last executing test programs: 4m45.576261747s ago: executing program 2 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x10000, &(0x7f0000000580)=[{0x8, 0x7ff, 0x5}, {0x5, 0x7, 0x6}, {0xd974, 0x3, 0xfffffffffffff000}, {0x8000, 0x401, 0x4}, {0x1ff, 0x4}, {0x7aed, 0x3, 0x2}, {0x9, 0x100000001, 0xe}, {0xffffffff, 0x4224, 0x7}], 0x8, 0xffffffffffff3539, 0x11, 0x28, 0x24, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000500), 0x66) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c1c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4m45.176735023s ago: executing program 2 (id=3338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @short={0x2, 0x3}}, 0x14, &(0x7f0000000300)={&(0x7f0000000400)="62038f4a3c8881befe443b76e5b361a80652d53b325d9a785ae794b916c0bcbc28d827877673f19caf34e0775d55487283146d47bd58a570f8ab6f791b22c2cfc7c0631d3e8c7aac6c631583ab9557c2a778c135d83adc3165003b61a0590f88c288c0d1fdbce715fefc29db2cfbc3b95d84", 0x72}, 0x1, 0x0, 0x0, 0x80800}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xa799, 0x1000, 0x7, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) mkdirat(r4, &(0x7f0000000c00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x29c780, 0x12345}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c00014000000000000000023c0001800b0001007470726f7879"], 0x154}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0300"}) socket(0x200000000000011, 0x2, 0xd) timer_delete(0x0) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) sendmsg$kcm(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000240)="7fdb0ff45a822e52d9d108733a9a0ab0", 0x10}, {&(0x7f0000000780)="6eac5c832b55050416c31239958f50fb724f6f64c80bb17cf10cd87de9bb3c998228b9f865e1bf9fffb9e57fe1f4c04dc76b5fe70dc13fc26401ab238eb99750eb68b3665b10e45bff3fbe24a1705c11b5b3c8285cc4e723b4038da4c1e7bba2c1aab49bf6a9f4ef106fe00d61d97bb9ef93d33720f4c4e57cf7545ba3f038f32dfedc48500746976e2041272429e5953be89e0fb485b2399bf3312c2638c631c45fee1ad43d227ce389968297363417525f86dc62feebc96168484d79b5bc0c53491394e94f40f192afa4f55c", 0xcd}, {&(0x7f0000000640)="ca0e82d5b4437efdaa116c4929bfd58e95cb3c860f6709a3", 0x18}, {&(0x7f0000000900)="e96ad04b59c142ae731df62d662f2df98f1700f1e197ad683db816f4c456dfd54c96473f0e002f92b44b55e09b84f5dfb320ded4a03aa17e1e84919a23bbcad0a10f03cd50aa99f2d023a459e8fe6a92c3e918884382252d621335179f8ed653705fac3831f649a573e5f188d9ee6af9bf8d4d08e8def8c04061314cb4b0b589ab2d45c4c9bd8fb6382adef9d628a17841e2858265b6ff3433ee807f42a0dc4f1acbcaf706b51f70aac3bccc1427cdc6736dfec2228c5a8dc14ae12663b29267eeba5563eaa794f1b1218eaf3dcc1fe26ee4dd39d136107d80", 0xd9}, {&(0x7f0000001c00)="4d3533be3ea82840e0db1d9b96b114944b2062a143e2bab5f5717d9d9f8f2c3defa5069ed090026fd84fa999e05b4606c1ed6f215aac21e1a1a060b7e659dd7fbca71fab8e3a740610f79a53562004d76e1e4648815ab0470a2a8a6f0005b31664114577cff17f702aa1b21e6e4626400b78ac6af9eb75479e8361aa4d402218575f9f65a243c5277d9d0454803be43e8ad929e104482479a7de53cdd1c9ebf69e9c00a48e4fde497a374d5c884b13ad3dc1893272666ade46f2", 0xba}, {&(0x7f0000000680)="19e97ef9900d215936a3d249d116e742f52d42e4444b00ded4621a", 0x1b}, {&(0x7f0000000a00)="86ccbba817cc53e6f267e4c90f77d65482ea853205db663f3729d576f725945c30e85b157ebfacad2c44476096296509489d748bef3744898e612fe11c6ddeb765eb9ef8ac026b618ac66cc750f0de108d51254166d8e2d733c508563333373ec36e1e7dc2ea4a84f1", 0x69}, {&(0x7f0000001cc0)="383301263d1ae545a6e025ef6c2443f781595a0a2f3da561f66a1dc33ba5073dc91118ad5f234384b1c1767e8ea08ec60d05f5de392ed550ca73995296d4c936cf08e132d5c8436d884885582e7ca335a6bf2a06420c9730a89469ae75784b87327ad771071826a9877a937cb3c46c247e831cb66be11ae5376908922a427634ba89dfe447abc072d27c6323d10a72bee6556ffe78fa770ccdd1ba98bc608a0c94112c14dd6cbe448105364da580b5edb2ee6f9694e31bd2e7b690efea646e993fb5b44a945ac755eca66125ee0ec9c9c64d29993d361ef4ce8f1494a45a2c27", 0xe0}], 0x8}, 0xa1) 4m45.066992595s ago: executing program 0 (id=3340): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m45.001598106s ago: executing program 2 (id=3341): symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 4m44.967714636s ago: executing program 2 (id=3342): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="a80200", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="140002007767300000000000000000000000000008000700380a0000"], 0x2a8}, 0x1, 0x0, 0x0, 0x882}, 0x20000850) r2 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9, 0x0, r0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef41605b990d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a2790cbf3e1c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b5f5b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r8, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000840)={r8, 0x2, r6, 0xf98}) tee(r3, 0xffffffffffffffff, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m44.873168098s ago: executing program 2 (id=3344): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 4m44.596851491s ago: executing program 2 (id=3347): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m44.596471191s ago: executing program 32 (id=3347): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m44.146943488s ago: executing program 0 (id=3350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) 4m42.909643166s ago: executing program 0 (id=3354): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="a8020000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="140002007767300000000000000000000000000008000700380a0000"], 0x2a8}, 0x1, 0x0, 0x0, 0x882}, 0x20000850) r2 = io_uring_setup(0x6ca9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r8, 0x1, 0xffffffffffffffff, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000840)={r8, 0x2, r6, 0xf98}) tee(r3, 0xffffffffffffffff, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m42.810734348s ago: executing program 0 (id=3356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) 4m42.674157369s ago: executing program 0 (id=3358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) 4m42.188821107s ago: executing program 0 (id=3361): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000180000000000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='f2fs_reserve_new_blocks\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 4m42.185676847s ago: executing program 33 (id=3361): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)={r2}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000180000000000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='f2fs_reserve_new_blocks\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) r4 = gettid() rt_sigqueueinfo(r4, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 4.8149684s ago: executing program 5 (id=7183): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd70030107df2508000100000000000500540002"], 0x20}, 0x1, 0x0, 0x0, 0x2400c404}, 0x40810) 4.753149211s ago: executing program 5 (id=7185): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 4.753094121s ago: executing program 5 (id=7186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.752555961s ago: executing program 5 (id=7188): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, '#]+$', 0x3a, '{', 0x3a, './file0/file0', 0x3a, [0x46]}, 0x33) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 4.649516872s ago: executing program 5 (id=7190): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 3.42894046s ago: executing program 5 (id=7199): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) read(r2, 0x0, 0x0) 3.259072323s ago: executing program 34 (id=7199): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) read(r2, 0x0, 0x0) 2.300876047s ago: executing program 1 (id=7221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 1.460798119s ago: executing program 1 (id=7231): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[], 0x0) 989.350366ms ago: executing program 4 (id=7243): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0) 945.011247ms ago: executing program 4 (id=7245): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x168) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000001140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b46, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 939.486287ms ago: executing program 3 (id=7246): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 758.133169ms ago: executing program 7 (id=7248): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x8000000}) write(r1, &(0x7f0000000000)="fc", 0x1) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000640)="af", 0x1}], 0x1, 0x4) 735.283779ms ago: executing program 7 (id=7249): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}], 0x1, 0x400c404) sendto$inet6(r0, &(0x7f0000000000)="0f", 0xfdef, 0x0, 0x0, 0x0) 734.380679ms ago: executing program 3 (id=7250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41101}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) mremap(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 668.64816ms ago: executing program 7 (id=7251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 624.513861ms ago: executing program 1 (id=7253): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) 624.177981ms ago: executing program 6 (id=7254): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffbfffffffe7ee000000000000000002", 0x54}, {&(0x7f0000000180)="abd9296f", 0x4}], 0x2) 539.196312ms ago: executing program 6 (id=7255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x607, 0x2, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044091}, 0x2404c084) 538.872892ms ago: executing program 6 (id=7256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x45}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xd180a1977909bea6}, 0x0) 538.758182ms ago: executing program 4 (id=7257): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 487.686373ms ago: executing program 6 (id=7258): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x44050) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 439.920514ms ago: executing program 3 (id=7259): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 355.725435ms ago: executing program 1 (id=7260): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x43) 346.433645ms ago: executing program 7 (id=7261): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 281.132306ms ago: executing program 7 (id=7262): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) 269.753927ms ago: executing program 4 (id=7263): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x4, 0x1000, 0x4004c}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 264.200036ms ago: executing program 1 (id=7264): rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b3, &(0x7f0000000200)={0x0, 0x0, 0x30c0, 0x3, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000140)) symlinkat(0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 196.895757ms ago: executing program 7 (id=7265): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 159.783008ms ago: executing program 6 (id=7266): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 159.334188ms ago: executing program 3 (id=7267): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x2, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 131.939748ms ago: executing program 4 (id=7268): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r0, 0x607, 0x2, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044091}, 0x2404c084) 13.13363ms ago: executing program 3 (id=7269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @val=@iter={0x0}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 13.00752ms ago: executing program 4 (id=7270): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) 12.91728ms ago: executing program 6 (id=7271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x5}, 0x1c) 12.82947ms ago: executing program 1 (id=7272): r0 = io_uring_setup(0x1379, &(0x7f0000000080)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000fe9000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=7273): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000140)={0x2}) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device batadv0 [ 900.008089][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 900.008124][ T29] audit: type=1326 audit(1749183844.751:67032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.008939][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6607'. [ 900.014444][ T29] audit: type=1326 audit(1749183844.751:67033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.014475][ T29] audit: type=1326 audit(1749183844.751:67034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.014514][ T29] audit: type=1326 audit(1749183844.751:67035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.121235][ T29] audit: type=1326 audit(1749183844.751:67036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.145699][ T29] audit: type=1326 audit(1749183844.751:67037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.170583][ T29] audit: type=1326 audit(1749183844.751:67038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.198249][ T29] audit: type=1326 audit(1749183844.791:67039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.222874][ T29] audit: type=1326 audit(1749183844.791:67040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27138 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed03e929 code=0x7ffc0000 [ 900.261243][ T29] audit: type=1326 audit(1749183844.991:67041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27147 comm="syz.6.