc) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000003c0), &(0x7f0000000c80)=0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001000390423bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="91bc00000000000008001b0007000000000000006d61637674617030000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="0800250001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24008007}, 0x4044004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r5}, 0x8) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000000)={r8, 0x7, 0x7f, 0x1000, 0x82, 0x6, 0x1, 0x3, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x6, 0x10, 0x4, 0x62f, 0x4b1}}, &(0x7f00000000c0)=0xb0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) fstat(r4, &(0x7f0000000180)) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00002cbd7000fddbdf25010a0000000002000004000500080008007f00000114ff09002001000000000000000c0000000000020000000000000010520f1a79c737207ffd0840627575f7a1906edfed11ed6ec8f8a842c4c9b821dcbac14f0e8162d26b63716be6a6dbea26e116ec5b1ed3eed2fdbb8ce0a93510b07b01570773e83d541f367955491d8b7a0c090032dd28d1432155b62ace7d0ed55c7997b0c8973b73e3d99b8bbae124252e379f51bee1d6"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', r3}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./mnt\x00', 0x88100c, 0xffffffffffffffff, 0xff, 0x254, &(0x7f0000001000)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000cc0)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000382000/0x4000)=nil, 0x4000, 0x300000a, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r10, &(0x7f0000000040)={0x7f, 0x9}, &(0x7f000009de80), 0x0) 14.122337588s ago: executing program 3 (id=149): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20008ca, &(0x7f00000000c0)={[{@discard}, {@usrjquota, 0x22}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@data_journal}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") (fail_nth: 5) 14.067333111s ago: executing program 32 (id=149): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20008ca, &(0x7f00000000c0)={[{@discard}, {@usrjquota, 0x22}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@data_journal}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") (fail_nth: 5) 3.167747994s ago: executing program 0 (id=321): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '/dev:ptp0\x00', 0x3a, '/dev/ptp0\x00', 0x3a, './file1'}, 0x3b) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x9, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000380), 0x0}, 0x20) sendmmsg$sock(r1, &(0x7f0000000000), 0x0, 0x4080) 3.167014604s ago: executing program 0 (id=322): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x1008008, &(0x7f0000000040)=ANY=[], 0x1, 0x2ee, &(0x7f0000000a80)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x56) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 3.130166286s ago: executing program 0 (id=323): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$eJzs3c9rXNUeAPDvnUnSpM17aR+Px2t4DwMuWpCmSS1W3djWhV0ULNiFiIuGJqmh0x80KdhaaAsuFBRE3Bbpxn/AvXTvTgR151qoIhUFLRm5d+6kk+ROk6admaT384GZOffcO3POd05P77n35swNoLTG0qdKxO6IxVNJxEjLuuForBzLt7v367XT6SOJev2NX5JI8rzm9ov56470KYkYjIhvjkb8q7q63PkrV89O1eoN1yP2L5y7uH/+ytV9c+emzsycmTk/eeDFg4cmXpo8OPlE4tyRvx47/vr/Pn7/nRdmv63tS+JwnOx/bzpWxLEB9aQgcyzGYjEPsTW/LyIOpYmC72WrWVcI2zpfDzammv977I+I/8RIVLOlhpGY+6inlQM6ql6NqAMllej/UFLNcUDz2H59x8EnOzwq6Z67RxoHQKvj72ucG4nB7Nho+72k5ciocW5j5xMoPy3j/rXRW+kjlp2H+GOpdfqeQDnt3LgZEf8tij/J6rYzizSNvxKVlveldZqIiIE8/eoGim4mWs+dPOZ5mEevxCPE39oO6XdxOH9N849usPyxFcvdjh+AcrpzJN+RZ3vjB/u/dOzRHP9EwfhnuGDftRG93v+1H/819/eD2TnyyopxWDpmOVH8kf0rM3788Nin7cpvHf/dv5Zk9WiOBbvh7s2I0RXxf5AN9JKl9k8K2j/d5NTh9ZXx2nc/H2u3bnn8o7e6HX/9dsSewuOfB6PSNPWQ65P7Z+dqMxON58Iyvvr67S/ald/r+NP2394m/pb2r6x8X/qdXFxnGV+euH1uoM264TXjr/w0kDSON5uf8e7UwsKlyYiB5Hi+SUv+gYfXpblN8zPS+Pc+W9z/l/37v7n8c4ZaD2DWcPHNs/fardtI+7dcTF6sr7MO7aTxT6/d/qv6f5r3yTrL+P2ty/9vt64g/og8/qHHCQwAAAAAAABKqJJdg00q40vpSmV8vDFf9t+xvVK7ML/w3OyFy+enI/Zmfw/ZX2le6R5pLCfp8mT+97DN5QMrlp+PiF0R8Vl1KFseP32hNt3r4AEAAAAAAAAAAAAAAAAAAGCT2JHP/2/ep/q3amP+P1ASnbzBHLC56f9QXln/X3WLJ6AM7P+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAp9KuZ+78kETEjZeHskdqIF9X7WnNgE7rL8irX+9BRYCus4+H8lq69G/6P5RO0fh/lT/zHwfsfHWAHkiKMrPBQf3hnf9O4TsBAAAAAAAAAAAAgA7Ys7v9/P91zQ0AtizT/qC8HmP+v58OgC3OT/9DeTnGB9aaxT/YboX5/wAAAAAAAAAAAADQNcPZI6mM53OBh6NSGR+P+EdE7Iz+ZHauNjMREf+MiO+r/dvS5cleVxoAAAAAAAAAAAAAAAAAAACeMvNXrp6dqtVmLrUm/lqV83QnmndB7UJZr8QjviuS7n8tQxHR80bpWKKvJSeJuJG2/Kao2KX52BzVyBI9/o8JAAAAAAAAAAAAAAAAAABKqGXucbHRz7tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovgf3/+9cotcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb098BAAD///yqQiE=") bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20008ca, &(0x7f00000000c0)={[{@discard}, {@usrjquota, 0x22}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@data_journal}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 2.809748475s ago: executing program 0 (id=328): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x38, {0x2, 0xffff, @empty}, 'dvmrp1\x00'}) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x38, {0x2, 0xffff, @empty}, 'dvmrp1\x00'}) mmap(&(0x7f000073c000/0x3000)=nil, 0x3000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000d1410002cbd7800ffdbdf2508003e000300000008000100010800000800030002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)='f', 0x1}], 0x1}, 0x4000000) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) (async) r5 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0xfffffffc, 0x3, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) (async) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeec4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@noblock_validity}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeec4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@noblock_validity}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$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") 2.440092807s ago: executing program 0 (id=336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 2.407509738s ago: executing program 0 (id=338): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x7, 0xc, 0x1, 0xa76d669c}, {0x74, 0x3, 0x57, 0x6}, {0x6, 0xfd, 0xbe, 0x7f}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20008ca, &(0x7f0000000180)={[{@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffff8}, 0x22}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@data_journal}, {@test_dummy_encryption_v1, 0x22}, {@errors_continue}, {@errors_remount}, {@nobh}], [{@pcr={'pcr', 0x3d, 0xd}}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 2.162812443s ago: executing program 1 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x60000010) 2.115191956s ago: executing program 1 (id=351): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) (async, rerun: 32) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) read(r4, 0x0, 0x0) (async) read$watch_queue(r4, &(0x7f0000002d40)=""/4104, 0x1008) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4df9, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2.035527661s ago: executing program 5 (id=355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000100)=0x40003, 0x2) splice(r2, 0x0, r4, 0x0, 0x408cd, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x58, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xfffffffffffffda8, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc5}]}, 0x28}}, 0x40040800) write$binfmt_aout(r3, &(0x7f0000000740)={{0x107, 0x80, 0x1, 0x3c3, 0xf4, 0x3, 0x2fb, 0xfff}, "fb154f4e6510d87a5044831cbc5293c0eb39fb7dec8f7b495bdae63bb4d6ccb9300c37f98838cc1bcd8b5a343c477db9a33c9c2af3dad12420d40270d28e876c902785612fe369969af419be2d44c9e2d3d9be2a99a7785efa74f91d525e8d17211e02186a397ca11e1c6505", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x88c) r9 = dup2(r2, r7) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000300)) poll(&(0x7f0000000480)=[{r7, 0x40}, {r1, 0x5120}, {r9, 0x42}, {r3, 0x1480}, {r1, 0x82fc}, {r9}, {r2, 0x1000}], 0x7, 0xb) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6396}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.957548765s ago: executing program 1 (id=356): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffd, 0x10000, 0xfffffffd, 0x0, 0x0, 0xdfb}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000040)=0xc24e) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r4, 0x26, 0x0, @val=@netkit}, 0x1c) close(r5) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffff2, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1e8, 0x12, 0x60a, 0x1e8, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@set3={{0x50}, {{0x0, 0x3, 0x4}, {0x1}, {0x81, 0x8000}, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setpipe(r6, 0x407, 0xd9fc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.18402729s ago: executing program 5 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="00820101050000008520000004000000185a0000100000000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff181600004015cca5de5f0274c72cc17be31f8f79acaec5c0dd87b0b7f0d7ed085df3c2d35b9a", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz8GJwlAUBdD7J5NhwiymhEkTU4pYgzsbkGApboON2YG4iUQ/pgIR4ZzF59/L48ELL9WV5G9Tw/m49Le3yXfb5SO7R//VD11+Dttlw/7UJtNvqbEfk891kv/LHGs9zd/hPl9qWdKsxudeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADv4RoAAP//uvwMeg==") quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, 0xee01, &(0x7f0000000040)={0x912, 0x82a, 0x0, 0x5}) 1.137870274s ago: executing program 4 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x60000010) 1.078025677s ago: executing program 2 (id=373): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (fail_nth: 2) 1.077747747s ago: executing program 4 (id=374): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6d6f8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x200, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) renameat2(r2, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback=0x23, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@broadcast, @in=@remote}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="290b00000000000000002000000005000300", @ANYRES32=0x0, @ANYBLOB="eec8300188a348d7d1aba5ed1172252fed10d78f1e810c81d4adc7bfa8949c66a7c174ebd1e8c848af7680f2f0c85212432c2cb33ec8"], 0x1c}}, 0x2404c044) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2) 996.200162ms ago: executing program 2 (id=375): r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "b1"}]}], {0x14}}, 0x84}}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 984.966802ms ago: executing program 1 (id=376): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="830004000000000030001280080001007369740024000280050009002900000108000c000000008006000d000900000008000300e0000001"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 983.850332ms ago: executing program 2 (id=377): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x432a, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xf1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x118) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800ef0000c3181100"/21, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf090000000000005509010000000080950000000000000045000400010000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000000780)=""/4097, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 968.319203ms ago: executing program 4 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000000), &(0x7f00000006c0)=""/223}, 0x20) 871.994149ms ago: executing program 4 (id=379): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8d376f7b", 0x4}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000080800000140012800900010076657468000000000404028008001300", @ANYRES32=r4], 0x3c}}, 0x8000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80800}) listen(r5, 0x5) io_uring_enter(r6, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x104) fchmodat(r10, &(0x7f0000000080)='./file0\x00', 0x154) 866.401979ms ago: executing program 1 (id=380): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "68c40110c3a2c2a1", "43ce39d444a021c82eca1cc4bc46c789", '/:)N', "5f7b960b7f9d5422"}, 0x28) sendto$inet6(r1, &(0x7f0000000280)='F', 0x1, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0xea8) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x60) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) fchdir(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pi6 \x00'}, 0x20) setrlimit(0x7, &(0x7f0000000400)) syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xf, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0xe, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, r3, r0, r0, r0, r0, r0, r4], &(0x7f0000000a40)=[{0x2, 0x1, 0x4, 0x8}, {0x3, 0x1, 0x4, 0x7}], 0x10, 0xfffffc01}, 0x94) mount(0x0, &(0x7f0000000b40)='./file1\x00', &(0x7f0000000b80)='bdev\x00', 0x800000, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) removexattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=@random={'user.', '@\x00'}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x32, 0x0, @fd_index=0xa, 0x1, 0x0, 0x1, 0x5, 0x0, {0x0, r8}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 856.705589ms ago: executing program 2 (id=381): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) 788.927494ms ago: executing program 2 (id=382): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@migrate={0xbc, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e22, @in6=@mcast2}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800c}, 0x0) 736.017057ms ago: executing program 4 (id=383): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1400c, &(0x7f0000000140), 0xff, 0x470, &(0x7f0000000dc0)="$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") chdir(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 729.950788ms ago: executing program 4 (id=384): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x11000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x100032, 0x43a1bd75, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="dd4800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0x4, 0x0, @val=@perf_event={0x4}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r7, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0xbffc, 0x27b6a97, @local, 0x9}, 0x1c) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 290.746003ms ago: executing program 5 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x60000010) 270.097805ms ago: