last executing test programs: 4m55.99184336s ago: executing program 1 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010300000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000480050001"], 0x4c}}, 0x20048004) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)='W', 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010300000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000480050001"], 0x4c}}, 0x20048004) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCzbdhsQ80mW7Kb0oQcWkTwIqh4EPTSsy/15tWXq/4XHqSlalqseJDIbGbbbbObbtrsbjCfD0z2eWZm8zzffWaeeWZn2AlgzxpL/+QiDkXEh0nESDY/iYiBWqo/4sTGerfXVgvplMT6+pu/J7V1bq2tFqLhPakDWebJiPjhvYjDuc3lVpZX5qZLpeJilp+ozp+fqCyvHDk3Pz1bnC0uHJucmjp6/IXjx3Yu1j9/Xjl4/aPXnv36xN/vPnH1gx+TOBEHs2WNceyUsRjLPpOB9CO8x6s7XViPJb2uAA8l3TX7NvbyOBQj0VdLtTDUzZoBAJ2yDgDsQYkxAADsMfXvAW6trRbqU2+/keiuG69ExP6N+OvXNzeW9GfX7PbXroMO30ruuTKSRMToDpQ/FhGff/v2l+kUWTu4lgZ0w6XLEXFmdGxz/59sumdhu57bauH6YO1l7L7Ze+34A730XTr+ebHZ+C93Z/wTTcY/g0323Yfx4P0/dy1L9O1AcZuk47+XG+5tu90Qf2a0L8v9rzbmG0jOnisV077t/xExHgODaX6ytmrzkdv4zX9utiq/cfz3x8fvfJGWn77eXSN3rX/w3vfMTFenHzXuuhuXI57qbxZ/cqf9kxbj31NtlvH6S+9/1mpZGn8ab33aHH9nrV+JeKZp+99ty2TL+xMnapvDRH2jaOKbXz4dblV+Y/unU1p+/VygG9L2H946/tGk8X7NyvbL+OnKyPetlj04/ubb/77krVp6Xzbv4nS1ujgZsS95Y/P8o3ffW8/X10/jH3+6+f6/UWzz7T89JzzTZvz913/76uHj76w0/plttf/2E1dvz7Xsu9tr/6laajyb007/124FH+WzAwAAAAAAAAAAAAAAAAAAAAAAAIB25SLiYCS5/J10LpfPbzzD+/EYzpXKlerhs+WlhZmoPSt7NAZy9Z+6HGn4PdTJ7Pfw6/mj9+Wfj4jHIuKTwaFaPl8ol2Z6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA60eP5/6tfBXtcOAOiY/b2uAADQdY7/ALD3bO/4P9SxegAA3eP8HwD2nraP/2c6Ww8AoHu2e/7f16F6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8J916uTJdFr/a221kOZnLiwvzZUvHJkpVuby80uFfKG8eD4/Wy7Plor5Qnm+5T+6tPFSKpfPT8XC0sWJarFSnagsr5yeLy8tVE+fm5+eLZ4uDnQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoX2V5ZW66VCouSmyZGNod1dg1if7YFdWQ6FiisZcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDL/RsAAP//gWUuJA==") (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) (async) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)='W', 0x1}], 0x1, 0x5405, 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7a680000) (async) 4m55.362869891s ago: executing program 1 (id=832): unshare(0x2040400) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)="a091b60000fb", 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) 4m55.18076251s ago: executing program 1 (id=836): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b040000007fff0000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m54.5754548s ago: executing program 1 (id=852): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x200}, 0x106a02, 0x10004, 0x30db, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010030bd7000fddbdf2518000000100030800c000180080001000000000008000300", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRESOCT=r0, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x200004ffc000) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x12, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00000000000000008000", [0x4000000000000004, 0x4]}) write$cgroup_int(r7, 0x0, 0x0) fchdir(r5) 4m54.298143644s ago: executing program 1 (id=854): ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002", @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371800000069bd6efb2502eaf60d002700020400bf05000500", 0x2c}], 0x1}, 0x0) 4m52.846411036s ago: executing program 1 (id=870): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xf4ff, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000140600fe8000000000000000000000000000bb"], 0x0) io_uring_enter(r1, 0x2218, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 4m52.831935307s ago: executing program 32 (id=870): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xf4ff, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa60086dd6000000000140600fe8000000000000000000000000000bb"], 0x0) io_uring_enter(r1, 0x2218, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 2m1.498786588s ago: executing program 3 (id=2866): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f0000000500)="128b9306006d4810e529c670669e7567ef1e73ee7ea1a050ac5040adac01847839fc378469d5765b9cc2418408adc1498194a7197b4dcefb", 0x38}], 0x3}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.381632534s ago: executing program 3 (id=2868): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x160}}, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f00000000c0)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x6c, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x40010, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x7a, 0x0, @fd=r4, 0x100000001, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$userns(0x0, 0x0) socket$kcm(0x22, 0x2, 0x26) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x40, 0x85, 0x7, 0x4}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001dc0)={0x2274, 0x15, 0x4, 0x70bd29, 0x25dfdbfd, {0x15, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "8ac1ce8c2819eed8107dfdd5a55ac729bbf7d0744546264c8eea41df46c3c149bf1ff56e43c586de7b3c0a8c6d8e2ace921005ce5b8134fe5c0885143ea0b756f0d20bfc4a4bef92f13febfdd6f44e53e0686548e33b9f800d666883d23be6ad0b3ebb3d9892856953cb8e65a07fede993fbc653265b7d38a8a7495cc717e4fc7613163d74195986292da8ecf605140517c2f702364e0f9f6d96b6fdbb09f9112be2388eb19776776e3e04a52be9eb29450be5fef8989f271d5ee1e582c2718b24995de8bfc1ab6cc9fe3f6f3f0e75c13bcf16765f40efaa1808bbfd62d559c19d39beca9e425e9a3b968a13427378a34e6e8703414233f26a6ed2e8d5f995c95328ecf2cd96dabb836ff6ade9fbc463f3159c221e95bb4fdafca4c10f89d0e11ace17d9c835b4f92abd2d56fef0d2af7df0388c9aa3f98714ab807159571c9cedf28aa3bbe5f5201ae981559861086e421f9450b63ce9005714aa84a0d01d55ae3debda0bedba388d303c0217cf4ef5d0eb63bae48e4de8b5fbbe70d294c740bd1ba303d82508110656576f5ca8a3bb8711f7485de74067ba76462f3eebe7c270e4aab6b419fecf30915fe42b8d5818857ead0f2c96edd18ebb811c7528e9200b87cb2bc74ff91ace206084d2b6266b3d4c41b391c633d0270d7ba577af38b67a3619d2f26dcc96ce0b3b59237b7d2f229ea45238a575410f9795f415b61ea5f42a23d43520df5ac2efb7d6af69acd48d1a745db3d7f8472fed1db0945370f4ae3ca70d3ee658697e547ece9120d667574f55c1ac8affa76ec0195999071391ab30eeae5f359c829239f5207d3e084e37c8ccfaa0cbf3a91a912a423e8a77932f10abbd6aa414fa7d55e94fde67f9d84d7fb13021313a4922cf1083c6d8190e14c659a77f6a6dc925c0872cfefd635a51c3e9fe850d23651a8c6b951013ff938d930d41934c7a31a7a5741d238d3fc72bd52c8ef254990c369915321f123b635740bc45a2b200419d1c20219c62117c1bd2daf2874588a2c2187c289cb6b39c7f5489b5ccea4d5cfed0fa72ab8bb54f7872384f21010c392d8509f7621d8da9115a2d56eaaf1de480143dc0dd01df63b1d9291b6dd447fdb9a4d43a9820f4d16dea02341f5e43c2456f5d5cbe0a15abc4c4b2074e2d9170723a52e0a3eae274a0161af4040b253a3ef8d45ccd11ab62ff323430f0922707f06422ca1913085c7623bb9a907b867718113e133d02ee6ba9cc32ca5225f4eff62117f9d9af4913a664587966d52a65064f250f73998796fe4d53f34a79f28174a532e0831b9a514ddc66a5e37b2d3e4e9be203f7188142b222e3c47e7c4cd245512a14ed41e2ed0416af377cac8c273d729c2c016e080b4fbafba0d4f09ab63c5c8df3b664a3ce97bed6b31790568ef81987d9d13f713bad769ce79d0c5207d34400385d924e25332328ed691fd13ccb8d6a3584bb351228bf6a59ecd780ab9f0130b2e8c621ebea7d05f16b66ef161d1929a6f0bf8c321daf9e94fb522f6bd0c114d40cf6c090e2dd97a4741ac4607cae93755c211a0413456952997a4d34d1d3ecea12ebb7a08c23076950d0edeaf6a83bd233c5e79576eb806e7189c2b66535c1d367adf79ca750d971b1ab8e734475efa819b016a163fc260504657d992620a9bf16872a33c7edfbb229e7fb84bb69c5af1f8c69d11919d70770d62448d079de218e6eacb1525edf4e699377c9282fa1097ce71a2f6cb547d168b6f5aff64ef562041b7c1cd1a8617b0b41b9bf76c3888cf119bef59281bc5bc03bf5701b63af97ecd1d3ffcebbb82f33183efaad476124c59d5979fa5fb21b41022c07d6e0bf8947bf1e8d53e4050d0bec191ec8c023cd15fa423dbec56f8c36f308b12f9a42c65ca45b0c86a7656a7e49af2d3bcb33bf60c24638021b2db8a68053f2e586a5f693e9cb2b5f409c5301b65ecd480f93c9ebf24f6879b63f743e98cda68ecbe2d4f32896557f7920a0ccb54c0825c29280dd7c59bb605958289f421c01ad96559392fb24b7b87ef02b1029a0bb91fa7c76d0c2e92a65fb1dec4550eeebe9de33dec327e8dff5d4b46883f74e3c590f8c1b247cd9557d852932745d826eeb3f287bb8c6fbc194c52faea7931cfcff1b5d69fb8cb17b6a259cacf4fec22e64a8a40ca78b6a0cd1f827a0d6ee79440cfe67a6b06e138621b27f36ac80ea834bd85c4f65a88b5d90aa962ec7ce296a7a720cc1f850ca6d474f85d9fda6a2557a56b4d931b9c8dafb9479871d8d8201cbb6731406cedf0983228e0377d05183723b039151aee7795c2b0896d877bd1e804fbb29b2c8fcf4ebc99a882a8262fecf79c27c900dde3ae57fa7aada2daeeac0b871d2937f5ab4051d0d1cf2fc201cc93a979f779d0c3c99f7fecc4264a299af410bb2b5ac0037fc21d089a55d5e728f7ee48f628862764d6d656ebc333be49324b067a4aabc5fcb764226f146adb3721be2f4c91b1981a657f6dadd03d0c6e3dbe8422bcf685ebdbbca3314242c421da8db74f026bf786866d7c593f0837d982a58c398105d8326a8ff9776fa374abdea1ff6155d2065e40100e8ca244913b3ede1d93680d7f813d77bffe5bd7d20b86fd511dc756c9c16a9ca901ab765191902e2a5f2efaf5b5cb8ef3ac212fd9d657a4e60e5d9cdaec43b52c21bb5caffcad45fc92eab27e2d80f464999047f93fe40d903e8d05550d8f0d7a57544a02bbef346d776d34a9cff550cde9de3dfdd84037ece77ee8ce15c6a888c65a2295be8fdf9f761bdd60f57c7b0a54d9656881f54389e9c81d85f789874d240042ba6812348d081b1f0dc2c8ce1a30689dacab076f8a38f3a003cd9eb160fdb3e4ed276049bc07023d779dafe7f961dfa047d5c386f7b3e4f8620dcade6db5db4e0be3d991eac36da50257486521c1681dc6c5ccb081bea81f05258da11838fc53790594a064373efb29eeb0e3374464c923552db689a9f31416cbd4285229302b97c3c16d9d09d8ef1d7c1b256be8fdde6cac1bd0e89315cfc80538458c6283c570a9bcc21ffcef95fef604472ff42063916d72723c571ba08b88d6f3e0e18c36ff9060b01d253b33e9d9f5ec9d54b189a1a8173cc77913fae463079dc296b1fe4aa94f818849d56f80f04eb6d005db6259b97eb8e4ba64936323a5f5d881d0ab4d7d8db7dea679975c42912219f54a302fa20439fd8dd5febd65bd437bcd1b4749a8222488b23eaef055ae607090cfb5b180c0da4125d7d5f7171d9cbc2fabf93b3be68eb24283e878341ad378c39bb276f3c2129803499509d92d9f40f50516670900c33adc5a6e0bbc99b0002c93c79a9ab3c3ed05f8c7059f5e2e91178161375103b1e93690790ff2788769a47bf44d625178acaf65c075a3d9978eaae125b7ef41980a69a8ee02229531ccfc15f8614f4bbc3365def5e44f0612d3c238b19ec04b800594549b21c8f086e23cb95e32869db1cde47c050554769efe48cb132b31d6318bf67409a0afe20b39f3c68bd4925e358fd5e6a05bd4b57ad89b628b5f06ff6b5bdf7cd2b0f4181a9f78d9c9eb317b1de66babde94eb400b897e3f5cec1ee671b16ab28fceb2b67b2d59fb092f99e01f0bf7aafcc4b70e2726dac35574316060505cf338cb638217e18585148b207f60687a5009d001cb67f77916462a99284f2ab3224757c2a747cfa992a1c16e689afc2e7c6e2baa7e0abdb41170eefae47fcaff337064b577578060b7c946fae7fb65ce3ef286dac0d64d34e277e817043c3c1a446827be090b68e6c8a7eb74afd346a288be138fc3ad6ab94f9f0e05efbff3626108d4a5224d67489b5c16cc86c52a08b87b5705e152b022684121f3e43acb96c389712089e287ec1727bf3712bed4a1c64c1ee8e57e7dcdb9373591646e327f7bd5a6502be56ef8fef3e8c1893bc27770086b97e7f8fc1bafc96a5be1984321af95b89ac7ed504b07e104f34bbdfac55596e2c6508911df4845a27f1b6868e1672bfd036dde2d023d2d1ee2fa452ab4e0666c71596aa9b230d28208e85e06e201bc5c6123d55d41a935f82ed325dd00b1dfbd15062304daf0ec59e392e15d3add6cb3ca0afe9b7d79c301bfd525a592c52a87825223773c69e2f53d799a4de9a6a72691ae49a9d8e7697baa399c4f75bf5e41454d59f06e0d2fa0fc37daafa110946aad3fd3da0e70da39c1c9dcb5ec39669832c3b354e8a9c2ad1a8e700bba81c87dcf8d5af73c26a5b3736c90da2167392d5ab8088d7901cf0700df2d288d8fd86eb42ab26a83c62a76714da7d401656014bc72ffb7a7ba9dc434518ed02702a1c15c1eda35a579e25ff80dbf7cbf26b4ea3f39b6262b5e2322db34d7b47edf0646d4d18a7cd86b2ce800a4ab4e4f91b2f0a27e36698f8d9c341e5e46249797a15a849bf8d3738c1c03fd26cec9b2c0a6979c7cbd439cae8554eea084808f8070927390237d0fe420763a029ee908279223b1f131c95ec2ee046220258298db908e09aa33b90c40e51374ade204adf386b8e209a5b2b02f01f2a3f9645f71cd0710f88d1cf3830fce9e198733f92c0f4c3ee8a7ed97fb7f5fd51e3184dbe95cae2c1f8a44241ca1f0bd8505e43e3abd08934ea5da8fe9b40eccc7bf98ab2e998ef7365620ff4620ed43a6d425dfa13ba3683261956bba12c4206621310a350a3a0546f9da484303c15a5b098b9788a269a7b2bedefc9df69be63422c9464048a7d56411b1923d531d6a358a19797abaedff3c434f48260f90ce4c6ee71aba1538131c87ed3f6883766dbd4a10cda49ff339428d8804834ce677f58569e0695879315f79dcf84b7da388a09c9b59e6267346e2fca202c545969f91a26b80503424a581902e34068bd1c0feb74ada630f4811e76453f5e9ded2fdfbc2b4d4165a4ff7dcc756f76bf62730c5c9c66501517a2c271b91f7f46f69b220fae46ed698c31649d7435b01be811faa43e7279103d4207e4301809e0fa72e372f53dde4e1e3aa41884fb377433fb906640f1e5a7cead43480468f0c75d1e98b8183d6f035a65098063b93dc944c95ea42e72d43aba26cc90a5ec2e205b0ebd8cb054619511039350db61b2343ba1f42c50cfabd8975f29d7c9f2aa40c6a1e3962b2970953199219eeadd31e5076120be442f8801a29e4861c3f94f9f657aacf4c1a47c046515f582cc33d7e659cee85a50229171e42a86b159ff8567e908ecd88410a28ec7d48187d697a7de22d97444cf0ab121334c713c809bdb192bff01f44dbe2621459ccadd037c78205d2d014ca8c7794bce1ec749a1af3a5e14b05d15a5a55f571e3edbc5a9891ec24e593b4cfe3ec9668bc85177ba0a22defb2e33fdfc670033191eddab1fc0dd183131bdc2923f1c17b9ad5a3f73affd28945d3a26ab370db619de3515183d99ecb13eb60bf7aafe63c748ef8859e37133c696ad77f1ec089e1c7b1f71d2e6b74e2c345e1cd09400321e45edf0f9d9fcf221071deeb703b943c70ac48be6be55b815010f26f3263c2acbb5bf3bf5a67f5d270ec434cfe8802ca2f70ee60548298cb50a2a44ad3a2ea39ee140e372961241a5bd1114efb5271cef3b6ba1cb7dd4b73d8d608d701cbc516dbb99b57c59f7a0ea07a063b67bab04a26415f0107624138006d3a30028082655dac5a35e4cb14787dd8658ebaf5c00dee4156418266614979fb927ca4308c68b8d6ea5e6d5de772c4874620504410bb0e4e1535bfa72e0fa0b19a8aaa397f4b5389422ea7d5eca4711ede80fd4a4c1163779d0afe96e609ba1bad78cfb4d2559dc50"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "d44e6552e5138a952be664be0aff5944c13aebea6bfd45e1245f5089dcc6b1c110a65459afe31e6cc35e71eb314e2fedb16d5de09dab87f00b53c9f4d685b2d7adb927646329968fd53623f4326fc32686b2f2a7a4223a536e87b4d23469849a7397db990fcf40a631311b4424ca4de299ea61e49a8dbe7b1812359475be9b5820238cb6e0b1eeea"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "ff020bc6e4923e7d4ea3ebc6d9e95f16898d2cfa94477d2c6e3b4b5c91d635330b156f38d77a7d21412b64956f639e8d4f1c83773e376dd2d09b0c14453d"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "436cb6257458222061ee37149ddffcff6766d1c5dd917f16989f639dbcf8495e96af891f73dfdd801a7fe9488311f9b65f7dec526b6434a2f979535ad2e9c4214ca31b4b9e52e6a3a06fe1e8fb8878bf3752ea9e1763bfcf7e1166f4f8e27ed3399376c69dcbc703d121e959e38d28d71895ed54c56626216b078dc337f08eb9b1d162c6f1df7f5e8f076665"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "af423fb672e0599b898396b8f98f67709941ee8693222bf54117ec550088a1659dde54c940a4f9f3ea2ed39c674717b2f30b7ca3aaca4f2a120a660dc64095cc126a1f45b2d2cc2113ebcb94b871a8cf7620cb4f7b2ecf27e977d8c82684278ca299107c970660ed3855cadd7d10e75af4be3f8c34c2909e352e9f08f00442bf18bbc8d96d1231d8124a94a4b3a0ff906ff71ab8562274e451aa25997ea14a450c89fd57f5429941e5fedf22cb2081a385b2def9d2da88cf57ca861a5d262650e527fc83333aff9be1c2e306a22069daeade544ff8e1b9fc6f313c0ad066e20d3838ddd44597b2bb9049f58447006414e212ada1b61656038b1d4c0b3ff30b96e4ec5c1cc5e41c9906c0aaf795bee80fdcf5246315c36936623b44a65e4de91653b8adb2e4050e5c4470049dc25d683f1025cf601d0a98d0799c0581558fab7adc899b51d9cebf8299d631ecc0b8e739ef4dbe8ecc66a5018b97853e2b940ab79eb7c6fd819773f3f2375a72b38868c2196015298fcc9bd5abd3aeeb000ac7c80be2a9cfe6b9553ddd3430aaced597803c675eb4a047fc90ee9cd8c19f48e87cbcdd326514e7f9aa185cbf94d1551cc7664db562ed64a538ce351b639a0958ef75564eeb0d17181583581b28a7a193dc765a7f1ea3952936af7fa1df050a873ba0c870d46690811d992b29856966166c2cab17ba5560169c04145aee3ba77d50674e76e243af8fa95d5d06102c8b9727e1833f42bf6553fe82014922b6cc11d2aef458e33294d4d02a5b1dc37a97e05fddf08374b5b627f7b628fe2d75dbf35694d58bf68188112594b08d933a06600d41cd681bb069d526e7d03005ea6497977c2f03316e26022e8421507fcd9304a4f88c3d5a20ac8cb40ade8c5afb55ed06a16e2a55cd88c085047f6f163318bcbad48885549a36e368484342f6eb64a2aaeb5bad11866c690f7cb930903247175f9d882dae94e40fe221f025e619f9e1be6177c94c684d51de8d9912987481634cadb5e283ad9eb64d4322600c2ce960ac973e33ed31d46e3c8144245580059af633ba80c6f7da75d2c7bfc5a826b3ac22f52a030dfdeea1fc9ae436250ebd4a0203454749bdcc7ee674e478643752dc7d4ede06737cbe0035c06507eb4220a7fcb1024451c5ec9043016665ed2a5da51898bac5c90c6872b841abac452ddaf0d6694277410dd78b9c42e0bbcc86459d45fa9ee92e00cd03dbe691c8c5c4d273748ca09319f4d85c6469c9c8aeccb7aa585ca63e21602e09d1250f7c4fb86494fe2c71ce4760665939210900c5a5de93984470da5f2359b87d3e7a3003aed39e91f7a9ea7a782b6ef4a702f85c243dffb5166485ae4508d701197b63d86f82bcfb1f76a158180423fdb13c8413a33b4a6f2e5784c93c03dc938273cd2fe1c4699d13f6f3d4342e655cd85905c39d688257d4662095aef0848d2f875496fd437b126faa8cf072a2277031b547d12f66acbf5852305560d6e1023e8f0c1f06cb2f52d7cefcaa09a6f5b0b462450df6ca5c47c521d6aae146092a6f2beccf5440c9d1c4af751b29220476cc9b99e8ecaa2b5724e025bbf19c81e9fa49f1e8581e6d7fc93ae0a99353cb85dc30b47f92d6a52168e484c5adc8a987bf878c4246ad168749e01bf4d88725bff9233cf12aabba29d4b76850d0718cede9af9c3acc06ecd565ad8b8ac8f880a04d6e7f1a67466a1bc1fbda58a17a5af316f781c6ef29e2f74153bfa65bd2bde2e0a6d55e2d5c895d6949cc6fe1d889277c2152b82c5ff61ef7b4ab1eff206c24d7c569b894846e55f9c10779419d3de11608ea380bb4c71fdf0114b579bdd3a67e556d6d90df01dc8a38f7f53ec381b409444ebc5292b35a743bd5def3172325249f9b39096777c7910bbb2d7f77e276f4d8b7c51290c1900246e8cd845718d1e934d312820063bffbc7bd720acb1f9e5b03c1a8a536ad2e9c6c29e2877082f5ce73ad293b349bbc5dd0ad5d6894898cebe41bf6a03ad25723ac3649b23e0babed2575b69febc5ae410fa9275c4a40666aa6696acc1a82236b4cf975285c0dcfcda47b2380694be7734fdb8c57ccd46632153443eddbbbf6bc5414cf31fddec4bcdea64d7d9a813e9e80751fd464a3e3f15cf58dc2c25bb5cf38912cd53a11ab317ce7f896bff83b8fd214ce78b89daa9e08c8188c321566ffe33b7fa5af92e5e30e650f760a69dd8365b059be51bfed21e22ddcef4cda20522b910ff962c133f18e58f1f89d02e1b1f90411e2d0aba699f2cf7dfe72048bbd84dff05ce5d3bad0fa9c542e94e895f623dc96bd09e448583ecbd156fd13d26988b72f14313b5153a2d4f00f52f60680cdc28ab86972c185db92b3f46a87728a597ab6035d453eee30f112c1fc829879fa56178fbc687ad6d9f4c9f769bd8a5eb62ad34a60c10c02048e5515f772a7039007eb11a9450718be8dd441ede8142154f96fdf2352b197e694c71993fc23db4019c297da859e4b4921ecfa9422cb1fb9744da7f9239d072e4e20397deb2f6d3788619d6127fb5acdb7b3fe83955ee91a5cddc7f859eb191e22305ff64ed762da3bdcfaffa2a8dd64d555385802ab31420b0b2c7b339f93f7415b3979aa436a1f9a72e8838a3d5443468550eebcf9965d1704314ef4826b03ab63016dc8fd4cc5fe218d99c7eac3bb32a708f5b4c8970ad9555491af639dc6ab5bb057da9d0b607ef6f396e64596a25f2783c2ac6a4156acb6a1dc8e976121159b1b6c31197e4687fa2de5d43916a5f603a2828c85de61c7db6ea88d52aea9ec77c95a28b8511c28349e69ff1c0fc4ac348cc3250f132c738e5b949f147bc6e7c809dca945e5ceb1610469af3d95b2dd3401eceb20d01189cc00a38573c3c000c1d8c04363dac8e1d198e7608e4370991a3bbba1577b67acb0bdab30f5a0d6f1371c4a6a08adc5a7b4a99b5f8b004e61100c1aec0a2b77a96ddad9c45f8783b252efba96a02ca662e070d05f25fb8885041e952e797bfc4b6fadfa2ebbba3c3cdd45482a4bcbaa2c90bccff9938a341b379617d4c8e08845a3d0207faaf828caa9b172d3382e476497a7137ed146cba29ba78a782dc89c707858b4c9d7d4ee9357c485a45d6446678f864c822789309f130e1ff8ef9e5d36e3e001a0a534b3fa24988b1883a8baf885e453f0e5907a7b4275dd2d9241094b3d65daba53bfe4b5bb8782caa6dcd6b72cf8ce5624ef0e7adc32904f339f5f85b5be49a79d6e87c59e318384641a27291988691d5b4db88af72a954aa21a049b2b325af46392d2c6ae11ad62a4e88352bd5a03b349b42daa3224045f8c5ca63587d7fb4df67195157ba4083ec84a453940475f770fa8a870ace71185b559a0f409d9946d665349a9bf810ac49bb0045ee8d1d5f5898971ef3a60daa614662888f38815ba12b1ad647b2de4ee36a21c643fa373c85c0fce7d0301b31e047b39539013dab311c98726dc1452cee24c620f58fbe2f21e1b1b73e446807f3abb7c4a99dd7bcfee2a3493a181d71d45b49c7ec47da7eb6360675a031a4c53af8d82104d1694b78dab3cd52b9a4f7a38f2bfff3fd44b1f50f51e0b397d33ed0cfc898c58088665b74504aa954864aacd79265ab39b9383be43648a6820be0862c6e20297c115bccc05392f5452524e9cbe43383a95317603273f07537237bc76d15b12ae52f9172e0f9cf5b30fce4a445b0e083af08638e2a94ec9166790290ed9d4113ae3ccd23bd0a86a486d2a755f7e3b728df13a22b0d7ec63e47a226240025db41c9302ca95607aa80b84cbe254d90ddc318fe8a1bb6013be70961aee1aae4c893e1967d24fdfc1206dbe97534aaadd1ac36072ffae9a4e8b457142cb4adf97d2bd522a9dac5a57f8b92c70cb4be5e70c0769d70e5a22466b29b8559ffdcdfa404fe4fd51e48c2b100b75ed8481f7f219b7609465fd584ed77db6127c43d5633757f39d22f33f8875d0be22915252641813a48baeefe8e418b8b44154492bb00a3ab43b38b7713e8923f33941b11dbf67e7ebb2fb4d46807ca5317fe48fa50a819d14508436e8ddfa8ed63cdd994c88870a7ca81d073c897828445e01e9a4e0c3c6839724a7696eecfb9aecf4443502ed99a401281ff45ba094ddb8cc90631a66a4e7e59db5829e9b7591ddc74ac4551b0e20464b7ec20aaccd10e3573ffb0f94b42ddcde1250768e6379d4e2395fe88dd09e90777af84f6e077e434dadeb9fe7f357ced953f8430d0d5036de7c4e3d80a49248b3271d49915993d38532736dda951d23eabf0887c1990da78c421a3139e4c2ac5961b2092f11bf94f1ffbb4b832d9114a62f857f2beccf84f5c9a6e5bc3339e5bb3d0fb36cbb513e5c4cce9cfef58e7479d8237b859990d18609e5a97487e19f9f991fcb41a37046e9ce332d0c7e7ba23fa7891cac17f4acb8d74fa44955e934a17a54f31678c1c448da22d9e19091e260630ce61ec18def2b7b10fe935f5a0755670bf4d60db9a34fbb27389aafaf61ce2e5924aff2e72c548bd39c54fcd55de9c5f489f10dac4d5398a5d6036d0837755b1ab8bebc9b5a27b24d0349843b66bf88601a8cf6f3a3e2bc0d7023719d71cc48236298dc32f3a3cce85d2cd82e7a7eb0405c27882fb277e1d9035914a65ddd13a1c655162476285f3f509f697dbede4ad2c7f857b4fcc23a8ea370524b95fc3923d376eda913de9cddd50fe49f91c3407d10c59d2f9bcfd46078a20f5dd7911694076c992c1d894233daa467cd9cce9c1f8fa53eef30cf530326f9598433842bc42fd7b791f4c7e1c14de46c13e1a098f66199622a71ef8d3b87fb3cf30b28e102cac4d59a52169a3f3aec851b3fd14847259fd302e138562c1a39489a92bfc6a69418c946fa556c7a8f1f8661aaaf15afd6c9e172ccbcf995553a694c5a93d1a2ee17c7498ae6a0212de08016253fb1e493e0031a9d43cb9311cacc1b5f0d29f64d1527e2e8e818bffb0ac772c691c1a3c3f77694ff8307e64f0113becb2f014edbd1b965f6fc3b36f412795bf2dca01e4e9365fa7cb5246ed305cd465cd12fc0612a722c973521221b740fe3c310f58992daf531f7c1ca3cc4c967b279e4bb848b1d15d30d171e11e11d355711ffaf5f2660006db24ffdb00e70c18bb75cd623e129b3e67b72e9853d0bbc05de953635f441964b83f4832c447a7680b9102518214e68e71f3a9573f7bb3522ae4937946f861513f79fe4373d307afa9517f5c4cdbe2fa589ea1e00a0a21be83a2bde92e73888102fc98899860d9b28a05238315beebd8d2aa30b9ddfaa239dedd4e8c5b967d98b9164087902bd716277884b9703556ef2461954ca277024d471c7191dcd5acfca32a30f505aaab92941f5ebe553b5dfa2e88a57a33b4bd771a791238b40e97e06b98fa1113a611ab1d04df758dd0a2fbf222f0327b758403305e431494d581e160e544291468c1280b00b3358216e0de9d4c3a927689df7e1302a2518ab134dc74beff0226bf5c4933525a075b43d857696118e4e5078ed8069022f9d1c39ddafa8b6008df69056510217b809ace1eaa92a20d1583b281a0743fa8e36ddbe7d04b7f49b0e1606180db4c5de3e0109b3329d3ad2bfdba4fd17c83137846a0bae5f75dcee44f9fa274f6c66f00e699ec97cd8108ad67ef3207cc939489acbbe182f7cb8de93991c9d2fc5ced7b3898e012ca22ca3436688d9b033c0d07037d7574f2a9d456e04700bb793376dae3596a1c9209e1d9e70e00b64d856a4c1ae3527ab5ee120acdea4983205793412a3083208ed59b1"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "81328a39e025cc03eec215f284739f412eda7f5f753a06fe27133d9b0effd91271aef74f97030c6ddcaaf9297c5bc310327900ea647944c38625e534e550b66fd543ef091a37022bba7f62531dbe4a5198c290c88e6575e4c9d91c0206741a62f7a14ae4a212e26bf45c9621a2da93ecff7e1a54f2928b1bd5067c2b4c5e290c6324049f017765829beae12f9d2fb4739f5518ae1df22ad25e622b4fb6ff05e4a39be44f00ea4c715b3dcf50f474da8def5169e834a6386a122bd64ece3e4c78fc6347399fa2f9cb8663e173e0826ec828849d2f667ce03a489de6101f5846e372c955e6bea7d093a938a4ac0b09acb611"}]}, 0x2274}}, 0x844) 2m0.507619747s ago: executing program 3 (id=2878): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xff}}, @redirect={0x5, 0x1, 0x0, @empty, {0x5, 0x4, 0x0, 0x24, 0x3, 0x65, 0x4c0, 0x31, 0x88, 0xb, @dev={0xac, 0x14, 0x14, 0x3e}, @remote}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xff}}, @redirect={0x5, 0x1, 0x0, @empty, {0x5, 0x4, 0x0, 0x24, 0x3, 0x65, 0x4c0, 0x31, 0x88, 0xb, @dev={0xac, 0x14, 0x14, 0x3e}, @remote}}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xffffffffffffffff]}, 0x8) r3 = eventfd(0x6) ppoll(&(0x7f0000000080)=[{r3, 0x40}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3ff, r2, 0x0, 0x0, 0x100000000, 0x0, 0x1, r3}]) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$dupfd(r0, 0x203, r4) 1m59.584406573s ago: executing program 3 (id=2892): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000010c0)=ANY=[], 0x4, 0x169, &(0x7f0000000340)="$eJzs27GKE0EYB/AvJufeaXO1KCzYWAX1CRQ5QVxQlBRaKZw2FwmYZrVK7VP4LDY+jSCp0o3oSmJCDCmSjLi/X5MP/gwzH2R2mIV9df3dxflo/Hb0dBrHnU707kUZs06cxqXoRmMSAMD/ZJZSfE8ppWISJ58jpZR7RQDAvjn/AaB9nP8A0D6zVDj/AaBlnr94+fh+VZ09K8vjiG+TelAPmt8mf/ioOrtd/nK6GDWt60F3nt9p8nI5P4orv/O7a/PLcetmk//MHjypVvKrcb7/9gEAAKAV+uXc2vt9v/+3vKn+eD+wcn/vxbXexqlPdtwKALCl8YePF6+HwzfvcxRHkWv2bmRqWbF1Ufwby8hSfP20tEvn0Y3Nw79E7OyPne2RBBzIYtNHFLkXAwAAAAAAAAAAAAAArHWIj5ly9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACrfgQAAP//RpRIxg==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x7, 0x4, 0x7) r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0, 0x300}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xe, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="4dd8c537198b8dd090b9d674a3647e81dded125851e6077cbb497ad5004a98149532f7839779363fbefe7948f754620e06d0e2ee91c85ad781c5db2e94d6e6799bc5815ab1a22b462a134204c8980e61f337666f132a74e8afa2f25e38430bf0f01613b02cf68cb6e44d5d48e977290ccf339a9efa6bab712d3deae766648edb5a8a07bb1f85d978289f1d5dfb7dfff7f23e9cb8a694235f7dcd59bc56dd91ec563c091b039a7dceae41a336bf559d096eea342493469044836f02c16ea314f832a109c5285f3c76353baca6af106d10d6436427b2e43d470c44c8c8be"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sk_skb=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000cc0)={[{@block_validity}, {@nojournal_checksum}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@resgid}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe721, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="642203000000000008000300", @ANYRES32=0x0, @ANYBLOB="160012800b00e3ff610280000000000000000000"], 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgget(0x3, 0x710) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x1e, &(0x7f0000000000)=0x3, 0x4) msgctl$IPC_RMID(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 1m59.537641545s ago: executing program 3 (id=2894): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x22001, 0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xa001, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0xfffffffffffffebc) (async) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1m59.282221308s ago: executing program 3 (id=2896): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) socket$kcm(0x2, 0xa, 0x2) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0xf4ff, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m59.282117298s ago: executing program 33 (id=2896): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) socket$kcm(0x2, 0xa, 0x2) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet(0x2, 0xa, 0x8) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0xf4ff, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.696977887s ago: executing program 0 (id=4125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 4.412663231s ago: executing program 0 (id=4127): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000240)=[r1]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x200051, &(0x7f0000000100)={[{@grpquota}, {@nodelalloc}, {@bh}, {@nodelalloc}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r1}}, {@nolazytime}, {@acl}, {@init_itable}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") 4.334108605s ago: executing program 0 (id=4128): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_query]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000240000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.047882329s ago: executing program 4 (id=4151): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0xad, 0x56}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0xff) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="030000002000000000f8ffffffffffff05000000e600"/32]) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r7, 0x400454cd, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0x7ff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x1, 0x8, 0x2c, 0x68, 0x0, 0x33, 0x21, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @generic={0x44, 0x4, "e6ff"}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0xf, 0x0, 0x0, 0x4, 0x3, "720d95", 0x6, "b7ab33"}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 1.438188429s ago: executing program 5 (id=4156): openat(0xffffffffffffffff, 0x0, 0x80600, 0x8a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 1.437857609s ago: executing program 6 (id=4158): syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") 1.42625259s ago: executing program 5 (id=4159): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 1.360680502s ago: executing program 6 (id=4161): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2c, r4, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x100, 0x4) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/154, 0x9a}, 0x5c00}], 0x1, 0x12042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) gettid() io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r5, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) geteuid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x4700, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.359784593s ago: executing program 4 (id=4162): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.292705696s ago: executing program 2 (id=4164): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a858000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 1.292347246s ago: executing program 5 (id=4165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x84, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 1.292217256s ago: executing program 5 (id=4166): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb2aa}, 0x48) 1.083167766s ago: executing program 5 (id=4167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="928e04b416f09fa7a009aee21be2", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) 1.033283249s ago: executing program 2 (id=4168): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x5, 0xca, 0x9, 0x0, 0x6, 0x2606af4612cb74b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff7}, 0x30, 0x9a, 0xffff8001, 0x2, 0x1000, 0x2, 0x9, 0x0, 0xfffffff8}, 0x0, 0x5, 0xffffffffffffffff, 0x3) r0 = fsopen(&(0x7f0000000080)='befs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x80) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x7}) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x0, 0x1, {0xa, 0x4e21, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}}, 0x32) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x200, 0x4000) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000180)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@remote, @remote, [0xffffffff, 0xffffffff, 0xff, 0xff000000], [0xffffff00, 0xffff00, 0xffffffff, 0xffffff00], 'wg2\x00', 'macsec0\x00', {0xff}, {}, 0x2b, 0x0, 0x4}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x86, 0x4, 0x0, [0x5d, 0x6, 0xfff7, 0x3, 0x9, 0x1d3, 0xfffb, 0x9, 0x2, 0x7, 0x3, 0x9, 0x4, 0xe9, 0x401, 0x4455], 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x6, 0xc, 0x3, 'pptp\x00', 'syz0\x00', {0x2}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'bridge0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x8, 0x0, 0x6, 0x6}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@eui64={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) inotify_add_watch(r1, &(0x7f00000005c0)='./file0\x00', 0x30) r3 = dup(r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r3) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, @rc={0x1f, @none, 0x80}, @hci, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x7}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000006c0), 0x10) timer_create(0x0, &(0x7f0000000880)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000700)="69ee742870b97e3fde70e7ec0348bbcbb0c6332ac5831e0227f9d405394b14085b06a37025dd4e241414b127e0b1d419b1b6c42ede2c28136fe472fc43a5ea1ec19c6ccd3cf914ef6899a74df66f215ddb913a7d66d3e07fc94f09785bcdaab42073432c9344873ae609f47888155523fde7fa967d641c2661a7cee8bffbb9db99e1ec5d89e89b6efea2f9641578ec6aab849b757227c171ca09afed3543db74ed7a50e62e9098f5982aad016e19e118834756", &(0x7f00000007c0)="5e1681ccde7621731fd60a8bdde113f0d72bae0e7de2bb44f0bd1166eee4ce495d5d17b61f5cf8f39af43dbffd7500876ef14506c723bd4e77a783b3f962dbdcbbabbaa3d6b8015ce5e054460be080f08bae91c512b5a4e79243d7ef2adb817f2cc42a3a7ad194067424e46469482b30cd3a93d181fea3e21ae0345adb010b5d98c9"}}, &(0x7f00000008c0)=0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000940)={{r5, r6+10000000}}, &(0x7f0000000980)) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000009c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000a00)={0x3, 0x0, 0x5, 0x0, 0x4}, 0x14) syz_emit_ethernet(0x5d, &(0x7f0000000a40)={@multicast, @multicast, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, '0', "83098b", 0x5, "958738c21f57a5ebf1fb29253ec2b3d16e8beae289d79a06e03ac816871d8ce3b21feff2e7b5958604c0ebbfcb4301db84ff9801cccdb2292112c4e7fea27e6b413933a5f05148"}}}}}, &(0x7f0000000ac0)={0x0, 0x4, [0xb19, 0x91a, 0xd50, 0x5ca]}) timer_getoverrun(r4) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/158}) r8 = open$dir(&(0x7f0000000c40)='./file0\x00', 0x400000, 0x1) mkdirat(r8, &(0x7f0000000c80)='./file0\x00', 0x30) r9 = creat(&(0x7f0000000cc0)='./file0\x00', 0xc) r10 = add_key$keyring(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000d40)={'syz', 0x2}, &(0x7f0000000d80)="9cc59ab3444b2b61431ecc6174a7d33cb47e2b91aa5cd16c85eec2", 0x1b, r10) read(r1, &(0x7f0000000e40)=""/164, 0xa4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000f00)=0x4, 0x4) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000f40)='\x00', 0x1) 990.716211ms ago: executing program 2 (id=4169): openat(0xffffffffffffffff, 0x0, 0x80600, 0x8a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000182b00fc0100"/37], 0x0) 990.562151ms ago: executing program 4 (id=4170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}, 0xe4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x600000000000000) 946.590083ms ago: executing program 0 (id=4171): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x1b, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000410000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x26, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xc7, 0x0, &(0x7f0000000180)="fe6cdcf4932c58becb4434d85933740120004ea71c1af5b6a6bad6a488bdcbab5b5cad109964133811ed218b00deb8cc656271c9fb4c485aea3e2b6b00ee5d4a0982f44f71427194bc95b37944f4fac407adeb873a8ef41a293d08d7f67176c0cc899492a2021e8d1fb6907874ce9050b50800b1345da405106b6e3e17517b8b2ba86d8d15c1fd20570d42b234020c734c347ac704ad9cd3afb0bb8db1d4d74b85e8bd86364281d327dc0efeff86fb772fa9a850c157ef651634e9851057e87112b5f5abff9cc9", 0x0, 0x2, 0x0, 0x1ff}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6235e99e1e4ffef, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000, 0x100000, 0xfffffffffffffffa}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x78}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000000c0)="2a14", 0x2, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', 'syzkaller\x00'}, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) 946.279273ms ago: executing program 5 (id=4172): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_uring_enter(0xffffffffffffffff, 0x5f71, 0xda32, 0x2c, &(0x7f0000000280)={[0x84b5]}, 0x8) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES64=r0], 0x78) r4 = timerfd_create(0x0, 0x800) open(&(0x7f0000000040)='./file0\x00', 0x24040, 0x2) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000880)=[{&(0x7f00000032c0)=""/245, 0xf5}], 0x1, 0xa}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r8, 0x2e, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r9, 0x2d, 0x0}, 0x10) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r10 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r10, &(0x7f0000000000), 0x8) io_submit(r11, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r10, 0x0, 0x0, 0x0, 0x0, 0x1, r10}]) 945.917343ms ago: executing program 2 (id=4173): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x4000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 887.870196ms ago: executing program 4 (id=4174): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x9c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0xa77, 0x10, [0x400000, 0x7, 0x80, 0x9]}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x922, 0x12) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x3, {0x0, 0x0, 0x74, r6, {0x5, 0x10}, {}, {0x6, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc0d5}, 0x4080) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x4000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000810) syz_clone3(&(0x7f0000000480)={0x312195400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x35}, &(0x7f0000000640)=""/99, 0x63, &(0x7f0000000580)=""/145, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) syz_open_procfs$pagemap(r8, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 883.950536ms ago: executing program 0 (id=4175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x3000000, 