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7173e929 code=0x7ffc0000 [ 900.285133][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6610'. [ 900.294503][T27146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6610'. [ 900.317721][T27155] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6611'. [ 900.333787][T27155] netlink: zone id is out of range [ 900.342544][T27155] netlink: del zone limit has 8 unknown bytes [ 900.408882][T27166] siw: device registration error -23 [ 900.415206][T27158] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 900.462087][T27162] loop4: detected capacity change from 0 to 512 [ 900.470143][T27166] lo speed is unknown, defaulting to 1000 [ 900.489614][T27170] siw: device registration error -23 [ 900.511843][T27173] loop1: detected capacity change from 0 to 256 [ 900.524098][T27066] veth0_vlan: entered promiscuous mode [ 900.542272][T27173] syz.1.6618: attempt to access beyond end of device [ 900.542272][T27173] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 900.548205][T27066] veth1_vlan: entered promiscuous mode [ 900.571603][T27162] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 900.577932][T27170] lo speed is unknown, defaulting to 1000 [ 900.601700][T27066] veth0_macvtap: entered promiscuous mode [ 900.618722][T27162] EXT4-fs (loop4): mount failed [ 900.641086][T27066] veth1_macvtap: entered promiscuous mode [ 900.668737][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6619'. [ 900.681398][T27066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.700854][T27182] FAULT_INJECTION: forcing a failure. [ 900.700854][T27182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.703879][T27066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.714040][T27182] CPU: 0 UID: 0 PID: 27182 Comm: syz.6.6620 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 900.714082][T27182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.714151][T27182] Call Trace: [ 900.714161][T27182] [ 900.714171][T27182] __dump_stack+0x1d/0x30 [ 900.714199][T27182] dump_stack_lvl+0xe8/0x140 [ 900.714225][T27182] dump_stack+0x15/0x1b [ 900.714247][T27182] should_fail_ex+0x265/0x280 [ 900.714362][T27182] should_fail+0xb/0x20 [ 900.714384][T27182] should_fail_usercopy+0x1a/0x20 [ 900.714426][T27182] _copy_from_user+0x1c/0xb0 [ 900.714517][T27182] kstrtouint_from_user+0x69/0xf0 [ 900.714600][T27182] ? 0xffffffff81000000 [ 900.714617][T27182] ? selinux_file_permission+0x1e4/0x320 [ 900.714655][T27182] proc_fail_nth_write+0x50/0x160 [ 900.714686][T27182] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 900.714738][T27182] vfs_write+0x269/0x8e0 [ 900.714764][T27182] ? vfs_read+0x47f/0x6f0 [ 900.714789][T27182] ? __rcu_read_unlock+0x4f/0x70 [ 900.714818][T27182] ? __fget_files+0x184/0x1c0 [ 900.714858][T27182] ksys_write+0xda/0x1a0 [ 900.714886][T27182] __x64_sys_write+0x40/0x50 [ 900.714932][T27182] x64_sys_call+0x2cdd/0x2fb0 [ 900.714966][T27182] do_syscall_64+0xd2/0x200 [ 900.715021][T27182] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 900.715102][T27182] ? clear_bhb_loop+0x40/0x90 [ 900.715131][T27182] ? clear_bhb_loop+0x40/0x90 [ 900.715160][T27182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.715249][T27182] RIP: 0033:0x7f6f7173d3df [ 900.715270][T27182] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 900.715303][T27182] RSP: 002b:00007f6f6fda7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 900.715328][T27182] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f7173d3df [ 900.715352][T27182] RDX: 0000000000000001 RSI: 00007f6f6fda70a0 RDI: 0000000000000003 [ 900.715369][T27182] RBP: 00007f6f6fda7090 R08: 0000000000000000 R09: 0000000000000000 [ 900.715385][T27182] R10: 0000000040010161 R11: 0000000000000293 R12: 0000000000000001 [ 900.715425][T27182] R13: 0000000000000000 R14: 00007f6f71965fa0 R15: 00007fff33a9b0a8 [ 900.715457][T27182] [ 900.974088][T27066] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.983480][T27066] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.987442][T27195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6625'. [ 900.992696][T27066] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.001573][T27195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6625'. [ 901.010447][T27066] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.034472][T27188] lo speed is unknown, defaulting to 1000 [ 901.051036][T27197] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6626'. [ 901.060770][T27197] netlink: zone id is out of range [ 901.079435][T27197] netlink: del zone limit has 8 unknown bytes [ 901.109955][T27200] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 901.153544][T27203] loop3: detected capacity change from 0 to 256 [ 901.153640][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6587'. [ 901.191205][T27203] syz.3.6628: attempt to access beyond end of device [ 901.191205][T27203] loop3: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 901.272681][T27209] siw: device registration error -23 [ 901.298918][T27214] FAULT_INJECTION: forcing a failure. [ 901.298918][T27214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.311220][T27209] lo speed is unknown, defaulting to 1000 [ 901.312423][T27214] CPU: 0 UID: 0 PID: 27214 Comm: syz.3.6632 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 901.312460][T27214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 901.312477][T27214] Call Trace: [ 901.312484][T27214] [ 901.312494][T27214] __dump_stack+0x1d/0x30 [ 901.312522][T27214] dump_stack_lvl+0xe8/0x140 [ 901.312548][T27214] dump_stack+0x15/0x1b [ 901.312604][T27214] should_fail_ex+0x265/0x280 [ 901.312631][T27214] should_fail+0xb/0x20 [ 901.312654][T27214] should_fail_usercopy+0x1a/0x20 [ 901.312682][T27214] _copy_from_user+0x1c/0xb0 [ 901.312723][T27214] __copy_msghdr+0x244/0x300 [ 901.312762][T27214] ___sys_sendmsg+0x109/0x1d0 [ 901.312818][T27214] __sys_sendmmsg+0x178/0x300 [ 901.313010][T27214] __x64_sys_sendmmsg+0x57/0x70 [ 901.313128][T27214] x64_sys_call+0x2f2f/0x2fb0 [ 901.313157][T27214] do_syscall_64+0xd2/0x200 [ 901.313195][T27214] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 901.313299][T27214] ? clear_bhb_loop+0x40/0x90 [ 901.313329][T27214] ? clear_bhb_loop+0x40/0x90 [ 901.313358][T27214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.313398][T27214] RIP: 0033:0x7ffbed03e929 [ 901.313419][T27214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.313443][T27214] RSP: 002b:00007ffbeb6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 901.313468][T27214] RAX: ffffffffffffffda RBX: 00007ffbed265fa0 RCX: 00007ffbed03e929 [ 901.313519][T27214] RDX: 0000000000000002 RSI: 00002000000020c0 RDI: 0000000000000003 [ 901.313535][T27214] RBP: 00007ffbeb6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 901.313551][T27214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.313567][T27214] R13: 0000000000000000 R14: 00007ffbed265fa0 R15: 00007ffe5facb0a8 [ 901.313591][T27214] [ 901.524441][T27225] siw: device registration error -23 [ 901.581339][T27225] lo speed is unknown, defaulting to 1000 [ 901.615680][T27223] loop6: detected capacity change from 0 to 512 [ 901.654992][T27210] lo speed is unknown, defaulting to 1000 [ 901.691657][T27223] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 901.728099][T27238] netlink: zone id is out of range [ 901.733384][T27238] netlink: del zone limit has 8 unknown bytes [ 901.752441][T27223] EXT4-fs (loop6): mount failed [ 901.770312][T27241] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 901.819776][T27245] loop1: detected capacity change from 0 to 256 [ 901.865649][T27245] syz.1.6641: attempt to access beyond end of device [ 901.865649][T27245] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 901.914895][T27210] chnl_net:caif_netlink_parms(): no params data found [ 901.946303][T27249] lo speed is unknown, defaulting to 1000 [ 901.953131][ T51] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.993550][ T51] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.018135][T27210] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.025582][T27210] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.032841][T27210] bridge_slave_0: entered allmulticast mode [ 902.039557][T27210] bridge_slave_0: entered promiscuous mode [ 902.047282][ T51] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.058965][T27210] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.066188][T27210] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.073747][T27210] bridge_slave_1: entered allmulticast mode [ 902.080510][T27210] bridge_slave_1: entered promiscuous mode [ 902.099216][T27210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.109357][ T51] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.121492][T27210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.143135][T27210] team0: Port device team_slave_0 added [ 902.151024][T27210] team0: Port device team_slave_1 added [ 902.176276][T27210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.183370][T27210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.209890][T27210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.223930][T27210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.231167][T27210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.257774][T27210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.296868][T27210] hsr_slave_0: entered promiscuous mode [ 902.303273][T27210] hsr_slave_1: entered promiscuous mode [ 902.309205][T27210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 902.317062][T27210] Cannot create hsr debugfs directory [ 902.477093][ T51] bond0 (unregistering): Released all slaves [ 902.527994][ T51] hsr_slave_0: left promiscuous mode [ 902.533856][ T51] hsr_slave_1: left promiscuous mode [ 902.897924][ T51] IPVS: stop unused estimator thread 0... [ 902.960567][T27210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 902.985495][T27210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 902.994686][T27210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.003728][T27210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.039913][T27210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.053002][T27210] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.062529][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.069651][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.080780][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.087975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.113355][T27210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 903.161619][T27210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.266673][T27210] veth0_vlan: entered promiscuous mode [ 903.274320][T27210] veth1_vlan: entered promiscuous mode [ 903.288523][T27210] veth0_macvtap: entered promiscuous mode [ 903.295840][T27210] veth1_macvtap: entered promiscuous mode [ 903.308479][T27210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.319374][T27210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.329163][T27210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.338622][T27210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.347776][T27210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.356595][T27210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.500346][T27298] __nla_validate_parse: 6 callbacks suppressed [ 918.500369][T27298] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6650'. [ 918.504662][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6647'. [ 918.515091][T27298] netlink: zone id is out of range [ 918.537101][T27299] siw: device registration error -23 [ 918.555137][T27298] netlink: del zone limit has 8 unknown bytes [ 918.594685][T27299] lo speed is unknown, defaulting to 1000 [ 918.617012][T27306] netlink: 'syz.4.6652': attribute type 298 has an invalid length. [ 918.646632][T27310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6653'. [ 918.655841][T27310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6653'. [ 918.678891][T27310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6653'. [ 918.686767][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6654'. [ 918.688125][T27310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6653'. [ 918.696958][T27314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6654'. [ 918.737432][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 918.737451][ T29] audit: type=1326 audit(1749183863.481:67133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.762165][T27321] loop4: detected capacity change from 0 to 512 [ 918.783755][ T29] audit: type=1326 audit(1749183863.511:67134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="syz.1.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.786502][T27321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 918.808172][ T29] audit: type=1326 audit(1749183863.511:67135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.841488][ T29] audit: type=1326 audit(1749183863.511:67136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.859587][T27310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6653'. [ 918.865393][ T29] audit: type=1326 audit(1749183863.511:67137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.874571][T27310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6653'. [ 918.897778][ T29] audit: type=1326 audit(1749183863.511:67138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.909524][T27321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 918.930127][ T29] audit: type=1326 audit(1749183863.511:67139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.930188][ T29] audit: type=1326 audit(1749183863.511:67140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.938702][T27321] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 918.942396][T27321] EXT4-fs (loop4): 1 truncate cleaned up [ 918.962606][ T29] audit: type=1326 audit(1749183863.511:67141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 918.962642][ T29] audit: type=1326 audit(1749183863.511:67142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27308 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8cf6ce929 code=0x7ffc0000 [ 919.048096][T27321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.064390][T27300] lo speed is unknown, defaulting to 1000 [ 919.072074][ T12] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.086044][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.116677][T27332] loop1: detected capacity change from 0 to 1024 [ 919.127516][ T12] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.164596][T27332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.182676][T27300] chnl_net:caif_netlink_parms(): no params data found [ 919.207452][ T12] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.209121][ T3317] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 919.235191][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.255209][T27300] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.262483][T27300] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.279955][T27300] bridge_slave_0: entered allmulticast mode [ 919.286847][T27300] bridge_slave_0: entered promiscuous mode [ 919.294050][T27350] netlink: zone id is out of range [ 919.299434][T27350] netlink: del zone limit has 8 unknown bytes [ 919.315873][ T12] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.327223][T27300] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.334455][T27300] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.337004][T27354] loop1: detected capacity change from 0 