last executing test programs: 2m42.252579399s ago: executing program 3 (id=112): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff14000000180001801400f6006e657464657673696d3000f5ffffff00050019"], 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a00000800000500"], 0x50}}, 0x4000850) (fail_nth: 7) 2m41.933524508s ago: executing program 3 (id=114): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x0, 0x1}, 0x29, 0x4, &(0x7f00000000c0)={0xa0, 0x0, 0x2, 0xfff}, 0x8, 0x9, 0x80000002, 0x0, 0x9, 0x1, 0x0}) 2m41.872935282s ago: executing program 3 (id=117): r0 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x580, &(0x7f00000007c0)="$eJzs3V1rHFUfAPD/bDZ9Sfs8SaEU9UICvbBSu2kSXyoIrZeixYLe1yXZhpJNt2Q3pYmFthf2xhspgogF8QPotZfFL+CnKGihSAl64U1kNrPNNtnN65rdur8fTHLOzCTnnD1zzvxnZ5YNoG+Npj9yES9HxFdJxHDTtnxkG0dX91t+emsqXZJYWfnkjySSbF1j/yT7fSTLvBQRv3wRcTq3sdzq4tJssVwuzWf5sdrc9bHq4tKZq3PFmdJM6drE5OS5tyYn3n3n7Y619fVLf3378cMPzn15cvmbHx8fu5/EhTiabWtuxx7cac6Mxmj2mgzGhXU7jnegsF6SdLsC7MpANs4HI50DhmMgG/XAf9/tiFgB+lRi/EOfasQBjWv7Dl0HvzCevL96AbSx/fnV90biUP3aaGg5ee7KKL3eHelA+WkZP//+4H66xBbvQ9zuQHkADXfuRsTZfH7j/Jdk89/una2/eby59WX02/kHuulhGv+80Sr+yT2Lf6JF/HOkxdjdja3Hf+5xRBzsQFEtpfHfey3j32dT18hAlvtfPeYbTK5cLZfORsT/I+JUDB5M85vdzzm3/Gil3bbm+C9d0vIbsWBWj8f5da2fLtaKe2lzsyd3I15Zi3+T2DD/H6rHuuv7P309Lm2zjBOlB6+227Z1+5t1PgJe+SHitZb9v3ZHK9n8/uRY/XgYaxwVG/1578Sv7crfWfs7L+3/oc3bP5I036+t7ryM7w/9XWq3bbfH/4Hk03r6QLbuZrFWmx+POJB8tHH9xNrfNvKN/dP2nzq5+fzX6vg/HBGfbbP9947fa7trL/T/9I76f+eJRx9+/l278rfX/2/WU6eyNduZ/7Zbwb28dgAAAAAAANBrchFxNJJc4Vk6lysUVp/vOB5DuXKlWjt9pbJwbTrqn5UdicFc4073cNPzEOPZ87CN/MS6/GREHIuIrwcO1/OFqUp5utuNBwAAAAAAAAAAAAAAAAAAgB5xpM3n/1O/DXS7dsC/zld+Q//acvx34puegJ7k/A/9y/iH/pVvmQT6gUEP/atp/CdJNysC7Dvnf+hfa+N/qKv1APaf8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAB01KWLF9NlZfnprak0P31jcWG2cuPMdKk6W5hbmCpMVeavF2YqlZlyqTBVmdvq/5UrlevjE7Fwc6xWqtbGqotLl+cqC9dql6/OFWdKl0uD+9IqAAAAAAAAAAAAAAAAAAAAeLFUF5dmi+VyaV6ibeJ89EQ1dp1Iturl89nBsKsi8t1voMS6xE/Dex/d3ZyVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5/wQAAP//sHcxLQ==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000000004c900200037000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x0, 0x1}, 0x29, 0x4, &(0x7f00000000c0)={0xa0, 0x0, 0x2, 0xfff}, 0x8, 0x9, 0x80000002, 0x0, 0x9, 0x1, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb305000100000000000800034000008001080002"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) 2m41.323861463s ago: executing program 3 (id=125): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000404, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@grpjquota}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4fb, &(0x7f0000000580)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01020000000000000000010800000900010073797a30000000002c000000030a01020000000000000000010f00000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100fffd0900010073797a300000000008000b40000000003800048034000180200001007866726d00000000240002800500030001000000080004400000000208000140000000150800024000000002140000001100010000000000000000000000000a"], 0xd4}}, 0x4000040) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff0000fc020000000000000000000000000000ff0200000000000090910042f6c2ecf4fe9ff6000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c1ff07000000000000e558000000000000000000"], 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xdf, 0xa, 0x0, 0x5f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x2f00, 0x95, 0xc6}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000fcffffff7b01000080000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000250000001801002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x3a, 0xffffffffffffffd0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x27) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x44) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bda", 