0x0, 0x850}, 0x4040080) 725.003264ms ago: executing program 0 (id=4176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x220, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x33}, @loopback, 0xffffffff, 0xffffff00, 0xc, 0x0, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x33eb4ad762aa97cc, 0x0, 0xff]}}, 0x7, 0x5, 0x4, 0x4, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x19}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x35}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @multicast2, @private=0xa010100, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x13, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_route(0x10, 0x3, 0x0) r1 = request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x4, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f00000ac000/0x1000)=nil, 0x1000, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x62}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) modify_ldt$write(0x1, &(0x7f0000000440)={0x0, 0x20000800, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) 389.756991ms ago: executing program 6 (id=4177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x1, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000001240)=""/250, 0xfa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000d04000000000000020100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x7, 0xed7}) 349.136463ms ago: executing program 6 (id=4178): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 347.240193ms ago: executing program 4 (id=4179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25fe0100000000000000000000000000010000000000000000000000000000000100000080000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b'], 0x68}}, 0x4004040) 333.351764ms ago: executing program 6 (id=4180): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) finit_module(r0, 0x0, 0x1) 274.235356ms ago: executing program 6 (id=4181): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xeff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 274.124566ms ago: executing program 4 (id=4182): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x1000000000100002) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x20000000000000) 12.215379ms ago: executing program 2 (id=4183): openat(0xffffffffffffffff, 0x0, 0x80600, 0x8a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000182b00fc0100"/37], 0x0) 0s ago: executing program 2 (id=4184): r0 = syz_pidfd_open(0x0, 0x0) process_madvise(r0, 0x0, 0x0, 0x19, 0x0) (async) process_madvise(r0, 0x0, 0x0, 0x19, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x60, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x60, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xe4, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x100b28, 0x9, 0x28000001, 0x2, 0x8, 0x20005, 0x7ff, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000140)={0x0, 0xe4, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x100b28, 0x9, 0x28000001, 0x2, 0x8, 0x20005, 0x7ff, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) (async) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) r4 = socket(0x25, 0x80805, 0x0) setsockopt(r4, 0x84, 0x80, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) set_mempolicy_home_node(&(0x7f00000c9000/0x1000)=nil, 0x1000, 0x2, 0x0) (async) set_mempolicy_home_node(&(0x7f00000c9000/0x1000)=nil, 0x1000, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): .6.3249'. [ 385.293302][T14313] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3249'. [ 385.333901][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.376549][T14324] loop0: detected capacity change from 0 to 1024 [ 385.384990][T14324] EXT4-fs: inline encryption not supported [ 385.390928][T14324] EXT4-fs: Ignoring removed i_version option [ 385.411008][T14324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.494056][T14324] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.3253: Allocating blocks 497-513 which overlap fs metadata [ 385.552107][T14331] hub 8-0:1.0: USB hub found [ 385.557139][T14331] hub 8-0:1.0: 8 ports detected [ 385.572847][T14331] netlink: 'syz.6.3252': attribute type 36 has an invalid length. [ 385.633649][T14331] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 385.643787][T14331] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 385.655409][T14332] netlink: 'syz.6.3252': attribute type 10 has an invalid length. [ 385.682622][T14324] EXT4-fs (loop0): pa ffff888107ae65b0: logic 576, phys. 449, len 4 [ 385.690695][T14324] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 385.967499][T13939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.120319][T14341] hub 8-0:1.0: USB hub found [ 386.157306][T14341] hub 8-0:1.0: 8 ports detected [ 386.166223][T14341] netlink: 'syz.0.3254': attribute type 36 has an invalid length. [ 386.180829][T14341] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 386.190846][T14341] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 386.205635][T14341] netlink: 'syz.0.3254': attribute type 10 has an invalid length. [ 386.820428][T14341] macvlan1: entered allmulticast mode [ 386.829399][T14341] veth1_vlan: entered allmulticast mode [ 386.839343][T14341] team0: Port device macvlan1 added [ 387.136259][T14350] loop4: detected capacity change from 0 to 256 [ 387.851947][T14353] loop6: detected capacity change from 0 to 256 [ 387.868223][T14358] loop0: detected capacity change from 0 to 256 [ 388.142607][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3263'. [ 388.538160][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3266'. [ 388.553030][T14379] loop0: detected capacity change from 0 to 1024 [ 388.567158][T14379] EXT4-fs: inline encryption not supported [ 388.574370][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3266'. [ 388.591537][T14379] EXT4-fs: Ignoring removed i_version option [ 388.723760][T14379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.834833][T14386] loop4: detected capacity change from 0 to 256 [ 388.985376][T14379] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.3265: Allocating blocks 497-513 which overlap fs metadata [ 389.012307][T14379] EXT4-fs (loop0): pa ffff888107ae64d0: logic 576, phys. 449, len 4 [ 389.020398][T14379] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 389.077232][T14386] FAT-fs (loop4): Directory bread(block 64) failed [ 389.084203][T14386] FAT-fs (loop4): Directory bread(block 65) failed [ 389.090993][T14386] FAT-fs (loop4): Directory bread(block 66) failed [ 389.097591][T14386] FAT-fs (loop4): Directory bread(block 67) failed [ 389.104299][T14386] FAT-fs (loop4): Directory bread(block 68) failed [ 389.110916][T14386] FAT-fs (loop4): Directory bread(block 69) failed [ 389.117589][T14386] FAT-fs (loop4): Directory bread(block 70) failed [ 389.124340][T14386] FAT-fs (loop4): Directory bread(block 71) failed [ 389.131028][T14386] FAT-fs (loop4): Directory bread(block 72) failed [ 389.137682][T14386] FAT-fs (loop4): Directory bread(block 73) failed [ 389.336577][T14392] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3270'. [ 389.396376][T13939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.401699][T14394] netlink: 'syz.5.3269': attribute type 36 has an invalid length. [ 389.420021][T14394] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 389.430091][T14394] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 389.448829][T14394] netlink: 'syz.5.3269': attribute type 10 has an invalid length. [ 390.394535][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.415626][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.589935][T14403] loop4: detected capacity change from 0 to 512 [ 390.614517][T14400] loop0: detected capacity change from 0 to 8192 [ 390.666620][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 390.666634][ T28] audit: type=1326 audit(1774458146.901:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 390.800364][T14400] random: crng reseeded on system resumption [ 390.843353][ T28] audit: type=1326 audit(1774458146.910:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 390.874301][ T28] audit: type=1326 audit(1774458146.938:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 390.974820][ T28] audit: type=1326 audit(1774458146.938:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.049944][ T28] audit: type=1326 audit(1774458146.938:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.142875][ T28] audit: type=1326 audit(1774458146.938:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.216649][ T28] audit: type=1326 audit(1774458146.938:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.240366][ T28] audit: type=1326 audit(1774458146.938:9083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.263972][ T28] audit: type=1326 audit(1774458146.938:9084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.287745][ T28] audit: type=1326 audit(1774458146.938:9085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14408 comm="syz.5.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087cd4c799 code=0x7ffc0000 [ 391.337821][T14425] loop6: detected capacity change from 0 to 1024 [ 391.351688][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'. [ 391.357875][T14425] EXT4-fs: Ignoring removed oldalloc option [ 391.370208][T14421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3275'. [ 391.375869][T14425] EXT4-fs: Ignoring removed bh option [ 391.402347][T14425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.506605][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.545792][T14436] loop0: detected capacity change from 0 to 128 [ 391.550413][T14439] loop6: detected capacity change from 0 to 1024 [ 391.606347][T14439] EXT4-fs: inline encryption not supported [ 391.639131][T14439] EXT4-fs: Ignoring removed i_version option [ 391.763977][T14439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.823060][T14446] loop4: detected capacity change from 0 to 256 [ 391.868594][T14457] sock: sock_timestamping_bind_phc: sock not bind to device [ 391.914071][T14439] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3281: Allocating blocks 497-513 which overlap fs metadata [ 391.928359][T14439] EXT4-fs (loop6): pa ffff888107ae64d0: logic 576, phys. 449, len 4 [ 391.936525][T14439] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 391.996904][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 392.009747][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.061779][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 392.259457][T14493] hub 8-0:1.0: USB hub found [ 392.264294][T14493] hub 8-0:1.0: 8 ports detected [ 392.274445][T14493] netlink: 'syz.4.3302': attribute type 36 has an invalid length. [ 392.294864][T14494] veth0_virt_wifi: entered promiscuous mode [ 392.330271][T14495] netlink: 'syz.4.3302': attribute type 10 has an invalid length. [ 392.363378][T14493] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 392.373246][T14493] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 392.388046][T14495] macvlan1: entered allmulticast mode [ 392.396555][T14495] veth1_vlan: entered allmulticast mode [ 392.406439][T14495] team0: Port device macvlan1 added [ 392.705783][T14496] dummy0 speed is unknown, defaulting to 1000 [ 392.715894][T14506] loop0: detected capacity change from 0 to 512 [ 392.736621][T14506] EXT4-fs: Ignoring removed nobh option [ 392.753517][T14506] EXT4-fs: journaled quota format not specified [ 392.809513][T14496] chnl_net:caif_netlink_parms(): no params data found [ 392.822551][T14508] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 392.829905][T14508] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 392.860422][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.867724][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.879841][T14496] bridge_slave_0: entered allmulticast mode [ 392.889225][T14496] bridge_slave_0: entered promiscuous mode [ 392.899491][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.906779][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.914150][T14496] bridge_slave_1: entered allmulticast mode [ 392.921265][T14496] bridge_slave_1: entered promiscuous mode [ 392.943397][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.953005][T14521] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3311'. [ 392.963073][T14521] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3311'. [ 392.974409][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.030210][T14496] team0: Port device team_slave_0 added [ 393.045855][T14496] team0: Port device team_slave_1 added [ 393.061229][T14523] loop0: detected capacity change from 0 to 8192 [ 393.108629][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.115819][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.144099][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.155706][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.162702][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.169252][T14523] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.199253][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.301885][T14496] hsr_slave_0: entered promiscuous mode [ 393.309124][T14496] hsr_slave_1: entered promiscuous mode [ 393.316228][T14496] debugfs: 'hsr0' already exists in 'hsr' [ 393.322130][T14496] Cannot create hsr debugfs directory [ 393.492813][T14535] loop6: detected capacity change from 0 to 128 [ 393.688515][T14496] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.725028][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3319'. [ 393.745179][T14496] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.767457][T14544] futex_wake_op: syz.2.3320 tries to shift op by 32; fix this program [ 393.796061][T14496] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.859428][T14496] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.886848][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3320'. [ 393.895986][T14556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'. [ 394.275310][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.282615][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.397550][T14560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.416927][T14560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.446950][T14560] veth1_vlan: left allmulticast mode [ 394.452762][T14560] macvlan1: left allmulticast mode [ 394.483878][ T7140] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.504274][T14496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.514695][ T7140] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.524058][T14496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.533251][ T7140] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.558746][ T7140] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.759481][T14496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.788245][T14496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.801879][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'. [ 394.965685][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.986403][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.996650][T14589] program syz.4.3329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.015805][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.022947][ T7140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.035133][T14591] loop0: detected capacity change from 0 to 1024 [ 395.051824][T14591] EXT4-fs: Ignoring removed orlov option [ 395.067534][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.074623][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.099141][T14591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.148768][T14496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 395.193420][T14496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.205194][T13939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.239146][T14597] veth0_to_team: entered promiscuous mode [ 395.389310][T14608] syzkaller0: entered promiscuous mode [ 395.405076][T14608] syzkaller0: entered allmulticast mode [ 395.447059][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.550194][T14628] EXT4-fs: inline encryption not supported [ 395.575390][T14628] EXT4-fs: Ignoring removed i_version option [ 395.592769][T14628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.658937][T14496] veth0_vlan: entered promiscuous mode [ 395.669188][T14496] veth1_vlan: entered promiscuous mode [ 395.688667][T14496] veth0_macvtap: entered promiscuous mode [ 395.700557][T14496] veth1_macvtap: entered promiscuous mode [ 395.716535][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.728390][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.743832][T14642] hub 8-0:1.0: USB hub found [ 395.748639][T14642] hub 8-0:1.0: 8 ports detected [ 395.758510][T14642] netlink: 'syz.4.3340': attribute type 36 has an invalid length. [ 395.786850][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.814742][T14643] netlink: 'syz.4.3340': attribute type 10 has an invalid length. [ 395.868023][T14642] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 395.878072][T14642] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 395.978162][T14628] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.3339: Allocating blocks 497-513 which overlap fs metadata [ 396.022360][T14628] EXT4-fs (loop0): pa ffff888107ae6770: logic 576, phys. 449, len 4 [ 396.030467][T14628] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 396.104141][T14649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14649 comm=syz.2.3343 [ 396.123656][T14643] macvlan1: entered allmulticast mode [ 396.135030][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.163354][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.180074][T13939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.193394][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.375131][T14664] set_capacity_and_notify: 1 callbacks suppressed [ 396.375204][T14664] loop5: detected capacity change from 0 to 128 [ 396.975809][T14676] syzkaller0: entered promiscuous mode [ 396.995174][T14676] syzkaller0: entered allmulticast mode [ 397.112946][T14651] loop6: detected capacity change from 0 to 4096 [ 397.137739][T14651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.150284][ T28] kauditd_printk_skb: 438 callbacks suppressed [ 397.150299][ T28] audit: type=1326 