last executing test programs: 1m11.924641258s ago: executing program 2 (id=209): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0xfffd, 0x0, 0x0, 0x0) 1m11.785183137s ago: executing program 2 (id=213): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) (async) clock_gettime(0xfffffff2, &(0x7f0000000940)) (async) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000300)=0xffffff50, 0x4) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800004ac353d018e43aa70018000000062000000200003e0000000c0200e8ffffff00000000000d0000000000005f5f6100"], 0x0, 0x36}, 0x28) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async, rerun: 32) mount(&(0x7f0000000180)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (rerun: 32) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x2000020, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0xfffffffffffffb2f, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (rerun: 64) 1m11.759916748s ago: executing program 2 (id=215): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)) 1m11.73456491s ago: executing program 2 (id=216): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x1004002, &(0x7f0000000080)=ANY=[], 0x81, 0x11e2, &(0x7f0000003640)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000040)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x8000, 0x0, 0x23}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21060, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="5cb8", 0x2, 0x4040054, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x2000) 1m11.55370037s ago: executing program 2 (id=220): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) socket$nl_route(0x10, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m10.985268844s ago: executing program 2 (id=233): syz_io_uring_setup(0xec2, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x800, 0x8000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000003c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r1, &(0x7f00000001c0)='\x00', 0x9101) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 1m10.984771924s ago: executing program 32 (id=233): syz_io_uring_setup(0xec2, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x800, 0x8000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f00000003c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r1, &(0x7f00000001c0)='\x00', 0x9101) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 51.777521011s ago: executing program 3 (id=485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$inet6(r2, &(0x7f0000000380)={0x0, 0xffffffffffffff58, &(0x7f0000000240)=[{&(0x7f0000001500)="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", 0x1023}], 0x1}, 0x4004000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x1, 0x0}, &(0x7f0000000140)=0x40) 51.777183191s ago: executing program 3 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000001300004802c0001800b0001006e756d67656e000079000280080003400000000008000240fffff80108000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @random="0a5e1ea96a84"}]}, 0x54}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 51.659419628s ago: executing program 3 (id=487): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f0000000140)) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 50.810715778s ago: executing program 3 (id=501): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x0) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) 50.767796141s ago: executing program 3 (id=502): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe1, &(0x7f0000000340)=""/225}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="6105"], 0x10a) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) 49.174867054s ago: executing program 3 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) 34.140093896s ago: executing program 33 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) 17.858545001s ago: executing program 1 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x0) socket$inet6_sctp(0xa, 0x803, 0x84) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x0, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 17.648637204s ago: executing program 1 (id=963): unshare(0x20040600) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') pread64(r1, &(0x7f000001a240)=""/102379, 0x18feb, 0x6) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r1, 0x2f, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r3], 0x1}, 0x58) r4 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) 17.249695767s ago: executing program 1 (id=973): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (fail_nth: 1) 17.021440041s ago: executing program 1 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206010800000000e7818e338ac0e60e0500010006000000050005000a00000005000400010000000900020073797a320000000010000300686173683a69702c6d616300"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000040)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@jqfmt_vfsv1}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") socket(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00', 0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x8800) 16.933925706s ago: executing program 1 (id=980): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000017c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1000800, &(0x7f0000001940)={[{@nojournal_checksum}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@i_version}, {@sb={'sb', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0xa}}, {@errors_remount}, {@grpid}, {@usrjquota}]}, 0xfe, 0x476, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) fcntl$setown(r2, 0x8, r0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) tkill(r0, 0x13) 16.637361693s ago: executing program 1 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x894a, &(0x7f0000000040)="a6cce58cd7f1c38afbf14b29b86e3a") unshare(0x22020400) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close_range(r1, r0, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x16, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0x1265, 0x0) 16.615243245s ago: executing program 34 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x894a, &(0x7f0000000040)="a6cce58cd7f1c38afbf14b29b86e3a") unshare(0x22020400) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close_range(r1, r0, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x16, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0x1265, 0x0) 8.397566447s ago: executing program 5 (id=1050): setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "113b95351361d704aee3df2c9c739b93ecb9be2acb3a84d3a7cf2c82005be2b1", 0x8, 0xfffffff7, 0x5, 0x33f}, 0x3c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xfffffffb, 0x0, 0xb2, 0x10, "1ba30c9382000100000000e6ff00"}) r1 = syz_open_pts(r0, 0x20800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x1, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4, 0x0, 0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 7.518331198s ago: executing program 5 (id=1063): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, &(0x7f0000000240)) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000003940)=""/4041, 0xfc9}, {&(0x7f0000000e80)=""/4115, 0x1013}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000180)=""/72, 0x48}], 0x6}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffff, 0x0) r6 = accept4(r5, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80, 0x80000) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000200)={0x8000000000000000, 0x4, 0x1, 0x0, 0x0, [{{r2}, 0xfffffffffffffff9}]}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f00000002c0)="8a", 0x1}], 0x1, 0x6) sendmmsg$unix(r5, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1, 0x0, 0x0, 0x24004080}}], 0x1, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x6, 0x3, 0x2, 0x6}, {0x800, 0x8, 0xd, 0xf5}, {0x800, 0xe0, 0x4, 0x8}, {0x400, 0xc8, 0x0, 0xfffffffe}, {0xb, 0xff, 0x16}, {0x6, 0x3, 0x4, 0x200}, {0x9, 0x9, 0x8, 0x6}, {0x1, 0x0, 0x2, 0x5}, {0x9, 0x5, 0xf7, 0x81}]}) 7.233533055s ago: executing program 5 (id=1064): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) epoll_create(0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00008f00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040), 0x8) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) tkill(r3, 0x12) wait4(r3, 0x0, 0xe000000b, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') writev(r5, &(0x7f0000000c80)=[{&(0x7f0000000100)="e7ffd9", 0x3}], 0x1) 7.226863145s ago: executing program 5 (id=1065): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="82ca20b70ca8267d7751f13fcaa54220d7be737c71c2ffcf539d322a5ff65e827eea60f94795643664ceeeadc3daeede68423712127ac66f4e5e1d8d4bad860ecf44b810cf9598ec636b1409ede42771a0dd5f25aa48c5e004e54e352e0946b249957cce65904b7c91df7da7660cd9d738dc4be9eea7953930996a5a32a535ebb002c54985f19f15", 0x88}, {&(0x7f0000000140)='J', 0x1}], 0x2}}], 0x1, 0x4404c880) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000a0000000400000008000013040000000a00000c06000000050000000300000001040000050000000b000000d17a0000010000000900000001000000060000000d000000ff070000ff010000020000002f000000030000000e00000030000000050000000c000000030000000d000012005f61005f"], &(0x7f0000001dc0)=""/3, 0x8e, 0x3, 0x1, 0x6}, 0x28) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000001"], 0x108}}], 0x2, 0xc040) r2 = io_uring_setup(0x516, &(0x7f0000000540)={0x0, 0x7dc6, 0x1, 0x503fa, 0x8100014a}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000340)={0x90000019}) getsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0x4) close_range(r2, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000340)="927900e0", 0x4, 0x3b00, 0x0, 0x0) 7.204385787s ago: executing program 5 (id=1066): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=@newchain={0x118c, 0x64, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xfff1, 0xfff3}, {0x6, 0xffff}}, [@f_rsvp6={{0xa}, {0x4dc, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xb, 0x8, 0x3, 0x4, 0x6000000, 0x1e774130, 0x1, 0x2, 0xe, 0x7ff, 0x3, 0x3, 0x2, 0xc5d, 0x80000001, 0x7, 0x1, 0x10001, 0x9, 0xa, 0xf, 0xd4, 0x80000001, 0x93, 0x1, 0x3, 0x662a, 0xe6e, 0x5, 0x7fffffff, 0x9, 0x55, 0x3, 0x7fffffff, 0x1, 0x3a, 0x9, 0xf65, 0x8e10, 0x3, 0x5, 0x2, 0x1ff, 0x6, 0x1, 0x80, 0x4, 0x1, 0xfffffff7, 0xfffffffe, 0x6, 0x1, 0x7fffffff, 0x1, 0xfffffff1, 0x50, 0x400, 0x9, 0x0, 0xc0000000, 0x2, 0xc2, 0x81, 0x8, 0x3, 0x3, 0x8, 0x7, 0x8, 0x1, 0x1, 0x0, 0x65, 0x8, 0x8, 0x8001, 0x6, 0x5, 0x7, 0xad79, 0x1ff, 0x1, 0x625b, 0xe, 0xefe1, 0x0, 0x10000, 0x9, 0x401, 0x773560dd, 0x8, 0x80000000, 0x444, 0x5, 0x100, 0x3, 0x3, 0x7ca, 0xb986, 0x3, 0x4, 0x6, 0xdf6, 0xffffffff, 0x5, 0x2, 0x3, 0x0, 0x6, 0x7fff, 0x87a, 0x7, 0x10, 0xf, 0x0, 0x7f, 0x8, 0x8dff, 0x7, 0xeca, 0xdc, 0x82, 0x99f, 0xd, 0x5, 0x1000, 0x4cc5, 0x4, 0xe, 0x4, 0x8, 0x7, 0xa9c2, 0x7, 0x8, 0xc, 0x1, 0x1cb6c9f2, 0x3c7, 0x8df3, 0xffff0001, 0x2, 0xdd6e, 0x2, 0x9, 0xffff, 0x101, 0x2, 0x2, 0xfffffffe, 0x9, 0x6, 0x2, 0x10000, 0x9, 0xa7f, 0x6, 0x5, 0x9, 0x6, 0x8, 0x100, 0x700, 0x100, 0x1, 0x7, 0xa, 0x100, 0x69, 0xf, 0x7, 0x4, 0x10000, 0xce0, 0x1ff, 0x280, 0x4, 0x7, 0x4, 0x4, 0x8, 0xd6521d2b, 0x5, 0x1, 0x8f5, 0xcd, 0x3, 0x1d, 0x1000, 0x8000, 0x0, 0x1, 0xa, 0x9, 0x4, 0x9, 0x4, 0x400, 0xffff, 0xe15cc8d, 0x3, 0x1, 0xfffffb31, 0xb, 0xffffffff, 0x0, 0x10000, 0x6, 0x6, 0x10001, 0xffffc6e8, 0x1, 0x2f7, 0x81, 0x1, 0x9, 0x6a, 0x1ff, 0x4, 0x4, 0x1, 0x26b5, 0xd1df, 0x6, 0x8, 0x6, 0x5, 0x6, 0xe, 0xb271, 0x128, 0xffffffff, 0x4, 0x2, 0x800, 0x7fff, 0x65, 0xc58, 0x1, 0xffff, 0x5, 0xd9e7, 0x7, 0x1, 0x6c1, 0xe1a0, 0x8, 0x8001, 0x6, 0x7, 0x8, 0x92d, 0x42c2, 0x4, 0x4]}]}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x1, 0x8ba}, {0x2, 0xecf, 0x87}, 0x5e, 0x1, 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x8, 0x49efca6b}, {0x5, 0xa9, 0xfffffff7}, 0x89, 0x0, 0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0xc}}, @TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_ACT={0x4c, 0x6, [@m_gact={0x48, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2075, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x98d, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @f_rsvp={{0x9}, {0xc74, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xd}}, @TCA_RSVP_ACT={0xc60, 0x6, [@m_mirred={0xc5c, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0xc2f, 0x6, "52cd702483254544279c69bf4b0f4639eea4c13e86b1f4c56b9e9df1c29d6a4269575cf5a1f905a750b5f8c7cf1db4562ce34d7e0223f6383df47fd3328156cbf724aad01dbf5cae9c940e650a152544135be11cf8fad519a419175da58b24b86759a60230cbbdaa3c18b32408e77888ce55eea58b011b708e1c44ed1e43ddc28eb35fc44272c79638d2d63415cf47ed820e0177447c71aa3e67d1c3070236b60f34c67f50f4f61e9fb2b07b872dd7109686659f601eda69e5649b3c7ff0d0395b77c807fb5d45e9b6546778341d2574a618a5d8f0223caa3dfe7e293134ce5188ddd8dfce05a0198612c8f3d6137e6a44131d71ceea69aa538857da27596e58140d13216fa2ea078cdba426cc6c874950fa91206cf74955b25024321fd3cf90f86813ba1e778efe919bee130658b5192036b88607a68da8c8b9ce67cc3a34c1b5e6d46ec9f804d20e04fee48f6bd3c324313e7ca2d5dce123ffe5524840ea904c0500ad3c89ebeb820a75bdd359560dfc1ecf570bca978d11ea6734d049f699cbcbcd81fa422ea3bf6edd0c420094f600ee5abd5e259218a6efbab7fa17f80f1885d9ff2717a57b15b1d2cfb90e8dc51bdfb00ef0be8c44243ec5f333a7fca1e0c916cef33be0ff2a29a6bb0419c9e564dcdb4246768246f9b938d73fda7a9b7aa46ee0c6bce725afe1fc8b1b90eb09a7d5477467751284fea06851daacc78628d8142d69854db4cac5254c1afe79904985dd0510638d93d4ac7235f5916190f2d99e1ab28e6542d3449da5ad5d5c5673f244294eab5ee2deaa447c55a0da1bea60cf43af8612d44d142f4b26819ff59ed437d30c37834e75d624b684eee126909456c2a1e819037e8cbe31618e7ad9350e43865e314e568920fc385b3d9bbf65591371501172e7430ab13651859f227c194acfa5f17a6b973e41108e98cb8c1aabbf777cbbd32fadb555c5cd205b0b6bfaa1d2fafd3149952c0e785bdec7f51ec1e2e0daae68c95cd862cedbac2fcaf7ce6fa2cf0fac6e1c6e16c4ffe1db5799c4a01eb40d0dba19cfed4ea786c8fca97b1cb25c3867258d80a4038e5146fa3e6e5497685e94b137ae1cef7fb1bc5d0c8d78754b44ee32196501a43ceb38d407118dd962564d44e83b25a7521a0508a898b28f3cef38a241526eced97caee4334cd1122eefc4e5f4a79e1a8fd40a1e2f08d19e2d1830655ca5ef56a495d9b303b1f5a776f73f102919fdf1230c38312021b4c3b9eb3dcc54a2bfdd04301f734149c861feec2fe0f1783402901057bbf51ddf1a17ddb93ba111717e7185465508518713c8a9c488709622d17c625cefbe5928624d599df72e93079d06b7b1a8106ca7de5be5e8b4540ae9e2d2b1ebc313ee18eeab723c79b3c30c3317d145fb96c44f6ae4fdb26bdcfa7b59c594d8dc46f381ff434626b3aad486e8659f95e081837a43ca02b37cd7604f5e121c1661daee7d4455f5a2b8f0fca250977b539d27235c6bb12b44185bbf2005bd05d09cb0e353d350e49d47fd21136482cdb580ac1778794c2314e8833ede895ec48656b97ac139884173c2855cf978c6575b32f744353b237accfb2b82f209551d262239e0b6060a038a14bd9c4ef282849c2b0abf3b67511e2e1110f1476d3a608692658572170d5cce0e8a36f48aa26b2c421cc5608fa129b20650d05c98ff107be5294024944b4bf8395f944ca7c05d89ec84151bc94a665c1b83ecc4682c8090e7b653f3050faa3b72d55042451f6e70501c275f69ff1e5a7f8465f95db8b7f3c215e094f45b5e694aaa1e0a09f19020f388056bfebb1775d368ff995309c1aa01da23557440fc4b48a9e5d8ab3cd9113522bdcf57f3bdbffe9052ca7dfdc7464b6b96c52c7a5d9a6086728420e7995d6960510107e15d9fb616eb6fbbea4aca5efbc9cad5b1b349a26827426cdaa4bfc4c40d1129981cf3aa71a24c782a83b568c06fb9808011ace5602c262ef48df12d34c6b9195c5847734fe243a10c888c45c3bd4e77568ac170637fbf21e9e945badf3798a106d142c2b62850845ead895c4aed648ea7d28f0fac3f27012ed8c47e961fe79b8b8a5b21525c866fb3f98fa90e39d8d4b58732b0bd43cac9984bf4d2307fb5f1f13f8b2dea0953d3557629666efc417747b85afc90f5e46be2ff0cfc139df45c9e1fe7d9e0cdef866c4d80df4cb068b857580ea366709d9f0bba69bb6d8102b15929b1a05392c8ab5c289d24233bab7bca2f3773c29c85e24e42c3dc0fbb00a92a2dc9765a01cb49b4bf76a35ce251454e08114a8b9dd3d55b802a4be2760c95d765302002b8855489f10599b34152671f3ad5e3a713f3e3f47e20dc8b1cda6aacc42908a58132e434c42aa211879a09fef99f45946347c56ec208395d3c369a9b6b7244ae41081de56f40ff34a07120e27a94c71eafa116dbbadf80a07f29870874cdba919e497c1e54fbfe5f4c25f29e169e18bda14f09f450249a6949a029f3e49943a205b0042a1fde5958a397c24ebf4d1563df94f53e82b9462ccf8be3a0f9bfaacced8ee37b5ee4363c38313fa89658466d2d74afe4f53a04f4677ab21eb47392902bd8ca209ca2200e6086125b959c86f095d7e719cd78ba4b82a4aa9924aebbd9bbfa3e9a4205d8bda4b05c0893787495640bbddad4b2fea9c7e10c5cc4db7a4a24f1dd960581056f37ea4d9123add906db63c22d9a26285683994524de3965357291f0aa3ac98c73504855c84624b07a2aa11a7e912e8bf3128f7b679dafb531041e3210382104022712e74ee50ddb6cf0aee3c2a534040c46ca093dd524066a6a28cc9a9122a0f05900a998b5592de7b8cd3e0a10822fc41966814ae68aeefb01435b918096e857b8c1f7b3b454fcc261269aee6fd9bd90f0449e949082043eb363f3a2c8df0333905d33b530086ceaf4eebcbc40dc7b5624d3bdca03b8aba2f49d28a8739f483dcc3b2f3a516531d55af47115146ed2a0c4527851e7c2869044692d5e4333e7b68df9eb63f4203fb1bd26dd3ea63e1875b2004e7bef6c584184eb770b5ab4ffae127f39646a6742eae8c4fc9700c1ef8672e8447742c3006cce86c0eacbbf4a6402fe63745c52fb02bb54df326e17d94773fa728391bd7eb1457455daf4358a6d4557de8479e83b5305d979b23b84037a0fbce94c7f051094f24437d5c83ee7465faee94412b8cc1a5d4e1c4bbb6eadbccac4ac6dc2bdffaf1a9d010334b293b75f23647be92c1f5243c7b21e9abaf3258d535d6226f9023dcb7f0c092e6e0e5e021127182858a0b4e0ca3fad82487f835d1866a783eb9a0a33700c11b83e3cc87b1772d4691c764df1fd9178cd0d0892def62f13d3950737865f1e90f46ec7753887a1389ffc2666243aa7b0178960b642719ae4239eed2d40a0a23b22dd7a51a7f2a8e5d435da85b634d06d455fa96628c49eedd8fdf86ec2b2e4993a21cf500d8444da13c9b49644b69f8d63850bcd08ad988823172bb7fcfaee213846d57df8cf0206fb0552e3bc034e2a8df2df524f51b4a25ff3325f45e2707f3440f43b655c4e0cfa580cebf7b472d1fcf1956ae0a4d2c87d78ee3eab4df9571447e1fe05208cf29272382950341b9331c0a6a647da8b022b9f5d237175d7eb3f9ebc1a3775a142700165f2ebaf42b13d337b54280b4ffc3d2fc30bdcad65d0cf2238d98307b01b01b1d252d7727b1d93e803552efd61595e581877904d8e120fb565c154d5a9e367d057695e204d8e6ab2ffb8bad61b31baa33bd9ca17dc6f8f1bbdf1137627cbed8f89e11bfd5de3189e339f2464bcac9e80d8ce23dfdd430c8e9d75a258fff0520ad3526234c8f9080cc194a285d62b9c9a59f8ff7115e2c14a3c98c7f4108ca962c9e8ded938955f50bb887e474bf1725447d7cf340ea8de8ca1f1d288b51e0aa2dd1a23427a714023c66624a9d390d0fbc4db72b89f3d904655976944192f1b787aaa938a80676fed8f55f878a31eaf10247e9da50e0fc9bc2debfd265e04ea66f362fdea28136f4319cbd720c221488095583722840af02579da02124f61b50a49215af9f8203e7ddf039d307573d90060ecefd975b0cf279f627992784b857daa5b3f426b29cc02dbf214b138d0dc6a0d23e86a2a7bfd781001c9e1ef448a5b581ca409c45fb80f9e1a09791daab6879abd52280e15215466aeb6963926c914cdcacbb458ab5115207b6cd16cd2855a4159b181c5bc67cf82fa1b43bd7528c3007d32a7222c6b21007f0a61d9342b978f098980155b73daa1637a272c20274cdafe0b9fa1540887f2c9b671758e1c0211a0cc08dbb4921073d4eb6984e75984910891114502c29b135e4401cc3c47462f77a481acb8ad446b8725fa7e9f2401f4e081ecd09b02a80f7d3cb2c8bef71cc538446e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x118c}}, 