to 128 [ 919.348050][T27300] bridge_slave_1: entered allmulticast mode [ 919.351292][T27354] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 919.355038][T27300] bridge_slave_1: entered promiscuous mode [ 919.391432][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 919.409874][T27300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.427002][T27356] loop4: detected capacity change from 0 to 512 [ 919.440196][T27300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.483729][T27300] team0: Port device team_slave_0 added [ 919.491835][T27356] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 919.513805][T27300] team0: Port device team_slave_1 added [ 919.521372][ T12] bridge_slave_1: left allmulticast mode [ 919.527276][ T12] bridge_slave_1: left promiscuous mode [ 919.532982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.535052][T27356] EXT4-fs (loop4): mount failed [ 919.555064][ T12] bridge_slave_0: left promiscuous mode [ 919.560925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.612295][T27370] loop4: detected capacity change from 0 to 128 [ 919.629747][T27370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 919.643024][T27370] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 919.682712][T27373] loop5: detected capacity change from 0 to 1024 [ 919.690305][T27373] EXT4-fs: Ignoring removed nobh option [ 919.696018][T27373] EXT4-fs: Ignoring removed i_version option [ 919.702353][T27373] EXT4-fs: Ignoring removed bh option [ 919.709564][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 919.721558][T27373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.741498][T27377] loop4: detected capacity change from 0 to 256 [ 919.752750][T27066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.756000][T27377] syz.4.6670: attempt to access beyond end of device [ 919.756000][T27377] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 919.917594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.927640][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.937380][ T12] bond0 (unregistering): Released all slaves [ 919.977722][T27300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.985148][T27300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.012171][T27300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.032100][T27391] loop1: detected capacity change from 0 to 512 [ 920.045503][T27300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.052622][T27300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.079183][T27300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.092744][T27391] netlink: 'syz.1.6676': attribute type 1 has an invalid length. [ 920.105715][T27395] loop5: detected capacity change from 0 to 512 [ 920.132042][ T12] hsr_slave_0: left promiscuous mode [ 920.138185][ T12] hsr_slave_1: left promiscuous mode [ 920.148577][ T12] veth1_macvtap: left promiscuous mode [ 920.154776][ T12] veth0_macvtap: left promiscuous mode [ 920.163568][T27395] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 920.183172][T27395] EXT4-fs (loop5): mount failed [ 920.261020][T27408] loop1: detected capacity change from 0 to 512 [ 920.269924][T27408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 920.282185][T27408] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 920.298496][T27408] EXT4-fs (loop1): 1 truncate cleaned up [ 920.304898][T27408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.366733][T27300] hsr_slave_0: entered promiscuous mode [ 920.373155][T27300] hsr_slave_1: entered promiscuous mode [ 920.380135][T27300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.389104][T27300] Cannot create hsr debugfs directory [ 920.499438][T27413] loop4: detected capacity change from 0 to 256 [ 920.514487][T27413] syz.4.6682: attempt to access beyond end of device [ 920.514487][T27413] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 920.704269][T27429] loop4: detected capacity change from 0 to 512 [ 920.729312][T27429] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 920.747800][T27429] EXT4-fs (loop4): mount failed [ 920.791237][T27433] loop4: detected capacity change from 0 to 256 [ 920.804645][T27433] syz.4.6690: attempt to access beyond end of device [ 920.804645][T27433] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 920.855319][T27300] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 920.864503][T27300] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 920.874895][T27300] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 920.887857][T27436] loop4: detected capacity change from 0 to 512 [ 920.887945][T27300] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 920.924914][T27436] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 920.934135][T27300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.949305][T27436] EXT4-fs (loop4): mount failed [ 920.973267][T27300] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.009847][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.017009][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.029904][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.041159][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.048393][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.132814][T27453] loop4: detected capacity change from 0 to 256 [ 921.162099][T27453] syz.4.6694: attempt to access beyond end of device [ 921.162099][T27453] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 921.325794][T27470] loop1: detected capacity change from 0 to 256 [ 921.338855][T27300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.351133][T27473] netlink: zone id is out of range [ 921.363987][T27470] syz.1.6700: attempt to access beyond end of device [ 921.363987][T27470] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 921.366474][T27473] netlink: del zone limit has 8 unknown bytes [ 921.438366][T27476] loop3: detected capacity change from 0 to 512 [ 921.549363][T27476] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 921.573495][T27476] EXT4-fs (loop3): mount failed [ 921.588743][T27300] veth0_vlan: entered promiscuous mode [ 921.605952][T27300] veth1_vlan: entered promiscuous mode [ 921.624673][T27300] veth0_macvtap: entered promiscuous mode [ 921.634429][T27300] veth1_macvtap: entered promiscuous mode [ 921.662855][T27300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.676674][T27503] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 921.686574][T27300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.697640][T27300] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.706751][T27300] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.715800][T27300] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.725160][T27300] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.736620][T27507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.747591][T27507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.815684][T27516] loop4: detected capacity change from 0 to 256 [ 921.831923][T27516] syz.4.6713: attempt to access beyond end of device [ 921.831923][T27516] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 921.866296][T27521] loop5: detected capacity change from 0 to 512 [ 921.874651][T27521] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 0 [ 921.904708][T27525] FAULT_INJECTION: forcing a failure. [ 921.904708][T27525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.917992][T27525] CPU: 1 UID: 0 PID: 27525 Comm: syz.4.6716 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 921.918105][T27525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 921.918142][T27525] Call Trace: [ 921.918150][T27525] [ 921.918159][T27525] __dump_stack+0x1d/0x30 [ 921.918185][T27525] dump_stack_lvl+0xe8/0x140 [ 921.918210][T27525] dump_stack+0x15/0x1b [ 921.918229][T27525] should_fail_ex+0x265/0x280 [ 921.918249][T27525] should_fail+0xb/0x20 [ 921.918264][T27525] should_fail_usercopy+0x1a/0x20 [ 921.918334][T27525] _copy_from_user+0x1c/0xb0 [ 921.918382][T27525] sock_do_ioctl+0xe6/0x220 [ 921.918411][T27525] sock_ioctl+0x41b/0x610 [ 921.918436][T27525] ? __pfx_sock_ioctl+0x10/0x10 [ 921.918467][T27525] __se_sys_ioctl+0xcb/0x140 [ 921.918517][T27525] __x64_sys_ioctl+0x43/0x50 [ 921.918553][T27525] x64_sys_call+0x19a8/0x2fb0 [ 921.918644][T27525] do_syscall_64+0xd2/0x200 [ 921.918675][T27525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 921.918701][T27525] ? clear_bhb_loop+0x40/0x90 [ 921.918721][T27525] ? clear_bhb_loop+0x40/0x90 [ 921.918835][T27525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.918901][T27525] RIP: 0033:0x7f3abc6fe929 [ 921.918920][T27525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.918943][T27525] RSP: 002b:00007f3abad67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.918962][T27525] RAX: ffffffffffffffda RBX: 00007f3abc925fa0 RCX: 00007f3abc6fe929 [ 921.918974][T27525] RDX: 00002000000003c0 RSI: 0000000000008946 RDI: 0000000000000006 [ 921.918985][T27525] RBP: 00007f3abad67090 R08: 0000000000000000 R09: 0000000000000000 [ 921.918997][T27525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.919037][T27525] R13: 0000000000000000 R14: 00007f3abc925fa0 R15: 00007ffe19f06168 [ 921.919060][T27525] [ 922.166987][T27527] loop4: detected capacity change from 0 to 512 [ 922.189957][T27527] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 922.207462][T27527] EXT4-fs (loop4): mount failed [ 922.262574][T27533] siw: device registration error -23 [ 922.339102][T27533] lo speed is unknown, defaulting to 1000 [ 922.405919][T27537] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 922.567370][T27559] team0 (unregistering): Port device team_slave_0 removed [ 922.577998][T27559] team0 (unregistering): Port device team_slave_1 removed [ 922.604421][T27540] lo speed is unknown, defaulting to 1000 [ 922.620716][T27565] siw: device registration error -23 [ 922.649638][T27567] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 922.698077][T27565] lo speed is unknown, defaulting to 1000 [ 922.790239][T27540] chnl_net:caif_netlink_parms(): no params data found [ 922.817378][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.827565][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.910719][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.920580][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.950968][T27540] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.958250][T27540] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.969718][T27540] bridge_slave_0: entered allmulticast mode [ 922.977090][T27540] bridge_slave_0: entered promiscuous mode [ 922.983936][T27540] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.991189][T27540] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.998746][T27540] bridge_slave_1: entered allmulticast mode [ 923.005407][T27540] bridge_slave_1: entered promiscuous mode [ 923.012794][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.022742][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.066820][T27589] loop6: detected capacity change from 0 to 512 [ 923.076042][T27540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.090167][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.100100][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.114337][T27540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.132971][T27589] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 923.151182][T27589] EXT4-fs (loop6): mount failed [ 923.159038][T27540] team0: Port device team_slave_0 added [ 923.169493][T27540] team0: Port device team_slave_1 added [ 923.194886][T27597] loop3: detected capacity change from 0 to 512 [ 923.212556][T27597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 923.220193][T27540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.229996][T27540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.243268][T27597] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 923.257618][T27540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.284585][T27597] EXT4-fs (loop3): 1 truncate cleaned up [ 923.286619][T27540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.292603][T27597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.297521][T27540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.336563][T27540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.348747][T27600] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 923.372252][ T31] bridge_slave_1: left allmulticast mode [ 923.378137][ T31] bridge_slave_1: left promiscuous mode [ 923.383995][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.392639][ T31] bridge_slave_0: left promiscuous mode [ 923.398641][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.757000][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.767276][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.777048][ T31] bond0 (unregistering): Released all slaves [ 923.795704][T27602] team0 (unregistering): Port device team_slave_0 removed [ 923.804751][T27602] team0 (unregistering): Port device team_slave_1 removed [ 923.822988][T27540] hsr_slave_0: entered promiscuous mode [ 923.829888][T27540] hsr_slave_1: entered promiscuous mode [ 923.836428][T27540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 923.844193][T27540] Cannot create hsr debugfs directory [ 923.857076][ T31] hsr_slave_0: left promiscuous mode [ 923.863038][ T31] hsr_slave_1: left promiscuous mode [ 923.901450][ T31] pim6reg (unregistering): left allmulticast mode [ 923.909862][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.930620][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 923.930639][ T29] audit: type=1326 audit(1749183868.671:67371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 923.939331][T27609] loop4: detected capacity change from 0 to 128 [ 923.963885][ T29] audit: type=1326 audit(1749183868.671:67372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 923.992010][ T29] audit: type=1326 audit(1749183868.671:67373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 924.016302][ T29] audit: type=1326 audit(1749183868.671:67374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 924.021779][T27609] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 924.040123][ T29] audit: type=1326 audit(1749183868.671:67375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 924.056101][T27609] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 924.076434][ T29] audit: type=1326 audit(1749183868.671:67376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3abc6fe963 code=0x7ffc0000 [ 924.109425][T27614] 9pnet_fd: Insufficient options for proto=fd [ 924.132553][ T29] audit: type=1326 audit(1749183868.671:67377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3abc6fd3df code=0x7ffc0000 [ 924.132590][ T29] audit: type=1326 audit(1749183868.671:67378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3abc6fe9b7 code=0x7ffc0000 [ 924.188029][ T29] audit: type=1326 audit(1749183868.681:67379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3abc6fd290 code=0x7ffc0000 [ 924.212785][ T29] audit: type=1326 audit(1749183868.681:67380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27608 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3abc6fe52b code=0x7ffc0000 [ 924.257209][ T3404] lo speed is unknown, defaulting to 1000 [ 924.257624][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 924.263072][ T3404] infiniband syz0: ib_query_port failed (-19) [ 924.293020][T27613] loop3: detected capacity change from 0 to 512 [ 924.303059][T27613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 924.317619][T27613] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 924.333231][T27613] EXT4-fs (loop3): 1 truncate cleaned up [ 924.352219][T27613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.356638][T27617] loop4: detected capacity change from 0 to 512 [ 924.390007][T27617] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 924.408673][T27617] EXT4-fs (loop4): mount failed [ 924.524291][T27629] loop4: detected capacity change from 0 to 512 [ 924.551536][T27629] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 924.567720][T27629] EXT4-fs (loop4): mount failed [ 924.605754][T27633] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 924.633144][T27635] loop5: detected capacity change from 0 to 256 [ 924.639738][T27638] loop4: detected capacity change from 0 to 512 [ 924.647091][T27638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 924.656055][T27635] syz.5.6752: attempt to access beyond end of device [ 924.656055][T27635] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 924.658786][T27638] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 924.686933][T27638] EXT4-fs (loop4): 1 truncate cleaned up [ 924.693165][T27638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.718152][T27540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 924.732252][T27540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 924.742304][T27641] lo speed is unknown, defaulting to 1000 [ 924.742801][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.748510][T27540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 924.767427][T27641] lo speed is unknown, defaulting to 1000 [ 924.774092][T27641] lo speed is unknown, defaulting to 1000 [ 924.779246][T27540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 924.789569][T27641] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 924.798294][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.810283][T27644] loop4: detected capacity change from 0 to 128 [ 924.819353][T27644] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 924.831807][T27641] lo speed is unknown, defaulting to 1000 [ 924.831978][T27644] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 924.861427][T27641] lo speed is unknown, defaulting to 1000 [ 924.879923][T27641] lo speed is unknown, defaulting to 1000 [ 924.896603][T27641] lo speed is unknown, defaulting to 1000 [ 924.908276][T27540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.916934][T27641] lo speed is unknown, defaulting to 1000 [ 924.920912][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 924.928975][T27540] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.941225][T27641] lo speed is unknown, defaulting to 1000 [ 924.955433][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.962867][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.972527][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.980016][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.070662][T27656] loop4: detected capacity change from 0 to 512 [ 925.084306][T27540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.156152][T27666] loop5: detected capacity change from 0 to 512 [ 925.174502][T27656] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 925.205686][T27656] EXT4-fs (loop4): mount failed [ 925.254796][T27540] veth0_vlan: entered promiscuous mode [ 925.263433][T27540] veth1_vlan: entered promiscuous mode [ 925.278266][T27540] veth0_macvtap: entered promiscuous mode [ 925.285901][T27540] veth1_macvtap: entered promiscuous mode [ 925.303715][T27666] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 925.324708][T27540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.334273][T27666] EXT4-fs (loop5): mount failed [ 925.338469][T27683] __nla_validate_parse: 26 callbacks suppressed [ 925.338489][T27683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6763'. [ 925.350205][T27682] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 925.364437][T27540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.373098][T27540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.382476][T27540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.392430][T27540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.401749][T27540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.533384][T27688] loop3: detected capacity change from 0 to 512 [ 925.611423][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6720'. [ 925.622270][T27688] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 925.640922][T27688] EXT4-fs (loop3): mount failed [ 925.813854][T27701] loop4: detected capacity change from 0 to 512 [ 925.822377][T27701] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 925.837300][T27701] EXT4-fs (loop4): 1 truncate cleaned up [ 925.843818][T27701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.974723][T27708] loop6: detected capacity change from 0 to 128 [ 925.989841][T27708] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 926.002738][T27708] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 926.126740][T27710] loop5: detected capacity change from 0 to 512 [ 926.149305][T17855] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.227979][T17855] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.279020][T27710] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 926.382828][T27300] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 926.397586][T17855] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.416900][T27710] EXT4-fs (loop5): mount failed [ 926.466479][T17855] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.540744][T27714] lo speed is unknown, defaulting to 1000 [ 926.566635][T17855] bridge_slave_1: left allmulticast mode [ 926.572485][T17855] bridge_slave_1: left promiscuous mode [ 926.578409][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.587704][T17855] bridge_slave_0: left promiscuous mode [ 926.593559][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.679013][T27725] loop1: detected capacity change from 0 to 512 [ 926.696879][T27725] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 926.715686][T27725] EXT4-fs (loop1): mount failed [ 926.877407][T17855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.888517][T17855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.898155][T17855] bond0 (unregistering): Released all slaves [ 926.967841][T17855] hsr_slave_0: left promiscuous mode [ 926.978599][T17855] hsr_slave_1: left promiscuous mode [ 927.051444][T27714] chnl_net:caif_netlink_parms(): no params data found [ 927.102566][T27714] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.110239][T27714] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.119483][T27714] bridge_slave_0: entered allmulticast mode [ 927.126355][T27714] bridge_slave_0: entered promiscuous mode [ 927.133350][T27714] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.140492][T27714] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.149181][T27714] bridge_slave_1: entered allmulticast mode [ 927.156006][T27714] bridge_slave_1: entered promiscuous mode [ 927.180985][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.194189][T27714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.205125][T27714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.248199][T27714] team0: Port device team_slave_0 added [ 927.258533][T27714] team0: Port device team_slave_1 added [ 927.279303][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6777'. [ 927.298983][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6775'. [ 927.308275][T27738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6775'. [ 927.319769][T27714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.326905][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.353212][T27714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.369759][T27745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6778'. [ 927.378832][T27745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6778'. [ 927.397629][T27714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.404643][T27714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.431036][T27714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.464270][T27745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6778'. [ 927.473717][T27745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6778'. [ 927.527655][T27745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6778'. [ 927.531170][T27714] hsr_slave_0: entered promiscuous mode [ 927.545945][T27714] hsr_slave_1: entered promiscuous mode [ 927.760420][T27773] loop6: detected capacity change from 0 to 512 [ 927.814704][T27773] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 927.857844][T27773] EXT4-fs (loop6): mount failed [ 927.868039][T27714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 927.878829][T27714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 927.888755][T27714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 927.898492][T27714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 927.943145][T27714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.956289][T27714] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.968577][T16928] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.975703][T16928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.986509][T27796] loop6: detected capacity change from 0 to 128 [ 927.991825][T16928] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.999973][T16928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.088512][T27714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.168542][T27714] veth0_vlan: entered promiscuous mode [ 928.176731][T27714] veth1_vlan: entered promiscuous mode [ 928.193047][T27714] veth0_macvtap: entered promiscuous mode [ 928.201916][T27714] veth1_macvtap: entered promiscuous mode [ 928.213673][T27714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.226878][T27714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.239856][T27714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.248963][T27714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.257930][T27714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.267353][T27714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.373582][T27826] FAULT_INJECTION: forcing a failure. [ 928.373582][T27826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.387311][T27826] CPU: 0 UID: 0 PID: 27826 Comm: syz.3.6798 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 928.387386][T27826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.387403][T27826] Call Trace: [ 928.387410][T27826] [ 928.387420][T27826] __dump_stack+0x1d/0x30 [ 928.387443][T27826] dump_stack_lvl+0xe8/0x140 [ 928.387513][T27826] dump_stack+0x15/0x1b [ 928.387533][T27826] should_fail_ex+0x265/0x280 [ 928.387559][T27826] should_fail+0xb/0x20 [ 928.387580][T27826] should_fail_usercopy+0x1a/0x20 [ 928.387618][T27826] _copy_from_user+0x1c/0xb0 [ 928.387699][T27826] ___sys_sendmsg+0xc1/0x1d0 [ 928.387793][T27826] __x64_sys_sendmsg+0xd4/0x160 [ 928.387827][T27826] x64_sys_call+0x2999/0x2fb0 [ 928.387853][T27826] do_syscall_64+0xd2/0x200 [ 928.387889][T27826] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 928.387999][T27826] ? clear_bhb_loop+0x40/0x90 [ 928.388028][T27826] ? clear_bhb_loop+0x40/0x90 [ 928.388051][T27826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.388073][T27826] RIP: 0033:0x7f25d79fe929 [ 928.388162][T27826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.388186][T27826] RSP: 002b:00007f25d6067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.388209][T27826] RAX: ffffffffffffffda RBX: 00007f25d7c25fa0 RCX: 00007f25d79fe929 [ 928.388226][T27826] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006 [ 928.388242][T27826] RBP: 00007f25d6067090 R08: 0000000000000000 R09: 0000000000000000 [ 928.388255][T27826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.388266][T27826] R13: 0000000000000000 R14: 00007f25d7c25fa0 R15: 00007fff2851e858 [ 928.388329][T27826] [ 928.724697][T27840] team0 (unregistering): Port device team_slave_0 removed [ 928.737018][T27840] team0 (unregistering): Port device team_slave_1 removed [ 928.807876][T27857] loop4: detected capacity change from 0 to 256 [ 928.883320][T27868] FAULT_INJECTION: forcing a failure. [ 928.883320][T27868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.896882][T27868] CPU: 1 UID: 0 PID: 27868 Comm: syz.1.6813 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 928.896920][T27868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.896936][T27868] Call Trace: [ 928.896946][T27868] [ 928.896957][T27868] __dump_stack+0x1d/0x30 [ 928.896985][T27868] dump_stack_lvl+0xe8/0x140 [ 928.897012][T27868] dump_stack+0x15/0x1b [ 928.897034][T27868] should_fail_ex+0x265/0x280 [ 928.897079][T27868] should_fail+0xb/0x20 [ 928.897101][T27868] should_fail_usercopy+0x1a/0x20 [ 928.897129][T27868] _copy_from_user+0x1c/0xb0 [ 928.897177][T27868] __sys_bpf+0x178/0x790 [ 928.897228][T27868] __x64_sys_bpf+0x41/0x50 [ 928.897275][T27868] x64_sys_call+0x2478/0x2fb0 [ 928.897296][T27868] do_syscall_64+0xd2/0x200 [ 928.897360][T27868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 928.897396][T27868] ? clear_bhb_loop+0x40/0x90 [ 928.897449][T27868] ? clear_bhb_loop+0x40/0x90 [ 928.897534][T27868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.897562][T27868] RIP: 0033:0x7f75cb5ae929 [ 928.897582][T27868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.897604][T27868] RSP: 