audit(1774458152.953:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.150380][ T28] audit: type=1326 audit(1774458152.972:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.151031][ T28] audit: type=1326 audit(1774458152.972:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.232617][T14683] tipc: Started in network mode [ 397.238981][T14683] tipc: Node identity , cluster identity 4711 [ 397.239272][ T28] audit: type=1326 audit(1774458153.000:9527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.271732][ T28] audit: type=1326 audit(1774458153.056:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.295834][ T28] audit: type=1326 audit(1774458153.056:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.320700][ T28] audit: type=1326 audit(1774458153.056:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.326433][T14685] __nla_validate_parse: 2 callbacks suppressed [ 397.326517][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3351'. [ 397.344743][ T28] audit: type=1326 audit(1774458153.056:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.383539][ T28] audit: type=1326 audit(1774458153.056:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.384234][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 397.407345][ T28] audit: type=1326 audit(1774458153.056:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14680 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd12aa1c799 code=0x7ffc0000 [ 397.509462][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.554634][T14693] loop6: detected capacity change from 0 to 2048 [ 397.621878][ T5945] loop6: p3 p4 < > [ 397.626036][ T5945] loop6: p3 start 11362048 is beyond EOD, truncated [ 397.649492][T14693] loop6: p3 p4 < > [ 397.653604][T14693] loop6: p3 start 11362048 is beyond EOD, truncated [ 397.675567][T14696] loop0: detected capacity change from 0 to 256 [ 397.701928][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 397.756791][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 397.800978][T14704] loop6: detected capacity change from 0 to 1024 [ 397.833537][T14704] /dev/loop6: Can't open blockdev [ 398.116727][T14719] loop6: detected capacity change from 0 to 128 [ 398.164023][T14719] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 398.172895][T14719] FAT-fs (loop6): Filesystem has been set read-only [ 398.620502][T14731] sock: sock_timestamping_bind_phc: sock not bind to device [ 398.935300][T14739] loop6: detected capacity change from 0 to 256 [ 399.015895][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3372'. [ 399.182577][T14749] netlink: 'syz.2.3373': attribute type 1 has an invalid length. [ 399.202660][T14749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.231388][T14749] bond1: (slave ip6erspan0): making interface the new active one [ 399.242238][T14749] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 399.257218][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3374'. [ 399.527934][T14762] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.559633][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3379'. [ 399.559852][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3376'. [ 399.688694][T14771] loop6: detected capacity change from 0 to 256 [ 399.752651][T14773] loop6: detected capacity change from 0 to 128 [ 399.810742][T14775] loop4: detected capacity change from 0 to 512 [ 399.814162][T14773] syz.6.3382: attempt to access beyond end of device [ 399.814162][T14773] loop6: rw=0, sector=121, nr_sectors = 8 limit=128 [ 399.834092][T14775] EXT4-fs (loop4): 1 truncate cleaned up [ 399.840199][T14775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.857712][T14775] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3383: bg 0: block 465: padding at end of block bitmap is not set [ 399.881434][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.040358][T14788] 9pnet_fd: Insufficient options for proto=fd [ 400.051231][T14793] sock: sock_timestamping_bind_phc: sock not bind to device [ 400.201124][T14795] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3390: inode has both inline data and extents flags [ 400.215056][T14795] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 400.215476][T14795] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3390: couldn't read orphan inode 15 (err -117) [ 400.224832][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 400.224861][ C0] EXT4-fs (loop5): initial error at time 1774458155: ext4_orphan_get:1391: inode 15 [ 400.224907][ C0] EXT4-fs (loop5): last error at time 1774458155: ext4_orphan_get:1391: inode 15 [ 400.266902][T14795] loop5: lost filesystem error report for type 5 error -117 [ 400.268457][T14795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.437911][ T3416] IPVS: starting estimator thread 0... [ 400.522897][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.571482][T14804] IPVS: using max 2640 ests per chain, 132000 per kthread [ 401.131048][T14813] syzkaller0: entered promiscuous mode [ 401.256405][T14813] syzkaller0: entered allmulticast mode [ 401.385475][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3397'. [ 401.604906][T14835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3399'. [ 401.722911][T14837] EXT4-fs: inline encryption not supported [ 401.739855][T14837] EXT4-fs: Ignoring removed i_version option [ 401.778698][T14837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.885361][T14837] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 401.950108][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.210637][T14849] set_capacity_and_notify: 4 callbacks suppressed [ 402.210651][T14849] loop0: detected capacity change from 0 to 512 [ 402.241169][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3402'. [ 402.253413][T14849] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.260141][T14849] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.260825][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.268329][T14849] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 1: comm syz.0.3404: invalid block [ 402.273943][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.292287][T14849] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 402.292406][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 402.307972][ C0] EXT4-fs (loop0): initial error at time 1774458157: __ext4_iget:5378: inode 11: block 1 [ 402.317860][ C0] EXT4-fs (loop0): last error at time 1774458157: __ext4_iget:5378: inode 11: block 1 [ 402.400408][T14849] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3404: couldn't read orphan inode 11 (err -117) [ 402.412616][T14849] loop0: lost filesystem error report for type 5 error -117 [ 402.413158][T14849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.471464][T14849] SELinux: Context †*#êï is not valid (left unmapped). [ 402.495834][T14849] SELinux: Context ›Y7»ôj [ 402.495834][T14849] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 402.495834][T14849] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 402.540044][T14856] random: crng reseeded on system resumption [ 402.553913][T14849] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 402.567481][T14849] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 402.656830][T14849] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 402.691695][T14849] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZðeoÄìáþQ[aSêáI> is not valid (left unmapped). [ 403.268957][T14870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3411'. [ 403.399882][T14870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.428979][T14870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.480935][T14879] FAULT_INJECTION: forcing a failure. [ 403.480935][T14879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.496833][T14868] loop5: detected capacity change from 0 to 512 [ 403.512492][T14879] CPU: 0 UID: 0 PID: 14879 Comm: syz.6.3415 Tainted: G W syzkaller #0 PREEMPT(full) [ 403.512529][T14879] Tainted: [W]=WARN [ 403.512535][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.512545][T14879] Call Trace: [ 403.512552][T14879] [ 403.512560][T14879] __dump_stack+0x1d/0x30 [ 403.512583][T14879] dump_stack_lvl+0x95/0xd0 [ 403.512674][T14879] dump_stack+0x15/0x1b [ 403.512690][T14879] should_fail_ex+0x263/0x280 [ 403.512713][T14879] should_fail+0xb/0x20 [ 403.512754][T14879] should_fail_usercopy+0x1a/0x20 [ 403.512814][T14879] _copy_to_user+0x20/0xa0 [ 403.512842][T14879] simple_read_from_buffer+0xb5/0x130 [ 403.512881][T14879] proc_fail_nth_read+0x10e/0x150 [ 403.512922][T14879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.512947][T14879] vfs_read+0x1ab/0x7f0 [ 403.512970][T14879] ? __rcu_read_unlock+0x4e/0x70 [ 403.513037][T14879] ? __fget_files+0x184/0x1c0 [ 403.513117][T14879] ? mutex_lock+0x57/0x90 [ 403.513146][T14879] ksys_read+0xdc/0x1a0 [ 403.513163][T14879] __x64_sys_read+0x40/0x50 [ 403.513181][T14879] x64_sys_call+0x2886/0x3020 [ 403.513278][T14879] do_syscall_64+0x12c/0x370 [ 403.513303][T14879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.513329][T14879] RIP: 0033:0x7fa5558dcfce [ 403.513416][T14879] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.513432][T14879] RSP: 002b:00007fa55436efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.513452][T14879] RAX: ffffffffffffffda RBX: 00007fa55436f6c0 RCX: 00007fa5558dcfce [ 403.513466][T14879] RDX: 000000000000000f RSI: 00007fa55436f0a0 RDI: 0000000000000004 [ 403.513478][T14879] RBP: 00007fa55436f090 R08: 0000000000000000 R09: 0000000000000000 [ 403.513543][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.513555][T14879] R13: 00007fa555b96038 R14: 00007fa555b95fa0 R15: 00007ffd7f31c808 [ 403.513573][T14879] [ 403.731936][T14868] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.785379][T14868] EXT4-fs (loop5): orphan cleanup on readonly fs [ 403.792782][T14868] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3409: Allocating blocks 41-42 which overlap fs metadata [ 403.806899][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 403.806915][ T28] audit: type=1400 audit(1774458159.164:9557): avc: denied { name_bind } for pid=14881 comm="syz.6.3416" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 403.810722][T14868] loop5: lost filesystem error report for type 5 error -117 [ 403.813271][ T28] audit: type=1326 audit(1774458159.173:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14881 comm="syz.6.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 403.880364][ T28] audit: type=1326 audit(1774458159.173:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14881 comm="syz.6.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 403.900299][T14868] Quota error (device loop5): write_blk: dquota write failed [ 403.904715][ T28] audit: type=1326 audit(1774458159.173:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14881 comm="syz.6.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 403.911870][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 403.937103][ T28] audit: type=1326 audit(1774458159.173:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14881 comm="syz.6.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 403.941735][ C0] EXT4-fs (loop5): initial error at time 1774458159: ext4_mb_mark_diskspace_used:4222 [ 403.965734][ T28] audit: type=1326 audit(1774458159.173:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14881 comm="syz.6.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 403.974928][ C0] EXT4-fs (loop5): last error at time 1774458159: ext4_mb_mark_diskspace_used:4222 [ 404.023103][T14868] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 404.026114][ T28] audit: type=1326 audit(1774458159.173:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14881 comm="syz.6.3416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa55591e007 code=0x7ffc0000 [ 404.040220][T14868] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 404.066471][T14868] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3409: Failed to acquire dquot type 1 [ 404.078309][T14868] loop5: lost filesystem error report for type 5 error -117 [ 404.079005][T14868] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 404.101109][T14868] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #12: comm syz.5.3409: corrupted inode contents [ 404.113075][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.113366][T14868] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #12: comm syz.5.3409: mark_inode_dirty error [ 404.149738][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.152981][T14868] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #12: comm syz.5.3409: corrupted inode contents [ 404.164586][T14903] loop4: detected capacity change from 0 to 1024 [ 404.180284][T14901] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.197427][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.197672][T14868] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.3409: mark_inode_dirty error [ 404.197932][T14903] EXT4-fs: inline encryption not supported [ 404.208256][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.219416][T14903] EXT4-fs: Ignoring removed i_version option [ 404.225441][T14868] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #12: comm syz.5.3409: corrupted inode contents [ 404.252670][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.253042][T14868] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 404.263343][T14903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.271512][T14868] loop5: lost filesystem error report for type 5 error -117 [ 404.283983][T14868] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #12: comm syz.5.3409: corrupted inode contents [ 404.306935][T14901] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.310136][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.319134][T14868] EXT4-fs error (device loop5): ext4_truncate:4587: inode #12: comm syz.5.3409: mark_inode_dirty error [ 404.339875][T14868] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 404.340468][T14868] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 404.359342][T14868] loop5: lost filesystem error report for type 5 error -117 [ 404.359620][T14868] EXT4-fs (loop5): 1 truncate cleaned up [ 404.373348][T14868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.408398][T14903] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 404.410130][T14901] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.438684][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.443811][T14868] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.3409: iget: bad i_size value: 360287970189639690 [ 404.558147][T14910] hub 8-0:1.0: USB hub found [ 404.563181][T14910] hub 8-0:1.0: 8 ports detected [ 404.578555][T14910] netlink: 'syz.0.3422': attribute type 36 has an invalid length. [ 404.608769][T14868] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.3409: iget: bad i_size value: 360287970189639690 [ 404.634628][T14911] netlink: 'syz.0.3422': attribute type 10 has an invalid length. [ 404.692393][T14901] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.724641][T14910] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 404.734700][T14910] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 404.756324][T14911] veth1_vlan: left allmulticast mode [ 404.898943][ T59] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.936895][ T59] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.951910][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.953990][ T59] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.979413][ T59] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.026618][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3425'. [ 405.117539][T14926] loop6: detected capacity change from 0 to 256 [ 405.139186][T14926] FAT-fs (loop6): Directory bread(block 64) failed [ 405.146506][T14926] FAT-fs (loop6): Directory bread(block 65) failed [ 405.154408][T14926] FAT-fs (loop6): Directory bread(block 66) failed [ 405.164190][T14926] FAT-fs (loop6): Directory bread(block 67) failed [ 405.170770][T14926] FAT-fs (loop6): Directory bread(block 68) failed [ 405.177324][T14926] FAT-fs (loop6): Directory bread(block 69) failed [ 405.183969][T14926] FAT-fs (loop6): Directory bread(block 70) failed [ 405.190563][T14926] FAT-fs (loop6): Directory bread(block 71) failed [ 405.197213][T14926] FAT-fs (loop6): Directory bread(block 72) failed [ 405.203745][T14929] program syz.5.3429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.204130][T14926] FAT-fs (loop6): Directory bread(block 73) failed [ 405.436269][T14935] FAULT_INJECTION: forcing a failure. [ 405.436269][T14935] name failslab, interval 1, probability 0, space 0, times 0 [ 405.511536][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.5.3432 Tainted: G W syzkaller #0 PREEMPT(full) [ 405.511619][T14935] Tainted: [W]=WARN [ 405.511625][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.511678][T14935] Call Trace: [ 405.511684][T14935] [ 405.511690][T14935] __dump_stack+0x1d/0x30 [ 405.511714][T14935] dump_stack_lvl+0x95/0xd0 [ 405.511731][T14935] dump_stack+0x15/0x1b [ 405.511869][T14935] should_fail_ex+0x263/0x280 [ 405.511906][T14935] should_failslab+0x8c/0xb0 [ 405.511923][T14935] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 405.511945][T14935] ? __alloc_skb+0x2d6/0x690 [ 405.511966][T14935] __alloc_skb+0x2d6/0x690 [ 405.512055][T14935] ? __alloc_skb+0x200/0x690 [ 405.512128][T14935] netlink_alloc_large_skb+0xbf/0xf0 [ 405.512151][T14935] netlink_sendmsg+0x40c/0x6f0 [ 405.512255][T14935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.512281][T14935] ____sys_sendmsg+0x563/0x5b0 [ 405.512311][T14935] ___sys_sendmsg+0x195/0x1e0 [ 405.512407][T14935] __x64_sys_sendmsg+0xd4/0x160 [ 405.512435][T14935] x64_sys_call+0x194c/0x3020 [ 405.512518][T14935] do_syscall_64+0x12c/0x370 [ 405.512540][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.512562][T14935] RIP: 0033:0x7fd52da2c799 [ 405.512577][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.512597][T14935] RSP: 002b:00007fd52c487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.512614][T14935] RAX: ffffffffffffffda RBX: 00007fd52dca5fa0 RCX: 00007fd52da2c799 [ 405.512626][T14935] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 405.512664][T14935] RBP: 00007fd52c487090 R08: 0000000000000000 R09: 0000000000000000 [ 