executing program 5 (id=386): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "68c40110c3a2c2a1", "43ce39d444a021c82eca1cc4bc46c789", '/:)N', "5f7b960b7f9d5422"}, 0x28) (async) sendto$inet6(r1, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) (async, rerun: 64) unshare(0x6a040000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) (async) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close(0x3) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x560f, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff0180c20000010800452e005c006a0000080190780a010102ac14143905029078ac1414bb40170501006807f24801000f9d1414aaac1414bb072327ac1e0001ac14141664010102ac14142cac141432e00000017f000001ac1e0001820629b8824f00000081e5a335ff28bb4ae826b233f74d8f0bdd803fe83ff978013fb9fa5b834fa43729a00f6af82eb7cc68cbb6625d6ba64c7056e302148c8f666e5c27e689de9ec885fc690c3bdb0ab34173d0c6c03a6fd2c0c10d433b8e3a8e64438bf43902f8150c6bc46828c39fb1fbfd67832cb6c68f74b1060bcb864bcc10e9fe3fe351"], 0x0) 124.307543ms ago: executing program 5 (id=387): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) 60.422867ms ago: executing program 2 (id=388): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x4000010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 57.629697ms ago: executing program 5 (id=389): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000180)=ANY=[@ANYBLOB="636865636b3d72656c617865642c636865636b3d7374726963742c686964652c6e6f726f636b2c756e686964652c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f636f6d70726573732c004ee73588ad7fc37ef8160f7f2f315c104cbe9497d979d9dfcd8150c4ec864f0efec43eaaf3f5938fa25ccfa5ecdfbcd8993e425341417299bf3d2c3a15130924f79cacbdd816637c821d7c5658f239244ec37a63e2bce7cba1ddfcbc89c15d03c84fa72b49200fae9221c6e4e720462dc66375a41ba012da34de78d390619157e16be07985f0c3c17d5d5ef6dcc1e4a3bf"], 0x2, 0x553, &(0x7f0000000b00)="$eJzs3dtuE0kawPGvQ7JYXim7WlYIRQGKsCsFKZi2DUYWV73tslNgd1vdbZRcoYg4KMKBFWGlTW7Y3LAz0sxDMJfzEPNGaB5hRn1wjj4AOU70/1lQ5e5y1deO1Z8qcVcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb2n2auPbJB7B4oR44pY8T/J5eRGuunG3/d2X4//m5PZ9Nms5OIiJ9t/vv7XJ9cmJ/qvHxHwV/npG3va3Np+vdLrdd+dVCAX0M2rw/c1tGdC37SchlYm9FW1UrEfLNZDVTdNHS6HkW4pN9BO5Adq3r2nitVqWenCst/xGjWnqfsbH98v2XZFPS20tROEvvfgaSF0F02zabxG0ibeHbd5HH8Qn5lIRdppKbW23uuWxx1A3Kj4JY1K4xqV7FKpWCyVipVH1UePbXvyyAb7EDnS4uQ+tPhjOsGzN3A8E1n+l6YY8aQjS6IGPlypSSC+tIbsz/Tz/z8f6JHj7s///Sx/Y2/3jCT5/1b67Naw/D8klrN7bMqWbMtrWZGe9KQr7849orN9NESLJ0ZC8cVIS5xki8q2KKlKRSpiywtZlPpU/EOsi5GmaAllWUKJRCefKFcC0eJIJL4EomReXLknSopSlaqURYmWgiyLLx3xpCE1cZJe1mQ9ed/LoqxhMe42Kg49jHz/c9eV0oijJf/j+E7y9A0cy2/9/A8AAAAAAC4tK/ntezz/n5KbSa1umto+77AAAAAAAMAJSv7yPxsXybezborF/B8AAAAAgMvGSq6xs0QkL7fT2ppYyeVS/BIAAAAAAIBLIvn7/624SNZAuS3W7nIpzP8BAAAAALgkvhu7xn7Yvmr98qsEwZS10176h7WRrM3rbFxJX3flcI9RfcaazjpJikpaTE66etbKpY12F8H8nBVr4+Kw9gJwdgP439cEcG1SfpA7aZs7q2m5mu35SzpKvm6auuD6zSdFcZzpiUgvRf95s/5fSQ7/e681beVkvdctvHzbW01i2Yl72dnIFlA8so7iiFjeJ+stJNdcDDziqeRCjGzcvCVr672u3V66mvXsbEyklYmDI36YHjHmR5lLW81lK97m+3vSMXPxmMXCsKPPoige88g/yt20zd35u2kxIIrSuChK+6MY/F4cP4ryuCjKx4wCAM7L2pgsZMmRvPsNZ7lvy+7yldn9o8ynbeZnkhPr5MyAM7o97oxuHzO7/XzkHkjDcmw87o+Hsuqn+AWfho4bNktW/BZeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppLDyApyDwBggP332LEG5v+xd+GxHmaz6p3Ds+os4/1t9ysFBXkpb6Unq7KQXG2QfONgYK/5fV9DWBgza80naTK9w8vCiFndn5KrHPr9lka2PRhD+Sx+FAAAnJm5MXn4S/L/wph598FcPnp2nN93tzYAAHA6dPDZykf/t4LAtF8Uq9WiEy1qFfjuMxWYWkMr40U6cBcdr6FVO/Aj3/WbceW5qelQhZ122w8iVfcD1fZDs5QsH6iyW7+HuuV4kXHDdlM7oVau70WOG6maCV3V7vyracJFHSQvDtvaNXXjOpHxPRX6ncDVBaVCrfc1NDXtRaZu4qqn2oFpOUFOPfebnZZWNR26gWlHftphfyzj1f2glXRbOO83GwCAC2Jza/v1Sq/XfXeKlYED5878UAEAQGZMlgYAAAAAAAAAAAAAAAAAAAAAABfAWVz/R+WSV/pLQV+UeKicQGXsqePDqZ+cAJyq3wMAAP//5sZO5Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x178, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "1d4d14e2cc7908d642446602e0d53166180767a4ecf0c23d8071d2c435b82210ca3bde3d55ddcc96c22258f4139240b9a7f90453d286f1d93c74d161d8ae7c26383f74a17470f1d980744d782a458ac150060ccea08e0000443e12c7f279bdb88424611353a180763e7f1a7b65fbd672f55a73d7d9baaee0e17c01b199a68e1a1c4ecb4b7a29690ee36a8f88f7f15ca8b0f5ae59557485141af3d9db22f94e7d954478faee"}, @ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "182603920aec8a72e60951f36ed9795aef413df031ff9f0027de1f01009ee9f3323c5f4cd1525c7aa872e4c0d28b342cd13100eff57614d1da16b0959f8e9d97c28a32f87d63fc2459b02a7ef9f3a812b8e378c4cd0529b26279c8f8c759c98ce36793dcc6a9e7d7a46f0f37d889ef23e052c4e085f95d554eda759d4101ff6ae9d4b5e7546ddb879dd1ecb7456fa1efd945d77fc608b6f7c8927c7ae66ccb162e307e9a5be310"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003900093af036d67600000004040000000400de4d0c0001800600060008"], 0x24}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32=r4, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002"], 0x84}}, 0x20008040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c0c000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00004e6000/0x1000)=nil, &(0x7f0000fba000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x8000, 0xa, 0x20002f7}) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r9, 0x109}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r9, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) socket(0x10, 0x3, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x8045}, 0x0) 0s ago: executing program 1 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x200600, &(0x7f0000000680)=ANY=[], 0x1, 0x40d, &(0x7f0000000d80)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) open_by_handle_at(r11, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 33.587541][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.587558][ T29] audit: type=1400 audit(1770178054.692:70): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.616616][ T29] audit: type=1400 audit(1770178054.722:71): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.618899][ T3302] cgroup: Unknown subsys name 'net' [ 33.644326][ T29] audit: type=1400 audit(1770178054.742:72): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.765872][ T3302] cgroup: Unknown subsys name 'cpuset' [ 33.772151][ T3302] cgroup: Unknown subsys name 'rlimit' [ 33.983937][ T29] audit: type=1400 audit(1770178055.082:73): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.007461][ T29] audit: type=1400 audit(1770178055.082:74): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.027980][ T29] audit: type=1400 audit(1770178055.082:75): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.048380][ T29] audit: type=1400 audit(1770178055.082:76): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.076021][ T29] audit: type=1400 audit(1770178055.112:77): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.080253][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.101056][ T29] audit: type=1400 audit(1770178055.112:78): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.132780][ T29] audit: type=1400 audit(1770178055.132:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.157756][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.293625][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.322054][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.363950][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.410475][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.417578][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.424879][ T3315] bridge_slave_0: entered allmulticast mode [ 35.431495][ T3315] bridge_slave_0: entered promiscuous mode [ 35.442768][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.449876][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.457115][ T3315] bridge_slave_1: entered allmulticast mode [ 35.463558][ T3315] bridge_slave_1: entered promiscuous mode [ 35.495640][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.507498][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.522829][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.561740][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.568876][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.576086][ T3314] bridge_slave_0: entered allmulticast mode [ 35.582577][ T3314] bridge_slave_0: entered promiscuous mode [ 35.591244][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.598422][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.605654][ T3314] bridge_slave_1: entered allmulticast mode [ 35.612225][ T3314] bridge_slave_1: entered promiscuous mode [ 35.623764][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.630892][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.638269][ T3313] bridge_slave_0: entered allmulticast mode [ 35.644761][ T3313] bridge_slave_0: entered promiscuous mode [ 35.662047][ T3315] team0: Port device team_slave_0 added [ 35.673141][ T3315] team0: Port device team_slave_1 added [ 35.685944][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.693117][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.700491][ T3313] bridge_slave_1: entered allmulticast mode [ 35.707220][ T3313] bridge_slave_1: entered promiscuous mode [ 35.725940][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.736164][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.752821][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.759906][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.785889][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.801164][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.818051][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.825030][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.851101][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.876766][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.891767][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.928075][ T3313] team0: Port device team_slave_0 added [ 35.939554][ T3314] team0: Port device team_slave_0 added [ 35.952461][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.959639][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.966870][ T3317] bridge_slave_0: entered allmulticast mode [ 35.973402][ T3317] bridge_slave_0: entered promiscuous mode [ 35.980883][ T3313] team0: Port device team_slave_1 added [ 35.986707][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.993779][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.000934][ T3317] bridge_slave_1: entered allmulticast mode [ 36.007502][ T3317] bridge_slave_1: entered promiscuous mode [ 36.014430][ T3314] team0: Port device team_slave_1 added [ 36.022830][ T3315] hsr_slave_0: entered promiscuous mode [ 36.028952][ T3315] hsr_slave_1: entered promiscuous mode [ 36.062704][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.076702][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.083699][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.109776][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.125998][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.135397][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.142365][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.168336][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.189503][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.196551][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.222528][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.238067][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.245082][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.271029][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.285127][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.292214][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.299730][ T3321] bridge_slave_0: entered allmulticast mode [ 36.306201][ T3321] bridge_slave_0: entered promiscuous mode [ 36.337084][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.344177][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.351419][ T3321] bridge_slave_1: entered allmulticast mode [ 36.357998][ T3321] bridge_slave_1: entered promiscuous mode [ 36.366190][ T3317] team0: Port device team_slave_0 added [ 36.374944][ T3317] team0: Port device team_slave_1 added [ 36.406891][ T3314] hsr_slave_0: entered promiscuous mode [ 36.412989][ T3314] hsr_slave_1: entered promiscuous mode [ 36.419069][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.424811][ T3314] Cannot create hsr debugfs directory [ 36.442089][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.449103][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.475066][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.494052][ T3313] hsr_slave_0: entered promiscuous mode [ 36.500323][ T3313] hsr_slave_1: entered promiscuous mode [ 36.506236][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.511989][ T3313] Cannot create hsr debugfs directory [ 36.518774][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.530848][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.537869][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.563816][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.583489][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.655753][ T3317] hsr_slave_0: entered promiscuous mode [ 36.661897][ T3317] hsr_slave_1: entered promiscuous mode [ 36.667876][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.673612][ T3317] Cannot create hsr debugfs directory [ 36.684998][ T3321] team0: Port device team_slave_0 added [ 36.709370][ T3321] team0: Port device team_slave_1 added [ 36.777293][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.784335][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.810283][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.836184][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.843136][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.869158][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.914820][ T3321] hsr_slave_0: entered promiscuous mode [ 36.921038][ T3321] hsr_slave_1: entered promiscuous mode [ 36.927051][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.932770][ T3321] Cannot create hsr debugfs directory [ 