002b:00007f75c9c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 928.897629][T27868] RAX: ffffffffffffffda RBX: 00007f75cb7d5fa0 RCX: 00007f75cb5ae929 [ 928.897645][T27868] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000000 [ 928.897714][T27868] RBP: 00007f75c9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 928.897730][T27868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.897743][T27868] R13: 0000000000000000 R14: 00007f75cb7d5fa0 R15: 00007fff34046708 [ 928.897816][T27868] [ 929.021697][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 929.021715][ T29] audit: type=1326 audit(1749183873.761:67791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.021745][ T29] audit: type=1326 audit(1749183873.761:67792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.021794][ T29] audit: type=1326 audit(1749183873.761:67793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.021908][ T29] audit: type=1326 audit(1749183873.761:67794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.021943][ T29] audit: type=1326 audit(1749183873.761:67795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.022017][ T29] audit: type=1326 audit(1749183873.761:67796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.022050][ T29] audit: type=1326 audit(1749183873.761:67797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.022596][ T29] audit: type=1326 audit(1749183873.761:67798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.022638][ T29] audit: type=1326 audit(1749183873.761:67799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.022897][ T29] audit: type=1326 audit(1749183873.761:67800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27878 comm="syz.1.6817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 929.046567][T27883] loop6: detected capacity change from 0 to 256 [ 929.470587][T27891] loop6: detected capacity change from 0 to 1024 [ 929.507709][T27891] EXT4-fs: Ignoring removed nobh option [ 929.513535][T27891] EXT4-fs: Ignoring removed bh option [ 929.580095][T27897] loop1: detected capacity change from 0 to 256 [ 929.586477][T27891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.607769][T27897] syz.1.6824: attempt to access beyond end of device [ 929.607769][T27897] loop1: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 929.738938][T27916] loop1: detected capacity change from 0 to 256 [ 929.750153][T27916] FAT-fs (loop1): bogus number of FAT sectors [ 929.756704][T27916] FAT-fs (loop1): Can't find a valid FAT filesystem [ 929.905808][T27919] loop5: detected capacity change from 0 to 512 [ 929.913512][T27919] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 929.947574][T27919] EXT4-fs (loop5): 1 truncate cleaned up [ 929.953890][T27919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.451321][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.482057][T27923] loop4: detected capacity change from 0 to 256 [ 930.745408][T27923] syz.4.6831: attempt to access beyond end of device [ 930.745408][T27923] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 930.779303][T27931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27931 comm=syz.1.6834 [ 930.794008][T27931] __nla_validate_parse: 23 callbacks suppressed [ 930.794028][T27931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6834'. [ 930.850983][T27931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.881554][T27931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.404197][T27066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.478706][T27950] loop5: detected capacity change from 0 to 256 [ 931.494174][T27950] syz.5.6838: attempt to access beyond end of device [ 931.494174][T27950] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 931.540788][T27953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6842'. [ 931.550092][T27953] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6842'. [ 931.619924][T27956] loop1: detected capacity change from 0 to 512 [ 931.627574][T27958] veth0: entered promiscuous mode [ 931.640798][T27958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6844'. [ 931.728936][T27961] lo speed is unknown, defaulting to 1000 [ 932.060575][T27965] siw: device registration error -23 [ 932.185697][T27968] loop6: detected capacity change from 0 to 256 [ 932.247481][T27968] syz.6.6846: attempt to access beyond end of device [ 932.247481][T27968] loop6: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 932.583735][T27975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6849'. [ 932.592954][T27975] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6849'. [ 932.620031][T27956] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 932.690147][T27956] EXT4-fs (loop1): mount failed [ 932.765821][T27983] loop6: detected capacity change from 0 to 256 [ 932.801203][T27980] loop5: detected capacity change from 0 to 512 [ 932.823798][T27983] syz.6.6852: attempt to access beyond end of device [ 932.823798][T27983] loop6: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 932.843990][T27986] FAULT_INJECTION: forcing a failure. [ 932.843990][T27986] name failslab, interval 1, probability 0, space 0, times 0 [ 932.857224][T27986] CPU: 1 UID: 0 PID: 27986 Comm: syz.1.6853 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 932.857262][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 932.857278][T27986] Call Trace: [ 932.857286][T27986] [ 932.857294][T27986] __dump_stack+0x1d/0x30 [ 932.857392][T27986] dump_stack_lvl+0xe8/0x140 [ 932.857411][T27986] dump_stack+0x15/0x1b [ 932.857427][T27986] should_fail_ex+0x265/0x280 [ 932.857462][T27986] should_failslab+0x8c/0xb0 [ 932.857511][T27986] kmem_cache_alloc_noprof+0x50/0x310 [ 932.857554][T27986] ? getname_flags+0x80/0x3b0 [ 932.857585][T27986] getname_flags+0x80/0x3b0 [ 932.857609][T27986] __x64_sys_renameat2+0x6c/0x90 [ 932.857685][T27986] x64_sys_call+0x2bf6/0x2fb0 [ 932.857706][T27986] do_syscall_64+0xd2/0x200 [ 932.857746][T27986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 932.857776][T27986] ? clear_bhb_loop+0x40/0x90 [ 932.857799][T27986] ? clear_bhb_loop+0x40/0x90 [ 932.857820][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.857890][T27986] RIP: 0033:0x7f75cb5ae929 [ 932.857904][T27986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.857922][T27986] RSP: 002b:00007f75c9c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 932.857944][T27986] RAX: ffffffffffffffda RBX: 00007f75cb7d5fa0 RCX: 00007f75cb5ae929 [ 932.857959][T27986] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 932.857976][T27986] RBP: 00007f75c9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 932.857992][T27986] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 932.858070][T27986] R13: 0000000000000000 R14: 00007f75cb7d5fa0 R15: 00007fff34046708 [ 932.858088][T27986] [ 933.072122][T27980] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 933.120997][T27992] loop4: detected capacity change from 0 to 128 [ 933.129620][T27980] EXT4-fs (loop5): mount failed [ 933.136950][T27992] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 933.149869][T27992] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 933.244892][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 933.431451][T28003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6859'. [ 933.558607][T28008] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 933.661425][T28013] lo speed is unknown, defaulting to 1000 [ 933.728518][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6858'. [ 933.982192][T28026] loop5: detected capacity change from 0 to 256 [ 934.046783][T28026] syz.5.6867: attempt to access beyond end of device [ 934.046783][T28026] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 934.070591][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 934.070610][ T29] audit: type=1326 audit(1749183878.811:68032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.074722][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6874'. [ 934.077088][ T29] audit: type=1326 audit(1749183878.821:68033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.100957][T28039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6874'. [ 934.116167][T28040] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 934.143401][ T29] audit: type=1326 audit(1749183878.851:68034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.143492][ T29] audit: type=1326 audit(1749183878.851:68035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.146975][ T29] audit: type=1326 audit(1749183878.891:68036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.226487][ T29] audit: type=1326 audit(1749183878.891:68037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.250430][ T29] audit: type=1326 audit(1749183878.891:68038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.319385][T28043] siw: device registration error -23 [ 934.341630][ T29] audit: type=1326 audit(1749183878.921:68039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.365589][ T29] audit: type=1326 audit(1749183878.921:68040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.389680][ T29] audit: type=1326 audit(1749183878.921:68041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28035 comm="syz.3.6872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d79fe929 code=0x7ffc0000 [ 934.447650][T28043] lo speed is unknown, defaulting to 1000 [ 934.458654][T28052] FAULT_INJECTION: forcing a failure. [ 934.458654][T28052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.471918][T28052] CPU: 0 UID: 0 PID: 28052 Comm: syz.3.6879 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 934.471959][T28052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 934.471973][T28052] Call Trace: [ 934.471980][T28052] [ 934.471989][T28052] __dump_stack+0x1d/0x30 [ 934.472041][T28052] dump_stack_lvl+0xe8/0x140 [ 934.472065][T28052] dump_stack+0x15/0x1b [ 934.472082][T28052] should_fail_ex+0x265/0x280 [ 934.472102][T28052] should_fail+0xb/0x20 [ 934.472118][T28052] should_fail_usercopy+0x1a/0x20 [ 934.472169][T28052] _copy_from_user+0x1c/0xb0 [ 934.472197][T28052] perf_copy_attr+0x145/0x610 [ 934.472223][T28052] __se_sys_perf_event_open+0x67/0x11c0 [ 934.472277][T28052] ? vfs_write+0x75e/0x8e0 [ 934.472313][T28052] ? __rcu_read_unlock+0x4f/0x70 [ 934.472403][T28052] __x64_sys_perf_event_open+0x67/0x80 [ 934.472473][T28052] x64_sys_call+0x27ec/0x2fb0 [ 934.472494][T28052] do_syscall_64+0xd2/0x200 [ 934.472524][T28052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 934.472557][T28052] ? clear_bhb_loop+0x40/0x90 [ 934.472584][T28052] ? clear_bhb_loop+0x40/0x90 [ 934.472629][T28052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.472656][T28052] RIP: 0033:0x7f25d79fe929 [ 934.472676][T28052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.472700][T28052] RSP: 002b:00007f25d6067038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 934.472788][T28052] RAX: ffffffffffffffda RBX: 00007f25d7c25fa0 RCX: 00007f25d79fe929 [ 934.472850][T28052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 934.472926][T28052] RBP: 00007f25d6067090 R08: 000000000000000a R09: 0000000000000000 [ 934.472942][T28052] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 934.472958][T28052] R13: 0000000000000000 R14: 00007f25d7c25fa0 R15: 00007fff2851e858 [ 934.472981][T28052] [ 934.753693][T28064] loop6: detected capacity change from 0 to 128 [ 934.760620][T28064] EXT4-fs: Ignoring removed nobh option [ 934.781338][T28064] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 934.799417][T28067] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 934.860724][T28064] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 934.901419][T27300] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 935.913409][T28102] siw: device registration error -23 [ 935.979301][T28102] lo speed is unknown, defaulting to 1000 [ 936.163817][T28121] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 936.311189][T28128] lo speed is unknown, defaulting to 1000 [ 936.358013][T28135] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 936.464654][T28141] siw: device registration error -23 [ 936.487072][T28141] lo speed is unknown, defaulting to 1000 [ 936.651624][T28147] loop5: detected capacity change from 0 to 2048 [ 936.670373][T28149] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 936.682280][T28150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=6821 sclass=netlink_audit_socket pid=28150 comm=syz.3.6915 [ 936.706594][T28147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.737893][T28154] siw: device registration error -23 [ 936.750296][T28147] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.788723][T27066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.817663][T28162] loop5: detected capacity change from 0 to 256 [ 936.848875][T28162] syz.5.6920: attempt to access beyond end of device [ 936.848875][T28162] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 936.889383][T28167] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 936.947360][T28166] loop3: detected capacity change from 0 to 512 [ 936.970844][T28169] lo speed is unknown, defaulting to 1000 [ 936.980765][T28173] loop4: detected capacity change from 0 to 256 [ 937.008683][T28173] syz.4.6927: attempt to access beyond end of device [ 937.008683][T28173] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 937.040235][T28166] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 937.071134][T28166] EXT4-fs (loop3): mount failed [ 937.093034][T28159] __nla_validate_parse: 3 callbacks suppressed [ 937.093055][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6921'. [ 937.236953][T28188] loop6: detected capacity change from 0 to 512 [ 937.289408][T28190] lo speed is unknown, defaulting to 1000 [ 937.354116][T28188] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 937.379087][T28188] EXT4-fs (loop6): mount failed [ 937.447551][T28201] loop5: detected capacity change from 0 to 512 [ 937.458351][T28201] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 937.483184][T28190] loop4: detected capacity change from 0 to 8192 [ 937.497336][T28201] EXT4-fs (loop5): 1 truncate cleaned up [ 937.504674][T28201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.556166][T28190] loop4: p2 p3 p4 [ 937.560407][T28190] loop4: p2 start 2936012800 is beyond EOD, truncated [ 937.567352][T28190] loop4: p3 start 1912602624 is beyond EOD, truncated [ 937.574193][T28190] loop4: p4 size 656640 extends beyond EOD, truncated [ 