405.512678][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.512691][T14935] R13: 00007fd52dca6038 R14: 00007fd52dca5fa0 R15: 00007ffddde33398 [ 405.512710][T14935] [ 405.763062][ T3565] IPVS: starting estimator thread 0... [ 405.863544][T14947] IPVS: using max 2592 ests per chain, 129600 per kthread [ 405.958517][T14951] loop6: detected capacity change from 0 to 1024 [ 405.977862][T14951] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 405.993982][T14951] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 406.011341][T14951] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 406.031001][T14951] JBD2: no valid journal superblock found [ 406.056059][T14951] EXT4-fs (loop6): Could not load journal inode [ 406.322347][T14960] loop6: detected capacity change from 0 to 512 [ 406.349299][T14960] EXT4-fs: inline encryption not supported [ 406.565654][T14960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.605314][T14960] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.693664][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.764472][T14971] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 406.771021][T14971] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.797702][T14971] vhci_hcd vhci_hcd.0: Device attached [ 406.827018][T14972] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 406.834111][ T30] vhci_hcd vhci_hcd.5: stop threads [ 406.841056][ T30] vhci_hcd vhci_hcd.5: release socket [ 406.854242][T14983] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3447'. [ 406.855337][ T30] vhci_hcd vhci_hcd.5: disconnect device [ 406.863369][T14983] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3447'. [ 406.902047][T14986] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 407.074165][T14996] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3452'. [ 407.182429][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.202059][T14999] netlink: 'syz.0.3453': attribute type 1 has an invalid length. [ 407.212279][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.246519][T14999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.291474][T14999] bond1: (slave ip6erspan0): making interface the new active one [ 407.303130][T14999] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 407.385044][T15003] dummy0 speed is unknown, defaulting to 1000 [ 407.490207][T15003] dvmrp0: entered allmulticast mode [ 407.496994][T15003] dvmrp0: left allmulticast mode [ 407.687564][ T3565] hid (null): unknown global tag 0xd [ 407.693757][ T3565] hid-generic 0007:00C7:0003.0006: reserved main item tag 0xd [ 407.701392][ T3565] hid_parser_main: 73 callbacks suppressed [ 407.701479][ T3565] hid-generic 0007:00C7:0003.0006: unknown main item tag 0x3 [ 407.708171][T15018] ip6gretap1: entered promiscuous mode [ 407.715055][ T3565] hid-generic 0007:00C7:0003.0006: unknown global tag 0xd [ 407.721317][T15018] ip6gretap1: entered allmulticast mode [ 407.727670][ T3565] hid-generic 0007:00C7:0003.0006: item 0 1 1 13 parsing failed [ 407.741221][ T3565] hid-generic 0007:00C7:0003.0006: probe with driver hid-generic failed with error -22 [ 407.827837][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 407.893475][T15027] dummy0 speed is unknown, defaulting to 1000 [ 407.921097][T15024] loop6: detected capacity change from 0 to 512 [ 407.948486][T15032] dummy0 speed is unknown, defaulting to 1000 [ 407.950511][T15024] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 407.985576][T15024] EXT4-fs (loop6): 1 truncate cleaned up [ 408.012769][T15024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.172111][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.307095][T15050] program syz.4.3472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.641865][T15062] loop4: detected capacity change from 0 to 256 [ 408.995800][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 409.041657][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 409.188389][T15075] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3478'. [ 409.211908][T15075] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3478'. [ 409.296205][T15075] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3478'. [ 409.310408][T15094] loop5: detected capacity change from 0 to 512 [ 409.351875][T15094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.385723][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 409.478775][T15094] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.734747][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 409.734846][ T28] audit: type=1400 audit(1774458164.730:9622): avc: denied { link } for pid=15093 comm="syz.5.3484" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 409.861176][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.195567][T15114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3489'. [ 410.217295][T15112] loop5: detected capacity change from 0 to 128 [ 410.410986][T15119] loop4: detected capacity change from 0 to 1024 [ 410.494194][T15119] /dev/loop4: Can't open blockdev [ 411.219296][T15145] netlink: 'syz.0.3498': attribute type 15 has an invalid length. [ 411.227218][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3498'. [ 411.295645][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 411.881153][T15160] No such timeout policy "syz0" [ 412.063879][T15160] syzkaller0: entered promiscuous mode [ 412.111356][T15160] syzkaller0: entered allmulticast mode [ 412.286680][T15153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.295948][T15153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.303889][T15165] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3505'. [ 412.329065][T15153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.338273][T15153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.891094][T15210] bridge4: entered promiscuous mode [ 413.926632][T15214] sock: sock_timestamping_bind_phc: sock not bind to device [ 413.968434][T15218] netlink: 'syz.6.3525': attribute type 5 has an invalid length. [ 413.987123][ T28] audit: type=1326 audit(1774458168.714:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.014575][ T28] audit: type=1326 audit(1774458168.714:9625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.049090][ T28] audit: type=1326 audit(1774458168.714:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.076556][ T28] audit: type=1326 audit(1774458168.714:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.100338][ T28] audit: type=1326 audit(1774458168.714:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa5558d8bec code=0x7ffc0000 [ 414.124371][ T28] audit: type=1326 audit(1774458168.714:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa5558d8c4e code=0x7ffc0000 [ 414.203563][T15229] sock: sock_timestamping_bind_phc: sock not bind to device [ 414.242143][ T28] audit: type=1326 audit(1774458168.714:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.265960][ T28] audit: type=1326 audit(1774458168.714:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.272385][T15232] loop4: detected capacity change from 0 to 512 [ 414.289809][ T28] audit: type=1326 audit(1774458168.714:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15217 comm="syz.6.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55591c799 code=0x7ffc0000 [ 414.359045][T15232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.377354][T15232] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.426745][T15240] loop5: detected capacity change from 0 to 1024 [ 414.433695][T15240] EXT4-fs: inline encryption not supported [ 414.439677][T15240] EXT4-fs: Ignoring removed i_version option [ 414.461349][T15245] loop6: detected capacity change from 0 to 512 [ 414.468035][T15245] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 414.492143][T15240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.581107][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.704187][T15254] loop6: detected capacity change from 0 to 8192 [ 414.759134][T15256] dummy0 speed is unknown, defaulting to 1000 [ 414.998375][T15263] loop5: detected capacity change from 0 to 256 [ 415.039885][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.129192][T15267] loop5: detected capacity change from 0 to 1024 [ 415.188038][T15271] loop4: detected capacity change from 0 to 1024 [ 415.228296][T15271] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 415.281563][T15271] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.317226][T15273] veth0_to_team: entered promiscuous mode [ 415.319198][T15271] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 415.335584][T15273] __nla_validate_parse: 4 callbacks suppressed [ 415.335601][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3544'. [ 415.351479][T15271] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.3543: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 415.402012][T15271] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 415.402185][T15271] EXT4-fs (loop4): no journal found [ 415.411284][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 415.411322][ C1] EXT4-fs (loop4): initial error at time 1774458170: ext4_ext_check_inode:521: inode 2 [ 415.411346][ C1] EXT4-fs (loop4): last error at time 1774458170: ext4_ext_check_inode:521: inode 2 [ 415.543792][T15281] loop4: detected capacity change from 0 to 1024 [ 415.618774][T15281] EXT4-fs: inline encryption not supported [ 415.646003][T15281] EXT4-fs: Ignoring removed i_version option [ 415.690624][T15281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.771174][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 415.843264][T15295] loop6: detected capacity change from 0 to 1024 [ 415.866873][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.878528][T15295] EXT4-fs: inline encryption not supported [ 415.898077][T15298] loop4: detected capacity change from 0 to 128 [ 415.906496][T15295] EXT4-fs: Ignoring removed nobh option [ 415.912144][T15295] EXT4-fs: Ignoring removed bh option [ 415.942134][T15295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.984858][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 416.013733][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3560'. [ 416.051359][T15311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3560'. [ 416.062987][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3553'. [ 416.072416][T15311] FAULT_INJECTION: forcing a failure. [ 416.072416][T15311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.086297][T15311] CPU: 1 UID: 0 PID: 15311 Comm: syz.5.3560 Tainted: G W syzkaller #0 PREEMPT(full) [ 416.086325][T15311] Tainted: [W]=WARN [ 416.086331][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.086340][T15311] Call Trace: [ 416.086345][T15311] [ 416.086352][T15311] __dump_stack+0x1d/0x30 [ 416.086501][T15311] dump_stack_lvl+0x95/0xd0 [ 416.086518][T15311] dump_stack+0x15/0x1b [ 416.086612][T15311] should_fail_ex+0x263/0x280 [ 416.086633][T15311] should_fail+0xb/0x20 [ 416.086651][T15311] should_fail_usercopy+0x1a/0x20 [ 416.086671][T15311] _copy_to_user+0x20/0xa0 [ 416.086737][T15311] simple_read_from_buffer+0xb5/0x130 [ 416.086756][T15311] proc_fail_nth_read+0x10e/0x150 [ 416.086781][T15311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.086803][T15311] vfs_read+0x1ab/0x7f0 [ 416.086861][T15311] ? __rcu_read_unlock+0x4e/0x70 [ 416.086878][T15311] ? __fget_files+0x184/0x1c0 [ 416.086970][T15311] ? mutex_lock+0x57/0x90 [ 416.086994][T15311] ksys_read+0xdc/0x1a0 [ 416.087009][T15311] __x64_sys_read+0x40/0x50 [ 416.087112][T15311] x64_sys_call+0x2886/0x3020 [ 416.087133][T15311] do_syscall_64+0x12c/0x370 [ 416.087154][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.087236][T15311] RIP: 0033:0x7fd52d9ecfce [ 416.087251][T15311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 416.087266][T15311] RSP: 002b:00007fd52c486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.087285][T15311] RAX: ffffffffffffffda RBX: 00007fd52c4876c0 RCX: 00007fd52d9ecfce [ 416.087297][T15311] RDX: 000000000000000f RSI: 00007fd52c4870a0 RDI: 0000000000000004 [ 416.087354][T15311] RBP: 00007fd52c487090 R08: 0000000000000000 R09: 0000000000000000 [ 416.087376][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.087466][T15311] R13: 00007fd52dca6038 R14: 00007fd52dca5fa0 R15: 00007ffddde33398 [ 416.087482][T15311] [ 416.398439][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.511309][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 416.511323][ T28] audit: type=1326 audit(1774458171.081:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x0 [ 417.071786][T15358] netlink: 'syz.2.3574': attribute type 36 has an invalid length. [ 417.082721][T15358] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 417.092771][T15358] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 417.106012][T15358] netlink: 'syz.2.3574': attribute type 10 has an invalid length. [ 417.251708][ T28] audit: type=1326 audit(1774458171.773:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.320465][T15363] veth0_to_team: entered promiscuous mode [ 417.359174][ T28] audit: type=1326 audit(1774458171.792:9663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.460966][T15364] Symlink component flag not implemented [ 417.481900][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'. [ 417.500770][ T28] audit: type=1326 audit(1774458171.792:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.528718][T15364] Symlink component flag not implemented (116) [ 417.537541][ T28] audit: type=1326 audit(1774458171.792:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.583891][ T28] audit: type=1326 audit(1774458171.792:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.609105][ T28] audit: type=1326 audit(1774458171.811:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.633178][ T28] audit: type=1326 audit(1774458171.811:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.682801][ T28] audit: type=1326 audit(1774458171.811:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.710901][ T28] audit: type=1326 audit(1774458171.811:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.4.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7ffc0000 [ 417.786542][T15360] dummy0 speed is unknown, defaulting to 1000 [ 418.057418][T15384] FAT-fs (loop5): Directory bread(block 64) failed [ 418.081532][T15384] FAT-fs (loop5): Directory bread(block 65) failed [ 418.095370][T15384] FAT-fs (loop5): Directory bread(block 66) failed [ 418.102672][T15384] FAT-fs (loop5): Directory bread(block 67) failed [ 418.127224][T15384] FAT-fs (loop5): Directory bread(block 68) failed [ 418.136763][T15384] FAT-fs (loop5): Directory bread(block 69) failed [ 418.143716][T15384] FAT-fs (loop5): Directory bread(block 70) failed [ 418.151292][T15384] FAT-fs (loop5): Directory bread(block 71) failed [ 418.183757][T15384] FAT-fs (loop5): Directory bread(block 72) failed [ 418.190883][T15384] FAT-fs (loop5): Directory bread(block 73) failed [ 418.328113][T15402] EXT4-fs (loop6): 1 truncate cleaned up [ 418.351597][T15402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.458006][T15402] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3591: bg 0: block 465: padding at end of block bitmap is not set [ 418.473622][T15402] FAULT_INJECTION: forcing a failure. [ 418.473622][T15402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 418.487320][T15402] CPU: 1 UID: 0 PID: 15402 Comm: syz.6.3591 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.487415][T15402] Tainted: [W]=WARN [ 418.487422][T15402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.487435][T15402] Call Trace: [ 418.487443][T15402] [ 418.487450][T15402] __dump_stack+0x1d/0x30 [ 418.487490][T15402] dump_stack_lvl+0x95/0xd0 [ 418.487507][T15402] dump_stack+0x15/0x1b [ 418.487526][T15402] should_fail_ex+0x263/0x280 [ 418.487551][T15402] should_fail_alloc_page+0xf2/0x100 [ 418.487590][T15402] __alloc_frozen_pages_noprof+0x108/0x360 [ 418.487614][T15402] alloc_pages_mpol+0xb3/0x260 [ 418.487714][T15402] folio_alloc_noprof+0x96/0x150 [ 418.487780][T15402] filemap_alloc_folio_noprof+0x92/0x220 [ 418.487801][T15402] __filemap_get_folio_mpol+0x295/0x680 [ 418.487819][T15402] ? __ext4_journal_start_sb+0x130/0x330 [ 418.487843][T15402] ext4_convert_inline_data_to_extent+0x1f8/0x7d0 [ 418.487896][T15402] ext4_try_to_write_inline_data+0x54/0x90 [ 418.487916][T15402] ext4_write_begin+0x1a3/0xea0 [ 418.487947][T15402] ? __ext4_handle_dirty_metadata+0x200/0x470 [ 418.488022][T15402] ? find_inode_by_ino_rcu+0x9d/0x160 [ 418.488051][T15402] ? __brelse+0x32/0x60 [ 418.488071][T15402] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 418.488093][T15402] ext4_da_write_begin+0x1f0/0x6c0 [ 418.488112][T15402] ? inode_to_bdi+0x47/0xa0 [ 418.488129][T15402] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 418.488153][T15402] generic_perform_write+0x183/0x490 [ 418.488176][T15402] ? __mark_inode_dirty+0x200/0x7d0 [ 418.488215][T15402] ext4_buffered_write_iter+0x1ee/0x3c0 [ 418.488233][T15402] ext4_file_write_iter+0x380/0xfa0 [ 418.488250][T15402] ? kstrtouint+0x76/0xc0 [ 418.488267][T15402] ? selinux_file_permission+0x1f2/0x690 [ 418.488360][T15402] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 418.488379][T15402] vfs_write+0x5a6/0x9f0 [ 418.488410][T15402] ksys_write+0xdc/0x1a0 [ 418.488425][T15402] __x64_sys_write+0x40/0x50 [ 418.488484][T15402] x64_sys_call+0x27e1/0x3020 [ 418.488543][T15402] do_syscall_64+0x12c/0x370 [ 418.488567][T15402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.488584][T15402] RIP: 0033:0x7fa55591c799 [ 418.488597][T15402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.488613][T15402] RSP: 002b:00007fa55436f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.488703][T15402] RAX: ffffffffffffffda RBX: 00007fa555b95fa0 RCX: 00007fa55591c799 [ 418.488716][T15402] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000005 [ 418.488766][T15402] RBP: 00007fa55436f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.488779][T15402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.488791][T15402] R13: 00007fa555b96038 R14: 00007fa555b95fa0 R15: 00007ffd7f31c808 [ 418.488806][T15402] [ 418.810984][T15408] dummy0 speed is unknown, defaulting to 1000 [ 418.821486][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.894316][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'. [ 