0x20000000) faccessat(0xffffffffffffffff, 0x0, 0x5) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, r4, 0x0, 0x262) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000090000006b1121000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_hwaddr}) 7.124231842s ago: executing program 5 (id=1067): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) listen(0xffffffffffffffff, 0x9) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000"/51, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54bd001cb1"], 0x0) 4.42221187s ago: executing program 4 (id=1076): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, r0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) process_vm_writev(r2, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 4.025800273s ago: executing program 4 (id=1079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010100}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x200000, 0x1ffffe, 0x238e, 0x2, 0x10000, 0x6}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) capset(&(0x7f0000000240)={0x19980330}, &(0x7f00000002c0)={0xb49, 0x6, 0x7fffffff, 0x1, 0x2, 0x9}) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4800000010000100000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x14000044}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000000100)={0x0, 0xb88d, 0x410, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x40508200, &(0x7f00000004c0)="963ab3c748a4fa19e057cb7ebfd356d1b89f59c6e88dd3531a6b7097367d5b590d0e1fa1352203020eee6d8374550f931d3875fb651d933daab333d8eb23fd38b99fb36ad219aa83b94b00"/85, 0xaa, &(0x7f0000000180), &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') preadv(r7, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x38, 0xc51a) socketpair(0x1a, 0x1, 0x6, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd88}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x300, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 3.876380122s ago: executing program 0 (id=1081): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r2 = socket(0x2a, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000040)=0x4, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100050000000000040005000000000010000500000000002000020007000000"], 0x24, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1089e, &(0x7f0000000100), 0x1, 0x51d, &(0x7f0000000200)="$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") capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/4096, 0x1000) 3.512743304s ago: executing program 0 (id=1084): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.415777709s ago: executing program 0 (id=1087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000149"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a09"], 0xd4}}, 0x8818) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200444d4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)="b2587e86183f7a8de8a79f4f4621a1d28975c1767f6b9b51d3e8daf2dd263127ae25654b98fdebba42475f1597f86e46239a074106cd", 0x36, 0x40, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.996955564s ago: executing program 4 (id=1090): r0 = socket(0x15, 0xa, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r0], 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) connect$packet(r2, &(0x7f0000000140)={0x11, 0x7, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'trylock', ' ', 'none'}, 0xd) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001880)={{r1}, "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"}) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 2.498826993s ago: executing program 0 (id=1092): r0 = syz_io_uring_setup(0x6e92, &(0x7f0000000140)={0x0, 0xb17, 0x2, 0x3, 0x20f}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x100000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x16, 0x6}) 2.498357383s ago: executing program 0 (id=1093): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xb9fc, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x200000081, 0x40a101) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x23155778fd062d83, 0x3, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000000)='2', 0x1, 0xffff) fallocate(r5, 0x10, 0x7, 0x10001) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_hci(r7, 0x0, 0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_create1(0x80000) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x85cb}}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.361578741s ago: executing program 4 (id=1095): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_secret(0x80000) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x7, 0x8, 0x5, 0x0, 0x101, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x5}, 0x400, 0x10, 0x1000, 0x7, 0xe, 0x4, 0x8, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200f67f, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d022b00000000dbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) 2.173602752s ago: executing program 4 (id=1098): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.116597605s ago: executing program 0 (id=1109): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 2.045311129s ago: executing program 4 (id=1101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x10, 0x9}, {}, {0xfe}, @raw32}], 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x293491bf}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x38}, 0x20000004) 1.983767973s ago: executing program 6 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000149"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a09"], 0xd4}}, 0x8818) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200444d4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)="b2587e86183f7a8de8a79f4f4621a1d28975c1767f6b9b51d3e8daf2dd263127ae25654b98fdebba42475f1597f86e46239a074106cd", 0x36, 0x40, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.330487352s ago: executing program 7 (id=1106): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) setns(r2, 0x66020000) io_setup(0x2, &(0x7f0000000080)) r3 = memfd_create(&(0x7f0000001e40)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97x\xdb\x8a\xc8\x8b\x9c\xffr\xeb\xf1\xac\xfb\'@\xeb\xeb\xbfwOK\ae\xd5}\xea\xf7#b\a\x9b\xea\xe0\xfa\xb5T\xe98\x80eR)X\xce\xeaW\x11h\x9f.\x8e\x10U\xc2,t\x82\xe0\x1c\xd7\x02\xc0UY\xce\xd9.\xeb\xa8\xbe\xfe\x02]\xb2\xa8\x84`&\xf4o\xabLY\x01#O\xa6&v<\xb5\x94\xb3\xda\xb2!w\xedF\xe3\xe1fz/\x10\xb3\xed\xdcZ\xb7\xd4\x8bob\x91W>~\x8b\xd3I\xe8 Fn\x02\x910\xef\xda\xae\xf8\xf3\xef\x9cUe\xebj\xe7\xa6\x14\xedl\xd8q\x83\x84\xa7Y\\\f/!\xeb\xebI\xf0\xbe\xa6\x9cK\x99U\x8e\x12F[\x87\x17\x93\x8c\x86\xfe]\xf7\x02\xf5\x86XA\xcd\xc3\xcd2\xc8\xd3\x82\xcfU\x05\xaf', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xff67) lseek(r3, 0x0, 0x3) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000007000000000001000200000000020000", @ANYRES32=r2, @ANYBLOB="8707000000000000000000000000000009003900e98aafd6ca7dabded56264e0845826505ed1e5dbd0b026f437d9509866da", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000002000000010000000c00"/28], 0x50) socketpair(0x27, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xc, 0x8, 0x9, 0x5, 0x0, 0x5d31, 0x500, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x3205, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x9) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000ffe500000000000000000000000000440fd000f07b7bc79585a455a69ed7182b29929412708d282c00ad93c646907a30f13acb7ed1c17ec9d77916401e633fa71f63441f0a3ec353a86f0d70940000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000200400000018f7b2370b4db00000000009645d4d16d", @ANYRES64=r4, @ANYBLOB="7eb6196f56b3dc4515102bf008bcc2a795e951540c54c7db1f2317098fef9810f85de5894915acb796a1db3b328684fe864ef5dba700e6b500a4ed0700eab39a0aef12a1afec08531026e5bf6bb7d943b7550c67fb7b84cb3ae9d53581cdd4d7a8808a26e3ea9e3dbdae7e4faf48d76b101a6e4eb68af3245575399079e1d7251ca4c800007d85f2f831be8bdfc3be4b6df30ca7c794e782694f48472435b7e763a3f11518a89ada340870c27bf774e781f7c100"/189, @ANYRES32=r5, @ANYRES8=r4], &(0x7f0000000180)='GPL\x00', 0x10d, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xfffffdec}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e55dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0) close(r4) 1.18149136s ago: executing program 7 (id=1107): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r7, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) close_range(r5, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 1.117540614s ago: executing program 6 (id=1108): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001080) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_cmd={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, [0x9]}}) ptrace(0x10, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="620ac4ff0000000071101a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) mbind(&(0x7f000017e000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000180)=0x4, 0x8, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, 0x0) 735.331696ms ago: executing program 6 (id=1110): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 664.224711ms ago: executing program 6 (id=1111): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 596.140604ms ago: executing program 6 (id=1112): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r2 = socket(0x2a, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000040)=0x4, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100050000000000040005000000000010000500000000002000020007000000"], 0x24, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1089e, &(0x7f0000000100), 0x1, 0x51d, &(0x7f0000000200)="$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") capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/4096, 0x1000) 426.318615ms ago: executing program 6 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000004c0)='./file0\x00', 0x200000, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 356.855428ms ago: executing program 7 (id=1114): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0xf3f, 0x4) 311.479242ms ago: executing program 7 (id=1115): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf4}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x73}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf4}}, 0x0) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000040)) (async) io_setup(0x3ff, &(0x7f0000000500)) (async) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x73}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 37.432697ms ago: executing program 7 (id=1116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0xc, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[], 0x0) 0s ago: executing program 7 (id=1117): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x8000000}}, {0x28}}}}, 0x3b8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x5) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22c004c, &(0x7f0000001240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@quota}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}], [{@pcr={'pcr', 0x3d, 0x12}}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, 'state\x00'}}, {@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r2, 0x0, 0x1000000201008) r5 = gettid() ptrace$setopts(0x4206, r5, 0xfffffffffffffcab, 0x3f) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r6, r6, 0x0, 0x800000009) mkdir(&(0x7f0000000040)='./file0\x00', 0xb1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r8 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffffffffffd, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) write$binfmt_script(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): JBD2: no valid journal superblock found [ 66.404534][ T5314] EXT4-fs (loop1): Could not load journal inode [ 66.410988][ T5329] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.606918][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.674902][ T5343] loop5: detected capacity change from 0 to 1024 [ 66.698097][ T5343] EXT4-fs: inline encryption not supported [ 66.704793][ T5343] EXT4-fs: Ignoring removed nobh option [ 66.710358][ T5343] EXT4-fs: Ignoring removed bh option [ 66.723924][ T5343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.802924][ T5349] EXT4-fs: Ignoring removed orlov option [ 66.808856][ T5349] EXT4-fs (loop5): can't enable nombcache during remount [ 67.512786][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.580524][ T5358] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.549'. [ 67.790141][ T5363] loop5: detected capacity change from 0 to 512 [ 67.814370][ T5363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.832063][ T5363] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.918007][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.471864][ T5381] bond1: option mode: unable to set because the bond device has slaves [ 68.512176][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 68.788070][ T5289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.935592][ T5403] loop1: detected capacity change from 0 to 512 [ 68.947030][ T5405] ip6gre1: entered promiscuous mode [ 68.952606][ T5405] ip6gre1: entered allmulticast mode [ 68.988951][ T5401] 8021q: VLANs not supported on ip6gre0 [ 69.037127][ T5413] loop1: detected capacity change from 0 to 512 [ 69.055939][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 69.055955][ T29] audit: type=1400 audit(1769746091.100:669): avc: denied { connect } for pid=5404 comm="syz.4.564" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.092314][ T5413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.105177][ T5413] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.124945][ T5416] bond1: option mode: unable to set because the bond device has slaves [ 69.200863][ T5405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 69.210983][ T29] audit: type=1326 audit(1769746091.160:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.234405][ T29] audit: type=1326 audit(1769746091.160:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.257662][ T29] audit: type=1326 audit(1769746091.160:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f958fcfc747 code=0x7ffc0000 [ 69.280787][ T29] audit: type=1326 audit(1769746091.160:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.304074][ T29] audit: type=1326 audit(1769746091.160:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.327200][ T29] audit: type=1326 audit(1769746091.160:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.350461][ T29] audit: type=1326 audit(1769746091.160:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.373908][ T29] audit: type=1326 audit(1769746091.160:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.397330][ T29] audit: type=1326 audit(1769746091.160:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 69.460581][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.534761][ T5442] tipc: Enabling of bearer rejected, failed to enable media [ 69.645527][ T5458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.582'. [ 69.684929][ T5459] loop4: detected capacity change from 0 to 512 [ 69.697804][ T5459] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.722122][ T5459] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 69.730123][ T5459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 69.742066][ T5459] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.747939][ T5459] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.757854][ T5467] loop0: detected capacity change from 0 to 512 [ 69.770928][ T5459] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.582: bg 0: block 15: invalid block bitmap [ 69.785657][ T5459] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 69.794711][ T5459] EXT4-fs (loop4): 1 truncate cleaned up [ 69.812452][ T5459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.816142][ T5467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.851426][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.873950][ T5467] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.926508][ T5475] loop4: detected capacity change from 0 to 512 [ 69.951476][ T5475] EXT4-fs: Ignoring removed oldalloc option [ 69.991256][ T5475] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.587: Parent and EA inode have the same ino 15 [ 70.081055][ T5475] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.587: Parent and EA inode have the same ino 15 [ 70.122319][ T5475] EXT4-fs (loop4): 1 orphan inode deleted [ 70.129053][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.141146][ T5475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.176998][ T5475] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.587: deleted inode referenced: 15 [ 70.200089][ T5475] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.587: deleted inode referenced: 15 [ 70.253123][ T5485] loop1: detected capacity change from 0 to 512 [ 70.270593][ T5485] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.590: inode has both inline data and extents flags [ 70.296206][ T5495] tipc: Enabling of bearer rejected, failed to enable media [ 70.318822][ T5475] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.587: deleted inode referenced: 15 [ 70.333715][ T5485] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.590: couldn't read orphan inode 15 (err -117) [ 70.355293][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.391611][ T5485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.476016][ T5504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 70.690995][ T5511] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5511 comm=syz.4.599 [ 70.711972][ T5511] netlink: 232 bytes leftover after parsing attributes in process `syz.4.599'. [ 70.740270][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.987491][ T5533] sg_write: process 326 (syz.0.607) changed security contexts after opening file descriptor, this is not allowed. [ 71.155860][ T5539] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.610'. [ 71.250372][ T5542] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.611: inode has both inline data and extents flags [ 71.269658][ T5542] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.611: couldn't read orphan inode 15 (err -117) [ 71.321759][ T5542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.336367][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 71.384778][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.396618][ T5561] xt_l2tp: invalid flags combination: c [ 71.516546][ T5578] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.623'. [ 71.601260][ T5585] FAULT_INJECTION: forcing a failure. [ 71.601260][ T5585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.614398][ T5585] CPU: 0 UID: 0 PID: 5585 Comm: syz.0.626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.614427][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.614440][ T5585] Call Trace: [ 71.614448][ T5585] [ 71.614456][ T5585] __dump_stack+0x1d/0x30 [ 71.614484][ T5585] dump_stack_lvl+0x95/0xd0 [ 71.614521][ T5585] dump_stack+0x15/0x1b [ 71.614585][ T5585] should_fail_ex+0x263/0x280 [ 71.614619][ T5585] should_fail+0xb/0x20 [ 71.614650][ T5585] should_fail_usercopy+0x1a/0x20 [ 71.614744][ T5585] _copy_to_user+0x20/0xa0 [ 71.614767][ T5585] simple_read_from_buffer+0xb5/0x130 [ 71.614800][ T5585] proc_fail_nth_read+0x10e/0x150 [ 71.614840][ T5585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.614868][ T5585] vfs_read+0x1ab/0x7f0 [ 71.614884][ T5585] ? __rcu_read_unlock+0x4e/0x70 [ 71.614921][ T5585] ? __fget_files+0x184/0x1c0 [ 71.614947][ T5585] ? mutex_lock+0x57/0x90 [ 71.614970][ T5585] ksys_read+0xdc/0x1a0 [ 71.614992][ T5585] __x64_sys_read+0x40/0x50 [ 71.615011][ T5585] x64_sys_call+0x2889/0x3000 [ 71.615070][ T5585] do_syscall_64+0xc0/0x2a0 [ 71.615099][ T5585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.615186][ T5585] RIP: 0033:0x7f09cd1ab78e [ 71.615231][ T5585] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.615249][ T5585] RSP: 002b:00007f09cbc46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.615276][ T5585] RAX: ffffffffffffffda RBX: 00007f09cbc476c0 RCX: 00007f09cd1ab78e [ 71.615290][ T5585] RDX: 000000000000000f RSI: 00007f09cbc470a0 RDI: 0000000000000004 [ 71.615302][ T5585] RBP: 00007f09cbc47090 R08: 0000000000000000 R09: 0000000000000000 [ 71.615376][ T5585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.615388][ T5585] R13: 00007f09cd466038 R14: 00007f09cd465fa0 R15: 00007ffcca119578 [ 71.615415][ T5585] [ 71.927804][ T5604] set_capacity_and_notify: 1 callbacks suppressed [ 71.927820][ T5604] loop0: detected capacity change from 0 to 512 [ 71.950972][ T5604] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.630: inode has both inline data and extents flags [ 71.971461][ T5604] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.630: couldn't read orphan inode 15 (err -117) [ 72.004883][ T5604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.019372][ T5604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'. [ 72.059010][ T5611] loop5: detected capacity change from 0 to 512 [ 72.079257][ T5614] netlink: 'syz.4.636': attribute type 10 has an invalid length. [ 72.087057][ T5614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.636'. [ 72.092839][ T5615] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.637'. [ 72.116446][ T5614] dummy0: entered promiscuous mode [ 72.121653][ T5614] dummy0: entered allmulticast mode [ 72.127442][ T5614] bridge0: port 3(dummy0) entered blocking state [ 72.133923][ T5614] bridge0: port 3(dummy0) entered disabled state [ 72.159104][ T5611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.165310][ T5614] bridge0: port 3(dummy0) entered blocking state [ 72.178580][ T5614] bridge0: port 3(dummy0) entered forwarding state [ 72.181226][ T5611] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.331993][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.500945][ T5638] netlink: 104 bytes leftover after parsing attributes in process `syz.5.645'. [ 72.625696][ T5641] netlink: 'syz.1.643': attribute type 2 has an invalid length. [ 72.640296][ T5640] loop5: detected capacity change from 0 to 8192 [ 72.669851][ T5631] loop1: detected capacity change from 0 to 8192 [ 72.686347][ T5631] netlink: 44 bytes leftover after parsing attributes in process `syz.1.643'. [ 72.784767][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.803994][ T5644] loop4: detected capacity change from 0 to 512 [ 72.855974][ T5646] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.649'. [ 72.891163][ T5644] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 72.901936][ T5644] EXT4-fs (loop4): mount failed [ 72.963314][ T5664] loop0: detected capacity change from 0 to 512 [ 73.022039][ T5664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.063475][ T5664] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.157205][ T5676] bond1: option mode: unable to set because the bond device has slaves [ 73.202671][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.234506][ T5665] loop5: detected capacity change from 0 to 1024 [ 73.249317][ T5665] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.260288][ T5665] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.281487][ T5665] JBD2: no valid journal superblock found [ 73.287327][ T5665] EXT4-fs (loop5): Could not load journal inode [ 73.297104][ T5680] 8021q: VLANs not supported on ip6gre0 [ 73.318844][ T5686] veth1_macvtap: left promiscuous mode [ 73.328456][ T5686] macsec0: entered promiscuous mode [ 73.336327][ T5687] veth1_macvtap: entered promiscuous mode [ 73.346990][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 73.351678][ T5687] macsec0: left promiscuous mode [ 73.365273][ T5686] veth1_macvtap: left promiscuous mode [ 73.371021][ T5686] macsec0: entered promiscuous mode [ 73.377959][ T5687] veth1_macvtap: entered promiscuous mode [ 73.384185][ T5687] macsec0: left promiscuous mode [ 73.397123][ T5686] veth1_macvtap: left promiscuous mode [ 73.403091][ T5686] macsec0: entered promiscuous mode [ 73.412606][ T5687] veth1_macvtap: entered promiscuous mode [ 73.418587][ T5687] macsec0: left promiscuous mode [ 73.428119][ T5686] veth1_macvtap: left promiscuous mode [ 73.433799][ T5686] macsec0: entered promiscuous mode [ 73.441069][ T5687] veth1_macvtap: entered promiscuous mode [ 73.446990][ T5687] macsec0: left promiscuous mode [ 73.453939][ T5686] veth1_macvtap: left promiscuous mode [ 73.459559][ T5686] macsec0: entered promiscuous mode [ 73.466996][ T5687] veth1_macvtap: entered promiscuous mode [ 73.473416][ T5687] macsec0: left promiscuous mode [ 73.481158][ T5692] loop4: detected capacity change from 0 to 128 [ 74.374807][ T5712] loop4: detected capacity change from 0 to 512 [ 74.395691][ T5712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.413414][ T5712] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.445153][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.766656][ T5728] loop4: detected capacity change from 0 to 1024 [ 74.777566][ T5728] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 74.788486][ T5728] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 74.800677][ T5728] JBD2: no valid journal superblock found [ 74.806448][ T5728] EXT4-fs (loop4): Could not load journal inode [ 75.831559][ T5648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.945043][ T5734] xt_hashlimit: size too large, truncated to 1048576 [ 75.982380][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 75.982394][ T29] audit: type=1400 audit(1769746098.030:785): avc: denied { mounton } for pid=5739 comm="syz.4.676" path="/128/bus" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.029699][ T29] audit: type=1400 audit(1769746098.060:786): avc: denied { execute } for pid=5739 comm="syz.4.676" dev="tmpfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.050818][ T29] audit: type=1400 audit(1769746098.060:787): avc: denied { execute_no_trans } for pid=5739 comm="syz.4.676" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.113086][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.133830][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.294461][ T5749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.334654][ T5749] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.464569][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.505934][ T5759] __nla_validate_parse: 6 callbacks suppressed [ 76.505949][ T5759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.680'. [ 76.539921][ T5759] netlink: 'syz.1.680': attribute type 39 has an invalid length. [ 76.553988][ T5761] netlink: 64 bytes leftover after parsing attributes in process `syz.5.682'. [ 76.622533][ T29] audit: type=1400 audit(1769746098.670:788): avc: denied { wake_alarm } for pid=5772 comm="syz.5.685" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.715399][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 76.730977][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 76.760570][ T5781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.767827][ T5781] IPv6: NLM_F_CREATE should be set when creating new route [ 76.775130][ T5781] IPv6: NLM_F_CREATE should be set when creating new route [ 76.782347][ T5781] IPv6: NLM_F_CREATE should be set when creating new route [ 76.832316][ T5784] FAULT_INJECTION: forcing a failure. [ 76.832316][ T5784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.845536][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.845568][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.845597][ T5784] Call Trace: [ 76.845603][ T5784] [ 76.845611][ T5784] __dump_stack+0x1d/0x30 [ 76.845633][ T5784] dump_stack_lvl+0x95/0xd0 [ 76.845654][ T5784] dump_stack+0x15/0x1b [ 76.845809][ T5784] should_fail_ex+0x263/0x280 [ 76.845839][ T5784] should_fail+0xb/0x20 [ 76.845938][ T5784] should_fail_usercopy+0x1a/0x20 [ 76.845968][ T5784] _copy_from_user+0x1c/0xb0 [ 76.846145][ T5784] vga_arb_write+0x90/0x1450 [ 76.846182][ T5784] ? __pfx_vga_arb_write+0x10/0x10 [ 76.846268][ T5784] vfs_write+0x269/0x9f0 [ 76.846290][ T5784] ? __rcu_read_unlock+0x4e/0x70 [ 76.846318][ T5784] ? __fget_files+0x184/0x1c0 [ 76.846404][ T5784] ksys_write+0xdc/0x1a0 [ 76.846427][ T5784] __x64_sys_write+0x40/0x50 [ 76.846448][ T5784] x64_sys_call+0x2847/0x3000 [ 76.846476][ T5784] do_syscall_64+0xc0/0x2a0 [ 76.846574][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.846660][ T5784] RIP: 0033:0x7fd8326daeb9 [ 76.846678][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.846697][ T5784] RSP: 002b:00007fd831137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.846720][ T5784] RAX: ffffffffffffffda RBX: 00007fd832955fa0 RCX: 00007fd8326daeb9 [ 76.846778][ T5784] RDX: 000000000000000d RSI: 0000200000000040 RDI: 0000000000000003 [ 76.846793][ T5784] RBP: 00007fd831137090 R08: 0000000000000000 R09: 0000000000000000 [ 76.846811][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.846825][ T5784] R13: 00007fd832956038 R14: 00007fd832955fa0 R15: 00007ffca5dcb0d8 [ 76.846845][ T5784] [ 77.086492][ T5792] set_capacity_and_notify: 2 callbacks suppressed [ 77.086511][ T5792] loop5: detected capacity change from 0 to 1024 [ 77.100076][ T5792] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.111120][ T5792] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.131730][ T5774] loop0: detected capacity change from 0 to 1024 [ 77.132988][ T5789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.148622][ T5774] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.159656][ T5774] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.188821][ T5774] JBD2: no valid journal superblock found [ 77.194649][ T5774] EXT4-fs (loop0): Could not load journal inode [ 77.205131][ T5792] JBD2: no valid journal superblock found [ 77.210980][ T5792] EXT4-fs (loop5): Could not load journal inode [ 77.469471][ T5799] netlink: 64 bytes leftover after parsing attributes in process `syz.4.692'. [ 77.478672][ T5799] netlink: 76 bytes leftover after parsing attributes in process `syz.4.692'. [ 77.487741][ T5799] netlink: 76 bytes leftover after parsing attributes in process `syz.4.692'. [ 78.287775][ T5809] 9pnet_fd: Insufficient options for proto=fd [ 79.571998][ T5763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.704803][ T5821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5821 comm=syz.4.700 [ 79.711551][ T5823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.701'. [ 79.717310][ T5821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5821 comm=syz.4.700 [ 79.727674][ T5823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.701'. [ 79.755713][ T5825] netlink: 88 bytes leftover after parsing attributes in process `syz.1.702'. [ 79.773850][ T29] audit: type=1400 audit(1769746101.820:789): avc: denied { audit_write } for pid=5819 comm="syz.4.700" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.802231][ T5823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.809471][ T5823] IPv6: NLM_F_CREATE should be set when creating new route [ 79.816701][ T5823] IPv6: NLM_F_CREATE should be set when creating new route [ 79.823906][ T5823] IPv6: NLM_F_CREATE should be set when creating new route [ 79.867761][ T5830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.920179][ T5833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 80.070620][ T5843] loop5: detected capacity change from 0 to 128 [ 80.154635][ T5827] loop0: detected capacity change from 0 to 1024 [ 80.162025][ T5827] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.172934][ T5827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.211087][ T5827] JBD2: no valid journal superblock found [ 80.216856][ T5827] EXT4-fs (loop0): Could not load journal inode [ 80.253473][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.262704][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.343207][ T5847] loop4: detected capacity change from 0 to 256 [ 80.373049][ T3421] IPVS: starting estimator thread 0... [ 80.460822][ T5848] IPVS: using max 2400 ests per chain, 120000 per kthread [ 80.695402][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 80.737845][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.745042][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.753672][ T5850] bridge_slave_0: entered allmulticast mode [ 80.760132][ T5850] bridge_slave_0: entered promiscuous mode [ 80.767209][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.774360][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.782515][ T5850] bridge_slave_1: entered allmulticast mode [ 80.789000][ T5850] bridge_slave_1: entered promiscuous mode [ 80.816854][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.835877][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.847719][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.868959][ T5850] team0: Port device team_slave_0 added [ 80.880658][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.902745][ T5850] team0: Port device team_slave_1 added [ 80.919360][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.926349][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.952505][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.963987][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.970957][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.996873][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.009964][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.035236][ T5850] hsr_slave_0: entered promiscuous mode [ 81.041325][ T5850] hsr_slave_1: entered promiscuous mode [ 81.047252][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 81.053050][ T5850] Cannot create hsr debugfs directory [ 81.065535][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.149282][ T42] bridge_slave_1: left allmulticast mode [ 81.154974][ T42] bridge_slave_1: left promiscuous mode [ 81.160676][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.176361][ T42] bridge_slave_0: left allmulticast mode [ 81.182138][ T42] bridge_slave_0: left promiscuous mode [ 81.187913][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.246629][ T42] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 81.257628][ T42] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 81.345026][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.354667][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.364354][ T42] bond0 (unregistering): Released all slaves [ 81.372270][ T42] bond1 (unregistering): Released all slaves [ 81.415145][ T42] hsr_slave_0: left promiscuous mode [ 81.420895][ T42] hsr_slave_1: left promiscuous mode [ 81.426544][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.433983][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.441463][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.448824][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.458338][ T42] veth1_macvtap: left promiscuous mode [ 81.463974][ T42] veth0_macvtap: left promiscuous mode [ 81.469533][ T42] veth1_vlan: left promiscuous mode [ 81.474961][ T42] veth0_vlan: left promiscuous mode [ 81.528592][ T42] team0 (unregistering): Port device team_slave_1 removed [ 81.538964][ T42] team0 (unregistering): Port device team_slave_0 removed [ 82.090368][ T5875] loop5: detected capacity change from 0 to 1024 [ 82.097873][ T5875] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 82.108816][ T5875] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 82.119036][ T5875] JBD2: no valid journal superblock found [ 82.124813][ T5875] EXT4-fs (loop5): Could not load journal inode [ 82.664322][ T5814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.674105][ T5850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.694810][ T5850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.715192][ T5877] loop1: detected capacity change from 0 to 512 [ 82.732278][ T5850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.748120][ T5850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.761498][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.781866][ T29] audit: type=1400 audit(1769746104.820:790): avc: denied { getopt } for pid=5881 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.790869][ T5877] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.827642][ T5877] __nla_validate_parse: 2 callbacks suppressed [ 82.827659][ T5877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'. [ 82.843064][ T29] audit: type=1400 audit(1769746104.860:791): avc: denied { map } for pid=5881 comm="syz.0.713" path="socket:[13559]" dev="sockfs" ino=13559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 82.866002][ T29] audit: type=1400 audit(1769746104.870:792): avc: denied { read } for pid=5876 comm="syz.1.712" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.885806][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.888521][ T29] audit: type=1400 audit(1769746104.870:793): avc: denied { open } for pid=5876 comm="syz.1.712" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.900923][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.926358][ T5877] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.712: corrupted inode contents [ 82.941515][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.948568][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.948766][ T5897] netlink: 88 bytes leftover after parsing attributes in process `syz.5.714'. [ 82.957602][ T5877] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.712: mark_inode_dirty error [ 82.986393][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.716'. [ 82.989786][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.005652][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.017729][ T5877] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.712: corrupted inode contents [ 83.037528][ T5896] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.712: corrupted inode contents [ 83.040751][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.056383][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.072187][ T5896] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.712: mark_inode_dirty error [ 83.082618][ T29] audit: type=1400 audit(1769746104.970:794): avc: denied { setattr } for pid=5876 comm="syz.1.712" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.105008][ T29] audit: type=1400 audit(1769746105.080:795): avc: denied { create } for pid=5876 comm="syz.1.712" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 83.130776][ T5896] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.712: corrupted inode contents [ 83.133036][ T5911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.150480][ T5896] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.712: mark_inode_dirty error [ 83.170596][ T5896] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.712: corrupted inode contents [ 83.185597][ T5896] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.712: mark_inode_dirty error [ 83.202856][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.211925][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.278346][ T5925] 8021q: adding VLAN 0 to HW filter on device bond5 [ 83.321344][ T29] audit: type=1400 audit(1769746105.360:796): avc: denied { sqpoll } for pid=5921 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.493589][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 83.513151][ T5961] netlink: 2 bytes leftover after parsing attributes in process `syz.1.723'. [ 83.537213][ T5850] veth0_vlan: entered promiscuous mode [ 83.550133][ T5850] veth1_vlan: entered promiscuous mode [ 83.576463][ T5850] veth0_macvtap: entered promiscuous mode [ 83.584749][ T5850] veth1_macvtap: entered promiscuous mode [ 83.595300][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.604536][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.618523][ T5309] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.627519][ T5309] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637761][ T5309] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.648130][ T5309] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.673254][ T29] audit: type=1400 audit(1769746105.720:797): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.Hn6V3d/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.766551][ T5985] loop0: detected capacity change from 0 to 512 [ 83.776887][ T5985] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.724: inode has both inline data and extents flags [ 83.790268][ T5985] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.724: couldn't read orphan inode 15 (err -117) [ 83.802684][ T5985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.819983][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 83.940262][ T5987] loop6: detected capacity change from 0 to 1024 [ 83.950002][ T5987] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.961046][ T5987] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.980504][ T5987] JBD2: no valid journal superblock found [ 83.986309][ T5987] EXT4-fs (loop6): Could not load journal inode [ 84.005192][ T29] audit: type=1326 audit(1769746106.050:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 84.028705][ T29] audit: type=1326 audit(1769746106.050:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958fcfaeb9 code=0x7ffc0000 [ 84.125490][ T5996] loop5: detected capacity change from 0 to 512 [ 84.133439][ T5996] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.727: inode has both inline data and extents flags [ 84.147208][ T5996] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.727: couldn't read orphan inode 15 (err -117) [ 84.159431][ T5996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.248589][ T6005] netlink: 48 bytes leftover after parsing attributes in process `syz.4.731'. [ 84.289466][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'. [ 84.300280][ T6012] FAULT_INJECTION: forcing a failure. [ 84.300280][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 84.313031][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.1.734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.313066][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.313077][ T6012] Call Trace: [ 84.313084][ T6012] [ 84.313093][ T6012] __dump_stack+0x1d/0x30 [ 84.313116][ T6012] dump_stack_lvl+0x95/0xd0 [ 84.313207][ T6012] dump_stack+0x15/0x1b [ 84.313229][ T6012] should_fail_ex+0x263/0x280 [ 84.313329][ T6012] should_failslab+0x8c/0xb0 [ 84.313353][ T6012] __kmalloc_cache_noprof+0x64/0x4a0 [ 84.313377][ T6012] ? vga_arb_read+0x4f/0x3d0 [ 84.313515][ T6012] vga_arb_read+0x4f/0x3d0 [ 84.313541][ T6012] ? __pfx_vga_arb_read+0x10/0x10 [ 84.313570][ T6012] vfs_read+0x1ab/0x7f0 [ 84.313592][ T6012] ? __rcu_read_unlock+0x4e/0x70 [ 84.313637][ T6012] ? __fget_files+0x184/0x1c0 [ 84.313661][ T6012] ksys_read+0xdc/0x1a0 [ 84.313679][ T6012] __x64_sys_read+0x40/0x50 [ 84.313696][ T6012] x64_sys_call+0x2889/0x3000 [ 84.313779][ T6012] do_syscall_64+0xc0/0x2a0 [ 84.313814][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.313834][ T6012] RIP: 0033:0x7f43e9b7aeb9 [ 84.313849][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.313873][ T6012] RSP: 002b:00007f43e85d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.313893][ T6012] RAX: ffffffffffffffda RBX: 00007f43e9df5fa0 RCX: 00007f43e9b7aeb9 [ 84.313909][ T6012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 84.313929][ T6012] RBP: 00007f43e85d7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.313944][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.313958][ T6012] R13: 00007f43e9df6038 R14: 00007f43e9df5fa0 R15: 00007ffd6cb8fc88 [ 84.313982][ T6012] [ 84.561995][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.671636][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 84.736768][ T6036] loop0: detected capacity change from 0 to 1764 [ 84.756027][ T6036] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 84.799484][ T6039] loop0: detected capacity change from 0 to 512 [ 84.817783][ T6039] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 84.911542][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.016451][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.749'. [ 85.950806][ T6080] loop4: detected capacity change from 0 to 512 [ 85.960497][ T6080] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.759: inode has both inline data and extents flags [ 85.975309][ T6080] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.759: couldn't read orphan inode 15 (err -117) [ 85.987748][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.667363][ T6083] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 86.675278][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.682603][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.693336][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.700376][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.707682][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.714824][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.723593][ T6083] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.732937][ T5978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.750379][ T6083] netlink: 'syz.1.760': attribute type 2 has an invalid length. [ 86.750535][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.815721][ T6089] loop5: detected capacity change from 0 to 512 [ 86.830143][ T6089] EXT4-fs: Ignoring removed nobh option [ 86.867411][ T6089] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.873353][ T6100] xt_hashlimit: size too large, truncated to 1048576 [ 86.947140][ T6083] infiniband syz1: set active [ 86.951886][ T6083] infiniband syz1: added syz_tun [ 86.984525][ T6089] EXT4-fs (loop5): 1 truncate cleaned up [ 87.002905][ T6089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.028656][ T6083] RDS/IB: syz1: added [ 87.037025][ T6111] usb usb8: usbfs: process 6111 (syz.0.766) did not claim interface 0 before use [ 87.043757][ T6083] smc: adding ib device syz1 with port count 1 [ 87.056372][ T6116] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 87.070893][ T6083] smc: ib device syz1 port 1 has no pnetid [ 87.084441][ T6116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 87.231979][ T6116] bond4: (slave veth3): Enslaving as an active interface with a down link [ 87.249502][ T6128] 9p: Bad value for 'rfdno' [ 87.271621][ T6089] ------------[ cut here ]------------ [ 87.277105][ T6089] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 87.301705][ T6089] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.5.763/6089 [ 87.312682][ T6089] Modules linked in: [ 87.316583][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.5.763 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.326582][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.336799][ T6089] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 87.343142][ T6089] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 87.362801][ T6089] RSP: 0018:ffffc90008a1b388 EFLAGS: 00010246 [ 87.368938][ T6089] RAX: ffff88810acf5d10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 87.373622][ T6127] loop6: detected capacity change from 0 to 1024 [ 87.377023][ T6089] RDX: ffffffff867f0723 RSI: ffffffff866bb4e7 RDI: ffffffff86fb97b0 [ 87.377040][ T6089] RBP: ffff88811a8ada70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 87.384389][ T6127] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.391533][ T6089] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a8ada30 [ 87.391554][ T6089] R13: 00000000ffffdfcc R14: ffff88811a8ada7c R15: ffff88811a8ada68 [ 87.391581][ T6089] FS: 00007f958e7576c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 87.391600][ T6089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.391615][ T6089] CR2: 00007fffb77e4c58 CR3: 00000001356da000 CR4: 00000000003506f0 [ 87.399626][ T6127] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.410603][ T6089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.467679][ T6089] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 87.475710][ T6089] Call Trace: [ 87.477839][ T6127] JBD2: no valid journal superblock found [ 87.478985][ T6089] [ 87.479004][ T6089] reg_set_min_max+0x1c8/0x260 [ 87.484792][ T6127] EXT4-fs (loop6): Could not load journal inode [ 87.487669][ T6089] check_cond_jmp_op+0x13bd/0x1a80 [ 87.503865][ T6089] do_check+0x440c/0x9060 [ 87.508303][ T6089] do_check_common+0xd0f/0x1630 [ 87.513212][ T6089] bpf_check+0x2f6d/0xc7e0 [ 87.517676][ T6089] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 87.523692][ T6089] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 87.529347][ T6089] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 87.535360][ T6089] ? css_rstat_updated+0xbb/0x280 [ 87.540385][ T6089] ? try_charge_memcg+0x215/0xa10 [ 87.545413][ T6089] ? pcpu_block_update+0x232/0x3b0 [ 87.550519][ T6089] ? _find_next_zero_bit+0x64/0xa0 [ 87.555647][ T6089] ? pcpu_block_refresh_hint+0x157/0x170 [ 87.561471][ T6089] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 87.567649][ T6089] ? css_rstat_updated+0xbb/0x280 [ 87.572749][ T6089] ? mod_memcg_state+0x182/0x260 [ 87.577699][ T6089] ? __rcu_read_unlock+0x4e/0x70 [ 87.582787][ T6089] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 87.588629][ T6089] ? pcpu_alloc_noprof+0xb08/0x1010 [ 87.593843][ T6089] ? should_fail_ex+0x30/0x280 [ 87.598677][ T6089] ? __kmalloc_noprof+0x2a3/0x580 [ 87.603787][ T6089] ? security_bpf_prog_load+0x60/0x140 [ 87.609249][ T6089] ? selinux_bpf_prog_load+0xac/0xd0 [ 87.614553][ T6089] ? security_bpf_prog_load+0x9e/0x140 [ 87.620111][ T6089] bpf_prog_load+0xf76/0x1140 [ 87.624938][ T6089] ? security_bpf+0x2b/0x90 [ 87.629462][ T6089] __sys_bpf+0x469/0x7b0 [ 87.633821][ T6089] __x64_sys_bpf+0x41/0x50 [ 87.638274][ T6089] x64_sys_call+0x28e1/0x3000 [ 87.643207][ T6089] do_syscall_64+0xc0/0x2a0 [ 87.647719][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.653691][ T6089] RIP: 0033:0x7f958fcfaeb9 [ 87.658102][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.677735][ T6089] RSP: 002b:00007f958e757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.686280][ T6089] RAX: ffffffffffffffda RBX: 00007f958ff75fa0 RCX: 00007f958fcfaeb9 [ 87.694263][ T6089] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 87.702314][ T6089] RBP: 00007f958fd68c1f R08: 0000000000000000 R09: 0000000000000000 [ 87.710272][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.718336][ T6089] R13: 00007f958ff76038 R14: 00007f958ff75fa0 R15: 00007ffe7f822f88 [ 87.726521][ T6089] [ 87.729539][ T6089] ---[ end trace 0000000000000000 ]--- [ 87.757552][ T6125] bond4 (unregistering): (slave veth3): Releasing active interface [ 87.788967][ T6125] bond4 (unregistering): Released all slaves [ 87.811247][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.820519][ T6116] netlink: 'syz.4.767': attribute type 14 has an invalid length. [ 87.853729][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 87.853746][ T29] audit: type=1326 audit(1769746109.900:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 87.919770][ T29] audit: type=1326 audit(1769746109.900:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 87.943212][ T29] audit: type=1326 audit(1769746109.930:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 87.966666][ T29] audit: type=1400 audit(1769746109.940:972): avc: denied { execmem } for pid=6147 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.000645][ T29] audit: type=1400 audit(1769746110.030:973): avc: denied { lock } for pid=6140 comm="syz.0.774" path="socket:[14016]" dev="sockfs" ino=14016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.063221][ T29] audit: type=1326 audit(1769746110.110:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 88.086613][ T29] audit: type=1326 audit(1769746110.110:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6140 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 88.110150][ T6158] FAULT_INJECTION: forcing a failure. [ 88.110150][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 88.122910][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.4.778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.122947][ T6158] Tainted: [W]=WARN [ 88.122955][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.122968][ T6158] Call Trace: [ 88.122976][ T6158] [ 88.122984][ T6158] __dump_stack+0x1d/0x30 [ 88.123012][ T6158] dump_stack_lvl+0x95/0xd0 [ 88.123113][ T6158] dump_stack+0x15/0x1b [ 88.123136][ T6158] should_fail_ex+0x263/0x280 [ 88.123164][ T6158] should_failslab+0x8c/0xb0 [ 88.123186][ T6158] __kmalloc_cache_noprof+0x64/0x4a0 [ 88.123298][ T6158] ? __se_sys_memfd_create+0x1df/0x3b0 [ 88.123333][ T6158] ? fput+0x8f/0xc0 [ 88.123425][ T6158] __se_sys_memfd_create+0x1df/0x3b0 [ 88.123465][ T6158] __x64_sys_memfd_create+0x31/0x40 [ 88.123513][ T6158] x64_sys_call+0x28cb/0x3000 [ 88.123541][ T6158] do_syscall_64+0xc0/0x2a0 [ 88.123576][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.123628][ T6158] RIP: 0033:0x7fd8326daeb9 [ 88.123647][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.123666][ T6158] RSP: 002b:00007fd831115e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 88.123689][ T6158] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007fd8326daeb9 [ 88.123728][ T6158] RDX: 00007fd831115ee0 RSI: 0000000000000000 RDI: 00007fd832747333 [ 88.123742][ T6158] RBP: 0000200000000c40 R08: 00000000ffffffff R09: 0000000000000000 [ 88.123755][ T6158] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000200 [ 88.123768][ T6158] R13: 00007fd831115ee0 R14: 00007fd831115ea0 R15: 00002000000001c0 [ 88.123786][ T6158] [ 88.363704][ T29] audit: type=1400 audit(1769746110.390:976): avc: denied { create } for pid=6162 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.383676][ T29] audit: type=1400 audit(1769746110.400:977): avc: denied { setopt } for pid=6162 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.386419][ T6160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.431580][ T6169] loop1: detected capacity change from 0 to 512 [ 88.457858][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.487917][ T6169] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.545759][ T29] audit: type=1400 audit(1769746110.580:978): avc: denied { mounton } for pid=6168 comm="syz.1.782" path="/152/file2" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.683307][ T6180] __nla_validate_parse: 5 callbacks suppressed [ 88.683325][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 88.716681][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.807406][ T6196] xt_hashlimit: size too large, truncated to 1048576 [ 88.835348][ T6201] FAULT_INJECTION: forcing a failure. [ 88.835348][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.848609][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.791 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.848639][ T6201] Tainted: [W]=WARN [ 88.848645][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.848674][ T6201] Call Trace: [ 88.848680][ T6201] [ 88.848688][ T6201] __dump_stack+0x1d/0x30 [ 88.848790][ T6201] dump_stack_lvl+0x95/0xd0 [ 88.848823][ T6201] dump_stack+0x15/0x1b [ 88.848844][ T6201] should_fail_ex+0x263/0x280 [ 88.848873][ T6201] should_fail+0xb/0x20 [ 88.848898][ T6201] should_fail_usercopy+0x1a/0x20 [ 88.848939][ T6201] _copy_to_user+0x20/0xa0 [ 88.848959][ T6201] simple_read_from_buffer+0xb5/0x130 [ 88.848994][ T6201] proc_fail_nth_read+0x10e/0x150 [ 88.849079][ T6201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.849111][ T6201] vfs_read+0x1ab/0x7f0 [ 88.849196][ T6201] ? __rcu_read_unlock+0x4e/0x70 [ 88.849226][ T6201] ? __fget_files+0x184/0x1c0 [ 88.849251][ T6201] ? mutex_lock+0x57/0x90 [ 88.849273][ T6201] ksys_read+0xdc/0x1a0 [ 88.849357][ T6201] __x64_sys_read+0x40/0x50 [ 88.849378][ T6201] x64_sys_call+0x2889/0x3000 [ 88.849402][ T6201] do_syscall_64+0xc0/0x2a0 [ 88.849433][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.849473][ T6201] RIP: 0033:0x7f09cd1ab78e [ 88.849491][ T6201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.849510][ T6201] RSP: 002b:00007f09cbc46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.849562][ T6201] RAX: ffffffffffffffda RBX: 00007f09cbc476c0 RCX: 00007f09cd1ab78e [ 88.849620][ T6201] RDX: 000000000000000f RSI: 00007f09cbc470a0 RDI: 0000000000000004 [ 88.849632][ T6201] RBP: 00007f09cbc47090 R08: 0000000000000000 R09: 0000000000000000 [ 88.849718][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.849730][ T6201] R13: 00007f09cd466038 R14: 00007f09cd465fa0 R15: 00007ffcca119578 [ 88.849747][ T6201] [ 89.050218][ T6203] loop4: detected capacity change from 0 to 1024 [ 89.066412][ T6203] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.077440][ T6203] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.101066][ T6203] JBD2: no valid journal superblock found [ 89.106903][ T6203] EXT4-fs (loop4): Could not load journal inode [ 89.123554][ T6208] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 89.133570][ T6208] SELinux: failed to load policy [ 89.191247][ T6215] team0: entered promiscuous mode [ 89.196380][ T6215] team_slave_0: entered promiscuous mode [ 89.202218][ T6215] team_slave_1: entered promiscuous mode [ 89.214157][ T6215] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 89.222850][ T6219] FAULT_INJECTION: forcing a failure. [ 89.222850][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 89.235618][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.4.797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.235655][ T6219] Tainted: [W]=WARN [ 89.235705][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.235716][ T6219] Call Trace: [ 89.235723][ T6219] [ 89.235732][ T6219] __dump_stack+0x1d/0x30 [ 89.235760][ T6219] dump_stack_lvl+0x95/0xd0 [ 89.235784][ T6219] dump_stack+0x15/0x1b [ 89.235816][ T6219] should_fail_ex+0x263/0x280 [ 89.235844][ T6219] should_failslab+0x8c/0xb0 [ 89.235871][ T6219] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 89.235902][ T6219] ? __alloc_skb+0x2f0/0x4b0 [ 89.235952][ T6219] __alloc_skb+0x2f0/0x4b0 [ 89.235984][ T6219] ? __alloc_skb+0x219/0x4b0 [ 89.236016][ T6219] netlink_alloc_large_skb+0xbf/0xf0 [ 89.236108][ T6219] netlink_sendmsg+0x40c/0x6f0 [ 89.236133][ T6219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.236154][ T6219] ____sys_sendmsg+0x5af/0x600 [ 89.236179][ T6219] ___sys_sendmsg+0x195/0x1e0 [ 89.236246][ T6219] __x64_sys_sendmsg+0xd4/0x160 [ 89.236266][ T6219] x64_sys_call+0x17ba/0x3000 [ 89.236341][ T6219] do_syscall_64+0xc0/0x2a0 [ 89.236450][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.236471][ T6219] RIP: 0033:0x7fd8326daeb9 [ 89.236486][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.236502][ T6219] RSP: 002b:00007fd831137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.236523][ T6219] RAX: ffffffffffffffda RBX: 00007fd832955fa0 RCX: 00007fd8326daeb9 [ 89.236550][ T6219] RDX: 0000000008000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 89.236562][ T6219] RBP: 00007fd831137090 R08: 0000000000000000 R09: 0000000000000000 [ 89.236574][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.236660][ T6219] R13: 00007fd832956038 R14: 00007fd832955fa0 R15: 00007ffca5dcb0d8 [ 89.236681][ T6219] [ 89.436370][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.452164][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.454177][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 89.533413][ T6236] loop4: detected capacity change from 0 to 128 [ 89.546084][ T6236] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.559049][ T6236] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.617104][ T5309] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.651141][ T6241] loop6: detected capacity change from 0 to 1024 [ 89.658251][ T6241] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.669319][ T6241] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.679440][ T6241] JBD2: no valid journal superblock found [ 89.685302][ T6241] EXT4-fs (loop6): Could not load journal inode [ 90.106314][ T6275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.345132][ T6305] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6305 comm=syz.6.829 [ 90.373661][ T6305] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6305 comm=syz.6.829 [ 90.507355][ T6293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6293 comm=syz.1.827 [ 90.619159][ T6327] loop4: detected capacity change from 0 to 512 [ 90.653097][ T6327] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.840: inode has both inline data and extents flags [ 90.659170][ T6333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.843'. [ 90.675453][ T6327] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.840: couldn't read orphan inode 15 (err -117) [ 90.679312][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.694447][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.702470][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.734667][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.840'. [ 90.952618][ T6340] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.221279][ T6368] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 91.318539][ T6377] loop5: detected capacity change from 0 to 512 [ 91.337773][ T6379] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.349758][ T6379] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.360675][ T6377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.380792][ T6377] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.411359][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.498743][ T6387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6387 comm=syz.0.864 [ 91.540587][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.638080][ T6405] block device autoloading is deprecated and will be removed. [ 91.654892][ T6400] loop5: detected capacity change from 0 to 1024 [ 91.668883][ T6411] netlink: 'syz.6.871': attribute type 1 has an invalid length. [ 91.681150][ T6400] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.692098][ T6400] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 91.716468][ T6400] JBD2: no valid journal superblock found [ 91.722277][ T6400] EXT4-fs (loop5): Could not load journal inode [ 91.881856][ T6422] loop1: detected capacity change from 0 to 128 [ 91.918147][ T6424] loop1: detected capacity change from 0 to 512 [ 91.961074][ T6424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.977097][ T6424] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.150543][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 92.169445][ T6439] loop5: detected capacity change from 0 to 512 [ 92.191752][ T6441] vlan0: entered promiscuous mode [ 92.197723][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.217845][ T6439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.223208][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.884'. [ 92.231103][ T6439] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.284166][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 92.306367][ T6439] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.882: corrupted inode contents [ 92.324723][ T6443] vlan2: entered promiscuous mode [ 92.329814][ T6443] syz_tun: entered promiscuous mode [ 92.349472][ T6439] EXT4-fs (loop5): Remounting filesystem read-only [ 92.367236][ T6439] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 92.381633][ T6449] bond0: entered promiscuous mode [ 92.386861][ T6449] bond_slave_0: entered promiscuous mode [ 92.392949][ T6449] bond_slave_1: entered promiscuous mode [ 92.417120][ T6454] EXT4-fs: Ignoring removed bh option [ 92.420865][ T6449] batadv0: entered promiscuous mode [ 92.422873][ T6454] ext4: Unknown parameter 'pcr' [ 92.440158][ T6454] netlink: 173544 bytes leftover after parsing attributes in process `syz.1.888'. [ 92.459448][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.461329][ T6449] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 92.610415][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.890'. [ 92.623971][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.890'. [ 92.694628][ T6456] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 92.922110][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 92.922127][ T29] audit: type=1400 audit(1769746114.970:1231): avc: denied { nlmsg_read } for pid=6460 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.013936][ T6474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.028510][ T6474] ext4 filesystem being mounted at /149/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.048322][ T29] audit: type=1400 audit(1769746115.070:1232): avc: denied { setopt } for pid=6479 comm="syz.6.