937.591059][T28205] bridge_slave_0: left allmulticast mode [ 937.597110][T28205] bridge_slave_0: left promiscuous mode [ 937.603058][T28205] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.618362][T28205] bridge_slave_1: left allmulticast mode [ 937.624255][T28205] bridge_slave_1: left promiscuous mode [ 937.630082][T28205] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.671410][T28205] bond0: (slave bond_slave_0): Releasing backup interface [ 937.683871][T28205] bond0: (slave bond_slave_1): Releasing backup interface [ 937.699839][T28205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.707609][T28205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.818476][T28205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.826141][T28205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.032949][T28215] sctp: [Deprecated]: syz.3.6939 (pid 28215) Use of int in max_burst socket option. [ 938.032949][T28215] Use struct sctp_assoc_value instead [ 938.309557][T28220] loop3: detected capacity change from 0 to 256 [ 938.324793][T28220] syz.3.6941: attempt to access beyond end of device [ 938.324793][T28220] loop3: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 938.476769][T28223] loop6: detected capacity change from 0 to 512 [ 938.516498][T28223] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 938.536342][T28223] EXT4-fs (loop6): mount failed [ 938.628359][T28236] siw: device registration error -23 [ 938.667280][T28238] siw: device registration error -23 [ 938.717284][T28238] lo speed is unknown, defaulting to 1000 [ 938.876049][T28252] loop4: detected capacity change from 0 to 128 [ 938.882601][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6955'. [ 938.891515][T28254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6955'. [ 939.015963][T28264] siw: device registration error -23 [ 939.068360][T28252] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 939.085396][T27066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.088236][T28252] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 939.128790][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 939.128807][ T29] audit: type=1326 audit(1749183883.871:68263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3abc6fd290 code=0x7ffc0000 [ 939.174616][ T29] audit: type=1326 audit(1749183883.911:68264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3abc6fd677 code=0x7ffc0000 [ 939.199509][ T29] audit: type=1326 audit(1749183883.911:68265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3abc6fd290 code=0x7ffc0000 [ 939.223977][ T29] audit: type=1326 audit(1749183883.911:68266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.252777][T28276] loop6: detected capacity change from 0 to 256 [ 939.265301][ T29] audit: type=1326 audit(1749183883.941:68267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.268891][T28276] syz.6.6965: attempt to access beyond end of device [ 939.268891][T28276] loop6: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 939.289003][ T29] audit: type=1326 audit(1749183883.941:68268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.327782][ T29] audit: type=1326 audit(1749183883.941:68269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.351487][ T29] audit: type=1326 audit(1749183883.941:68270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.375481][ T29] audit: type=1326 audit(1749183883.941:68271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.400090][ T29] audit: type=1326 audit(1749183883.941:68272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.4.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abc6fe929 code=0x7ffc0000 [ 939.437714][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 939.439472][T28274] team0 (unregistering): Port device team_slave_0 removed [ 939.475574][T28274] team0 (unregistering): Port device team_slave_1 removed [ 939.520186][T28289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6970'. [ 939.529314][T28289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6970'. [ 939.578394][T28287] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6969'. [ 939.590723][T28295] loop4: detected capacity change from 0 to 256 [ 939.617146][T28295] syz.4.6971: attempt to access beyond end of device [ 939.617146][T28295] loop4: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 939.691648][T28300] loop6: detected capacity change from 0 to 512 [ 939.716207][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6973'. [ 939.725156][T28299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6973'. [ 939.755417][T28300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 939.784352][T28300] EXT4-fs (loop6): 1 truncate cleaned up [ 939.791025][T28300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.940689][T28308] loop5: detected capacity change from 0 to 128 [ 940.011570][T28308] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 940.093165][T28315] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 940.119781][T28308] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 940.415797][T28322] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6982'. [ 940.514152][T27066] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 940.531131][T28333] siw: device registration error -23 [ 940.663900][T28343] loop4: detected capacity change from 0 to 512 [ 940.678659][T28343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.702759][T28343] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.847115][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.980427][T28360] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6996'. [ 941.017089][T28365] loop5: detected capacity change from 0 to 128 [ 941.025588][T28365] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 941.040325][T28365] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 941.109536][T27066] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 941.175885][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.214794][T28372] siw: device registration error -23 [ 941.299360][T28379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.327319][T28379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.347997][T28370] vlan2: entered allmulticast mode [ 941.418140][T28381] lo speed is unknown, defaulting to 1000 [ 941.685480][T28394] siw: device registration error -23 [ 941.689982][T28388] lo speed is unknown, defaulting to 1000 [ 941.753892][T28394] lo speed is unknown, defaulting to 1000 [ 942.056743][T28405] loop4: detected capacity change from 0 to 512 [ 942.139567][T28405] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 942.168730][T28405] EXT4-fs (loop4): mount failed [ 942.361016][T28417] loop5: detected capacity change from 0 to 512 [ 942.387550][T28417] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 942.408554][T28417] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 942.423870][T28417] EXT4-fs (loop5): 1 truncate cleaned up [ 942.431268][T28417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.466831][T28400] loop6: detected capacity change from 0 to 8192 [ 942.479614][T28422] syz.1.7016 uses obsolete (PF_INET,SOCK_PACKET) [ 942.505307][T28400] loop6: p2 p3 p4 [ 942.509426][T28400] loop6: p2 start 452985600 is beyond EOD, truncated [ 942.516289][T28400] loop6: p3 size 33554432 extends beyond EOD, truncated [ 942.524003][T28400] loop6: p4 start 8388607 is beyond EOD, truncated [ 942.819947][T28435] __nla_validate_parse: 4 callbacks suppressed [ 942.819969][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7022'. [ 942.911565][T28450] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 942.936426][T28452] siw: device registration error -23 [ 942.967043][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7031'. [ 942.976390][T28454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7031'. [ 943.043306][T27066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.239901][T28468] lo speed is unknown, defaulting to 1000 [ 943.254690][T28470] loop4: detected capacity change from 0 to 128 [ 943.264071][T28470] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 943.280994][T28470] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 943.316330][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7039'. [ 943.325360][T28474] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7039'. [ 943.350723][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 943.381329][T28476] loop5: detected capacity change from 0 to 512 [ 943.392067][T28476] EXT4-fs (loop5): orphan cleanup on readonly fs [ 943.400757][T28476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7041: bg 0: block 248: padding at end of block bitmap is not set [ 943.440795][T28476] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7041: Failed to acquire dquot type 1 [ 943.457053][T28476] EXT4-fs (loop5): 1 truncate cleaned up [ 943.484564][T28476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 943.503223][T28476] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 943.526287][T28476] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 943.551230][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7044'. [ 943.560371][T28488] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7044'. [ 943.573304][T28483] loop3: detected capacity change from 0 to 512 [ 943.622268][T27066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.651722][T28483] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 943.692055][T28483] EXT4-fs (loop3): mount failed [ 943.726892][T28493] loop6: detected capacity change from 0 to 8192 [ 943.741259][T28501] siw: device registration error -23 [ 943.875358][T28517] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 943.905222][T28517] SELinux: failed to load policy [ 943.945235][T28493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17954 sclass=netlink_route_socket pid=28493 comm=syz.6.7045 [ 944.126614][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7054'. [ 944.187137][T28534] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 944.249974][T28538] loop4: detected capacity change from 0 to 512 [ 944.273681][T28538] __quota_error: 130 callbacks suppressed [ 944.273719][T28538] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 944.293220][T28538] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 944.343062][ T29] audit: type=1326 audit(1749183889.081:68399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.367075][ T29] audit: type=1326 audit(1749183889.081:68400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.393015][ T29] audit: type=1326 audit(1749183889.081:68401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.416814][ T29] audit: type=1326 audit(1749183889.081:68402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.422946][T28538] EXT4-fs (loop4): mount failed [ 944.440743][ T29] audit: type=1326 audit(1749183889.081:68403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.440805][ T29] audit: type=1326 audit(1749183889.091:68404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.440837][ T29] audit: type=1326 audit(1749183889.091:68405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.440884][ T29] audit: type=1326 audit(1749183889.091:68406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.440931][ T29] audit: type=1326 audit(1749183889.091:68407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28542 comm="syz.1.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75cb5ae929 code=0x7ffc0000 [ 944.610628][T28547] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7066'. [ 944.620084][T28547] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7066'. [ 944.836902][T28564] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 944.957208][T28575] loop5: detected capacity change from 0 to 512 [ 945.024333][T28575] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 945.043964][T28575] EXT4-fs (loop5): mount failed [ 945.178846][T28593] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 945.368821][T28603] loop5: detected capacity change from 0 to 512 [ 945.406199][T28603] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 945.425939][T28606] loop6: detected capacity change from 0 to 512 [ 945.434889][T28603] EXT4-fs (loop5): mount failed [ 945.495604][T28606] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 945.516463][T28606] EXT4-fs (loop6): mount failed [ 945.568868][T28620] netlink: 'syz.5.7097': attribute type 5 has an invalid length. [ 945.585218][T28621] netlink: 'syz.5.7097': attribute type 5 has an invalid length. [ 945.610463][T28626] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 945.747370][T28632] loop3: detected capacity change from 0 to 128 [ 945.755794][T28632] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 945.769894][T28632] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 945.840152][T27714] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 945.893466][T28621] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 945.908248][T28637] loop3: detected capacity change from 0 to 512 [ 945.943021][T28643] siw: device registration error -23 [ 945.946877][T28637] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 945.969113][T28637] EXT4-fs (loop3): mount failed [ 946.029504][T28652] loop6: detected capacity change from 0 to 512 [ 946.039047][T28654] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 946.060254][T28652] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 946.074341][T28652] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 946.096909][T28652] EXT4-fs (loop6): 1 truncate cleaned up [ 946.103203][T28652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.282205][T28665] loop3: detected capacity change from 0 to 4096 [ 946.289363][T28665] ext4: Unknown parameter 'fowner' [ 946.316094][T28665] lo speed is unknown, defaulting to 1000 [ 946.848047][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.681907][T28689] loop6: detected capacity change from 0 to 512 [ 948.307972][T28689] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 948.358425][T28689] EXT4-fs (loop6): 1 truncate cleaned up [ 948.365251][T28689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.740194][T28699] lo speed is unknown, defaulting to 1000 [ 948.852708][T28704] bridge_slave_0: left allmulticast mode [ 948.858793][T28704] bridge_slave_0: left promiscuous mode [ 948.864644][T28704] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.884426][T28704] bridge_slave_1: left allmulticast mode [ 948.890529][T28704] bridge_slave_1: left promiscuous mode [ 