36.943820][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.959326][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.975407][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.989500][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.027667][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.038777][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.049965][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.064226][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.090218][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.099594][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.119608][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.128764][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.150177][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.159184][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.169590][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.190531][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.220801][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.233468][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.242939][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.252113][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.281733][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.318148][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.329921][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.357259][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.364342][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.373443][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.380600][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.407913][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.419367][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.427496][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.446709][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.453784][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.474372][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.481490][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.491869][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.513429][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.523848][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.537456][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.556646][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.563762][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.573198][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.580273][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.591556][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.605225][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.612323][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.633085][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.648128][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.655299][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.684650][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.695187][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.717905][ T2466] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.724981][ T2466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.733942][ T2466] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.741000][ T2466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.789828][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.802067][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.812517][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.837191][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.857053][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.887220][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.962844][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.993221][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.056401][ T3315] veth0_vlan: entered promiscuous mode [ 38.081505][ T3313] veth0_vlan: entered promiscuous mode [ 38.089530][ T3315] veth1_vlan: entered promiscuous mode [ 38.099609][ T3313] veth1_vlan: entered promiscuous mode [ 38.123787][ T3317] veth0_vlan: entered promiscuous mode [ 38.141455][ T3313] veth0_macvtap: entered promiscuous mode [ 38.157045][ T3313] veth1_macvtap: entered promiscuous mode [ 38.165670][ T3317] veth1_vlan: entered promiscuous mode [ 38.172805][ T3315] veth0_macvtap: entered promiscuous mode [ 38.182263][ T3315] veth1_macvtap: entered promiscuous mode [ 38.209706][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.226246][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.234853][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.249161][ T3317] veth0_macvtap: entered promiscuous mode [ 38.260181][ T3314] veth0_vlan: entered promiscuous mode [ 38.276485][ T3452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.286983][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.302505][ T3452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316180][ T3317] veth1_macvtap: entered promiscuous mode [ 38.334403][ T3452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.353800][ T3452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.364910][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.367967][ T3314] veth1_vlan: entered promiscuous mode [ 38.387729][ T3452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.397986][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.407115][ T3452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.420949][ T3452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.440175][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.458147][ T3452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.481970][ T3452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.503679][ T3484] Zero length message leads to an empty skb [ 38.504930][ T3321] veth0_vlan: entered promiscuous mode [ 38.537540][ T3452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.537594][ T3452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.537670][ T3452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.559262][ T3321] veth1_vlan: entered promiscuous mode [ 38.597320][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 38.597360][ T29] audit: type=1400 audit(1770178059.702:110): avc: denied { prog_run } for pid=3487 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.613670][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.643773][ T3314] veth0_macvtap: entered promiscuous mode [ 38.647261][ T3314] veth1_macvtap: entered promiscuous mode [ 38.713419][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.724192][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.739391][ T3321] veth0_macvtap: entered promiscuous mode [ 38.746132][ T29] audit: type=1400 audit(1770178059.832:111): avc: denied { create } for pid=3491 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.778108][ T3450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.796350][ T3321] veth1_macvtap: entered promiscuous mode [ 38.812407][ T3450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.822465][ T29] audit: type=1400 audit(1770178059.872:112): avc: denied { create } for pid=3491 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.842995][ T29] audit: type=1400 audit(1770178059.872:113): avc: denied { write } for pid=3491 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.863315][ T29] audit: type=1400 audit(1770178059.872:114): avc: denied { connect } for pid=3491 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.882795][ T29] audit: type=1400 audit(1770178059.872:115): avc: denied { write } for pid=3491 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.926732][ T3450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.926831][ T3450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.927991][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.931871][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.940136][ C1] hrtimer: interrupt took 91740 ns [ 38.941818][ T29] audit: type=1400 audit(1770178059.972:116): avc: denied { open } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.988157][ T29] audit: type=1400 audit(1770178059.972:117): avc: denied { kernel } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.016016][ T3450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.016401][ T3450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.016735][ T3450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.026453][ T29] audit: type=1400 audit(1770178060.032:118): avc: denied { write } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.037992][ T3488] syzkaller0: entered promiscuous mode [ 39.067068][ T3488] syzkaller0: entered allmulticast mode [ 39.076323][ T3496] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 39.076339][ T3496] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 39.082686][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.085747][ T3450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087604][ T3494] chnl_net:caif_netlink_parms(): no params data found [ 39.094202][ T29] audit: type=1400 audit(1770178060.182:119): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.200860][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.212908][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.269112][ T3499] bond1: option min_links: invalid value (18446744073709551601) [ 39.277101][ T3499] bond1: option min_links: allowed values 0 - 2147483647 [ 39.296190][ T3502] loop1: detected capacity change from 0 to 2048 [ 39.303843][ T3499] bond1 (unregistering): Released all slaves [ 39.317711][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.333837][ T3505] loop2: detected capacity change from 0 to 512 [ 39.349269][ T3502] EXT4-fs: Ignoring removed orlov option [ 39.356553][ T3505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.369699][ T3505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.390177][ T3502] EXT4-fs (loop1): can't enable nombcache during remount [ 39.489971][ T3505] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.8: bad orphan inode 131083 [ 39.536357][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.607194][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.836940][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.904170][ T3529] loop4: detected capacity change from 0 to 512 [ 39.914873][ T3529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.926852][ T3529] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.12: bad orphan inode 131083 [ 39.938189][ T3529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.954135][ T3529] xt_connbytes: Forcing CT accounting to be enabled [ 39.983923][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.005706][ T3533] loop4: detected capacity change from 0 to 512 [ 40.022722][ T3533] ======================================================= [ 40.022722][ T3533] WARNING: The mand mount option has been deprecated and [ 40.022722][ T3533] and is ignored by this kernel. Remove the mand [ 40.022722][ T3533] option from the mount to silence this warning. [ 40.022722][ T3533] ======================================================= [ 40.064582][ T3533] EXT4-fs: journaled quota format not specified [ 40.082254][ T3535] loop1: detected capacity change from 0 to 512 [ 40.091029][ T3535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.124089][ T3535] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.14: bad orphan inode 131083 [ 40.135753][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.173080][ T3540] loop0: detected capacity change from 0 to 512 [ 40.187031][ T3540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.212829][ T3540] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.16: bad orphan inode 131083 [ 40.229048][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.238616][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.280045][ T3543] loop1: detected capacity change from 0 to 512 [ 40.287022][ T3543] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.293519][ T3543] EXT4-fs: Ignoring removed orlov option [ 40.300662][ T3543] journal_path: Non-blockdev passed as './file0' [ 40.305418][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.307067][ T3543] EXT4-fs: error: could not find journal device path [ 40.363766][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 40.452682][ T3551] bond1: option min_links: invalid value (18446744073709551601) [ 40.460448][ T3551] bond1: option min_links: allowed values 0 - 2147483647 [ 40.473067][ T3551] bond1 (unregistering): Released all slaves [ 40.602491][ T3561] loop3: detected capacity change from 0 to 512 [ 40.619692][ T3563] loop1: detected capacity change from 0 to 512 [ 40.637429][ T3561] ext4: Unknown parameter 'nouser_xattr' [ 40.658215][ T3563] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.681031][ T3563] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.24: bad orphan inode 131083 [ 40.692299][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.723429][ T3563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 40.768734][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.803241][ T3574] loop3: detected capacity change from 0 to 512 [ 40.810697][ T3574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.830149][ T3574] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.27: bad orphan inode 131083 [ 40.849966][ T3574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.865079][ T3574] netlink: 'syz.3.27': attribute type 2 has an invalid length. [ 40.899783][ T3577] EXT4-fs: journaled quota format not specified [ 40.928392][ T3579] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.941366][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.957620][ T3579] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.28: bad orphan inode 131083 [ 40.977989][ T3579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.029100][ T3586] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.31'. [ 41.058568][ T3588] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.075089][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.076693][ T3586] netlink: 'syz.4.31': attribute type 3 has an invalid length. [ 41.086609][ T3588] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.30: bad orphan inode 131083 [ 41.091737][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 41.122328][ T3588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.136471][ T3586] netlink: 'syz.4.31': attribute type 3 has an invalid length. [ 41.144058][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 41.180607][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.346866][ T3604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.358352][ T3604] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.37: bad orphan inode 131083 [ 41.369328][ T3604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.390503][ T3604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 41.461298][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.556235][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 41.567338][ T3611] chnl_net:caif_netlink_parms(): no params data found [ 41.639709][ T3617] EXT4-fs: journaled quota format not specified [ 41.769976][ T3621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.803418][ T3621] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.43: bad orphan inode 131083 [ 41.831587][ T3621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.869249][ T3629] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.886322][ T3629] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.44: bad orphan inode 131083 [ 41.897772][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.910615][ T3629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.932905][ T3629] xt_connbytes: Forcing CT accounting to be enabled [ 41.969154][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.088574][ T3306] loop2: p3 p4 < > [ 42.096415][ T3642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.107050][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 42.115703][ T3306] loop2: p3 start 95248128 is beyond EOD, truncated [ 42.131379][ T3640] loop2: p3 p4 < > [ 42.135501][ T3640] loop2: p3 start 95248128 is beyond EOD, truncated [ 42.177008][ T3642] EXT4-fs: Ignoring removed orlov option [ 42.195450][ T3642] EXT4-fs (loop4): can't enable nombcache during remount [ 42.208901][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.371139][ T3666] mmap: syz.0.53 (3666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.515240][ T3671] 9pnet_virtio: no channels available for device 127.0.0.1 [ 42.554652][ T3673] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 42.569518][ T3673] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.58: iget: bad i_size value: 12154757448730 [ 42.582478][ T3673] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.58: couldn't read orphan inode 13 (err -117) [ 42.595585][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.634557][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.657260][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.692891][ T3682] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 42.739075][ T3686] FAT-fs (loop4): bogus number of FAT sectors [ 42.745407][ T3686] FAT-fs (loop4): Can't find a valid FAT filesystem [ 42.801958][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.814269][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.051243][ T3706] capability: warning: `syz.4.71' uses 32-bit capabilities (legacy support in use) [ 43.074111][ T3708] FAULT_INJECTION: forcing a failure. [ 43.074111][ T3708] name failslab, interval 1, probability 0, space 0, times 1 [ 43.086891][ T3708] CPU: 0 UID: 0 PID: 3708 Comm: syz.2.72 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.086935][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.086993][ T3708] Call Trace: [ 43.087006][ T3708] [ 43.087016][ T3708] __dump_stack+0x1d/0x30 [ 43.087123][ T3708] dump_stack_lvl+0x95/0xd0 [ 43.087215][ T3708] dump_stack+0x15/0x1b [ 43.087240][ T3708] should_fail_ex+0x263/0x280 [ 43.087280][ T3708] should_failslab+0x8c/0xb0 [ 43.087346][ T3708] __kmalloc_cache_noprof+0x64/0x4a0 [ 43.087423][ T3708] ? __se_sys_memfd_create+0x1df/0x3b0 [ 43.087542][ T3708] ? fput+0x8f/0xc0 [ 43.087576][ T3708] __se_sys_memfd_create+0x1df/0x3b0 [ 43.087622][ T3708] __x64_sys_memfd_create+0x31/0x40 [ 43.087662][ T3708] x64_sys_call+0x28cb/0x3000 [ 43.087737][ T3708] do_syscall_64+0xc0/0x2a0 [ 43.087851][ T3708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.087972][ T3708] RIP: 0033:0x7fa8cea9aeb9 [ 43.088015][ T3708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.088039][ T3708] RSP: 002b:00007fa8cd4f6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 43.088096][ T3708] RAX: ffffffffffffffda RBX: 000000000000044e RCX: 00007fa8cea9aeb9 [ 43.088108][ T3708] RDX: 00007fa8cd4f6ee0 RSI: 0000000000000000 RDI: 00007fa8ceb07333 [ 43.088120][ T3708] RBP: 0000200000000900 R08: 00000000ffffffff R09: 0000000000000000 [ 43.088132][ T3708] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000480 [ 43.088143][ T3708] R13: 00007fa8cd4f6ee0 R14: 00007fa8cd4f6ea0 R15: 00002000000000c0 [ 43.088161][ T3708] [ 43.279797][ T3716] EXT4-fs: journaled quota format not specified [ 43.330999][ T3720] pimreg: entered allmulticast mode [ 43.342156][ T3720] pimreg: left allmulticast mode [ 43.481608][ T3725] syzkaller0: entered promiscuous mode [ 43.487162][ T3725] syzkaller0: entered allmulticast mode [ 43.495979][ T3725] netlink: 'syz.2.78': attribute type 2 has an invalid length. [ 43.503582][ T3725] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 43.513042][ T3725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.526376][ T3725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.797023][ T3774] bridge0: port 3(gretap0) entered blocking state [ 43.803530][ T3774] bridge0: port 3(gretap0) entered disabled state [ 43.811101][ T3774] gretap0: entered allmulticast mode [ 43.817145][ T3774] gretap0: entered promiscuous mode [ 43.822563][ T3774] bridge0: port 3(gretap0) entered blocking state [ 43.829049][ T3774] bridge0: port 3(gretap0) entered forwarding state [ 43.853628][ T3778] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.89: iget: bad i_size value: 38620345925642 [ 43.867934][ T3778] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.89: couldn't read orphan inode 15 (err -117) [ 43.870074][ T3782] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 43.893175][ T3782] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 43.905902][ T3306] udevd[3306]: incorrect ext4 checksum on /dev/loop2 [ 43.913192][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.932429][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 43.932446][ T29] audit: type=1400 audit(1770178065.032:393): avc: denied { create } for pid=3783 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.960091][ T3784] __nla_validate_parse: 8 callbacks suppressed [ 43.960109][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 43.979966][ T3784] netlink: 'syz.0.90': attribute type 83 has an invalid length. [ 44.007228][ T3787] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.022367][ T29] audit: type=1400 audit(1770178065.062:394): avc: denied { setopt } for pid=3783 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.041974][ T29] audit: type=1400 audit(1770178065.082:395): avc: denied { read write } for pid=3783 comm="syz.0.90" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.065937][ T29] audit: type=1400 audit(1770178065.082:396): avc: denied { open } for pid=3783 comm="syz.0.90" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.089610][ T29] audit: type=1400 audit(1770178065.082:397): avc: denied { append } for pid=3783 comm="syz.0.90" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.112502][ T29] audit: type=1400 audit(1770178065.082:398): avc: denied { ioctl } for pid=3783 comm="syz.0.90" path="/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.137690][ T29] audit: type=1400 audit(1770178065.122:399): avc: denied { connect } for pid=3786 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.157274][ T29] audit: type=1400 audit(1770178065.122:400): avc: denied { create } for pid=3786 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.176508][ T29] audit: type=1400 audit(1770178065.122:401): avc: denied { write } for pid=3786 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.195855][ T29] audit: type=1400 audit(1770178065.122:402): avc: denied { getopt } for pid=3786 comm="syz.0.92" laddr=fe80::e lport=35610 faddr=fe80::20 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.222357][ T3791] EXT4-fs: journaled quota format not specified [ 44.236123][ T3791] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 44.245950][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 44.256208][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.313443][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 44.328645][ T3802] Cannot find set identified by id 0 to match [ 44.383229][ T3808] set_capacity_and_notify: 16 callbacks suppressed [ 44.383250][ T3808] loop4: detected capacity change from 0 to 1024 [ 44.434205][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 44.470214][ T3808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.479911][ T3824] loop1: detected capacity change from 0 to 512 [ 44.523707][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.533350][ T3824] EXT4-fs: journaled quota format not specified [ 44.540792][ T3827] loop2: detected capacity change from 0 to 512 [ 44.570138][ T3827] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.613370][ T3827] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 44.629711][ T3831] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0001 i0000 l164 [ 44.638487][ T3827] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.105: attempt to clear invalid blocks 2 len 1 [ 44.654057][ T3827] EXT4-fs (loop2): Remounting filesystem read-only [ 44.661219][ T3827] EXT4-fs (loop2): 1 truncate cleaned up [ 44.670237][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.703529][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.749363][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 44.810472][ T3855] loop2: detected capacity change from 0 to 512 [ 44.840995][ T3855] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 44.852124][ T3860] loop4: detected capacity change from 0 to 512 [ 44.858788][ T3855] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.115: iget: bad i_size value: 12154757448730 [ 44.879133][ T3860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.883720][ T3855] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.115: couldn't read orphan inode 13 (err -117) [ 44.902677][ T3860] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.116: bad orphan inode 131083 [ 44.903437][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.921077][ T3860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.938770][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 44.947695][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 44.960878][ T3860] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.006919][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.018059][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.070276][ T3873] loop1: detected capacity change from 0 to 512 [ 45.080067][ T3873] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 45.121970][ T3876] loop5: detected capacity change from 0 to 7 [ 45.230295][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 45.281087][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 45.291256][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 45.371116][ T3896] cgroup: fork rejected by pids controller in /syz4 [ 45.424620][ T4211] netlink: 'syz.0.131': attribute type 3 has an invalid length. [ 45.492176][ T4211] loop0: detected capacity change from 0 to 2048 [ 45.528332][ T4397] loop1: detected capacity change from 0 to 512 [ 45.540456][ T4397] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.551446][ T4211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.570905][ T4397] EXT4-fs (loop1): 1 truncate cleaned up [ 45.581970][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.629424][ T4402] loop4: detected capacity change from 0 to 512 [ 45.644073][ T4211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.653332][ T4402] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 45.677380][ T4211] EXT4-fs error (device loop0): empty_inline_dir:1770: inode #12: block 5: comm syz.0.131: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 45.708766][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.728386][ T4211] EXT4-fs (loop0): Remounting filesystem read-only [ 45.734987][ T4211] EXT4-fs warning (device loop0): empty_inline_dir:1777: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 45.909191][ T4428] netlink: 216 bytes leftover after parsing attributes in process `syz.3.144'. [ 45.922093][ T4428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.932868][ T4428] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.144: iget: bad i_size value: 38620345925642 [ 45.945832][ T4428] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.144: couldn't read orphan inode 15 (err -117) [ 45.958764][ T4428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.963446][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 45.981775][ T4428] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.001442][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.011957][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.021996][ T4428] netlink: 56 bytes leftover after parsing attributes in process `syz.3.144'. [ 46.033430][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.053561][ T3313] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=76, inode=16, rec_len=16, size=1024 fake=0 [ 46.079753][ T4430] infiniband syz2: set active [ 46.084481][ T4430] infiniband syz2: added ip6_vti0 [ 46.089565][ T36] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.116735][ T4430] RDS/IB: syz2: added [ 46.131517][ T4425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.150468][ T4431] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.160076][ T4430] smc: adding ib device syz2 with port count 1 [ 46.166398][ T4430] smc: ib device syz2 port 1 has no pnetid [ 46.172620][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.179820][ T4425] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.193936][ T3452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.221356][ T4425] netlink: 'syz.2.143': attribute type 16 has an invalid length. [ 46.229182][ T4425] netlink: 'syz.2.143': attribute type 17 has an invalid length. [ 46.241559][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.257969][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4448 comm=syz.0.148 [ 46.302233][ T4425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.318802][ T1036] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.328037][ T3452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.363618][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.408461][ T3452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.466252][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.507380][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.532701][ T3452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.553259][ T4451] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.643290][ T4430] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.650789][ T3452] bridge_slave_1: left promiscuous mode [ 46.656507][ T3452] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.668404][ T3452] bridge_slave_0: left allmulticast mode [ 46.674093][ T3452] bridge_slave_0: left promiscuous mode [ 46.679857][ T3452] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.799689][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.814398][ T4469] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 46.846931][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.854014][ T4433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.876861][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.905820][ T4469] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.154: bg 0: block 104: invalid block bitmap [ 46.919384][ T3452] bond0 (unregistering): Released all slaves [ 46.951017][ T4469] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 46.992346][ T4451] chnl_net:caif_netlink_parms(): no params data found [ 47.003645][ T4469] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.154: invalid indirect mapped block 1 (level 1) [ 47.045457][ T4469] EXT4-fs (loop1): 1 truncate cleaned up [ 47.055747][ T4485] sctp: [Deprecated]: syz.2.157 (pid 4485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.055747][ T4485] Use struct sctp_sack_info instead [ 47.072338][ T4469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.101591][ T3452] hsr_slave_0: left promiscuous mode [ 47.121001][ T3452] hsr_slave_1: left promiscuous mode [ 47.139665][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.147194][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.155119][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.162544][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.181740][ T4495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.188573][ T4495] EXT4-fs: Ignoring removed oldalloc option [ 47.195361][ T3452] veth1_macvtap: left promiscuous mode [ 47.203010][ T3452] veth0_macvtap: left promiscuous mode [ 47.212934][ T3452] veth1_vlan: left promiscuous mode [ 47.224861][ T3452] veth0_vlan: left promiscuous mode [ 47.260182][ T4495] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 47.351737][ T3452] team0 (unregistering): Port device team_slave_1 removed [ 47.362749][ T3452] team0 (unregistering): Port device team_slave_0 removed [ 47.481600][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.506188][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.513301][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.561741][ T4451] bridge_slave_0: entered allmulticast mode [ 47.569998][ T4518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.585182][ T4451] bridge_slave_0: entered promiscuous mode [ 47.631961][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.639115][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.654998][ T4518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.679276][ T4518] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.696557][ T4451] bridge_slave_1: entered allmulticast mode [ 47.704323][ T4451] bridge_slave_1: entered promiscuous mode [ 47.744846][ T4520] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.765180][ T4451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.769785][ T4518] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 47.782405][ T4451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.817253][ T4451] team0: Port device team_slave_0 added [ 47.823924][ T4451] team0: Port device team_slave_1 added [ 47.843631][ T4540] delete_channel: no stack [ 47.860600][ T4540] delete_channel: no stack [ 48.095815][ T4518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.153653][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.160720][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.186741][ T4451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.216628][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.223725][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.249918][ T4451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.310927][ T4451] hsr_slave_0: entered promiscuous mode [ 48.327696][ T4451] hsr_slave_1: entered promiscuous mode [ 48.333768][ T4451] debugfs: 'hsr0' already exists in 'hsr' [ 48.336533][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.339702][ T4451] Cannot create hsr debugfs directory [ 48.514668][ T4591] dummy0: entered promiscuous mode [ 48.521951][ T4591] dummy0: left promiscuous mode [ 48.666318][ T4602] EXT4-fs: Ignoring removed bh option [ 48.680830][ T4605] EXT4-fs: journaled quota format not specified [ 48.698250][ T4451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.712328][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.760062][ T4451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.784978][ T4451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.803096][ T4451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.899523][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.971832][ T4451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.014257][ T4451] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.035219][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 49.035286][ T29] audit: type=1400 audit(1770178070.132:893): avc: denied { create } for pid=4634 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.046185][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.067882][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.117430][ T29] audit: type=1400 audit(1770178070.142:894): avc: denied { write } for pid=4634 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.125810][ C0] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 2 [ 49.175691][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.182878][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.222991][ T4639] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 49.247773][ T4639] bond1 (unregistering): Released all slaves [ 49.267133][ T29] audit: type=1400 audit(1770178070.362:895): avc: denied { ioctl } for pid=4651 comm="syz.2.185" path="socket:[6709]" dev="sockfs" ino=6709 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 49.334970][ T4626] netlink: 'syz.1.180': attribute type 12 has an invalid length. [ 49.372803][ T4451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.473159][ T29] audit: type=1400 audit(1770178070.572:896): avc: denied { read } for pid=4664 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.505102][ T4663] __nla_validate_parse: 36 callbacks suppressed [ 49.505121][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 49.560058][ T4674] set_capacity_and_notify: 11 callbacks suppressed [ 49.560076][ T4674] loop0: detected capacity change from 0 to 512 [ 49.588701][ T4674] EXT4-fs: journaled quota format not specified [ 49.635886][ T29] audit: type=1400 audit(1770178070.742:897): avc: denied { create } for pid=4679 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.704559][ T4691] loop1: detected capacity change from 0 to 512 [ 49.727319][ T4697] loop2: detected capacity change from 0 to 512 [ 49.730664][ T4693] loop0: detected capacity change from 0 to 256 [ 49.757289][ T4682] cgroup: fork rejected by pids controller in /syz2 [ 49.761927][ T4691] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 49.794003][ T4691] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.192: iget: bad i_size value: 12154757448730 [ 49.820179][ T4451] veth0_vlan: entered promiscuous mode [ 49.826568][ T4697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 49.834738][ T4697] System zones: 0-2, 18-18, 34-34 [ 49.847151][ T29] audit: type=1326 audit(1770178070.952:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91efbaeb9 code=0x7ffc0000 [ 49.856184][ T4697] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.870615][ T29] audit: type=1326 audit(1770178070.952:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa91efbaeb9 code=0x7ffc0000 [ 49.900220][ T29] audit: type=1326 audit(1770178070.952:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91efbaeb9 code=0x7ffc0000 [ 49.923602][ T29] audit: type=1326 audit(1770178070.952:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa91efbaeb9 code=0x7ffc0000 [ 49.946898][ T29] audit: type=1326 audit(1770178070.952:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4698 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91efbaeb9 code=0x7ffc0000 [ 49.975090][ T4691] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.192: couldn't read orphan inode 13 (err -117) [ 49.978132][ T4697] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.002911][ T4451] veth1_vlan: entered promiscuous mode [ 50.009559][ T4691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.037464][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.051877][ T4693] ip6_vti0 speed is unknown, defaulting to 1000 [ 50.064411][ T4451] veth0_macvtap: entered promiscuous mode [ 50.070428][ T4697] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 50.077444][ T4697] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.191: bad orphan inode 4095 [ 50.089844][ T4451] veth1_macvtap: entered promiscuous mode [ 50.101728][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.114161][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.126544][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.138108][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.182511][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.202075][ T5526] loop4: detected capacity change from 0 to 128 [ 50.211436][ T5526] EXT4-fs: Ignoring removed nobh option [ 50.236372][ T4697] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.245356][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.271190][ T5526] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.294945][ T5429] loop1: detected capacity change from 0 to 4096 [ 50.317212][ T5526] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.319010][ T5429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.412156][ T3317] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 50.447558][ T5429] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 50.455383][ T5429] netlink: 2 bytes leftover after parsing attributes in process `syz.1.196'. [ 50.466113][ T5429] bond0: entered promiscuous mode [ 50.471254][ T5429] bond_slave_0: entered promiscuous mode [ 50.477197][ T5429] bond_slave_1: entered promiscuous mode [ 50.489599][ T5698] loop5: detected capacity change from 0 to 512 [ 50.497366][ T5429] bridge0: port 3(bond0) entered blocking state [ 50.503696][ T5429] bridge0: port 3(bond0) entered disabled state [ 50.511063][ T5698] EXT4-fs (loop5): 1 truncate cleaned up [ 50.517910][ T5698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.545881][ T4693] netlink: 300 bytes leftover after parsing attributes in process `syz.0.193'. [ 50.552940][ T5429] bond0: entered allmulticast mode [ 50.560330][ T5429] bond_slave_0: entered allmulticast mode [ 50.566115][ T5429] bond_slave_1: entered allmulticast mode [ 50.591797][ T5705] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.199: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 50.612890][ T5429] bridge0: port 3(bond0) entered blocking state [ 50.619331][ T5429] bridge0: port 3(bond0) entered forwarding state [ 50.636955][ T5705] EXT4-fs (loop5): Remounting filesystem read-only [ 50.644356][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.650611][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 50.701236][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.711689][ T5712] Cannot find set identified by id 0 to match [ 50.749092][ T5713] loop4: detected capacity change from 0 to 512 [ 50.763719][ T5713] EXT4-fs: journaled quota format not specified [ 50.784151][ T4451] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.805444][ T5717] netlink: 104 bytes leftover after parsing attributes in process `syz.4.204'. [ 50.825223][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 50.903891][ T5728] loop0: detected capacity change from 0 to 512 [ 50.946976][ T5728] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 51.017899][ T5738] netlink: 'syz.5.203': attribute type 6 has an invalid length. [ 51.063320][ T5728] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.205: iget: bad i_size value: 12154757448730 [ 51.093802][ T5741] tipc: Can't bind to reserved service type 0 [ 51.147184][ T5728] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.205: couldn't read orphan inode 13 (err -117) [ 51.163204][ T5728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.182033][ T5744] loop2: detected capacity change from 0 to 2048 [ 51.194863][ T5745] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 12 [ 51.221351][ T5744] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 51.222161][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.291510][ T5747] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.316079][ T5747] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 51.435213][ T5747] EXT4-fs (loop0): 1 truncate cleaned up [ 51.447381][ T5747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.214'. [ 51.456428][ T5747] netlink: 'syz.0.214': attribute type 7 has an invalid length. [ 51.464075][ T5747] netlink: 'syz.0.214': attribute type 8 has an invalid length. [ 51.471847][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 51.547946][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'. [ 51.584201][ T5758] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 51.639966][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 51.657299][ T5766] capability: warning: `syz.2.218' uses deprecated v2 capabilities in a way that may be insecure [ 51.795011][ T5775] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 51.803589][ T5776] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 51.813956][ T5775] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.224: iget: bad i_size value: 12154757448730 [ 51.826669][ T5776] SELinux: failed to load policy [ 51.876925][ T5785] FAT-fs (loop0): bogus sectors per cluster 0 [ 51.883049][ T5785] FAT-fs (loop0): Can't find a valid FAT filesystem [ 51.892164][ T5775] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.224: couldn't read orphan inode 13 (err -117) [ 51.948552][ T5775] FAULT_INJECTION: forcing a failure. [ 51.948552][ T5775] name failslab, interval 1, probability 0, space 0, times 0 [ 51.961337][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: syz.4.224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.961373][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.961420][ T5775] Call Trace: [ 51.961428][ T5775] [ 51.961438][ T5775] __dump_stack+0x1d/0x30 [ 51.961471][ T5775] dump_stack_lvl+0x95/0xd0 [ 51.961501][ T5775] dump_stack+0x15/0x1b [ 51.961528][ T5775] should_fail_ex+0x263/0x280 [ 51.961605][ T5775] should_failslab+0x8c/0xb0 [ 51.961691][ T5775] kmem_cache_alloc_noprof+0x68/0x490 [ 51.961783][ T5775] ? getname_flags+0x7f/0x3b0 [ 51.961839][ T5775] getname_flags+0x7f/0x3b0 [ 51.961911][ T5775] do_sys_openat2+0x60/0x150 [ 51.961950][ T5775] __x64_sys_openat+0xf2/0x120 [ 51.962009][ T5775] x64_sys_call+0x2b07/0x3000 [ 51.962128][ T5775] do_syscall_64+0xc0/0x2a0 [ 51.962169][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.962326][ T5775] RIP: 0033:0x7fa91efbaeb9 [ 51.962342][ T5775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.962361][ T5775] RSP: 002b:00007fa91da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.962387][ T5775] RAX: ffffffffffffffda RBX: 00007fa91f235fa0 RCX: 00007fa91efbaeb9 [ 51.962406][ T5775] RDX: 000000000000275a RSI: 0000200000002180 RDI: ffffffffffffff9c [ 51.962429][ T5775] RBP: 00007fa91da17090 R08: 0000000000000000 R09: 0000000000000000 [ 51.962447][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.962464][ T5775] R13: 00007fa91f236038 R14: 00007fa91f235fa0 R15: 00007ffd67fb6128 [ 51.962491][ T5775] [ 52.169421][ T5791] C: renamed from team_slave_0 (while UP) [ 52.198154][ T5795] EXT4-fs: journaled quota format not specified [ 52.205912][ T5791] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 52.213598][ T5791] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 52.243826][ T5799] EXT4-fs: journaled quota format not specified [ 52.293695][ T5801] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.383919][ T5816] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.406428][ T5816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.415295][ T5816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.444716][ T5821] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 52.455116][ T5821] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.238: iget: bad i_size value: 12154757448730 [ 52.470511][ T5821] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.238: couldn't read orphan inode 13 (err -117) [ 52.498265][ T5821] FAULT_INJECTION: forcing a failure. [ 52.498265][ T5821] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.511429][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.511496][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.511512][ T5821] Call Trace: [ 52.511520][ T5821] [ 52.511530][ T5821] __dump_stack+0x1d/0x30 [ 52.511561][ T5821] dump_stack_lvl+0x95/0xd0 [ 52.511642][ T5821] dump_stack+0x15/0x1b [ 52.511676][ T5821] should_fail_ex+0x263/0x280 [ 52.511715][ T5821] should_fail+0xb/0x20 [ 52.511744][ T5821] should_fail_usercopy+0x1a/0x20 [ 52.511777][ T5821] strncpy_from_user+0x27/0x250 [ 52.511808][ T5821] getname_flags+0xad/0x3b0 [ 52.511840][ T5821] do_sys_openat2+0x60/0x150 [ 52.511878][ T5821] __x64_sys_openat+0xf2/0x120 [ 52.511938][ T5821] x64_sys_call+0x2b07/0x3000 [ 52.512046][ T5821] do_syscall_64+0xc0/0x2a0 [ 52.512101][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.512147][ T5821] RIP: 0033:0x7f3e761daeb9 [ 52.512164][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.512186][ T5821] RSP: 002b:00007f3e74c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.512275][ T5821] RAX: ffffffffffffffda RBX: 00007f3e76455fa0 RCX: 00007f3e761daeb9 [ 52.512330][ T5821] RDX: 000000000000275a RSI: 0000200000002180 RDI: ffffffffffffff9c [ 52.512347][ T5821] RBP: 00007f3e74c37090 R08: 0000000000000000 R09: 0000000000000000 [ 52.512364][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.512379][ T5821] R13: 00007f3e76456038 R14: 00007f3e76455fa0 R15: 00007ffd3f60dda8 [ 52.512403][ T5821] [ 52.743417][ T5828] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 52.761237][ T5835] ext4: Unknown parameter 'nobh"errors' [ 52.812023][ T5828] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 52.847211][ T5846] EXT4-fs: journaled quota format not specified [ 52.853166][ T5828] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 52.864217][ T5828] bridge0: port 4(netdevsim1) entered blocking state [ 52.871055][ T5828] bridge0: port 4(netdevsim1) entered disabled state [ 52.883059][ T5828] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 52.930221][ T5828] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 52.953711][ T5857] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.962873][ T5857] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (62000000) [ 52.972947][ T5857] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 52.978416][ T5828] bridge0: port 4(netdevsim1) entered blocking state [ 52.985997][ T5858] FAULT_INJECTION: forcing a failure. [ 52.985997][ T5858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.989072][ T5828] bridge0: port 4(netdevsim1) entered forwarding state [ 53.001848][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.001880][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.001897][ T5858] Call Trace: [ 53.001904][ T5858] [ 53.001914][ T5858] __dump_stack+0x1d/0x30 [ 53.002012][ T5858] dump_stack_lvl+0x95/0xd0 [ 53.002037][ T5858] dump_stack+0x15/0x1b [ 53.002137][ T5858] should_fail_ex+0x263/0x280 [ 53.002173][ T5858] should_fail+0xb/0x20 [ 53.002209][ T5858] should_fail_usercopy+0x1a/0x20 [ 53.002267][ T5858] _copy_from_user+0x1c/0xb0 [ 53.002295][ T5858] ___sys_sendmsg+0xc1/0x1e0 [ 53.002374][ T5858] __x64_sys_sendmsg+0xd4/0x160 [ 53.002435][ T5858] x64_sys_call+0x17ba/0x3000 [ 53.002563][ T5858] do_syscall_64+0xc0/0x2a0 [ 53.002680][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.002802][ T5858] RIP: 0033:0x7f3e761daeb9 [ 53.002865][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.002921][ T5858] RSP: 002b:00007f3e74bf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.002978][ T5858] RAX: ffffffffffffffda RBX: 00007f3e76456180 RCX: 00007f3e761daeb9 [ 53.003011][ T5858] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 53.003112][ T5858] RBP: 00007f3e74bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 53.003149][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.003187][ T5858] R13: 00007f3e76456218 R14: 00007f3e76456180 R15: 00007ffd3f60dda8 [ 53.003239][ T5858] [ 53.240686][ T5863] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 53.262392][ T5863] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.252: iget: bad i_size value: 12154757448730 [ 53.285899][ T5863] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.252: couldn't read orphan inode 13 (err -117) [ 53.344213][ T5874] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 53.372913][ T5877] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 53.382041][ T5874] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.255: iget: bad i_size value: 12154757448730 [ 53.395525][ T5877] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.257: iget: bad i_size value: 12154757448730 [ 53.409911][ T5874] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.255: couldn't read orphan inode 13 (err -117) [ 53.415327][ T5877] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.257: couldn't read orphan inode 13 (err -117) [ 53.441088][ T5877] FAULT_INJECTION: forcing a failure. [ 53.441088][ T5877] name failslab, interval 1, probability 0, space 0, times 0 [ 53.453851][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.2.257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.453906][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.453921][ T5877] Call Trace: [ 53.453929][ T5877] [ 53.453936][ T5877] __dump_stack+0x1d/0x30 [ 53.453965][ T5877] dump_stack_lvl+0x95/0xd0 [ 53.454040][ T5877] dump_stack+0x15/0x1b [ 53.454108][ T5877] should_fail_ex+0x263/0x280 [ 53.454138][ T5877] should_failslab+0x8c/0xb0 [ 53.454161][ T5877] kmem_cache_alloc_noprof+0x68/0x490 [ 53.454189][ T5877] ? alloc_empty_file+0x76/0x200 [ 53.454302][ T5877] alloc_empty_file+0x76/0x200 [ 53.454328][ T5877] path_openat+0x62/0x23c0 [ 53.454409][ T5877] ? _parse_integer_limit+0x170/0x190 [ 53.454444][ T5877] ? _parse_integer+0x27/0x40 [ 53.454493][ T5877] ? kstrtoull+0x111/0x140 [ 53.454523][ T5877] ? kstrtouint+0x76/0xc0 [ 53.454643][ T5877] do_filp_open+0x15d/0x280 [ 53.454697][ T5877] do_sys_openat2+0xa6/0x150 [ 53.454732][ T5877] __x64_sys_openat+0xf2/0x120 [ 53.454841][ T5877] x64_sys_call+0x2b07/0x3000 [ 53.454869][ T5877] do_syscall_64+0xc0/0x2a0 [ 53.454931][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.454958][ T5877] RIP: 0033:0x7fa8cea9aeb9 [ 53.454974][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.455028][ T5877] RSP: 002b:00007fa8cd4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.455057][ T5877] RAX: ffffffffffffffda RBX: 00007fa8ced15fa0 RCX: 00007fa8cea9aeb9 [ 53.455075][ T5877] RDX: 000000000000275a RSI: 0000200000002180 RDI: ffffffffffffff9c [ 53.455091][ T5877] RBP: 00007fa8cd4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.455103][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.455115][ T5877] R13: 00007fa8ced16038 R14: 00007fa8ced15fa0 R15: 00007ffc54575638 [ 53.455141][ T5877] [ 53.649793][ T5871] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.672540][ T5885] ipvlan1: entered promiscuous mode [ 53.677862][ T5885] ipvlan1: entered allmulticast mode [ 53.683216][ T5885] veth0_vlan: entered allmulticast mode [ 53.696100][ T5871] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.736354][ T5885] ext4: Unknown parameter 'delalloc"errors' [ 53.831161][ T5897] Cannot find set identified by id 0 to match [ 53.868519][ T5906] FAULT_INJECTION: forcing a failure. [ 53.868519][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 53.881361][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.5.264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.881520][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.881536][ T5906] Call Trace: [ 53.881543][ T5906] [ 53.881552][ T5906] __dump_stack+0x1d/0x30 [ 53.881581][ T5906] dump_stack_lvl+0x95/0xd0 [ 53.881608][ T5906] dump_stack+0x15/0x1b [ 53.881632][ T5906] should_fail_ex+0x263/0x280 [ 53.881693][ T5906] should_failslab+0x8c/0xb0 [ 53.881783][ T5906] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 53.881816][ T5906] ? __alloc_skb+0x2f0/0x4b0 [ 53.881854][ T5906] __alloc_skb+0x2f0/0x4b0 [ 53.881965][ T5906] ? __alloc_skb+0x219/0x4b0 [ 53.882003][ T5906] netlink_alloc_large_skb+0xbf/0xf0 [ 53.882039][ T5906] netlink_sendmsg+0x40c/0x6f0 [ 53.882061][ T5906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.882081][ T5906] ____sys_sendmsg+0x5af/0x600 [ 53.882129][ T5906] ___sys_sendmsg+0x195/0x1e0 [ 53.882170][ T5906] __x64_sys_sendmsg+0xd4/0x160 [ 53.882199][ T5906] x64_sys_call+0x17ba/0x3000 [ 53.882231][ T5906] do_syscall_64+0xc0/0x2a0 [ 53.882272][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.882294][ T5906] RIP: 0033:0x7fe845d9aeb9 [ 53.882327][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.882346][ T5906] RSP: 002b:00007fe8447f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.882372][ T5906] RAX: ffffffffffffffda RBX: 00007fe846015fa0 RCX: 00007fe845d9aeb9 [ 53.882448][ T5906] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 53.882465][ T5906] RBP: 00007fe8447f7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.882482][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.882573][ T5906] R13: 00007fe846016038 R14: 00007fe846015fa0 R15: 00007ffece29d528 [ 53.882630][ T5906] [ 53.885578][ T5905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.895913][ T5906] Cannot find set identified by id 0 to match [ 54.008829][ T5905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 54.098403][ T5905] System zones: 1-2, 4-12, 8-8 [ 54.103722][ T5905] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.263: iget: bad i_size value: 38620345925642 [ 54.117386][ T5905] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.263: couldn't read orphan inode 15 (err -117) [ 54.183154][ T5905] IPv6: A: Disabled Multicast RS [ 54.257574][ T5925] EXT4-fs: journaled quota format not specified [ 54.375883][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 54.375900][ T29] audit: type=1400 audit(1770178075.482:996): avc: denied { map } for pid=5927 comm="syz.4.271" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.408500][ T5928] vhci_hcd vhci_hcd.2: invalid port number 98 [ 54.414664][ T5928] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 54.444452][ T5928] ext4: Unknown parameter 'uid>00000000000000000000' [ 54.534452][ T29] audit: type=1400 audit(1770178075.632:997): avc: denied { write } for pid=5931 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.564166][ T5936] __nla_validate_parse: 8 callbacks suppressed [ 54.564183][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 54.712523][ T410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 54.725470][ T410] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 54.737975][ T410] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.737975][ T410] [ 54.748034][ T410] EXT4-fs (loop2): Total free blocks count 0 [ 54.754223][ T410] EXT4-fs (loop2): Free/Dirty block details [ 54.760189][ T410] EXT4-fs (loop2): free_blocks=0 [ 54.765174][ T410] EXT4-fs (loop2): dirty_blocks=13996 [ 54.770569][ T410] EXT4-fs (loop2): Block reservation details [ 54.776708][ T410] EXT4-fs (loop2): i_reserved_data_blocks=13996 [ 54.812096][ T410] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 54.824985][ T410] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.824985][ T410] [ 54.883612][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'. [ 54.934496][ T5967] Cannot find set identified by id 0 to match [ 54.946801][ T5964] FAULT_INJECTION: forcing a failure. [ 54.946801][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.960034][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.960065][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.960078][ T5964] Call Trace: [ 54.960084][ T5964] [ 54.960091][ T5964] __dump_stack+0x1d/0x30 [ 54.960125][ T5964] dump_stack_lvl+0x95/0xd0 [ 54.960149][ T5964] dump_stack+0x15/0x1b [ 54.960175][ T5964] should_fail_ex+0x263/0x280 [ 54.960217][ T5964] should_fail+0xb/0x20 [ 54.960266][ T5964] should_fail_usercopy+0x1a/0x20 [ 54.960305][ T5964] _copy_from_iter+0xcf/0xea0 [ 54.960324][ T5964] ? __alloc_skb+0x397/0x4b0 [ 54.960357][ T5964] ? __alloc_skb+0x219/0x4b0 [ 54.960464][ T5964] netlink_sendmsg+0x4ae/0x6f0 [ 54.960485][ T5964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.960508][ T5964] ____sys_sendmsg+0x5af/0x600 [ 54.960538][ T5964] ___sys_sendmsg+0x195/0x1e0 [ 54.960580][ T5964] __x64_sys_sendmsg+0xd4/0x160 [ 54.960638][ T5964] x64_sys_call+0x17ba/0x3000 [ 54.960664][ T5964] do_syscall_64+0xc0/0x2a0 [ 54.960703][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.960801][ T5964] RIP: 0033:0x7fa8cea9aeb9 [ 54.960821][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.960839][ T5964] RSP: 002b:00007fa8cd4f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.960870][ T5964] RAX: ffffffffffffffda RBX: 00007fa8ced15fa0 RCX: 00007fa8cea9aeb9 [ 54.960888][ T5964] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 54.960906][ T5964] RBP: 00007fa8cd4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.960993][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.961005][ T5964] R13: 00007fa8ced16038 R14: 00007fa8ced15fa0 R15: 00007ffc54575638 [ 54.961032][ T5964] [ 54.995833][ T5964] Cannot find set identified by id 0 to match [ 55.073554][ T29] audit: type=1400 audit(1770178076.172:998): avc: denied { block_suspend } for pid=5971 comm="syz.4.284" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.096630][ T5972] set_capacity_and_notify: 24 callbacks suppressed [ 55.096672][ T5972] loop4: detected capacity change from 0 to 512 [ 55.190743][ T5972] EXT4-fs: journaled quota format not specified [ 55.261923][ T5977] loop0: detected capacity change from 0 to 512 [ 55.278033][ T5978] netlink: 'syz.2.287': attribute type 6 has an invalid length. [ 55.292420][ T5977] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.286: iget: bad i_size value: 12154757448730 [ 55.311282][ T5978] loop2: detected capacity change from 0 to 512 [ 55.317897][ T29] audit: type=1400 audit(1770178076.402:999): avc: denied { setattr } for pid=5979 comm="syz.5.288" name="secretmem" dev="secretmem" ino=8084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.341776][ T5977] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.286: couldn't read orphan inode 13 (err -117) [ 55.367291][ T5978] EXT4-fs: Ignoring removed nobh option [ 55.383760][ T5984] netlink: 14 bytes leftover after parsing attributes in process `syz.4.289'. [ 55.404054][ T5978] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.416708][ T5977] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.286: corrupted in-inode xattr: overlapping e_value [ 55.424591][ T29] audit: type=1400 audit(1770178076.522:1000): avc: denied { write } for pid=5975 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.454102][ T29] audit: type=1400 audit(1770178076.552:1001): avc: denied { setopt } for pid=5976 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.481663][ T29] audit: type=1400 audit(1770178076.552:1002): avc: denied { accept } for pid=5976 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.505192][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 55.575517][ T3452] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.584446][ T3452] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.594275][ T3452] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.603177][ T3452] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.621370][ T6003] loop5: detected capacity change from 0 to 512 [ 55.630141][ T6003] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 55.638366][ T6003] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #13: comm syz.5.294: iget: bad i_size value: 12154757448730 [ 55.652567][ T6003] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.294: couldn't read orphan inode 13 (err -117) [ 55.665904][ T6003] FAULT_INJECTION: forcing a failure. [ 55.665904][ T6003] name failslab, interval 1, probability 0, space 0, times 0 [ 55.678593][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.5.294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.678627][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.678687][ T6003] Call Trace: [ 55.678695][ T6003] [ 55.678705][ T6003] __dump_stack+0x1d/0x30 [ 55.678736][ T6003] dump_stack_lvl+0x95/0xd0 [ 55.678803][ T6003] dump_stack+0x15/0x1b [ 55.678829][ T6003] should_fail_ex+0x263/0x280 [ 55.678869][ T6003] should_failslab+0x8c/0xb0 [ 55.678953][ T6003] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 55.678985][ T6003] ? __d_alloc+0x37/0x340 [ 55.679091][ T6003] __d_alloc+0x37/0x340 [ 55.679126][ T6003] d_alloc_parallel+0x54/0xce0 [ 55.679202][ T6003] ? __rcu_read_unlock+0x4e/0x70 [ 55.679259][ T6003] ? __d_lookup+0x316/0x340 [ 55.679369][ T6003] path_openat+0x8d2/0x23c0 [ 55.679413][ T6003] ? _parse_integer_limit+0x170/0x190 [ 55.679518][ T6003] do_filp_open+0x15d/0x280 [ 55.679571][ T6003] do_sys_openat2+0xa6/0x150 [ 55.679611][ T6003] __x64_sys_openat+0xf2/0x120 [ 55.679691][ T6003] x64_sys_call+0x2b07/0x3000 [ 55.679763][ T6003] do_syscall_64+0xc0/0x2a0 [ 55.679803][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.679831][ T6003] RIP: 0033:0x7fe845d9aeb9 [ 55.679852][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.679875][ T6003] RSP: 002b:00007fe8447f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.679972][ T6003] RAX: ffffffffffffffda RBX: 00007fe846015fa0 RCX: 00007fe845d9aeb9 [ 55.679991][ T6003] RDX: 000000000000275a RSI: 0000200000002180 RDI: ffffffffffffff9c [ 55.680057][ T6003] RBP: 00007fe8447f7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.680075][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.680169][ T6003] R13: 00007fe846016038 R14: 00007fe846015fa0 R15: 00007ffece29d528 [ 55.680204][ T6003] [ 55.880515][ T6006] loop0: detected capacity change from 0 to 512 [ 55.887539][ T6006] ext4: Unknown parameter 'euid<00000000000000000000' [ 55.924783][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.5.296'. [ 55.926643][ T29] audit: type=1400 audit(1770178077.022:1003): avc: denied { getopt } for pid=6007 comm="syz.5.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.933892][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.5.296'. [ 55.983239][ T6013] loop0: detected capacity change from 0 to 512 [ 55.992527][ T6013] EXT4-fs: journaled quota format not specified [ 56.057243][ T6016] FAULT_INJECTION: forcing a failure. [ 56.057243][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.070453][ T6016] CPU: 0 UID: 0 PID: 6016 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.070477][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.070488][ T6016] Call Trace: [ 56.070494][ T6016] [ 56.070501][ T6016] __dump_stack+0x1d/0x30 [ 56.070572][ T6016] dump_stack_lvl+0x95/0xd0 [ 56.070663][ T6016] dump_stack+0x15/0x1b [ 56.070680][ T6016] should_fail_ex+0x263/0x280 [ 56.070753][ T6016] should_fail+0xb/0x20 [ 56.070778][ T6016] should_fail_usercopy+0x1a/0x20 [ 56.070806][ T6016] _copy_from_iter+0xcf/0xea0 [ 56.070823][ T6016] ? __alloc_skb+0x397/0x4b0 [ 56.070868][ T6016] ? __alloc_skb+0x219/0x4b0 [ 56.070896][ T6016] netlink_sendmsg+0x4ae/0x6f0 [ 56.070916][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.071022][ T6016] ____sys_sendmsg+0x5af/0x600 [ 56.071080][ T6016] ___sys_sendmsg+0x195/0x1e0 [ 56.071110][ T6016] __x64_sys_sendmsg+0xd4/0x160 [ 56.071131][ T6016] x64_sys_call+0x17ba/0x3000 [ 56.071153][ T6016] do_syscall_64+0xc0/0x2a0 [ 56.071225][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.071245][ T6016] RIP: 0033:0x7f3e761daeb9 [ 56.071259][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.071275][ T6016] RSP: 002b:00007f3e74c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.071360][ T6016] RAX: ffffffffffffffda RBX: 00007f3e76455fa0 RCX: 00007f3e761daeb9 [ 56.071378][ T6016] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 56.071396][ T6016] RBP: 00007f3e74c37090 R08: 0000000000000000 R09: 0000000000000000 [ 56.071410][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.071422][ T6016] R13: 00007f3e76456038 R14: 00007f3e76455fa0 R15: 00007ffd3f60dda8 [ 56.071454][ T6016] [ 56.289056][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'. [ 56.298719][ T6022] Cannot find set identified by id 0 to match [ 56.306863][ T6028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=6028 comm=syz.0.300 [ 56.348556][ T29] audit: type=1326 audit(1770178077.452:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cea9aeb9 code=0x7ffc0000 [ 56.371990][ T29] audit: type=1326 audit(1770178077.452:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8cea9aeb9 code=0x7ffc0000 [ 56.386405][ T6032] loop4: detected capacity change from 0 to 512 [ 56.441802][ T6030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.301'. [ 56.498901][ T6041] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 56.533116][ T6041] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 56.571929][ T6041] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 56.583401][ T6041] bridge0: port 3(netdevsim1) entered blocking state [ 56.591199][ T6041] bridge0: port 3(netdevsim1) entered disabled state [ 56.601273][ T6041] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 56.620557][ T6053] loop4: detected capacity change from 0 to 512 [ 56.633340][ T6041] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 56.646139][ T6041] bridge0: port 3(netdevsim1) entered blocking state [ 56.653403][ T6041] bridge0: port 3(netdevsim1) entered forwarding state [ 56.663831][ T6053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.689613][ T6053] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.310: bad orphan inode 131083 [ 56.726266][ T6057] FAULT_INJECTION: forcing a failure. [ 56.726266][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 56.738933][ T6057] CPU: 1 UID: 0 PID: 6057 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.739023][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.739040][ T6057] Call Trace: [ 56.739049][ T6057] [ 56.739059][ T6057] __dump_stack+0x1d/0x30 [ 56.739169][ T6057] dump_stack_lvl+0x95/0xd0 [ 56.739193][ T6057] dump_stack+0x15/0x1b [ 56.739246][ T6057] should_fail_ex+0x263/0x280 [ 56.739339][ T6057] should_failslab+0x8c/0xb0 [ 56.739386][ T6057] kmem_cache_alloc_noprof+0x68/0x490 [ 56.739418][ T6057] ? skb_clone+0x151/0x1f0 [ 56.739445][ T6057] skb_clone+0x151/0x1f0 [ 56.739470][ T6057] dev_queue_xmit_nit+0x13e/0x510 [ 56.739501][ T6057] ? validate_xmit_xfrm+0x43/0x7a0 [ 56.739581][ T6057] dev_hard_start_xmit+0xd3/0x3e0 [ 56.739628][ T6057] __dev_queue_xmit+0xdb1/0x1f20 [ 56.739671][ T6057] ? __dev_queue_xmit+0x148/0x1f20 [ 56.739797][ T6057] ? should_fail_ex+0xd9/0x280 [ 56.739839][ T6057] __netlink_deliver_tap+0x3c3/0x500 [ 56.739890][ T6057] netlink_unicast+0x66b/0x690 [ 56.740025][ T6057] netlink_sendmsg+0x5c8/0x6f0 [ 56.740049][ T6057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.740075][ T6057] ____sys_sendmsg+0x5af/0x600 [ 56.740185][ T6057] ___sys_sendmsg+0x195/0x1e0 [ 56.740221][ T6057] __x64_sys_sendmsg+0xd4/0x160 [ 56.740253][ T6057] x64_sys_call+0x17ba/0x3000 [ 56.740345][ T6057] do_syscall_64+0xc0/0x2a0 [ 56.740379][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.740404][ T6057] RIP: 0033:0x7fa8cea9aeb9 [ 56.740463][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.740487][ T6057] RSP: 002b:00007fa8cd4f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.740512][ T6057] RAX: ffffffffffffffda RBX: 00007fa8ced15fa0 RCX: 00007fa8cea9aeb9 [ 56.740527][ T6057] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 56.740576][ T6057] RBP: 00007fa8cd4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.740592][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.740608][ T6057] R13: 00007fa8ced16038 R14: 00007fa8ced15fa0 R15: 00007ffc54575638 [ 56.740654][ T6057] [ 56.740713][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 56.790567][ T6063] loop4: detected capacity change from 0 to 512 [ 56.805694][ T6064] Cannot find set identified by id 0 to match [ 56.822361][ T6063] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 56.990938][ T6063] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.313: iget: bad i_size value: 12154757448730 [ 57.003948][ T6063] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.313: couldn't read orphan inode 13 (err -117) [ 57.021612][ T6063] xt_cgroup: xt_cgroup: no path or classid specified [ 57.050372][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.314'. [ 57.170600][ T6087] loop0: detected capacity change from 0 to 512 [ 57.212910][ T6093] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.231593][ T6093] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.246511][ T6093] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.255510][ T6093] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.323: Failed to acquire dquot type 0 [ 57.275588][ T6093] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.323: Failed to acquire dquot type 0 [ 57.288590][ T6093] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.323: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.313103][ T6093] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.323: Failed to acquire dquot type 0 [ 57.326107][ T6102] FAULT_INJECTION: forcing a failure. [ 57.326107][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 57.328674][ T6093] EXT4-fs (loop0): 1 orphan inode deleted [ 57.338793][ T6102] CPU: 0 UID: 0 PID: 6102 Comm: syz.5.325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.338823][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.338863][ T6102] Call Trace: [ 57.338896][ T6102] [ 57.338933][ T6102] __dump_stack+0x1d/0x30 [ 57.339041][ T6102] dump_stack_lvl+0x95/0xd0 [ 57.339121][ T6102] dump_stack+0x15/0x1b [ 57.339262][ T6102] should_fail_ex+0x263/0x280 [ 57.339426][ T6102] should_failslab+0x8c/0xb0 [ 57.339507][ T6102] kmem_cache_alloc_noprof+0x68/0x490 [ 57.339634][ T6102] ? skb_clone+0x151/0x1f0 [ 57.339697][ T6102] skb_clone+0x151/0x1f0 [ 