418.927712][T15418] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3595'. [ 418.949800][T15414] dummy0 speed is unknown, defaulting to 1000 [ 419.021142][T15418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.030934][T15418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.159926][T15423] FAULT_INJECTION: forcing a failure. [ 419.159926][T15423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.173978][T15423] CPU: 0 UID: 0 PID: 15423 Comm: syz.0.3596 Tainted: G W syzkaller #0 PREEMPT(full) [ 419.174006][T15423] Tainted: [W]=WARN [ 419.174013][T15423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.174173][T15423] Call Trace: [ 419.174180][T15423] [ 419.174193][T15423] __dump_stack+0x1d/0x30 [ 419.174230][T15423] dump_stack_lvl+0x95/0xd0 [ 419.174249][T15423] dump_stack+0x15/0x1b [ 419.174265][T15423] should_fail_ex+0x263/0x280 [ 419.174287][T15423] should_fail+0xb/0x20 [ 419.174341][T15423] should_fail_usercopy+0x1a/0x20 [ 419.174365][T15423] _copy_from_user+0x1c/0xb0 [ 419.174449][T15423] kstrtouint_from_user+0x69/0xf0 [ 419.174474][T15423] proc_fail_nth_write+0x50/0x160 [ 419.174567][T15423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 419.174612][T15423] vfs_write+0x269/0x9f0 [ 419.174640][T15423] ? __rcu_read_unlock+0x4e/0x70 [ 419.174661][T15423] ? __fget_files+0x184/0x1c0 [ 419.174758][T15423] ? mutex_lock+0x57/0x90 [ 419.174782][T15423] ksys_write+0xdc/0x1a0 [ 419.174800][T15423] __x64_sys_write+0x40/0x50 [ 419.174849][T15423] x64_sys_call+0x27e1/0x3020 [ 419.174872][T15423] do_syscall_64+0x12c/0x370 [ 419.174891][T15423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.174908][T15423] RIP: 0033:0x7fd12a9dcfce [ 419.174922][T15423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.175005][T15423] RSP: 002b:00007fd12946efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.175021][T15423] RAX: ffffffffffffffda RBX: 00007fd12946f6c0 RCX: 00007fd12a9dcfce [ 419.175033][T15423] RDX: 0000000000000001 RSI: 00007fd12946f0a0 RDI: 0000000000000004 [ 419.175045][T15423] RBP: 00007fd12946f090 R08: 0000000000000000 R09: 0000000000000000 [ 419.175058][T15423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.175071][T15423] R13: 00007fd12ac96038 R14: 00007fd12ac95fa0 R15: 00007fff83a8b9b8 [ 419.175149][T15423] [ 419.711591][T15439] syz.4.3603: attempt to access beyond end of device [ 419.711591][T15439] loop4: rw=0, sector=121, nr_sectors = 8 limit=128 [ 420.097206][T15445] set_capacity_and_notify: 5 callbacks suppressed [ 420.097222][T15445] loop4: detected capacity change from 0 to 512 [ 420.188410][T15445] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 420.210591][T15445] EXT4-fs (loop4): 1 truncate cleaned up [ 420.216613][T15445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.283022][T15444] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 420.345311][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.490198][T15467] FAULT_INJECTION: forcing a failure. [ 420.490198][T15467] name failslab, interval 1, probability 0, space 0, times 0 [ 420.503939][T15465] SET target dimension over the limit! [ 420.530656][T15467] CPU: 0 UID: 0 PID: 15467 Comm: syz.0.3614 Tainted: G W syzkaller #0 PREEMPT(full) [ 420.530706][T15467] Tainted: [W]=WARN [ 420.530713][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.530724][T15467] Call Trace: [ 420.530730][T15467] [ 420.530738][T15467] __dump_stack+0x1d/0x30 [ 420.530763][T15467] dump_stack_lvl+0x95/0xd0 [ 420.530793][T15467] dump_stack+0x15/0x1b [ 420.530831][T15467] should_fail_ex+0x263/0x280 [ 420.530854][T15467] should_failslab+0x8c/0xb0 [ 420.530875][T15467] __kmalloc_noprof+0xb8/0x4e0 [ 420.530895][T15467] ? alloc_pipe_info+0x1c8/0x340 [ 420.530937][T15467] alloc_pipe_info+0x1c8/0x340 [ 420.530956][T15467] splice_direct_to_actor+0x591/0x670 [ 420.530976][T15467] ? __pfx_direct_splice_actor+0x10/0x10 [ 420.530996][T15467] ? avc_policy_seqno+0x15/0x30 [ 420.531048][T15467] ? selinux_file_permission+0x1f2/0x690 [ 420.531139][T15467] do_splice_direct+0x119/0x1a0 [ 420.531159][T15467] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 420.531179][T15467] do_sendfile+0x382/0x650 [ 420.531274][T15467] __x64_sys_sendfile64+0xb8/0x150 [ 420.531297][T15467] x64_sys_call+0x2dc4/0x3020 [ 420.531325][T15467] do_syscall_64+0x12c/0x370 [ 420.531351][T15467] ? __common_interrupt+0x60/0xb0 [ 420.531379][T15467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.531475][T15467] RIP: 0033:0x7fd12aa1c799 [ 420.531491][T15467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.531572][T15467] RSP: 002b:00007fd12946f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 420.531588][T15467] RAX: ffffffffffffffda RBX: 00007fd12ac95fa0 RCX: 00007fd12aa1c799 [ 420.531627][T15467] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 420.531639][T15467] RBP: 00007fd12946f090 R08: 0000000000000000 R09: 0000000000000000 [ 420.531651][T15467] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 420.531694][T15467] R13: 00007fd12ac96038 R14: 00007fd12ac95fa0 R15: 00007fff83a8b9b8 [ 420.531712][T15467] [ 420.850785][T15482] dummy0 speed is unknown, defaulting to 1000 [ 420.876831][T15484] delete_channel: no stack [ 421.281153][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 421.551510][T15500] x_tables: unsorted underflow at hook 3 [ 421.568976][T15502] x_tables: unsorted underflow at hook 3 [ 421.645123][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 421.796588][T15525] syzkaller1: entered promiscuous mode [ 421.806960][T15525] syzkaller1: entered allmulticast mode [ 421.887512][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 422.109005][T15540] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.177383][T15549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3643'. [ 422.187274][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 422.350166][ T28] kauditd_printk_skb: 220 callbacks suppressed [ 422.350260][ T28] audit: type=1400 audit(1774458176.544:9891): avc: denied { bind } for pid=15569 comm="syz.0.3651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 422.351019][T15560] loop4: detected capacity change from 0 to 512 [ 422.406881][T15560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 422.448653][T15560] EXT4-fs (loop4): 1 truncate cleaned up [ 422.456626][T15571] dummy0 speed is unknown, defaulting to 1000 [ 422.467380][T15560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.861878][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 423.033484][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3656'. [ 423.043128][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3654'. [ 423.270597][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.352153][T15600] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 423.621305][T15605] futex_wake_op: syz.4.3662 tries to shift op by -3; fix this program [ 423.675935][T15607] dummy0 speed is unknown, defaulting to 1000 [ 423.756776][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3666'. [ 424.005895][T15620] loop4: detected capacity change from 0 to 512 [ 424.012618][T15620] EXT4-fs: Ignoring removed i_version option [ 424.022172][T15620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.772945][T15641] dummy0 speed is unknown, defaulting to 1000 [ 424.824579][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.009400][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3678'. [ 425.070575][T15657] loop6: detected capacity change from 0 to 512 [ 425.077673][T15657] EXT4-fs: Ignoring removed bh option [ 425.088605][T15657] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 425.121992][T15657] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 425.130745][T15657] EXT4-fs (loop6): orphan cleanup on readonly fs [ 425.137397][T15657] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3681: bad orphan inode 9 [ 425.147991][T15657] loop6: lost filesystem error report for type 5 error -117 [ 425.148647][T15657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.190341][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.321504][ T28] audit: type=1400 audit(1774458179.312:9892): avc: denied { write } for pid=15669 comm="syz.5.3686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 425.383421][T15676] netlink: 'syz.5.3689': attribute type 1 has an invalid length. [ 425.404061][T15676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.423753][T15678] loop4: detected capacity change from 0 to 256 [ 425.439028][T15676] bond1: (slave ip6erspan0): making interface the new active one [ 425.457259][T15676] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 425.484561][T15684] tmpfs: Bad value for 'mpol' [ 425.558863][T15689] loop4: detected capacity change from 0 to 512 [ 425.576442][T15689] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 425.601019][T15691] loop5: detected capacity change from 0 to 512 [ 425.620834][T15689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 425.629754][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.3694: iget: bad extra_isize 90 (inode size 256) [ 425.696636][T15689] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3693: Block bitmap for bg 0 marked uninitialized [ 425.710057][T15689] loop4: lost filesystem error report for type 5 error -117 [ 425.710125][T15691] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 425.715664][T15689] EXT4-fs (loop4): Remounting filesystem read-only [ 425.717489][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 425.739589][ C1] EXT4-fs (loop4): initial error at time 1774458179: ext4_read_block_bitmap_nowait:517 [ 425.747528][T15689] EXT4-fs (loop4): 1 orphan inode deleted [ 425.749276][ C1] EXT4-fs (loop4): last error at time 1774458179: ext4_read_block_bitmap_nowait:517 [ 425.769015][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 425.775458][ C1] EXT4-fs (loop5): initial error at time 1774458179: ext4_xattr_inode_iget:441: inode 11 [ 425.776344][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3694: error while reading EA inode 11 err=-117 [ 425.785334][ C1] EXT4-fs (loop5): last error at time 1774458179: ext4_xattr_inode_iget:441: inode 11 [ 425.820386][T15689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 425.843601][T15691] loop5: lost filesystem error report for type 5 error -117 [ 425.865428][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.3694: iget: bad extra_isize 90 (inode size 256) [ 425.896909][T15691] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 425.897064][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3694: error while reading EA inode 11 err=-117 [ 425.929918][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.937624][T15691] loop5: lost filesystem error report for type 5 error -117 [ 425.939100][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3694: iget: bad extra_isize 90 (inode size 256) [ 425.962668][T15691] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 425.962881][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3694: error while reading EA inode 18 err=-117 [ 425.985055][T15691] loop5: lost filesystem error report for type 5 error -117 [ 425.985232][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3694: iget: bad extra_isize 90 (inode size 256) [ 426.007342][T15691] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 426.007550][T15691] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3694: error while reading EA inode 18 err=-117 [ 426.034873][T15691] loop5: lost filesystem error report for type 5 error -117 [ 426.035156][T15691] EXT4-fs (loop5): 1 orphan inode deleted [ 426.048843][T15691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.143581][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.183687][T15718] loop5: detected capacity change from 0 to 512 [ 427.361471][T15727] __nla_validate_parse: 4 callbacks suppressed [ 427.361487][T15727] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.3705'. [ 427.437218][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 427.740725][ T28] audit: type=1326 audit(1774458181.585:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15732 comm="syz.0.3708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x0 [ 427.882186][T15738] loop4: detected capacity change from 0 to 512 [ 428.005542][T15738] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 428.127626][T15739] delete_channel: no stack [ 428.151680][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3709'. [ 428.214150][T15759] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3709'. [ 428.638800][T15770] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 428.645488][T15770] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 428.677131][T15770] vhci_hcd vhci_hcd.0: Device attached [ 428.695465][T15771] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 428.709239][ T30] vhci_hcd vhci_hcd.0: stop threads [ 428.716612][ T30] vhci_hcd vhci_hcd.0: release socket [ 428.724499][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 428.998685][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3723'. [ 429.199746][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3728'. [ 429.267393][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3728'. [ 429.409138][ T28] audit: type=1326 audit(1774458183.138:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.5.3730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd52da2c799 code=0x0 [ 429.442818][T15789] loop4: detected capacity change from 0 to 512 [ 429.491274][ T28] audit: type=1400 audit(1774458183.222:9895): avc: denied { getopt } for pid=15798 comm="syz.0.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.562696][ T28] audit: type=1400 audit(1774458183.279:9896): avc: denied { getopt } for pid=15787 comm="syz.4.3727" lport=58414 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 429.602579][T15808] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 429.614274][T15810] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 429.622962][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3737'. [ 429.650230][T15810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.849781][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 430.533626][T15854] netlink: 'syz.2.3752': attribute type 39 has an invalid length. [ 430.556267][T15855] loop6: detected capacity change from 0 to 128 [ 430.563006][T15855] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 430.655354][T15858] TCP: TCP_TX_DELAY enabled [ 430.705520][T15861] loop5: detected capacity change from 0 to 512 [ 430.752698][T15861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.793094][T15861] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.845475][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.903719][T15868] loop4: detected capacity change from 0 to 512 [ 430.912018][T15868] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3758: inode has both inline data and extents flags [ 430.938796][T15868] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 430.940373][T15868] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3758: couldn't read orphan inode 15 (err -117) [ 430.949860][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 430.949881][ C1] EXT4-fs (loop4): initial error at time 1774458184: ext4_orphan_get:1391: inode 15 [ 430.949938][ C1] EXT4-fs (loop4): last error at time 1774458184: ext4_orphan_get:1391: inode 15 [ 430.987132][T15868] loop4: lost filesystem error report for type 5 error -117 [ 430.987713][T15868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.011330][T15868] netlink: 'syz.4.3758': attribute type 4 has an invalid length. [ 431.029923][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.098328][T15875] loop4: detected capacity change from 0 to 1024 [ 431.114378][ T28] audit: type=1326 audit(1774458184.728:9897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15876 comm="syz.5.3761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd52da2c799 code=0x0 [ 431.119066][T15875] EXT4-fs: inline encryption not supported [ 431.172916][T15875] EXT4-fs: Ignoring removed i_version option [ 431.205577][T15875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.266697][T15875] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 431.352390][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.371450][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 431.397386][T15879] veth0_virt_wifi: entered promiscuous mode [ 431.446302][T15889] loop4: detected capacity change from 0 to 1024 [ 431.459771][ T28] audit: type=1326 audit(1774458185.065:9898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15884 comm="syz.0.3764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x0 [ 431.502842][T15889] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 431.529124][T15889] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 431.560226][T15889] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: comm syz.4.3765: inode #4294967295: comm syz.4.3765: iget: illegal inode # [ 431.619454][T15889] loop4: lost filesystem error report for type 5 error -117 [ 431.621733][T15889] EXT4-fs (loop4): no journal found [ 431.629054][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 431.629072][ C1] EXT4-fs (loop4): initial error at time 1774458185: ext4_get_journal_inode:5863 [ 431.629097][ C1] EXT4-fs (loop4): last error at time 1774458185: ext4_get_journal_inode:5863 [ 431.663523][T15889] EXT4-fs (loop4): can't get journal size [ 431.681000][T15889] EXT4-fs (loop4): failed to initialize system zone (-22) [ 431.696328][T15889] EXT4-fs (loop4): mount failed [ 431.703267][T15891] netlink: 'syz.2.3766': attribute type 21 has an invalid length. [ 431.847698][T15899] sock: sock_timestamping_bind_phc: sock not bind to device [ 432.445588][T15921] EXT4-fs (loop5): unable to read superblock [ 432.540132][T15916] ipvlan2: entered allmulticast mode [ 432.545688][T15916] dummy0: entered allmulticast mode [ 432.680753][T15933] dummy0 speed is unknown, defaulting to 1000 [ 432.708104][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.716669][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.918362][T15943] loop6: detected capacity change from 0 to 256 [ 433.143336][T15947] hub 8-0:1.0: USB hub found [ 433.148127][T15947] hub 8-0:1.0: 8 ports detected [ 433.157253][T15947] netlink: 'syz.6.3782': attribute type 36 has an invalid length. [ 433.170037][T15947] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 