948.896390][T28704] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.911457][T28706] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 948.922753][T28704] bond0: (slave bond_slave_0): Releasing backup interface [ 948.970211][T28704] bond0: (slave bond_slave_1): Releasing backup interface [ 949.041093][T28704] team0: Port device team_slave_0 removed [ 949.071279][T28704] team0: Port device team_slave_1 removed [ 949.092230][T28704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.099739][T28704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.146956][T28704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.154436][T28704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.231256][T27921] lo speed is unknown, defaulting to 1000 [ 949.243001][T28706] team0: Mode changed to "loadbalance" [ 949.288444][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.434241][T28747] __nla_validate_parse: 9 callbacks suppressed [ 949.434291][T28747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7146'. [ 949.450276][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7146'. [ 949.459711][T28740] loop6: detected capacity change from 0 to 8192 [ 949.643939][T28774] vlan2: entered allmulticast mode [ 949.649406][T28774] veth1_to_bridge: entered allmulticast mode [ 949.659767][T28774] bridge0: port 1(vlan2) entered blocking state [ 949.666564][T28774] bridge0: port 1(vlan2) entered disabled state [ 949.674502][T28774] vlan2: entered promiscuous mode [ 949.679937][T28774] veth1_to_bridge: entered promiscuous mode [ 949.687191][T28774] bridge0: port 1(vlan2) entered blocking state [ 949.693794][T28774] bridge0: port 1(vlan2) entered forwarding state [ 949.744785][T28774] vlan2: left promiscuous mode [ 949.749739][T28774] veth1_to_bridge: left promiscuous mode [ 949.755653][T28774] bridge0: port 1(vlan2) entered disabled state [ 949.821430][T28784] veth1_to_bond: entered allmulticast mode [ 949.828059][T28784] veth1_to_bond: entered promiscuous mode [ 949.840852][T28784] veth1_to_bond: left promiscuous mode [ 949.846478][T28784] veth1_to_bond: left allmulticast mode [ 949.961607][T28808] loop6: detected capacity change from 0 to 512 [ 949.973459][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7171'. [ 949.986118][T28808] EXT4-fs (loop6): 1 orphan inode deleted [ 949.992571][T28808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.005704][ T1897] __quota_error: 42 callbacks suppressed [ 950.005722][ T1897] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 950.021406][ T1897] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 950.049407][T28808] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.062369][T28819] syz_tun: entered allmulticast mode [ 950.068976][T28819] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 950.077711][T28819] mroute: pending queue full, dropping entries [ 950.084826][T28817] syz_tun: left allmulticast mode [ 950.085557][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.148469][T28831] siw: device registration error -23 [ 950.246433][T28850] loop5: detected capacity change from 0 to 1024 [ 950.279334][T28854] loop4: detected capacity change from 0 to 512 [ 950.287550][T28854] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 950.298873][T28850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.313139][T28850] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.333708][ T29] audit: type=1400 audit(1749183895.071:68446): avc: denied { execute } for pid=28849 comm="syz.5.7188" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 950.340466][T27066] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /112/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 950.381493][T28854] EXT4-fs (loop4): 1 truncate cleaned up [ 950.387874][T28854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.395831][T27066] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /112/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 950.429375][ T29] audit: type=1400 audit(1749183895.171:68447): avc: denied { setattr } for pid=28853 comm="syz.4.7189" path="/129/bus/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 950.469544][T27066] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 950.498224][ T29] audit: type=1326 audit(1749183895.241:68448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.6.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caba7e929 code=0x7ffc0000 [ 950.509985][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.522826][T27066] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /112/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 950.530292][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.559079][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.567108][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.575799][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.583766][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.591753][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.599951][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.607829][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.615647][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.623702][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.629948][T27066] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 950.631932][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.658501][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.664616][T27066] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /112/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 950.666557][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.666585][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.702896][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.710719][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.718608][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.726577][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.734431][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.742339][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.750144][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.758193][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.766399][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.774337][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.783403][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.791549][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.799432][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.807332][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.815244][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.823169][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.831422][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.839392][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.847293][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.852572][ T29] audit: type=1326 audit(1749183895.591:68449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.6.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caba7e929 code=0x7ffc0000 [ 950.855252][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.855279][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.894872][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.902727][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.910626][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.918612][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.926700][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.934490][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.942409][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: unknown main item tag 0x0 [ 950.952319][T27066] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 950.983212][T27066] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /112/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 951.017605][ T29] audit: type=1326 audit(1749183895.691:68450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.6.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f5caba7e929 code=0x7ffc0000 [ 951.041809][ T29] audit: type=1326 audit(1749183895.691:68451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.6.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caba7e929 code=0x7ffc0000 [ 951.065649][ T29] audit: type=1326 audit(1749183895.691:68452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.6.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caba7e929 code=0x7ffc0000 [ 951.092929][T27066] EXT4-fs error (device loop5): ext4_empty_dir:3116: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 951.108701][T28866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7194'. [ 951.112337][ T6819] hid-generic 0000:007F:FFFFFFFE.012C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 951.120903][T28866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7194'. [ 951.140988][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.153299][T27066] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /112/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 951.299604][T28871] netlink: 'syz.1.7196': attribute type 27 has an invalid length. [ 951.527161][T28871] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.534363][T28871] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.773387][T28885] loop6: detected capacity change from 0 to 512 [ 951.785067][T28871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.798592][T28871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.808876][T28885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.840428][T28885] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 951.873251][T28871] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.882404][T28871] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.891504][T28871] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.900469][T28871] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.920778][T28892] 9pnet_virtio: no channels available for device syz [ 951.932359][T17855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.965348][T28885] netlink: 'syz.6.7201': attribute type 10 has an invalid length. [ 951.973901][T16928] bond0: (slave bond_slave_0): interface is now down [ 951.978672][T28896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.981203][T16928] bond0: (slave bond_slave_1): interface is now down [ 951.989658][T28896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.002511][T16928] bond0: now running without any active interface! [ 952.013017][T28885] syz_tun: entered promiscuous mode [ 952.023523][T28885] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 952.036631][ T1897] bond0: (slave syz_tun): interface is now down [ 952.052694][T17855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.064619][ T31] bond0: (slave syz_tun): interface is now down [ 952.095299][ T12] bond0: (slave syz_tun): interface is now down [ 952.100241][ T29] audit: type=1400 audit(1749183896.831:68453): avc: denied { setopt } for pid=28902 comm="syz.4.7206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 952.103916][ T12] bond0: now running without any active interface! [ 952.138131][T17855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.188623][T28887] lo speed is unknown, defaulting to 1000 [ 952.217398][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.239218][T17855] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.289373][T28887] chnl_net:caif_netlink_parms(): no params data found [ 952.298943][ T29] audit: type=1400 audit(1749183897.041:68454): avc: denied { bind } for pid=28905 comm="syz.4.7207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 952.369394][T28887] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.376809][T28887] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.388297][T28887] bridge_slave_0: entered allmulticast mode [ 952.409133][T28887] bridge_slave_0: entered promiscuous mode [ 952.418087][T28887] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.426240][T28887] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.434071][T28887] bridge_slave_1: entered allmulticast mode [ 952.441013][T28887] bridge_slave_1: entered promiscuous mode [ 952.508556][T28940] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 952.515246][T28940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 952.523431][T28940] vhci_hcd vhci_hcd.0: Device attached [ 952.566785][T28942] vhci_hcd: connection closed [ 952.568235][T28949] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 952.577806][ T12] vhci_hcd: stop threads [ 952.586247][ T12] vhci_hcd: release socket [ 952.590728][ T12] vhci_hcd: disconnect device [ 952.650516][T28953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.661614][T28953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.838323][T17855] bond0 (unregistering): Released all slaves [ 952.864474][T28887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.876064][T28887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.898365][T17855] hsr_slave_0: left promiscuous mode [ 952.904080][T17855] hsr_slave_1: left promiscuous mode [ 952.912294][T17855] veth1_macvtap: left promiscuous mode [ 952.918091][T17855] veth0_macvtap: left promiscuous mode [ 952.923685][T17855] veth1_vlan: left promiscuous mode [ 952.929131][T17855] veth0_vlan: left promiscuous mode [ 953.014765][T28887] team0: Port device team_slave_0 added [ 953.020728][ T6819] lo speed is unknown, defaulting to 1000 [ 953.022672][T28887] team0: Port device team_slave_1 added [ 953.026526][ T6819] infiniband syz0: ib_query_port failed (-19) [ 953.047891][T28887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.054998][T28887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.077874][T28945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.081792][T28887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.092830][T28945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.119849][T28887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.127164][T28887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.153469][T28887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.183769][T28887] hsr_slave_0: entered promiscuous mode [ 953.190848][T28887] hsr_slave_1: entered promiscuous mode [ 953.197150][T28887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.205590][T28887] Cannot create hsr debugfs directory [ 953.240908][T28964] loop3: detected capacity change from 0 to 512 [ 953.249112][T28964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 953.269656][T28964] EXT4-fs (loop3): 