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.051207][ T6477] EXT4-fs: Invalid want_extra_isize 2 [ 93.067839][ T29] audit: type=1400 audit(1769746115.070:1233): avc: denied { accept } for pid=6479 comm="syz.6.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.190474][ T6485] FAT-fs (loop0): bogus logical sector size 2134 [ 93.196857][ T6485] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 93.206186][ T6485] FAT-fs (loop0): Can't find a valid FAT filesystem [ 93.257616][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.291281][ T6490] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.900: inode has both inline data and extents flags [ 93.310821][ T6490] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.900: couldn't read orphan inode 15 (err -117) [ 93.327067][ T29] audit: type=1400 audit(1769746115.350:1234): avc: denied { create } for pid=6487 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 93.355689][ T6490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.388213][ T6495] syzkaller0: entered promiscuous mode [ 93.393754][ T6495] syzkaller0: entered allmulticast mode [ 93.422860][ T29] audit: type=1400 audit(1769746115.400:1235): avc: denied { create } for pid=6494 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.442321][ T29] audit: type=1400 audit(1769746115.450:1236): avc: denied { sys_admin } for pid=6487 comm="syz.6.901" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 93.503647][ T6500] set_capacity_and_notify: 8 callbacks suppressed [ 93.503665][ T6500] loop5: detected capacity change from 0 to 1024 [ 93.598744][ T6500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.621628][ T29] audit: type=1400 audit(1769746115.580:1237): avc: denied { write } for pid=6494 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.688257][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.697693][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.729496][ T6507] __nla_validate_parse: 2 callbacks suppressed [ 93.729514][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 93.817291][ T6507] loop0: detected capacity change from 0 to 1024 [ 93.832999][ T29] audit: type=1400 audit(1769746115.860:1238): avc: denied { create } for pid=6514 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.905732][ T6507] journal_path: Non-blockdev passed as './file0' [ 93.912128][ T6507] EXT4-fs: error: could not find journal device path [ 93.932705][ T6508] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.907'. [ 93.935432][ T29] audit: type=1400 audit(1769746115.900:1239): avc: denied { create } for pid=6520 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.950337][ T6508] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.907'. [ 93.961203][ T29] audit: type=1400 audit(1769746115.950:1240): avc: denied { write } for pid=6514 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.011195][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 94.020113][ T6527] ip6_vti0: entered promiscuous mode [ 94.045720][ T3421] IPVS: starting estimator thread 0... [ 94.116595][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.916'. [ 94.129525][ T6537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.132153][ T6539] FAULT_INJECTION: forcing a failure. [ 94.132153][ T6539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.136846][ T6537] IPv6: NLM_F_CREATE should be set when creating new route [ 94.150081][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz.1.917 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.150116][ T6539] Tainted: [W]=WARN [ 94.150124][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.150170][ T6539] Call Trace: [ 94.150178][ T6539] [ 94.150186][ T6539] __dump_stack+0x1d/0x30 [ 94.150227][ T6539] dump_stack_lvl+0x95/0xd0 [ 94.150250][ T6539] dump_stack+0x15/0x1b [ 94.150332][ T6539] should_fail_ex+0x263/0x280 [ 94.150364][ T6539] should_fail+0xb/0x20 [ 94.150392][ T6539] should_fail_usercopy+0x1a/0x20 [ 94.150483][ T6539] _copy_from_user+0x1c/0xb0 [ 94.150510][ T6539] sctp_setsockopt+0x164/0xea0 [ 94.150532][ T6539] sock_common_setsockopt+0x69/0x80 [ 94.150559][ T6539] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.150644][ T6539] __sys_setsockopt+0x184/0x200 [ 94.150678][ T6539] __x64_sys_setsockopt+0x64/0x80 [ 94.150766][ T6539] x64_sys_call+0x21d5/0x3000 [ 94.150824][ T6539] do_syscall_64+0xc0/0x2a0 [ 94.150855][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.150878][ T6539] RIP: 0033:0x7f43e9b7aeb9 [ 94.150896][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.150934][ T6539] RSP: 002b:00007f43e85d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.150956][ T6539] RAX: ffffffffffffffda RBX: 00007f43e9df5fa0 RCX: 00007f43e9b7aeb9 [ 94.150971][ T6539] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003 [ 94.150984][ T6539] RBP: 00007f43e85d7090 R08: 0000000000000008 R09: 0000000000000000 [ 94.150998][ T6539] R10: 0000200000002000 R11: 0000000000000246 R12: 0000000000000001 [ 94.151045][ T6539] R13: 00007f43e9df6038 R14: 00007f43e9df5fa0 R15: 00007ffd6cb8fc88 [ 94.151065][ T6539] [ 94.157457][ T6540] loop0: detected capacity change from 0 to 512 [ 94.201398][ T6530] IPVS: using max 2544 ests per chain, 127200 per kthread [ 94.271303][ T6540] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.915: inode has both inline data and extents flags [ 94.364823][ T6540] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.915: couldn't read orphan inode 15 (err -117) [ 94.383983][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.465734][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 94.480026][ T6546] loop4: detected capacity change from 0 to 512 [ 94.502240][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 94.559496][ T6546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.586980][ T6546] netlink: 'syz.4.919': attribute type 2 has an invalid length. [ 94.594715][ T6546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.919'. [ 94.628892][ T6555] xt_CT: No such helper "snmp_trap" [ 94.639235][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 94.690098][ T3401] IPVS: starting estimator thread 0... [ 94.740321][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 94.780775][ T6563] IPVS: using max 2832 ests per chain, 141600 per kthread [ 94.805996][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.974522][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.460171][ T6604] loop4: detected capacity change from 0 to 512 [ 95.467667][ T6604] ext4: Unknown parameter 'smackfsdef' [ 95.711194][ T6616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6616 comm=syz.6.943 [ 95.729702][ T6616] loop6: detected capacity change from 0 to 128 [ 95.748286][ T6616] bio_check_eod: 37 callbacks suppressed [ 95.748364][ T6616] syz.6.943: attempt to access beyond end of device [ 95.748364][ T6616] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 95.769159][ T6616] syz.6.943: attempt to access beyond end of device [ 95.769159][ T6616] loop6: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 95.789728][ T6616] syz.6.943: attempt to access beyond end of device [ 95.789728][ T6616] loop6: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 95.803623][ T6616] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 95.815105][ T6622] syz.6.943: attempt to access beyond end of device [ 95.815105][ T6622] loop6: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 95.875721][ T6615] syz.6.943: attempt to access beyond end of device [ 95.875721][ T6615] loop6: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 95.889341][ T6615] Buffer I/O error on dev loop6, logical block 69, async page read [ 95.909768][ T6615] syz.6.943: attempt to access beyond end of device [ 95.909768][ T6615] loop6: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 95.923430][ T6615] Buffer I/O error on dev loop6, logical block 70, async page read [ 95.923785][ T6633] loop5: detected capacity change from 0 to 1024 [ 95.933448][ T6615] syz.6.943: attempt to access beyond end of device [ 95.933448][ T6615] loop6: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 95.951319][ T6615] Buffer I/O error on dev loop6, logical block 71, async page read [ 95.961522][ T6615] syz.6.943: attempt to access beyond end of device [ 95.961522][ T6615] loop6: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 95.975224][ T6615] Buffer I/O error on dev loop6, logical block 72, async page read [ 95.985015][ T6615] syz.6.943: attempt to access beyond end of device [ 95.985015][ T6615] loop6: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 95.998700][ T6615] Buffer I/O error on dev loop6, logical block 69, async page read [ 96.006825][ T6615] syz.6.943: attempt to access beyond end of device [ 96.006825][ T6615] loop6: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 96.012272][ T6633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.020465][ T6615] Buffer I/O error on dev loop6, logical block 70, async page read [ 96.020645][ T6615] Buffer I/O error on dev loop6, logical block 71, async page read [ 96.047878][ T6633] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.048683][ T6615] Buffer I/O error on dev loop6, logical block 72, async page read [ 96.066642][ T6615] Buffer I/O error on dev loop6, logical block 69, async page read [ 96.086676][ T6633] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.948: inode has both inline data and extents flags [ 96.099736][ T6633] EXT4-fs (loop5): Remounting filesystem read-only [ 96.141499][ T6643] loop0: detected capacity change from 0 to 128 [ 96.148706][ T6643] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.161135][ T6643] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.170795][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.200365][ T3326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.234106][ T6647] netlink: 'syz.6.954': attribute type 10 has an invalid length. [ 96.254082][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.261361][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.271544][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.278831][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.286198][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.293269][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.304108][ T6647] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.313884][ T6655] FAULT_INJECTION: forcing a failure. [ 96.313884][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 96.326552][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.6.954 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.326586][ T6655] Tainted: [W]=WARN [ 96.326592][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.326604][ T6655] Call Trace: [ 96.326611][ T6655] [ 96.326627][ T6655] __dump_stack+0x1d/0x30 [ 96.326659][ T6655] dump_stack_lvl+0x95/0xd0 [ 96.326680][ T6655] dump_stack+0x15/0x1b [ 96.326698][ T6655] should_fail_ex+0x263/0x280 [ 96.326743][ T6655] should_failslab+0x8c/0xb0 [ 96.326768][ T6655] __kmalloc_cache_noprof+0x64/0x4a0 [ 96.326796][ T6655] ? new_nbp+0x13b/0x300 [ 96.326909][ T6655] new_nbp+0x13b/0x300 [ 96.326928][ T6655] br_add_if+0x1e7/0xa60 [ 96.326946][ T6655] ? security_capable+0x7b/0x90 [ 96.326974][ T6655] br_ioctl_stub+0x57b/0x8f0 [ 96.326997][ T6655] ? do_vfs_ioctl+0x84f/0xe70 [ 96.327061][ T6655] ? selinux_file_ioctl+0x5f7/0xcb0 [ 96.327142][ T6655] ? __pfx_br_ioctl_stub+0x10/0x10 [ 96.327163][ T6655] sock_ioctl+0x39c/0x610 [ 96.327195][ T6655] ? mutex_lock+0x57/0x90 [ 96.327221][ T6655] ? __pfx_sock_ioctl+0x10/0x10 [ 96.327245][ T6655] __se_sys_ioctl+0xce/0x140 [ 96.327345][ T6655] __x64_sys_ioctl+0x43/0x50 [ 96.327377][ T6655] x64_sys_call+0x14b0/0x3000 [ 96.327401][ T6655] do_syscall_64+0xc0/0x2a0 [ 96.327488][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.327513][ T6655] RIP: 0033:0x7fe51c36aeb9 [ 96.327607][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.327624][ T6655] RSP: 002b:00007fe51ada6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.327648][ T6655] RAX: ffffffffffffffda RBX: 00007fe51c5e6090 RCX: 00007fe51c36aeb9 [ 96.327699][ T6655] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000009 [ 96.327714][ T6655] RBP: 00007fe51ada6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.327738][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.327750][ T6655] R13: 00007fe51c5e6128 R14: 00007fe51c5e6090 R15: 00007ffe55b172f8 [ 96.327768][ T6655] [ 96.332434][ T6657] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 96.457495][ T6659] bridge0: port 3(syz_tun) entered blocking state [ 96.554286][ T6659] bridge0: port 3(syz_tun) entered disabled state [ 96.561026][ T6659] syz_tun: entered allmulticast mode [ 96.570400][ T6657] bridge0: port 3(syz_tun) entered blocking state [ 96.576912][ T6657] bridge0: port 3(syz_tun) entered listening state [ 96.583497][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.590625][ T6657] bridge0: port 2(bridge_slave_1) entered listening state [ 96.597871][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.604971][ T6657] bridge0: port 1(bridge_slave_0) entered listening state [ 96.613236][ T6657] bridge0: entered promiscuous mode [ 96.618945][ T6657] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 96.711156][ T6664] loop4: detected capacity change from 0 to 512 [ 96.712025][ T6665] loop0: detected capacity change from 0 to 512 [ 96.730563][ T6665] EXT4-fs: journaled quota format not specified [ 96.738930][ T6664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.752556][ T6664] ext4 filesystem being mounted at /177/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.784913][ T6669] FAULT_INJECTION: forcing a failure. [ 96.784913][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.798081][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.0.961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.798178][ T6669] Tainted: [W]=WARN [ 96.798186][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.798201][ T6669] Call Trace: [ 96.798208][ T6669] [ 96.798215][ T6669] __dump_stack+0x1d/0x30 [ 96.798239][ T6669] dump_stack_lvl+0x95/0xd0 [ 96.798392][ T6669] dump_stack+0x15/0x1b [ 96.798411][ T6669] should_fail_ex+0x263/0x280 [ 96.798440][ T6669] should_fail+0xb/0x20 [ 96.798470][ T6669] should_fail_usercopy+0x1a/0x20 [ 96.798611][ T6669] _copy_from_user+0x1c/0xb0 [ 96.798630][ T6669] ___sys_sendmsg+0xc1/0x1e0 [ 96.798660][ T6669] __x64_sys_sendmsg+0xd4/0x160 [ 96.798686][ T6669] x64_sys_call+0x17ba/0x3000 [ 96.798792][ T6669] do_syscall_64+0xc0/0x2a0 [ 96.798820][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.798842][ T6669] RIP: 0033:0x7f09cd1eaeb9 [ 96.798860][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.798896][ T6669] RSP: 002b:00007f09cbc47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.798919][ T6669] RAX: ffffffffffffffda RBX: 00007f09cd465fa0 RCX: 00007f09cd1eaeb9 [ 96.798935][ T6669] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 96.798951][ T6669] RBP: 00007f09cbc47090 R08: 0000000000000000 R09: 0000000000000000 [ 96.798966][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.799037][ T6669] R13: 00007f09cd466038 R14: 00007f09cd465fa0 R15: 00007ffcca119578 [ 96.799054][ T6669] [ 97.010340][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.077670][ T6684] FAULT_INJECTION: forcing a failure. [ 97.077670][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.090806][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.4.968 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.090838][ T6684] Tainted: [W]=WARN [ 97.090846][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.090895][ T6684] Call Trace: [ 97.090903][ T6684] [ 97.090911][ T6684] __dump_stack+0x1d/0x30 [ 97.090937][ T6684] dump_stack_lvl+0x95/0xd0 [ 97.090958][ T6684] dump_stack+0x15/0x1b [ 97.090976][ T6684] should_fail_ex+0x263/0x280 [ 97.091089][ T6684] should_fail+0xb/0x20 [ 97.091195][ T6684] should_fail_usercopy+0x1a/0x20 [ 97.091224][ T6684] _copy_to_user+0x20/0xa0 [ 97.091245][ T6684] simple_read_from_buffer+0xb5/0x130 [ 97.091308][ T6684] proc_fail_nth_read+0x10e/0x150 [ 97.091337][ T6684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.091367][ T6684] vfs_read+0x1ab/0x7f0 [ 97.091386][ T6684] ? __rcu_read_unlock+0x4e/0x70 [ 97.091476][ T6684] ? __fget_files+0x184/0x1c0 [ 97.091501][ T6684] ? mutex_lock+0x57/0x90 [ 97.091525][ T6684] ksys_read+0xdc/0x1a0 [ 97.091543][ T6684] __x64_sys_read+0x40/0x50 [ 97.091635][ T6684] x64_sys_call+0x2889/0x3000 [ 97.091663][ T6684] do_syscall_64+0xc0/0x2a0 [ 97.091695][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.091718][ T6684] RIP: 0033:0x7fd83269b78e [ 97.091741][ T6684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.091761][ T6684] RSP: 002b:00007fd831136fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.091784][ T6684] RAX: ffffffffffffffda RBX: 00007fd8311376c0 RCX: 00007fd83269b78e [ 97.091800][ T6684] RDX: 000000000000000f RSI: 00007fd8311370a0 RDI: 0000000000000004 [ 97.091821][ T6684] RBP: 00007fd831137090 R08: 0000000000000000 R09: 0000000000000000 [ 97.091872][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.091886][ T6684] R13: 00007fd832956038 R14: 00007fd832955fa0 R15: 00007ffca5dcb0d8 [ 97.091906][ T6684] [ 97.155610][ T6689] vfat: Unknown parameter '0x0000000025dfdbfd' [ 97.356178][ T6701] FAULT_INJECTION: forcing a failure. [ 97.356178][ T6701] name failslab, interval 1, probability 0, space 0, times 0 [ 97.368933][ T6701] CPU: 0 UID: 0 PID: 6701 Comm: syz.1.973 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 97.369006][ T6701] Tainted: [W]=WARN [ 97.369014][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.369028][ T6701] Call Trace: [ 97.369035][ T6701] [ 97.369069][ T6701] __dump_stack+0x1d/0x30 [ 97.369096][ T6701] dump_stack_lvl+0x95/0xd0 [ 97.369122][ T6701] dump_stack+0x15/0x1b [ 97.369145][ T6701] should_fail_ex+0x263/0x280 [ 97.369180][ T6701] should_failslab+0x8c/0xb0 [ 97.369271][ T6701] kmem_cache_alloc_noprof+0x68/0x490 [ 97.369299][ T6701] ? getname_flags+0x7f/0x3b0 [ 97.369397][ T6701] getname_flags+0x7f/0x3b0 [ 97.369425][ T6701] __x64_sys_rmdir+0x21/0x40 [ 97.369447][ T6701] x64_sys_call+0x2469/0x3000 [ 97.369536][ T6701] do_syscall_64+0xc0/0x2a0 [ 97.369570][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.369644][ T6701] RIP: 0033:0x7f43e9b7aeb9 [ 97.369662][ T6701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.369683][ T6701] RSP: 002b:00007f43e85d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 97.369706][ T6701] RAX: ffffffffffffffda RBX: 00007f43e9df5fa0 RCX: 00007f43e9b7aeb9 [ 97.369723][ T6701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 97.369738][ T6701] RBP: 00007f43e85d7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.369761][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.369776][ T6701] R13: 00007f43e9df6038 R14: 00007f43e9df5fa0 R15: 00007ffd6cb8fc88 [ 97.369797][ T6701] [ 97.574042][ T6703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.592018][ T6715] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.604266][ T6703] ext4 filesystem being mounted at /165/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.615639][ T6715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 97.631270][ T6715] System zones: 1-12 [ 97.640067][ T6715] EXT4-fs (loop1): 1 truncate cleaned up [ 97.650153][ T6715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.702562][ T3311] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 97.718274][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 97.730410][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 97.742849][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.783577][ T6225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.798633][ T5307] smc: removing ib device syz1 [ 97.820030][ T3480] syz1: Port: 1 Link DOWN [ 97.978132][ T6732] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.987261][ T6732] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 98.001335][ T6732] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 98.021010][ T6732] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 98.029049][ T6732] System zones: 0-2, 18-18, 34-35 [ 98.051765][ T6732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.063980][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 98.064027][ T29] audit: type=1400 audit(1769746120.100:1337): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 98.108583][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.118347][ T29] audit: type=1400 audit(1769746120.140:1338): avc: denied { connect } for pid=6731 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.182888][ T29] audit: type=1326 audit(1769746120.220:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.207091][ T29] audit: type=1326 audit(1769746120.220:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.231181][ T29] audit: type=1326 audit(1769746120.220:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.254521][ T29] audit: type=1326 audit(1769746120.220:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.278101][ T29] audit: type=1326 audit(1769746120.220:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.301418][ T29] audit: type=1326 audit(1769746120.220:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.324848][ T29] audit: type=1326 audit(1769746120.220:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.348279][ T29] audit: type=1326 audit(1769746120.220:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6744 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cd1eaeb9 code=0x7ffc0000 [ 98.361679][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 98.401890][ T6746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.434771][ T6746] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.485578][ T6766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.508776][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.512754][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.524881][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.534727][ T6735] bridge_slave_0: entered allmulticast mode [ 98.547910][ T6735] bridge_slave_0: entered promiscuous mode [ 98.572193][ T6766] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 98.581233][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.588494][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.600917][ T6735] bridge_slave_1: entered allmulticast mode [ 98.601137][ T3326] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 98.616513][ T6735] bridge_slave_1: entered promiscuous mode [ 98.672075][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.699031][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.716245][ T6787] vlan2: entered promiscuous mode [ 98.724589][ T5307] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 98.737071][ T6793] __nla_validate_parse: 11 callbacks suppressed [ 98.737087][ T6793] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.995'. [ 98.811540][ T6735] team0: Port device team_slave_0 added [ 98.827846][ T6735] team0: Port device team_slave_1 added [ 98.854153][ T6812] set_capacity_and_notify: 5 callbacks suppressed [ 98.854168][ T6812] loop4: detected capacity change from 0 to 512 [ 98.875584][ T6812] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.998: inode has both inline data and extents flags [ 98.911752][ T6812] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.998: couldn't read orphan inode 15 (err -117) [ 98.912917][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.930530][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.940075][ T6812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.956634][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.994002][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.998'. [ 99.003875][ T6825] loop0: detected capacity change from 0 to 1024 [ 99.006017][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.017197][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.023960][ T6825] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.043277][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.054046][ T6825] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.054704][ T6825] JBD2: no valid journal superblock found [ 99.080074][ T6825] EXT4-fs (loop0): Could not load journal inode [ 99.087169][ T6827] loop6: detected capacity change from 0 to 512 [ 99.104783][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.124672][ T6827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.141435][ T6827] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.165338][ T6827] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.177639][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.188497][ T6833] loop0: detected capacity change from 0 to 1024 [ 99.197788][ T6735] hsr_slave_0: entered promiscuous mode [ 99.204291][ T6735] hsr_slave_1: entered promiscuous mode [ 99.210234][ T6833] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.210385][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 99.221229][ T6833] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.226964][ T6735] Cannot create hsr debugfs directory [ 99.250233][ T6833] JBD2: no valid journal superblock found [ 99.253899][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.256065][ T6833] EXT4-fs (loop0): Could not load journal inode [ 99.322345][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.465779][ T12] bridge_slave_1: left allmulticast mode [ 99.471495][ T12] bridge_slave_1: left promiscuous mode [ 99.477167][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.482597][ T6868] loop0: detected capacity change from 0 to 1024 [ 99.492212][ T6868] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.503208][ T6868] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.543511][ T12] bridge_slave_0: left allmulticast mode [ 99.548232][ T6868] JBD2: no valid journal superblock found [ 99.549191][ T12] bridge_slave_0: left promiscuous mode [ 99.549281][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.555175][ T6868] EXT4-fs (loop0): Could not load journal inode [ 99.620833][ T12] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 99.638114][ T6877] loop5: detected capacity change from 0 to 512 [ 99.647229][ T12] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 99.647703][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.681393][ T6877] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1008: inode has both inline data and extents flags [ 99.731140][ T6877] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1008: couldn't read orphan inode 15 (err -117) [ 99.743310][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 99.753791][ T6877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.761845][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 99.783011][ T4176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.796583][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.814951][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.826850][ T12] bond0 (unregistering): Released all slaves [ 99.834709][ T12] bond1 (unregistering): Released all slaves [ 99.843216][ T12] bond2 (unregistering): (slave vlan2): Releasing active interface [ 99.852192][ T12] bond2 (unregistering): Released all slaves [ 99.860270][ T12] bond3 (unregistering): Released all slaves [ 99.868340][ T12] bond4 (unregistering): Released all slaves [ 99.876481][ T12] bond5 (unregistering): Released all slaves [ 99.890524][ T6885] vlan0: entered promiscuous mode [ 99.904681][ T6889] bond1: option mode: unable to set because the bond device has slaves [ 99.922186][ T12] hsr_slave_0: left promiscuous mode [ 99.927942][ T12] hsr_slave_1: left promiscuous mode [ 99.939671][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.947188][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.955235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.962748][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.977661][ T12] veth1_macvtap: left promiscuous mode [ 99.986900][ T12] veth0_macvtap: left promiscuous mode [ 99.995856][ T12] veth1_vlan: left promiscuous mode [ 100.003084][ T12] veth0_vlan: left promiscuous mode [ 100.004110][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1014'. [ 100.075819][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.092501][ T12] team0 (unregistering): Port device team_slave_0 removed [ 100.284040][ T12] IPVS: stop unused estimator thread 0... [ 101.052527][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1018'. [ 101.864692][ T6912] xt_hashlimit: size too large, truncated to 1048576 [ 102.011559][ T6920] bond1: option mode: unable to set because the bond device has slaves [ 102.146668][ T6924] netlink: 'syz.4.1025': attribute type 39 has an invalid length. [ 102.392311][ T6930] loop4: detected capacity change from 0 to 1024 [ 102.399320][ T6930] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.410314][ T6930] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.420128][ T6858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.422051][ T6930] JBD2: no valid journal superblock found [ 102.430492][ T6735] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 102.434650][ T6930] EXT4-fs (loop4): Could not load journal inode [ 102.469318][ T6735] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 102.483303][ T6735] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 102.494382][ T6735] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 102.537339][ T6935] loop0: detected capacity change from 0 to 512 [ 102.573383][ T6935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.595027][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.601276][ T6935] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.621370][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.638081][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.645173][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.668294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.675442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.689895][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1031'. [ 102.696064][ T6735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.709240][ T6735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.744451][ T6965] loop4: detected capacity change from 0 to 1024 [ 102.759292][ T6965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 102.759332][ T6965] System zones: 0-1, 3-36 [ 102.761103][ T6965] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1032: bad orphan inode 134217728 [ 102.761963][ T6965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.781001][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.873584][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.995502][ T6735] veth0_vlan: entered promiscuous mode [ 103.023020][ T6991] vhci_hcd vhci_hcd.2: invalid port number 96 [ 103.025420][ T6735] veth1_vlan: entered promiscuous mode [ 103.029128][ T6991] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 103.070995][ T6735] veth0_macvtap: entered promiscuous mode [ 103.127206][ T6735] veth1_macvtap: entered promiscuous mode [ 103.152617][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.173272][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.190051][ T3471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.206687][ T3471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.227919][ T7025] loop0: detected capacity change from 0 to 1024 [ 103.232111][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 103.232126][ T29] audit: type=1400 audit(1769746125.270:1462): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/root/syzkaller.quZYKj/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 103.264915][ T29] audit: type=1400 audit(1769746125.270:1463): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.287567][ T29] audit: type=1400 audit(1769746125.270:1464): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.301521][ T7025] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.316224][ T3471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.320467][ T7025] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.330371][ T3471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.368345][ T29] audit: type=1400 audit(1769746125.350:1465): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/root/syzkaller.quZYKj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 103.395206][ T29] audit: type=1400 audit(1769746125.350:1466): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/root/syzkaller.quZYKj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 103.423214][ T29] audit: type=1400 audit(1769746125.390:1467): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.434994][ T7025] JBD2: no valid journal superblock found [ 103.446100][ T29] audit: type=1400 audit(1769746125.390:1468): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="gadgetfs" ino=4739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 103.451865][ T7025] EXT4-fs (loop0): Could not load journal inode [ 103.531497][ T29] audit: type=1400 audit(1769746125.570:1469): avc: denied { create } for pid=7037 comm="syz.7.