433.179971][T15947] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 433.192768][T15947] netlink: 'syz.6.3782': attribute type 10 has an invalid length. [ 433.536775][T15949] loop5: detected capacity change from 0 to 512 [ 433.572213][T15951] __nla_validate_parse: 2 callbacks suppressed [ 433.572226][T15951] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3784'. [ 433.580275][T15949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 433.614957][T15949] EXT4-fs (loop5): 1 truncate cleaned up [ 433.621545][T15949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.654276][T15957] 9p: Bad value for 'rfdno' [ 433.686136][T15957] hsr0: entered promiscuous mode [ 433.696573][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3785'. [ 433.696817][T14496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.770424][T15970] FAULT_INJECTION: forcing a failure. [ 433.770424][T15970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.784075][T15970] CPU: 1 UID: 0 PID: 15970 Comm: syz.4.3790 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.784234][T15970] Tainted: [W]=WARN [ 433.784241][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.784252][T15970] Call Trace: [ 433.784258][T15970] [ 433.784266][T15970] __dump_stack+0x1d/0x30 [ 433.784299][T15970] dump_stack_lvl+0x95/0xd0 [ 433.784321][T15970] dump_stack+0x15/0x1b [ 433.784341][T15970] should_fail_ex+0x263/0x280 [ 433.784442][T15970] should_fail+0xb/0x20 [ 433.784499][T15970] should_fail_usercopy+0x1a/0x20 [ 433.784523][T15970] _copy_to_user+0x20/0xa0 [ 433.784549][T15970] simple_read_from_buffer+0xb5/0x130 [ 433.784646][T15970] proc_fail_nth_read+0x10e/0x150 [ 433.784673][T15970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.784702][T15970] vfs_read+0x1ab/0x7f0 [ 433.784759][T15970] ? __rcu_read_unlock+0x4e/0x70 [ 433.784799][T15970] ? __fget_files+0x184/0x1c0 [ 433.784821][T15970] ? mutex_lock+0x57/0x90 [ 433.784843][T15970] ksys_read+0xdc/0x1a0 [ 433.784856][T15970] __x64_sys_read+0x40/0x50 [ 433.784899][T15970] x64_sys_call+0x2886/0x3020 [ 433.784922][T15970] do_syscall_64+0x12c/0x370 [ 433.784944][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.784965][T15970] RIP: 0033:0x7faa5074cfce [ 433.785031][T15970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.785048][T15970] RSP: 002b:00007faa4f1defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.785066][T15970] RAX: ffffffffffffffda RBX: 00007faa4f1df6c0 RCX: 00007faa5074cfce [ 433.785080][T15970] RDX: 000000000000000f RSI: 00007faa4f1df0a0 RDI: 0000000000000006 [ 433.785093][T15970] RBP: 00007faa4f1df090 R08: 0000000000000000 R09: 0000000000000000 [ 433.785104][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.785126][T15970] R13: 00007faa50a06038 R14: 00007faa50a05fa0 R15: 00007ffc8738c6f8 [ 433.785140][T15970] [ 434.037055][T15973] loop5: detected capacity change from 0 to 256 [ 434.146707][T15984] loop5: detected capacity change from 0 to 1024 [ 434.167008][T15984] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 434.190004][T15984] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 434.213172][T15984] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 434.232370][T15984] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.3795: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 434.269883][T15984] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 434.270110][T15984] EXT4-fs (loop5): no journal found [ 434.279272][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 434.279288][ C1] EXT4-fs (loop5): initial error at time 1774458187: ext4_ext_check_inode:521: inode 2 [ 434.279311][ C1] EXT4-fs (loop5): last error at time 1774458187: ext4_ext_check_inode:521: inode 2 [ 434.322080][T15988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15988 comm=syz.6.3796 [ 434.367850][T15988] netlink: '\%*': attribute type 1 has an invalid length. [ 434.389801][T15988] bond1: (slave gretap1): making interface the new active one [ 434.417388][T15988] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 434.498035][T15988] vlan2: entered allmulticast mode [ 434.503361][T15988] bond1: entered allmulticast mode [ 434.508666][T15988] gretap1: entered allmulticast mode [ 434.514748][T15988] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 434.627349][ T28] audit: type=1400 audit(1774458188.021:9899): avc: denied { associate } for pid=16006 comm="syz.6.3803" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 434.736830][T16011] loop5: detected capacity change from 0 to 256 [ 434.838921][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3807'. [ 434.862430][T16017] bond_slave_0: entered promiscuous mode [ 434.868252][T16017] bond_slave_1: entered promiscuous mode [ 434.886699][T16017] vlan2: entered promiscuous mode [ 434.897721][T16017] bond0: entered promiscuous mode [ 435.316248][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3810'. [ 437.117608][ T28] audit: type=1400 audit(1774458190.350:9900): avc: denied { map } for pid=16048 comm="syz.2.3818" path="socket:[89896]" dev="sockfs" ino=89896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.183520][ T28] audit: type=1400 audit(1774458190.350:9901): avc: denied { accept } for pid=16048 comm="syz.2.3818" path="socket:[89896]" dev="sockfs" ino=89896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 437.206219][T16053] netlink: 'syz.6.3820': attribute type 1 has an invalid length. [ 437.246447][T16053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.293807][T16053] bond2: (slave ip6erspan0): making interface the new active one [ 437.302880][T16053] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 437.407176][T16082] loop5: detected capacity change from 0 to 256 [ 437.470626][T16084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3831'. [ 437.482607][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3831'. [ 437.549331][T16086] hub 8-0:1.0: USB hub found [ 437.554268][T16086] hub 8-0:1.0: 8 ports detected [ 437.564056][T16086] netlink: 'syz.4.3829': attribute type 36 has an invalid length. [ 437.577103][T16086] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 437.587047][T16086] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 437.600087][T16086] netlink: 'syz.4.3829': attribute type 10 has an invalid length. [ 438.016408][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3835'. [ 438.035220][T16100] loop6: detected capacity change from 0 to 1024 [ 438.053750][T16100] EXT4-fs: inline encryption not supported [ 438.069331][T16100] EXT4-fs: Ignoring removed bh option [ 438.088841][T16100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.109777][T16100] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3836: Allocating blocks 449-513 which overlap fs metadata [ 438.159151][T16107] FAULT_INJECTION: forcing a failure. [ 438.159151][T16107] name failslab, interval 1, probability 0, space 0, times 0 [ 438.188517][T16107] CPU: 1 UID: 0 PID: 16107 Comm: syz.0.3838 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.188550][T16107] Tainted: [W]=WARN [ 438.188583][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.188595][T16107] Call Trace: [ 438.188649][T16107] [ 438.188656][T16107] __dump_stack+0x1d/0x30 [ 438.188682][T16107] dump_stack_lvl+0x95/0xd0 [ 438.188710][T16107] dump_stack+0x15/0x1b [ 438.188727][T16107] should_fail_ex+0x263/0x280 [ 438.188803][T16107] should_failslab+0x8c/0xb0 [ 438.188824][T16107] __kmalloc_noprof+0xb8/0x4e0 [ 438.188920][T16107] ? copy_splice_read+0xc2/0x6c0 [ 438.188938][T16107] copy_splice_read+0xc2/0x6c0 [ 438.188976][T16107] ? __pfx_copy_splice_read+0x10/0x10 [ 438.189053][T16100] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3836: Allocating blocks 497-513 which overlap fs metadata [ 438.189068][T16107] splice_direct_to_actor+0x26e/0x670 [ 438.189090][T16107] ? __pfx_direct_splice_actor+0x10/0x10 [ 438.189111][T16107] do_splice_direct+0x119/0x1a0 [ 438.189179][T16107] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 438.189204][T16107] do_sendfile+0x382/0x650 [ 438.189234][T16107] __x64_sys_sendfile64+0xb8/0x150 [ 438.189298][T16107] x64_sys_call+0x2dc4/0x3020 [ 438.189320][T16107] do_syscall_64+0x12c/0x370 [ 438.189342][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.189362][T16107] RIP: 0033:0x7fd12aa1c799 [ 438.189425][T16107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.189442][T16107] RSP: 002b:00007fd12946f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 438.189530][T16107] RAX: ffffffffffffffda RBX: 00007fd12ac95fa0 RCX: 00007fd12aa1c799 [ 438.189557][T16107] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 438.189569][T16107] RBP: 00007fd12946f090 R08: 0000000000000000 R09: 0000000000000000 [ 438.189581][T16107] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 438.189593][T16107] R13: 00007fd12ac96038 R14: 00007fd12ac95fa0 R15: 00007fff83a8b9b8 [ 438.189610][T16107] [ 438.534305][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.600469][T16111] loop4: detected capacity change from 0 to 1024 [ 438.914858][T16129] loop6: detected capacity change from 0 to 512 [ 438.922075][T16129] EXT4-fs: Ignoring removed i_version option [ 438.965368][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3846'. [ 439.493155][T16129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.342231][T16142] netlink: 'syz.4.3847': attribute type 36 has an invalid length. [ 440.353071][T16142] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 440.362929][T16142] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 440.376236][T16142] netlink: 'syz.4.3847': attribute type 10 has an invalid length. [ 440.451550][T16139] hub 8-0:1.0: USB hub found [ 440.456518][T16139] hub 8-0:1.0: 8 ports detected [ 440.669727][T12870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.796929][T16163] netlink: 'syz.2.3850': attribute type 36 has an invalid length. [ 440.809909][T16163] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 440.819788][T16163] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 440.833344][T16163] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 441.390335][T16179] loop4: detected capacity change from 0 to 256 [ 441.407043][T16177] loop6: detected capacity change from 0 to 1024 [ 441.477929][T16177] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 441.494666][T16179] FAT-fs (loop4): Directory bread(block 64) failed [ 441.510286][T16179] FAT-fs (loop4): Directory bread(block 65) failed [ 441.521706][T16177] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 441.547343][T16177] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 441.610588][T16177] JBD2: no valid journal superblock found [ 441.617007][T16177] EXT4-fs (loop6): Could not load journal inode [ 441.626054][T16179] FAT-fs (loop4): Directory bread(block 66) failed [ 441.632834][T16179] FAT-fs (loop4): Directory bread(block 67) failed [ 441.639674][T16179] FAT-fs (loop4): Directory bread(block 68) failed [ 441.654114][T16179] FAT-fs (loop4): Directory bread(block 69) failed [ 441.662391][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3862'. [ 441.685695][T16186] loop5: detected capacity change from 0 to 256 [ 441.685990][T16183] bond2: entered promiscuous mode [ 441.697338][T16183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.702885][T16179] FAT-fs (loop4): Directory bread(block 70) failed [ 441.772902][T16179] FAT-fs (loop4): Directory bread(block 71) failed [ 441.779672][T16179] FAT-fs (loop4): Directory bread(block 72) failed [ 441.786426][T16179] FAT-fs (loop4): Directory bread(block 73) failed [ 441.804682][T16194] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 441.811358][T16194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.824288][T16192] loop5: detected capacity change from 0 to 256 [ 441.831452][T16194] vhci_hcd vhci_hcd.0: Device attached [ 441.844337][T16195] vhci_hcd: connection closed [ 441.844530][ T59] vhci_hcd vhci_hcd.6: stop threads [ 441.844804][T16198] bridge0: entered promiscuous mode [ 441.849693][ T59] vhci_hcd vhci_hcd.6: release socket [ 441.854605][T16198] macvtap1: entered promiscuous mode [ 441.863404][ T59] vhci_hcd vhci_hcd.6: disconnect device [ 442.058269][T16208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3871'. [ 442.215671][T16210] syzkaller0: entered promiscuous mode [ 442.221277][T16210] syzkaller0: entered allmulticast mode [ 442.464768][T16218] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 442.513897][T16218] tmpfs: Bad value for 'mpol' [ 442.520587][T16234] netlink: 'syz.6.3883': attribute type 1 has an invalid length. [ 442.687635][T16234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.717773][ T28] audit: type=1400 audit(1774458195.588:9902): avc: denied { accept } for pid=16244 comm="syz.6.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 442.747882][T16245] program syz.6.3886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.886850][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3887'. [ 443.025964][T16259] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3889'. [ 443.035204][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3889'. [ 443.044214][T16259] tipc: Started in network mode [ 443.094461][T16259] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 443.103927][T16259] tipc: Enabling of bearer rejected, failed to enable media [ 443.120033][T16258] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3889'. [ 443.140257][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3889'. [ 443.149623][T16258] tipc: Enabling of bearer rejected, failed to enable media [ 443.227478][ T28] audit: type=1400 audit(1774458196.075:9903): avc: denied { map } for pid=16262 comm="syz.5.3891" path="socket:[90646]" dev="sockfs" ino=90646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 443.388083][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3892'. [ 443.761217][T16277] syzkaller0: entered promiscuous mode [ 443.779088][T16277] syzkaller0: entered allmulticast mode [ 444.017918][T16300] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 444.024455][T16300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 444.047863][T16305] netlink: 'syz.2.3905': attribute type 8 has an invalid length. [ 444.049655][T16300] vhci_hcd vhci_hcd.0: Device attached [ 444.079942][T16301] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 444.087286][ T70] vhci_hcd vhci_hcd.5: stop threads [ 444.092501][ T70] vhci_hcd vhci_hcd.5: release socket [ 444.107348][ T70] vhci_hcd vhci_hcd.5: disconnect device [ 444.133132][T16306] bond2: option ad_user_port_key: invalid value (28003) [ 444.182795][T16306] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 444.217089][T16306] bond2 (unregistering): Released all slaves [ 444.232681][T16308] bond2: option mode: invalid value (9) [ 444.240769][T16308] bond2 (unregistering): Released all slaves [ 444.606173][T16324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3911'. [ 444.623110][T16324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3911'. [ 444.623848][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3910'. [ 444.644460][T16325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=16325 comm=syz.4.3910 [ 444.681338][T16331] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 444.698490][T16331] gretap1: entered allmulticast mode [ 444.705641][T16331] bond1: (slave gretap1): making interface the new active one [ 444.713798][T16331] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 444.730852][T16334] loop5: detected capacity change from 0 to 128 [ 444.779583][T16342] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3913'. [ 444.788923][T16324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3911'. [ 445.703440][T16361] netlink: 'syz.5.3921': attribute type 13 has an invalid length. [ 446.076273][T16383] loop6: detected capacity change from 0 to 512 [ 446.090089][T16385] syzkaller0: entered promiscuous mode [ 446.132127][T16385] syzkaller0: entered allmulticast mode [ 446.137847][T16383] EXT4-fs (loop6): fragment/cluster size (131072) != block size (4096) [ 446.197389][T16392] loop5: detected capacity change from 0 to 128 [ 446.243233][T16387] loop4: detected capacity change from 0 to 128 [ 446.313742][T16394] loop6: detected capacity change from 0 to 8192 [ 446.322664][T16394] random: crng reseeded on system resumption [ 446.486142][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3936'. [ 446.621406][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 447.366833][T16426] netlink: 'syz.6.3946': attribute type 9 has an invalid length. [ 447.431705][T16431] hub 8-0:1.0: USB hub found [ 447.436478][T16431] hub 8-0:1.0: 8 ports detected [ 447.445966][T16431] netlink: 'syz.4.3941': attribute type 36 has an invalid length. [ 447.459551][T16431] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 447.469531][T16431] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 447.482556][T16431] netlink: 'syz.4.3941': attribute type 10 has an invalid length. [ 447.568559][T16426] netlink: 'syz.6.3946': attribute type 7 has an invalid length. [ 447.626425][T16426] netlink: 'syz.6.3946': attribute type 8 has an invalid length. [ 447.821919][T16440] loop6: detected capacity change from 0 to 512 [ 447.856959][T16440] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 447.958561][T16444] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3951'. [ 447.969254][T16444] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3951'. [ 448.031237][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 448.056772][ T28] audit: type=1326 audit(1774458200.583:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz.0.3957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x0 [ 448.692668][T16480] loop6: detected capacity change from 0 to 256 [ 449.176478][T16500] netlink: 'syz.5.3973': attribute type 36 has an invalid length. [ 449.190111][T16500] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 449.200062][T16500] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 449.213415][T16500] netlink: 'syz.5.3973': attribute type 10 has an invalid length. [ 449.600325][ T28] audit: type=1400 audit(1774458201.697:9905): avc: denied { mounton } for pid=16496 comm="syz.0.3974" path="/" dev="tmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 449.641404][T16500] macvlan1: entered allmulticast mode [ 449.650209][T16500] veth1_vlan: entered