1 truncate cleaned up [ 953.279939][T28964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.308640][T27714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.333542][T28887] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 953.348098][T28887] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 953.357291][T28887] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 953.367491][T28887] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 953.442362][T28985] loop3: detected capacity change from 0 to 512 [ 953.450837][T28887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.465334][T28887] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.475944][T17855] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.483144][T17855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.494468][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.501835][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.522164][T28985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.535712][T28985] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 953.558551][T28989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.572131][T28989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.599657][T27714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.646482][T28997] netlink: 'syz.6.7233': attribute type 1 has an invalid length. [ 953.646504][T28887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.670941][T28997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 953.693137][T28997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 953.702141][T28997] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 953.714156][T28997] bond1: (slave vcan1): Error -95 calling set_mac_address [ 953.747094][T29007] bond1: (slave veth0_to_bond): making interface the new active one [ 953.756686][T29007] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 953.772315][T29009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7235'. [ 953.797847][T28989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.806735][T28989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.937633][T29033] loop6: detected capacity change from 0 to 512 [ 953.949821][T28887] veth0_vlan: entered promiscuous mode [ 953.963239][T28887] veth1_vlan: entered promiscuous mode [ 953.982577][T29033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.990954][T28887] veth0_macvtap: entered promiscuous mode [ 954.005189][T28887] veth1_macvtap: entered promiscuous mode [ 954.012229][T29033] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 954.034186][T28887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.043303][T28887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.052389][T28887] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.061463][T28887] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.067486][T29043] netlink: 'syz.3.7246': attribute type 1 has an invalid length. [ 954.070325][T28887] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.086937][T28887] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.089200][T29044] tmpfs: Unknown parameter 'usrquota' [ 954.103359][T29033] netlink: 'syz.6.7240': attribute type 10 has an invalid length. [ 954.120582][T29043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.154854][T27300] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.168463][T29043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 954.176601][T29043] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 954.189620][T29043] bond1: (slave vcan1): Error -95 calling set_mac_address [ 954.413193][T29058] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.422648][T29058] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.431960][T29058] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.441463][T29058] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.476977][T29060] bridge_slave_0: left allmulticast mode [ 954.488544][T29060] bridge_slave_0: left promiscuous mode [ 954.494538][T29060] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.509885][T29060] bridge_slave_1: left allmulticast mode [ 954.516008][T29060] bridge_slave_1: left promiscuous mode [ 954.521822][T29060] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.531087][T29060] bond0: (slave bond_slave_0): Releasing backup interface [ 954.541842][T29060] bond0: (slave bond_slave_1): Releasing backup interface [ 954.553849][T29060] team0: Port device team_slave_0 removed [ 954.562321][T29060] team0: Port device team_slave_1 removed [ 954.569116][T29060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.576783][T29060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.585221][T29060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.592937][T29060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.617876][T29074] vlan2: entered allmulticast mode [ 954.623142][T29074] veth1_to_bridge: entered allmulticast mode [ 954.645549][T29074] bridge0: port 3(vlan2) entered blocking state [ 954.652234][T29074] bridge0: port 3(vlan2) entered disabled state [ 954.660726][T29074] vlan2: entered promiscuous mode [ 954.665993][T29074] veth1_to_bridge: entered promiscuous mode [ 954.672347][T29074] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.684151][T29074] bridge0: port 3(vlan2) entered blocking state [ 954.691047][T29074] bridge0: port 3(vlan2) entered forwarding state [ 954.699240][T29084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 954.736589][ T3411] IPVS: starting estimator thread 0... [ 954.742903][T29088] tipc: Started in network mode [ 954.748131][T29088] tipc: Node identity ac1414aa, cluster identity 4711 [ 954.755191][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.759856][T29088] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 954.767333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.774513][T29088] tipc: Enabled bearer , priority 10 [ 954.786948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.805215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.817498][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.817648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.841683][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.841806][T29091] ================================================================== [ 954.841839][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 954.841853][T29091] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 954.841911][T29091] [ 954.841916][T29091] write to 0xffffffff868e8138 of 88 bytes by interrupt on cpu 1: [ 954.841937][T29091] prb_reserve+0x696/0xaf0 [ 954.841974][T29091] vprintk_store+0x56d/0x860 [ 954.841997][T29091] vprintk_emit+0x178/0x650 [ 954.842015][T29091] vprintk_default+0x26/0x30 [ 954.842039][T29091] vprintk+0x1d/0x30 [ 954.842070][T29091] _printk+0x79/0xa0 [ 954.842105][T29091] br_fdb_update+0x431/0x460 [ 954.842131][T29091] br_handle_frame_finish+0x31a/0xf50 [ 954.842163][T29091] br_handle_frame+0x5d1/0x9e0 [ 954.842196][T29091] __netif_receive_skb_core+0xaaa/0x2410 [ 954.842237][T29091] __netif_receive_skb+0x59/0x270 [ 954.842275][T29091] process_backlog+0x229/0x420 [ 954.842297][T29091] __napi_poll+0x63/0x3a0 [ 954.842341][T29091] net_rx_action+0x391/0x830 [ 954.842361][T29091] handle_softirqs+0xb7/0x290 [ 954.842382][T29091] do_softirq+0x5d/0x90 [ 954.842405][T29091] __local_bh_enable_ip+0x70/0x80 [ 954.842430][T29091] __dev_queue_xmit+0x11c0/0x1fb0 [ 954.842465][T29091] neigh_connected_output+0x253/0x2c0 [ 954.842501][T29091] ip6_finish_output2+0xa69/0xd30 [ 954.842529][T29091] ip6_finish_output+0x3a2/0x530 [ 954.842552][T29091] ip6_output+0xfd/0x240 [ 954.842572][T29091] mld_sendpack+0x427/0x6e0 [ 954.842614][T29091] mld_ifc_work+0x55c/0x840 [ 954.842655][T29091] process_scheduled_works+0x4cb/0x9d0 [ 954.842692][T29091] worker_thread+0x582/0x770 [ 954.842729][T29091] kthread+0x486/0x510 [ 954.842747][T29091] ret_from_fork+0xda/0x150 [ 954.842770][T29091] ret_from_fork_asm+0x1a/0x30 [ 954.842794][T29091] [ 954.842801][T29091] read to 0xffffffff868e8138 of 8 bytes by task 29091 on cpu 0: [ 954.842819][T29091] _prb_read_valid+0x1c4/0x920 [ 954.842856][T29091] prb_read_valid+0x3c/0x60 [ 954.842895][T29091] printk_get_next_message+0xc8/0x510 [ 954.842923][T29091] console_flush_all+0x290/0x730 [ 954.842945][T29091] console_unlock+0xa1/0x330 [ 954.842966][T29091] do_con_write+0x25c3/0x2630 [ 954.842989][T29091] con_write+0x24/0x40 [ 954.843010][T29091] n_tty_write+0x7db/0xb10 [ 954.843037][T29091] file_tty_write+0x38c/0x670 [ 954.843072][T29091] tty_write+0x25/0x30 [ 954.843107][T29091] vfs_write+0x49d/0x8e0 [ 954.843127][T29091] ksys_write+0xda/0x1a0 [ 954.843148][T29091] __x64_sys_write+0x40/0x50 [ 954.843172][T29091] x64_sys_call+0x2cdd/0x2fb0 [ 954.843199][T29091] do_syscall_64+0xd2/0x200 [ 954.843234][T29091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.843256][T29091] [ 954.843261][T29091] value changed: 0x0000000000002e51 -> 0x0000000000004e51 [ 954.843275][T29091] [ 954.843281][T29091] Reported by Kernel Concurrency Sanitizer on: [ 954.843295][T29091] CPU: 0 UID: 0 PID: 29091 Comm: syz.7.7265 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 954.843337][T29091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 954.843350][T29091] ================================================================== [ 954.869504][T29093] veth1_macvtap: left promiscuous mode [ 954.869525][T29093] macsec0: entered promiscuous mode [ 954.869542][T29093] macsec0: entered allmulticast mode [ 954.875625][T29093] veth1_macvtap: entered promiscuous mode [ 954.875650][T29093] veth1_macvtap: entered allmulticast mode [ 954.875799][T29093] macsec0: left promiscuous mode [ 954.875902][T29093] macsec0: left allmulticast mode [ 954.875916][T29093] veth1_macvtap: left allmulticast mode [ 954.955273][T29089] IPVS: using max 2304 ests per chain, 115200 per kthread [ 955.032378][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 955.032563][ T29] audit: type=1400 audit(1749183899.771:68458): avc: denied { write } for pid=3305 comm="syz-executor" path="pipe:[2267]" dev="pipefs" ino=2267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 955.032636][ T29] audit: type=1400 audit(1749183899.771:68459): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=39282 daddr=10.128.1.7 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 955.085001][ C0] net_ratelimit: 510 callbacks suppressed [ 955.085021][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.175145][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.177318][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.182053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.188096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.192580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.197870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.201700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.208195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.212688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 955.713235][T29104] bond0: (slave syz_tun): Releasing backup interface [ 955.737751][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.805881][ T3411] tipc: Node number set to 2886997162 [ 955.858119][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.977923][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.037789][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.289207][ T31] vlan2: left promiscuous mode [ 956.294016][ T31] veth1_to_bridge: left promiscuous mode [ 956.300119][ T31] bridge0: port 3(vlan2) entered disabled state [ 956.307148][ T31] bridge_slave_1: left allmulticast mode [ 956.312872][ T31] bridge_slave_1: left promiscuous mode [ 956.318609][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.327591][ T31] bridge_slave_0: left promiscuous mode [ 956.333652][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.727341][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.737405][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.747360][ T31] bond0 (unregistering): Released all slaves [ 956.786046][ T31] tipc: Disabling bearer [ 956.791175][ T31] tipc: Left network mode [ 956.798531][ T31] hsr_slave_0: left promiscuous mode [ 956.804167][ T31] hsr_slave_1: left promiscuous mode [ 956.809827][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.817290][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.824863][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.832590][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.842695][ T31] veth1_macvtap: left promiscuous mode [ 956.848323][ T31] veth0_macvtap: left promiscuous mode [ 956.853933][ T31] veth1_vlan: left promiscuous mode [ 956.859347][ T31] veth0_vlan: left promiscuous mode [ 957.177675][ T31] IPVS: stop unused estimator thread 0... [ 957.451335][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.518055][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.578850][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.647755][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.709504][ T31] bridge_slave_1: left allmulticast mode [ 957.715225][ T31] bridge_slave_1: left promiscuous mode [ 957.721076][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.729074][ T31] bridge_slave_0: left allmulticast mode [ 957.734740][ T31] bridge_slave_0: left promiscuous mode [ 957.740561][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.896704][ T31] bond0 (unregistering): Released all slaves [ 957.905192][ T31] bond1 (unregistering): Released all slaves [ 958.147442][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.157360][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.167607][ T31] bond0 (unregistering): Released all slaves [ 958.176726][ T31] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 958.187050][ T31] bond1 (unregistering): Released all slaves [ 958.230586][ T31] hsr_slave_0: left promiscuous mode [ 958.236684][ T31] hsr_slave_1: left promiscuous mode [ 958.244572][ T31] hsr_slave_0: left promiscuous mode [ 958.250755][ T31] hsr_slave_1: left promiscuous mode [ 958.256635][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.264397][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.272175][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.279713][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.290227][ T31] veth1_macvtap: left promiscuous mode [ 958.295795][ T31] veth0_macvtap: left promiscuous mode [ 958.301462][ T31] veth1_vlan: left promiscuous mode [ 958.306780][ T31] veth0_vlan: left promiscuous mode