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.546560][ T7036] xt_hashlimit: size too large, truncated to 1048576 [ 103.550883][ T29] audit: type=1400 audit(1769746125.570:1470): avc: denied { write } for pid=7037 comm="syz.7.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.604851][ T29] audit: type=1400 audit(1769746125.620:1471): avc: denied { read } for pid=7037 comm="syz.7.985" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.662315][ T7041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.679379][ T7041] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.690937][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.824033][ T6735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.982486][ T7069] bridge_slave_1: left allmulticast mode [ 103.988289][ T7069] bridge_slave_1: left promiscuous mode [ 103.994075][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.009927][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 104.018878][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1042'. [ 106.121505][ T7011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.208388][ T7083] set_capacity_and_notify: 1 callbacks suppressed [ 106.208404][ T7083] loop6: detected capacity change from 0 to 512 [ 106.254636][ T7093] netlink: 'syz.0.1051': attribute type 83 has an invalid length. [ 106.286515][ T7083] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.343388][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1048'. [ 106.380541][ T7100] xt_hashlimit: size too large, truncated to 1048576 [ 106.510197][ T7113] loop6: detected capacity change from 0 to 1024 [ 106.554736][ T7113] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.565653][ T7113] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 106.609561][ T7113] JBD2: no valid journal superblock found [ 106.615367][ T7113] EXT4-fs (loop6): Could not load journal inode [ 106.666918][ T7125] loop7: detected capacity change from 0 to 2048 [ 106.682438][ T7125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.722143][ T7125] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.735526][ T7125] netlink: 'syz.7.1056': attribute type 10 has an invalid length. [ 106.749235][ T7125] team0: Port device dummy0 added [ 106.758829][ T7125] netlink: 'syz.7.1056': attribute type 10 has an invalid length. [ 106.773136][ T7138] loop6: detected capacity change from 0 to 1024 [ 106.779971][ T7125] team0: Port device dummy0 removed [ 106.788814][ T7125] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.797727][ T7138] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.808695][ T7138] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 106.819022][ T7138] JBD2: no valid journal superblock found [ 106.824831][ T7138] EXT4-fs (loop6): Could not load journal inode [ 106.865442][ T6735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.890468][ T7145] loop7: detected capacity change from 0 to 1024 [ 106.897456][ T7145] EXT4-fs: Ignoring removed orlov option [ 106.913369][ T7145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.926239][ T7145] EXT4-fs (loop7): shut down requested (1) [ 106.951519][ T6735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.979258][ T7150] 9p: Bad value for 'rfdno' [ 107.062775][ T7154] loop7: detected capacity change from 0 to 1024 [ 107.077217][ T7154] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.088171][ T7154] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.102787][ T7154] JBD2: no valid journal superblock found [ 107.108554][ T7154] EXT4-fs (loop7): Could not load journal inode [ 107.186288][ T7159] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1063'. [ 107.207538][ T7158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1063'. [ 109.683583][ T7131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.768333][ T7181] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1070'. [ 109.783215][ T7184] loop0: detected capacity change from 0 to 512 [ 109.832539][ T7184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.845210][ T7184] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.876791][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 109.876807][ T29] audit: type=1400 audit(1769746131.920:1513): avc: denied { read write } for pid=7185 comm="syz.4.1072" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.906354][ T29] audit: type=1400 audit(1769746131.920:1514): avc: denied { open } for pid=7185 comm="syz.4.1072" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.931076][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.938841][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.946632][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.954401][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.962235][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.969976][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.977729][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.985491][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 109.993254][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 110.000996][ T23] hid-generic 0000:FFFFFFFE:0007.0001: unknown main item tag 0x0 [ 110.023797][ T29] audit: type=1400 audit(1769746132.050:1515): avc: denied { mount } for pid=7185 comm="syz.4.1072" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.088747][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.111741][ T7202] loop7: detected capacity change from 0 to 512 [ 110.130946][ T23] hid-generic 0000:FFFFFFFE:0007.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 110.153861][ T7202] EXT4-fs (loop7): orphan cleanup on readonly fs [ 110.169777][ T7202] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #11: block 1: comm syz.7.1074: lblock 0 mapped to illegal pblock 1 (length 1) [ 110.220770][ T7202] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.240959][ T7207] fido_id[7207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.264898][ T7202] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.1074: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 110.394030][ T7214] loop0: detected capacity change from 0 to 1024 [ 110.395011][ T7202] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.1074: ea_inode dec ref err=-117 [ 110.421250][ T7214] ext4: Unknown parameter 'nojournal' [ 110.478279][ T7216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.505409][ T7202] EXT4-fs (loop7): 1 orphan inode deleted [ 110.520435][ T7202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.587731][ T7202] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1074'. [ 110.610761][ T29] audit: type=1400 audit(1769746132.650:1516): avc: denied { getopt } for pid=7218 comm="syz.6.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.677024][ T29] audit: type=1400 audit(1769746132.720:1517): avc: denied { ioctl } for pid=7218 comm="syz.6.1078" path="socket:[19543]" dev="sockfs" ino=19543 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.677335][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1078'. [ 110.715667][ T6735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.765701][ T7224] loop7: detected capacity change from 0 to 2048 [ 110.766459][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 110.781131][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 110.790147][ T29] audit: type=1400 audit(1769746132.810:1518): avc: denied { read } for pid=7221 comm="syz.4.1079" laddr=::ffff:172.20.20.10 lport=39919 faddr=::ffff:10.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.815792][ T29] audit: type=1400 audit(1769746132.830:1519): avc: denied { shutdown } for pid=7218 comm="syz.6.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.835448][ T29] audit: type=1400 audit(1769746132.830:1520): avc: denied { listen } for pid=7218 comm="syz.6.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.882025][ T7224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.897075][ T7227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.928975][ T7227] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.940730][ T29] audit: type=1400 audit(1769746132.990:1521): avc: denied { append } for pid=7223 comm="syz.7.1080" path="/11/file1/memory.events.local" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.036543][ T29] audit: type=1400 audit(1769746133.080:1522): avc: denied { map } for pid=7223 comm="syz.7.1080" path="/11/file1/memory.events.local" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.098385][ T7237] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.109841][ T7237] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.121117][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.130920][ T7237] JBD2: no valid journal superblock found [ 111.136681][ T7237] EXT4-fs (loop6): Could not load journal inode [ 111.190211][ T7239] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1084'. [ 111.221587][ T7224] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 111.251995][ T7224] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1672 with error 28 [ 111.264507][ T7224] EXT4-fs (loop7): This should not happen!! Data will be lost [ 111.264507][ T7224] [ 111.274184][ T7224] EXT4-fs (loop7): Total free blocks count 0 [ 111.280166][ T7224] EXT4-fs (loop7): Free/Dirty block details [ 111.286178][ T7224] EXT4-fs (loop7): free_blocks=2415919504 [ 111.291925][ T7224] EXT4-fs (loop7): dirty_blocks=1680 [ 111.297260][ T7224] EXT4-fs (loop7): Block reservation details [ 111.303268][ T7224] EXT4-fs (loop7): i_reserved_data_blocks=105 [ 111.315169][ T7246] FAULT_INJECTION: forcing a failure. [ 111.315169][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.328317][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.6.1088 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.328430][ T7246] Tainted: [W]=WARN [ 111.328437][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.328448][ T7246] Call Trace: [ 111.328455][ T7246] [ 111.328464][ T7246] __dump_stack+0x1d/0x30 [ 111.328491][ T7246] dump_stack_lvl+0x95/0xd0 [ 111.328553][ T7246] dump_stack+0x15/0x1b [ 111.328575][ T7246] should_fail_ex+0x263/0x280 [ 111.328609][ T7246] should_fail+0xb/0x20 [ 111.328719][ T7246] should_fail_usercopy+0x1a/0x20 [ 111.328750][ T7246] _copy_from_user+0x1c/0xb0 [ 111.328770][ T7246] vga_arb_write+0x90/0x1450 [ 111.328800][ T7246] ? __pfx_vga_arb_write+0x10/0x10 [ 111.328834][ T7246] vfs_write+0x269/0x9f0 [ 111.328853][ T7246] ? __rcu_read_unlock+0x4e/0x70 [ 111.328913][ T7246] ? __fget_files+0x184/0x1c0 [ 111.328937][ T7246] ksys_write+0xdc/0x1a0 [ 111.328956][ T7246] __x64_sys_write+0x40/0x50 [ 111.328976][ T7246] x64_sys_call+0x2847/0x3000 [ 111.329023][ T7246] do_syscall_64+0xc0/0x2a0 [ 111.329095][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.329165][ T7246] RIP: 0033:0x7fe51c36aeb9 [ 111.329183][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.329256][ T7246] RSP: 002b:00007fe51adc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.329274][ T7246] RAX: ffffffffffffffda RBX: 00007fe51c5e5fa0 RCX: 00007fe51c36aeb9 [ 111.329287][ T7246] RDX: 000000000000000d RSI: 0000200000000040 RDI: 0000000000000004 [ 111.329299][ T7246] RBP: 00007fe51adc7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.329311][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.329384][ T7246] R13: 00007fe51c5e6038 R14: 00007fe51c5e5fa0 R15: 00007ffe55b172f8 [ 111.329405][ T7246] [ 111.571425][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1080'. [ 111.580395][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1080'. [ 111.592544][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1089'. [ 111.640990][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 111.648110][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 111.655219][ C0] bridge0: port 3(syz_tun) entered learning state [ 111.905179][ T3326] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 112.071232][ T7252] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 112.202551][ T7263] set_capacity_and_notify: 2 callbacks suppressed [ 112.202571][ T7263] loop7: detected capacity change from 0 to 8192 [ 112.213529][ T7261] loop0: detected capacity change from 0 to 512 [ 112.250806][ T7261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.295409][ T7261] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.331069][ T7270] loop7: detected capacity change from 0 to 512 [ 112.381278][ T7270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.419551][ T7270] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.441574][ T7274] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1097'. [ 112.485369][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.526906][ T6735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.576671][ T7283] loop4: detected capacity change from 0 to 1024 [ 112.607646][ T7283] EXT4-fs: Ignoring removed bh option [ 112.614907][ T7284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.636823][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.709461][ T5307] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.774539][ T7294] EXT4-fs (loop4): shut down requested (0) [ 113.036256][ T7300] loop7: detected capacity change from 0 to 1024 [ 113.060419][ T7300] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 113.071360][ T7300] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 113.086587][ T7300] JBD2: no valid journal superblock found [ 113.092354][ T7300] EXT4-fs (loop7): Could not load journal inode [ 114.063444][ T7317] loop6: detected capacity change from 0 to 512 [ 114.093745][ T7317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.116284][ T7317] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.206949][ T5850] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.364116][ T7328] loop6: detected capacity change from 0 to 256 [ 114.397281][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.414742][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.668543][ T7336] xt_connbytes: Forcing CT accounting to be enabled [ 114.684850][ T7336] xt_NFQUEUE: number of total queues is 0 [ 114.717901][ T7338] loop7: detected capacity change from 0 to 4096 [ 114.724927][ T7338] EXT4-fs: Ignoring removed bh option [ 114.735734][ T7338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.760925][ T3539] Bluetooth: hci0: command 0x1003 tx timeout [ 114.766969][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.926280][ T7288] ================================================================== [ 114.934390][ T7288] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 114.941345][ T7288] [ 114.943664][ T7288] read-write to 0xffff88811b9341ec of 4 bytes by task 7278 on cpu 0: [ 114.951718][ T7288] fifo_open+0x86/0x5d0 [ 114.955875][ T7288] do_dentry_open+0x54b/0xa60 [ 114.960558][ T7288] vfs_open+0x37/0x1e0 [ 114.964637][ T7288] path_openat+0x1de9/0x23c0 [ 114.969243][ T7288] do_filp_open+0x15d/0x280 [ 114.973762][ T7288] do_sys_openat2+0xa6/0x150 [ 114.978384][ T7288] __x64_sys_openat+0xf2/0x120 [ 114.983174][ T7288] x64_sys_call+0x2b07/0x3000 [ 114.987869][ T7288] do_syscall_64+0xc0/0x2a0 [ 114.992395][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.998302][ T7288] [ 115.000636][ T7288] read to 0xffff88811b9341ec of 4 bytes by task 7288 on cpu 1: [ 115.008184][ T7288] wait_for_partner+0xd5/0x1e0 [ 115.012960][ T7288] fifo_open+0x4b1/0x5d0 [ 115.017208][ T7288] do_dentry_open+0x54b/0xa60 [ 115.021892][ T7288] vfs_open+0x37/0x1e0 [ 115.025983][ T7288] path_openat+0x1de9/0x23c0 [ 115.030604][ T7288] do_filp_open+0x15d/0x280 [ 115.035156][ T7288] do_sys_openat2+0xa6/0x150 [ 115.039768][ T7288] __x64_sys_openat+0xf2/0x120 [ 115.044542][ T7288] x64_sys_call+0x2b07/0x3000 [ 115.049226][ T7288] do_syscall_64+0xc0/0x2a0 [ 115.053742][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.059653][ T7288] [ 115.061974][ T7288] value changed: 0x00000001 -> 0x00000002 [ 115.067687][ T7288] [ 115.070002][ T7288] Reported by Kernel Concurrency Sanitizer on: [ 115.076142][ T7288] CPU: 1 UID: 0 PID: 7288 Comm: syz.0.1109 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.087434][ T7288] Tainted: [W]=WARN [ 115.091240][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.101292][ T7288] ================================================================== [ 115.419584][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.551459][ T6735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.