allmulticast mode [ 449.659431][T16500] team0: Port device macvlan1 added [ 450.417651][ T28] audit: type=1400 audit(1774458202.782:9906): avc: denied { write } for pid=16521 comm="syz.6.3979" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 450.445621][ T28] audit: type=1326 audit(1774458202.819:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16525 comm="syz.0.3981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd12aa1c799 code=0x0 [ 450.555168][T16534] loop6: detected capacity change from 0 to 1024 [ 450.564747][T16534] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 450.587888][T16534] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 450.603354][T16534] EXT4-fs error (device loop6): ext4_get_journal_inode:5863: comm syz.6.3984: inode #4294967295: comm syz.6.3984: iget: illegal inode # [ 450.617899][T16534] loop6: lost filesystem error report for type 5 error -117 [ 450.618060][T16534] EXT4-fs (loop6): no journal found [ 450.625356][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 450.625376][ C1] EXT4-fs (loop6): initial error at time 1774458202: ext4_get_journal_inode:5863 [ 450.625401][ C1] EXT4-fs (loop6): last error at time 1774458202: ext4_get_journal_inode:5863 [ 450.656143][T16534] EXT4-fs (loop6): can't get journal size [ 450.662358][T16534] EXT4-fs (loop6): failed to initialize system zone (-22) [ 450.669618][T16534] EXT4-fs (loop6): mount failed [ 451.529254][ T28] audit: type=1326 audit(1774458203.820:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.564617][ T28] audit: type=1326 audit(1774458203.820:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.588567][ T28] audit: type=1326 audit(1774458203.820:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.612455][ T28] audit: type=1326 audit(1774458203.820:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.630403][T16549] __nla_validate_parse: 4 callbacks suppressed [ 451.630420][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 451.645889][ T28] audit: type=1326 audit(1774458203.820:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.681477][ T28] audit: type=1326 audit(1774458203.820:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.705477][ T28] audit: type=1326 audit(1774458203.820:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16512 comm="syz.4.3977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x7fc00000 [ 451.805545][T16556] loop6: detected capacity change from 0 to 1024 [ 451.808048][T16558] sock: sock_timestamping_bind_phc: sock not bind to device [ 451.817297][T16556] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 451.844870][T16556] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 451.863753][T16556] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 452.242590][T16556] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.3989: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 452.262613][T16556] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 452.262837][T16556] EXT4-fs (loop6): no journal found [ 452.271980][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 452.272020][ C1] EXT4-fs (loop6): initial error at time 1774458204: ext4_ext_check_inode:521: inode 2 [ 452.272069][ C1] EXT4-fs (loop6): last error at time 1774458204: ext4_ext_check_inode:521: inode 2 [ 452.389864][T16572] loop4: detected capacity change from 0 to 512 [ 452.413156][T16572] /dev/loop4: Can't open blockdev [ 452.550776][T16579] loop5: detected capacity change from 0 to 1024 [ 452.559536][T16579] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 452.581439][T16579] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 452.593647][T16579] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 452.604462][T16579] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.3998: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 452.623127][T16579] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 452.623296][T16579] EXT4-fs (loop5): no journal found [ 452.632357][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 452.632394][ C1] EXT4-fs (loop5): initial error at time 1774458204: ext4_ext_check_inode:521: inode 2 [ 452.632437][ C1] EXT4-fs (loop5): last error at time 1774458204: ext4_ext_check_inode:521: inode 2 [ 453.657261][T16611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 453.663823][T16611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 453.677275][T16611] vhci_hcd vhci_hcd.0: Device attached [ 453.685623][T16612] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 453.692750][ T30] vhci_hcd vhci_hcd.4: stop threads [ 453.698450][ T30] vhci_hcd vhci_hcd.4: release socket [ 453.707598][ T30] vhci_hcd vhci_hcd.4: disconnect device [ 453.795698][T16617] loop5: detected capacity change from 0 to 764 [ 453.833791][T16630] loop6: detected capacity change from 0 to 512 [ 453.844961][T16630] EXT4-fs: Ignoring removed bh option [ 453.845764][T16625] dummy0 speed is unknown, defaulting to 1000 [ 453.863381][T16632] loop5: detected capacity change from 0 to 512 [ 453.870242][T16630] EXT4-fs (loop6): invalid inodes per group: 0 [ 453.870242][T16630] [ 453.894225][T16632] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.922475][ T3565] kernel read not supported for file / (pid: 3565 comm: kworker/1:5) [ 453.951921][T16625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46116 sclass=netlink_route_socket pid=16625 comm=syz.2.4012 [ 454.004317][T16643] loop5: detected capacity change from 0 to 128 [ 454.022899][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4022'. [ 454.049077][T16646] loop6: detected capacity change from 0 to 256 [ 454.068725][T16646] program syz.6.4023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.226819][T16655] FAT-fs (loop11): unable to read boot sector [ 455.128087][T16672] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4031'. [ 455.148975][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 455.148989][ T28] audit: type=1400 audit(1774458207.225:9981): avc: denied { read } for pid=16671 comm="syz.0.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.282790][T16727] loop5: detected capacity change from 0 to 256 [ 456.371859][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4054'. [ 456.762915][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4069'. [ 456.777267][T16761] loop4: detected capacity change from 0 to 8192 [ 456.869680][T16772] loop5: detected capacity change from 0 to 512 [ 456.897094][T16772] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.918585][T16772] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 457.003865][T16761] dummy0 speed is unknown, defaulting to 1000 [ 457.821522][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4079'. [ 458.182272][T16816] program syz.6.4085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.260247][T16816] loop6: detected capacity change from 0 to 128 [ 458.318333][T16824] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4087'. [ 458.378151][T16824] netlink: 'syz.6.4087': attribute type 1 has an invalid length. [ 458.387909][T16824] netlink: 'syz.6.4087': attribute type 1 has an invalid length. [ 458.400077][T16824] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4087'. [ 458.410403][T16824] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4087'. [ 458.420120][T16824] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4087'. [ 459.128001][T16838] netlink: 'syz.6.4091': attribute type 1 has an invalid length. [ 459.152714][T16840] x_tables: unsorted underflow at hook 3 [ 459.382195][T16838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.411427][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4096'. [ 459.565541][T16857] FAULT_INJECTION: forcing a failure. [ 459.565541][T16857] name failslab, interval 1, probability 0, space 0, times 0 [ 459.605098][T16857] CPU: 1 UID: 0 PID: 16857 Comm: syz.6.4099 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.605127][T16857] Tainted: [W]=WARN [ 459.605132][T16857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.605142][T16857] Call Trace: [ 459.605148][T16857] [ 459.605154][T16857] __dump_stack+0x1d/0x30 [ 459.605177][T16857] dump_stack_lvl+0x95/0xd0 [ 459.605198][T16857] dump_stack+0x15/0x1b [ 459.605218][T16857] should_fail_ex+0x263/0x280 [ 459.605259][T16857] should_failslab+0x8c/0xb0 [ 459.605287][T16857] kmem_cache_alloc_noprof+0x66/0x400 [ 459.605308][T16857] ? skb_clone+0x151/0x1f0 [ 459.605414][T16857] skb_clone+0x151/0x1f0 [ 459.605440][T16857] __netlink_deliver_tap+0x2c9/0x500 [ 459.605473][T16857] netlink_unicast+0x66b/0x690 [ 459.605548][T16857] netlink_sendmsg+0x5c8/0x6f0 [ 459.605573][T16857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.605668][T16857] ____sys_sendmsg+0x563/0x5b0 [ 459.605694][T16857] ___sys_sendmsg+0x195/0x1e0 [ 459.605735][T16857] __x64_sys_sendmsg+0xd4/0x160 [ 459.605851][T16857] x64_sys_call+0x194c/0x3020 [ 459.605903][T16857] do_syscall_64+0x12c/0x370 [ 459.605926][T16857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.605945][T16857] RIP: 0033:0x7fa55591c799 [ 459.605958][T16857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.605999][T16857] RSP: 002b:00007fa55436f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.606018][T16857] RAX: ffffffffffffffda RBX: 00007fa555b95fa0 RCX: 00007fa55591c799 [ 459.606030][T16857] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 459.606041][T16857] RBP: 00007fa55436f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.606131][T16857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.606144][T16857] R13: 00007fa555b96038 R14: 00007fa555b95fa0 R15: 00007ffd7f31c808 [ 459.606197][T16857] [ 459.948308][ T28] audit: type=1326 audit(1774458211.715:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.4.4105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa5078c799 code=0x0 [ 460.193733][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4106'. [ 460.410678][ T28] audit: type=1400 audit(1774458212.145:9983): avc: denied { setattr } for pid=16897 comm="syz.0.4115" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 460.955025][T16907] loop6: detected capacity change from 0 to 256 [ 460.974720][T16907] FAT-fs (loop6): Directory bread(block 64) failed [ 460.981278][T16907] FAT-fs (loop6): Directory bread(block 65) failed [ 460.988492][T16907] FAT-fs (loop6): Directory bread(block 66) failed [ 460.995131][T16907] FAT-fs (loop6): Directory bread(block 67) failed [ 461.002142][T16907] FAT-fs (loop6): Directory bread(block 68) failed [ 461.009262][T16907] FAT-fs (loop6): Directory bread(block 69) failed [ 461.015799][T16907] FAT-fs (loop6): Directory bread(block 70) failed [ 461.022528][T16907] FAT-fs (loop6): Directory bread(block 71) failed [ 461.029254][T16907] FAT-fs (loop6): Directory bread(block 72) failed [ 461.035763][T16907] FAT-fs (loop6): Directory bread(block 73) failed [ 461.690177][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'. [ 461.724811][T16937] dummy0 speed is unknown, defaulting to 1000 [ 461.831515][T16937] dummy0 speed is unknown, defaulting to 1000 [ 462.196181][T16948] loop6: detected capacity change from 0 to 1024 [ 462.317172][T16948] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 462.422841][T16948] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 462.499260][T16948] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 462.510256][T16960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4138'. [ 462.526809][T16948] JBD2: no valid journal superblock found [ 462.532955][T16958] loop5: detected capacity change from 0 to 256 [ 462.544092][T16948] EXT4-fs (loop6): Could not load journal inode [ 462.563516][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4138'. [ 462.574999][T16958] FAT-fs (loop5): Directory bread(block 64) failed [ 462.581760][T16958] FAT-fs (loop5): Directory bread(block 65) failed [ 462.588418][T16958] FAT-fs (loop5): Directory bread(block 66) failed [ 462.594923][T16958] FAT-fs (loop5): Directory bread(block 67) failed [ 462.601485][T16958] FAT-fs (loop5): Directory bread(block 68) failed [ 462.608017][T16958] FAT-fs (loop5): Directory bread(block 69) failed [ 462.614620][T16958] FAT-fs (loop5): Directory bread(block 70) failed [ 462.621405][T16958] FAT-fs (loop5): Directory bread(block 71) failed [ 462.628103][T16958] FAT-fs (loop5): Directory bread(block 72) failed [ 462.634650][T16958] FAT-fs (loop5): Directory bread(block 73) failed [ 462.708484][T16964] Cannot find map_set index 135 as target [ 463.587168][T16992] __nla_validate_parse: 1 callbacks suppressed [ 463.587182][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4149'. [ 463.958004][T16995] loop4: detected capacity change from 0 to 512 [ 463.985638][T16995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.053793][T16995] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.127404][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4150'. [ 464.136453][ T28] audit: type=1400 audit(1774458215.625:9984): avc: denied { setattr } for pid=16990 comm="syz.5.4150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 464.338899][T17006] syzkaller0: entered promiscuous mode [ 464.362162][T17006] syzkaller0: entered allmulticast mode [ 464.457396][T17009] batadv1: entered promiscuous mode [ 464.599041][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.644585][T17027] loop4: detected capacity change from 0 to 512 [ 464.733644][T17027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.843941][T17027] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.903532][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4162'. [ 464.935107][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4162'. [ 464.989533][T14202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.042140][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 465.058716][ T28] audit: type=1400 audit(1774458216.495:9985): avc: denied { setopt } for pid=17058 comm="syz.5.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 465.088411][ T28] audit: type=1400 audit(1774458216.495:9986): avc: denied { listen } for pid=17058 comm="syz.5.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 465.589476][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4177'. [ 465.641079][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4179'. [ 466.007112][T17089] ================================================================== [ 466.015227][T17089] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 466.022609][T17089] [ 466.024927][T17089] write to 0xffff888162d2b000 of 4096 bytes by task 17088 on cpu 1: [ 466.032908][T17089] _copy_from_iter+0x258/0xea0 [ 466.037684][T17089] copy_page_from_iter+0x178/0x2a0 [ 466.042834][T17089] process_vm_rw+0x6ad/0x9c0 [ 466.047406][T17089] __x64_sys_process_vm_writev+0x78/0x90 [ 466.053031][T17089] x64_sys_call+0x1592/0x3020 [ 466.057697][T17089] do_syscall_64+0x12c/0x370 [ 466.062370][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.068245][T17089] [ 466.070552][T17089] write to 0xffff888162d2b000 of 4096 bytes by task 17089 on cpu 0: [ 466.078501][T17089] _copy_from_iter+0x258/0xea0 [ 466.083254][T17089] copy_page_from_iter+0x178/0x2a0 [ 466.088454][T17089] process_vm_rw+0x6ad/0x9c0 [ 466.093031][T17089] __x64_sys_process_vm_writev+0x78/0x90 [ 466.098731][T17089] x64_sys_call+0x1592/0x3020 [ 466.103417][T17089] do_syscall_64+0x12c/0x370 [ 466.107999][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.113880][T17089] [ 466.116182][T17089] Reported by Kernel Concurrency Sanitizer on: [ 466.122315][T17089] CPU: 0 UID: 0 PID: 17089 Comm: syz.2.4184 Tainted: G W syzkaller #0 PREEMPT(full) [ 466.133404][T17089] Tainted: [W]=WARN [ 466.137185][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.147319][T17089] ================================================================== [ 470.298866][ T12] team0: left allmulticast mode [ 470.303803][ T12] C: left allmulticast mode [ 470.308601][ T12] team_slave_1: left allmulticast mode [ 470.314161][ T12] dummy0: left allmulticast mode [ 470.319205][ T12] team0: left promiscuous mode [ 470.324032][ T12] C: left promiscuous mode [ 470.328629][ T12] team_slave_1: left promiscuous mode [ 470.334143][ T12] macvlan1: left promiscuous mode [ 470.339247][ T12] dummy0: left promiscuous mode [ 470.344290][ T12] bridge0: port 3(team0) entered disabled state [ 470.351435][ T12] bridge_slave_1: left allmulticast mode [ 470.357145][ T12] bridge_slave_1: left promiscuous mode [ 470.362916][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.370963][ T12] bridge_slave_0: left allmulticast mode [ 470.376744][ T12] bridge_slave_0: left promiscuous mode [ 470.382533][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.468696][ T12] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 471.035351][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.044117][ T12] bond_slave_0: left promiscuous mode [ 471.050559][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.060105][ T12] bond_slave_1: left promiscuous mode [ 471.066359][ T12] bond0 (unregistering): Released all slaves [ 471.073909][ T12] bond1 (unregistering): Released all slaves [ 471.082517][ T12] bond2 (unregistering): Released all slaves [ 471.115168][ T12] hsr_slave_0: left promiscuous mode [ 471.121077][ T12] hsr_slave_1: left promiscuous mode [ 471.126762][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.134245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.141885][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.149258][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.159139][ T12] veth0_virt_wifi: left promiscuous mode [ 471.165121][ T12] veth1_macvtap: left promiscuous mode [ 471.170685][ T12] veth0_macvtap: left promiscuous mode [ 471.176269][ T12] veth1_vlan: left promiscuous mode [ 471.181680][ T12] veth0_vlan: left promiscuous mode [ 471.225346][ T12] team0 (unregistering): Port device macvlan1 removed [ 471.249839][ T12] team0 (unregistering): Port device team_slave_1 removed [ 471.259152][ T12] team0 (unregistering): Port device C removed [ 471.283449][ T12] team0 (unregistering): Port device dummy0 removed [ 471.296881][ T3508] dummy0 speed is unknown, defaulting to 1000 [ 471.303025][ T3508] infiniband syz1: ib_query_port failed (-19) [ 471.517476][ T12] IPVS: stop unused estimator thread 0... [ 471.931167][ T35] page_pool_release_retry() stalled pool shutdown: id 96, 1 inflight 60 sec