57.339759][ T6102] dev_queue_xmit_nit+0x13e/0x510 [ 57.339847][ T6102] ? validate_xmit_xfrm+0x43/0x7a0 [ 57.340003][ T6102] dev_hard_start_xmit+0xd3/0x3e0 [ 57.340127][ T6102] __dev_queue_xmit+0xdb1/0x1f20 [ 57.340231][ T6102] ? __dev_queue_xmit+0x148/0x1f20 [ 57.340403][ T6102] ? should_fail_ex+0xd9/0x280 [ 57.340527][ T6102] __netlink_deliver_tap+0x3c3/0x500 [ 57.340635][ T6102] netlink_unicast+0x66b/0x690 [ 57.340736][ T6102] netlink_sendmsg+0x5c8/0x6f0 [ 57.340854][ T6102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.340918][ T6102] ____sys_sendmsg+0x5af/0x600 [ 57.340991][ T6102] ___sys_sendmsg+0x195/0x1e0 [ 57.341124][ T6102] __x64_sys_sendmsg+0xd4/0x160 [ 57.341202][ T6102] x64_sys_call+0x17ba/0x3000 [ 57.341284][ T6102] do_syscall_64+0xc0/0x2a0 [ 57.341394][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.341599][ T6102] RIP: 0033:0x7fe845d9aeb9 [ 57.341651][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.341730][ T6102] RSP: 002b:00007fe8447d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.341817][ T6102] RAX: ffffffffffffffda RBX: 00007fe846016090 RCX: 00007fe845d9aeb9 [ 57.341862][ T6102] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 57.341903][ T6102] RBP: 00007fe8447d6090 R08: 0000000000000000 R09: 0000000000000000 [ 57.342017][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.342052][ T6102] R13: 00007fe846016128 R14: 00007fe846016090 R15: 00007ffece29d528 [ 57.342174][ T6102] [ 57.361204][ T6103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6103 comm=syz.2.326 [ 57.367083][ T6102] Cannot find set identified by id 0 to match [ 57.391586][ T6103] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 57.407998][ T6054] syz.1.309 (6054) used greatest stack depth: 9640 bytes left [ 57.619120][ T6103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.721140][ T6129] xt_hashlimit: size too large, truncated to 1048576 [ 57.744230][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 57.753872][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 57.788181][ T6133] FAT-fs (loop1): Directory bread(block 64) failed [ 57.796801][ T6133] FAT-fs (loop1): Directory bread(block 65) failed [ 57.803419][ T6133] FAT-fs (loop1): Directory bread(block 66) failed [ 57.810418][ T6133] FAT-fs (loop1): Directory bread(block 67) failed [ 57.817078][ T6133] FAT-fs (loop1): Directory bread(block 68) failed [ 57.823782][ T6133] FAT-fs (loop1): Directory bread(block 69) failed [ 57.830718][ T6133] FAT-fs (loop1): Directory bread(block 70) failed [ 57.837558][ T6133] FAT-fs (loop1): Directory bread(block 71) failed [ 57.849745][ T6133] FAT-fs (loop1): Directory bread(block 72) failed [ 57.856407][ T6133] FAT-fs (loop1): Directory bread(block 73) failed [ 58.097004][ T6168] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 58.125191][ T6166] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 58.135380][ T6166] FAT-fs (loop4): Filesystem has been set read-only [ 58.331019][ T6195] FAT-fs (loop5): bogus number of reserved sectors [ 58.337675][ T6195] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 58.347045][ T6195] FAT-fs (loop5): Can't find a valid FAT filesystem [ 58.403258][ T6201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.424479][ T6201] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.357: bad orphan inode 131083 [ 58.496329][ T6208] vfat: Unknown parameter 'iocharset?cp850' [ 58.530438][ T6208] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #12: block 2: comm syz.4.358: lblock 0 mapped to illegal pblock 2 (length 1) [ 58.592743][ T6208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.624652][ T6221] FAULT_INJECTION: forcing a failure. [ 58.624652][ T6221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.637995][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.638023][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.638040][ T6221] Call Trace: [ 58.638049][ T6221] [ 58.638058][ T6221] __dump_stack+0x1d/0x30 [ 58.638103][ T6221] dump_stack_lvl+0x95/0xd0 [ 58.638124][ T6221] dump_stack+0x15/0x1b [ 58.638143][ T6221] should_fail_ex+0x263/0x280 [ 58.638186][ T6221] should_fail+0xb/0x20 [ 58.638243][ T6221] should_fail_usercopy+0x1a/0x20 [ 58.638273][ T6221] _copy_from_user+0x1c/0xb0 [ 58.638292][ T6221] arp_ioctl+0xac/0x2d0 [ 58.638389][ T6221] inet_ioctl+0x2ad/0x3a0 [ 58.638412][ T6221] sock_do_ioctl+0x73/0x230 [ 58.638437][ T6221] sock_ioctl+0x41b/0x610 [ 58.638462][ T6221] ? mutex_lock+0x57/0x90 [ 58.638513][ T6221] ? __pfx_sock_ioctl+0x10/0x10 [ 58.638532][ T6221] __se_sys_ioctl+0xce/0x140 [ 58.638565][ T6221] __x64_sys_ioctl+0x43/0x50 [ 58.638620][ T6221] x64_sys_call+0x14b0/0x3000 [ 58.638643][ T6221] do_syscall_64+0xc0/0x2a0 [ 58.638670][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.638695][ T6221] RIP: 0033:0x7fa8cea9aeb9 [ 58.638772][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.638788][ T6221] RSP: 002b:00007fa8cd4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.638806][ T6221] RAX: ffffffffffffffda RBX: 00007fa8ced15fa0 RCX: 00007fa8cea9aeb9 [ 58.638818][ T6221] RDX: 0000200000000000 RSI: 0000000000008955 RDI: 0000000000000003 [ 58.638883][ T6221] RBP: 00007fa8cd4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.638895][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.638907][ T6221] R13: 00007fa8ced16038 R14: 00007fa8ced15fa0 R15: 00007ffc54575638 [ 58.638925][ T6221] [ 58.776934][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.862212][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.870696][ T6226] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 58.879841][ T6226] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.364: iget: bad i_size value: 12154757448730 [ 58.914129][ T6226] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.364: couldn't read orphan inode 13 (err -117) [ 58.974792][ T6233] EXT4-fs: journaled quota format not specified [ 59.154543][ T6252] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.170896][ T6252] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.369: bad orphan inode 131083 [ 59.249493][ T6268] FAULT_INJECTION: forcing a failure. [ 59.249493][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.249525][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.249664][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.249706][ T6268] Call Trace: [ 59.249736][ T6268] [ 59.249765][ T6268] __dump_stack+0x1d/0x30 [ 59.249848][ T6268] dump_stack_lvl+0x95/0xd0 [ 59.249938][ T6268] dump_stack+0x15/0x1b [ 59.250001][ T6268] should_fail_ex+0x263/0x280 [ 59.250099][ T6268] should_fail+0xb/0x20 [ 59.250194][ T6268] should_fail_usercopy+0x1a/0x20 [ 59.250366][ T6268] _copy_to_user+0x20/0xa0 [ 59.250441][ T6268] simple_read_from_buffer+0xb5/0x130 [ 59.250575][ T6268] proc_fail_nth_read+0x10e/0x150 [ 59.250665][ T6268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.250756][ T6268] vfs_read+0x1ab/0x7f0 [ 59.250819][ T6268] ? __rcu_read_unlock+0x4e/0x70 [ 59.250913][ T6268] ? __fget_files+0x184/0x1c0 [ 59.250982][ T6268] ? mutex_lock+0x57/0x90 [ 59.251076][ T6268] ksys_read+0xdc/0x1a0 [ 59.251187][ T6268] __x64_sys_read+0x40/0x50 [ 59.251248][ T6268] x64_sys_call+0x2889/0x3000 [ 59.251331][ T6268] do_syscall_64+0xc0/0x2a0 [ 59.251431][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.251634][ T6268] RIP: 0033:0x7fa8cea5b78e [ 59.251685][ T6268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.251744][ T6268] RSP: 002b:00007fa8cd4f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.251816][ T6268] RAX: ffffffffffffffda RBX: 00007fa8cd4f76c0 RCX: 00007fa8cea5b78e [ 59.251914][ T6268] RDX: 000000000000000f RSI: 00007fa8cd4f70a0 RDI: 0000000000000004 [ 59.251957][ T6268] RBP: 00007fa8cd4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.251998][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.252032][ T6268] R13: 00007fa8ced16038 R14: 00007fa8ced15fa0 R15: 00007ffc54575638 [ 59.252094][ T6268] [ 59.394546][ T6279] FAT-fs (loop2): Directory bread(block 64) failed [ 59.394572][ T6279] FAT-fs (loop2): Directory bread(block 65) failed [ 59.394600][ T6279] FAT-fs (loop2): Directory bread(block 66) failed [ 59.394622][ T6279] FAT-fs (loop2): Directory bread(block 67) failed [ 59.394658][ T6279] FAT-fs (loop2): Directory bread(block 68) failed [ 59.394689][ T6279] FAT-fs (loop2): Directory bread(block 69) failed [ 59.394737][ T6279] FAT-fs (loop2): Directory bread(block 70) failed [ 59.394759][ T6279] FAT-fs (loop2): Directory bread(block 71) failed [ 59.394852][ T6279] FAT-fs (loop2): Directory bread(block 72) failed [ 59.394872][ T6279] FAT-fs (loop2): Directory bread(block 73) failed [ 59.474135][ T55] kworker/u8:4: attempt to access beyond end of device [ 59.474135][ T55] loop2: rw=1, sector=1224, nr_sectors = 256 limit=256 [ 59.474680][ T55] kworker/u8:4: attempt to access beyond end of device [ 59.474680][ T55] loop2: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 59.475657][ T55] kworker/u8:4: attempt to access beyond end of device [ 59.475657][ T55] loop2: rw=1, sector=1864, nr_sectors = 576 limit=256 [ 59.483198][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 59.483213][ T29] audit: type=1400 audit(1770178080.582:1059): avc: denied { listen } for pid=6285 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.483523][ T29] audit: type=1400 audit(1770178080.582:1060): avc: denied { accept } for pid=6285 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.505171][ T6295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.506767][ T6295] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.506887][ T6295] EXT4-fs (loop2): 1 truncate cleaned up [ 59.571797][ T6301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.572718][ T6301] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.383: bad orphan inode 131083 [ 59.579632][ T3298] loop5: p2 p3 p4 [ 59.579722][ T3298] loop5: p2 size 64053 extends beyond EOD, truncated [ 59.580406][ T3298] loop5: p3 start 65280 is beyond EOD, truncated [ 59.580451][ T3298] loop5: p4 size 50331904 extends beyond EOD, truncated [ 59.631155][ T6262] loop5: p2 p3 p4 [ 59.631509][ T6262] loop5: p2 size 64053 extends beyond EOD, truncated [ 59.632943][ T6262] loop5: p3 start 65280 is beyond EOD, truncated [ 59.632968][ T6262] loop5: p4 size 50331904 extends beyond EOD, truncated [ 59.648332][ T3002] loop5: p2 p3 p4 [ 59.648522][ T3002] loop5: p2 size 64053 extends beyond EOD, truncated [ 60.004548][ T3002] loop5: p3 start 65280 is beyond EOD, truncated [ 60.011032][ T3002] loop5: p4 size 50331904 extends beyond EOD, truncated [ 60.123069][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 60.125685][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 60.170354][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 60.173141][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 60.212309][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 60.239899][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 60.278761][ T6334] set_capacity_and_notify: 17 callbacks suppressed [ 60.278785][ T6334] loop5: detected capacity change from 0 to 164 [ 60.312608][ T6335] netlink: 'syz.2.388': attribute type 16 has an invalid length. [ 60.320466][ T6335] netlink: 'syz.2.388': attribute type 17 has an invalid length. [ 60.333214][ T6334] openvswitch: netlink: Missing key (keys=40, expected=80) [ 60.354358][ T29] audit: type=1400 audit(1770178081.452:1061): avc: denied { ioctl } for pid=6333 comm="syz.5.389" path="socket:[9813]" dev="sockfs" ino=9813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.378996][ T29] ================================================================== [ 60.387112][ T29] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 60.394968][ T29] [ 60.397306][ T29] write to 0xffffffff86c25e48 of 8 bytes by task 6335 on cpu 0: [ 60.404981][ T29] console_flush_all+0x38c/0x6c0 [ 60.409973][ T29] console_unlock+0xa1/0x280 [ 60.414604][ T29] vprintk_emit+0x3e4/0x600 [ 60.419159][ T29] vprintk_default+0x26/0x30 [ 60.423807][ T29] vprintk+0x1d/0x30 [ 60.427731][ T29] _printk+0x79/0xa0 [ 60.431643][ T29] caif_disconnect_client+0x13d/0x150 [ 60.437169][ T29] chnl_net_open+0x4c4/0x550 [ 60.441789][ T29] __dev_open+0x321/0x560 [ 60.446152][ T29] __dev_change_flags+0x13e/0x400 [ 60.451212][ T29] netif_change_flags+0x5a/0xd0 [ 60.456182][ T29] do_setlink+0x905/0x2940 [ 60.460629][ T29] rtnl_newlink+0xdb5/0x1370 [ 60.465242][ T29] rtnetlink_rcv_msg+0x64b/0x720 [ 60.466394][ T6334] __nla_validate_parse: 17 callbacks suppressed [ 60.466436][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.389'. [ 60.470217][ T29] netlink_rcv_skb+0x123/0x220 [ 60.476618][ T6334] netlink: 56 bytes leftover after parsing attributes in process `syz.5.389'. [ 60.485321][ T29] rtnetlink_rcv+0x1c/0x30 [ 60.485348][ T29] netlink_unicast+0x5c0/0x690 [ 60.508154][ T29] netlink_sendmsg+0x5c8/0x6f0 [ 60.512969][ T29] ____sys_sendmsg+0x5af/0x600 [ 60.517763][ T29] ___sys_sendmsg+0x195/0x1e0 [ 60.522488][ T29] __x64_sys_sendmsg+0xd4/0x160 [ 60.527377][ T29] x64_sys_call+0x17ba/0x3000 [ 60.532077][ T29] do_syscall_64+0xc0/0x2a0 [ 60.536995][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.542919][ T29] [ 60.545265][ T29] read to 0xffffffff86c25e48 of 8 bytes by task 29 on cpu 1: [ 60.552658][ T29] console_flush_all+0x548/0x6c0 [ 60.557633][ T29] console_unlock+0xa1/0x280 [ 60.562263][ T29] vprintk_emit+0x3e4/0x600 [ 60.566785][ T29] vprintk_default+0x26/0x30 [ 60.571393][ T29] vprintk+0x1d/0x30 [ 60.575304][ T29] _printk+0x79/0xa0 [ 60.579213][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 60.584096][ T29] kauditd_send_queue+0x273/0x2c0 [ 60.589144][ T29] kauditd_thread+0x442/0x680 [ 60.593852][ T29] kthread+0x488/0x510 [ 60.597940][ T29] ret_from_fork+0x148/0x280 [ 60.602558][ T29] ret_from_fork_asm+0x1a/0x30 [ 60.607345][ T29] [ 60.609678][ T29] value changed: 0x0000000000000ae7 -> 0x0000000000000ae8 [ 60.616796][ T29] [ 60.619135][ T29] Reported by Kernel Concurrency Sanitizer on: [ 60.625295][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.634590][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.644669][ T29] ================================================================== [ 60.653296][ T6335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.755545][ T6337] loop1: detected capacity change from 0 to 136 [ 60.772774][ T6337] Attempt to read inode for relocated directory