0x7) r7 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r10}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000680000000000069078ac1414bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000907800008f312ea359e9827d2f34a31bb63401338d75ffc76f528ead088c543290ca8eb371edbf5bfe14ec135d6f1a2a0202c2324af14d4c5964"], 0x0) r11 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="bd431f1e") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) unshare(0x20000400) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1, 0x0, r11}}, 0x40) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f00000000c0)={0x20, 0xd156, 0x7}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0xf, r2, 0x3}, 0xc) 2m40.924184367s ago: executing program 3 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000410c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d80"], 0xa0}}, 0x0) 2m40.759028506s ago: executing program 3 (id=141): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x808800, &(0x7f0000000180)={[{@usrquota}, {@init_itable}, {@data_err_ignore}, {@nojournal_checksum}, {@data_err_ignore}, {@resuid}]}, 0x1, 0x4cd, &(0x7f0000000280)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newchain={0x24, 0x64, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0x9, 0x4}, {0x6}}}, 0x24}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) ioprio_set$pid(0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010700000000fcdbdf2541"], 0x14}}, 0x4c000) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, r5, r5) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7322a26421b9a2fd"], 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/109, 0x6d}], 0x2, &(0x7f0000000080)=""/15, 0xf}, 0x1}], 0x1, 0x40000140, &(0x7f0000000340)={0x0, 0x989680}) ioprio_get$uid(0x3, 0x0) 2m40.713144949s ago: executing program 32 (id=141): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x808800, &(0x7f0000000180)={[{@usrquota}, {@init_itable}, {@data_err_ignore}, {@nojournal_checksum}, {@data_err_ignore}, {@resuid}]}, 0x1, 0x4cd, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newchain={0x24, 0x64, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0x9, 0x4}, {0x6}}}, 0x24}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) fdatasync(r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) ioprio_set$pid(0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010700000000fcdbdf2541"], 0x14}}, 0x4c000) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, r5, r5) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7322a26421b9a2fd"], 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/109, 0x6d}], 0x2, &(0x7f0000000080)=""/15, 0xf}, 0x1}], 0x1, 0x40000140, &(0x7f0000000340)={0x0, 0x989680}) ioprio_get$uid(0x3, 0x0) 2m33.99151989s ago: executing program 5 (id=251): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1a05b9319c00001900", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/230, 0xe6}}], 0x1, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x100000001, 0x8502) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000600)="7d67a8cd5ec62dc9f35d5b9433003702b96f62f00fd2b70c02c4e5a86c98223667581ae09767393897776ad385539f59a2cc5de9e83ea275a4f7b8054ada67e2b093a732c7313154d5b63c0223a179b017433382f1ad4aba3b1888ea3bf7cf273dbb8101c82058ea2740849710bf33d9af22f77f696ae5408d23e1e6eb86c180fb881c051c2502c295c89740f01596faaff4e5fdca1aea8e76b74f369f64d54ab59229e8c5458b31c3f82020e3da3b1fbe174a96cedc7b882622382d0e6b1e2140a8ca88d6f2f23903c7126381b1b93c9b32e4bd03ea1626f0a02ae59d8bdcca43edbec7e20bb4daac637300c2e93aeede3110", 0xf3}], 0x1) bind$inet6(r3, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) capset(&(0x7f0000000440)={0x19980330, r5}, &(0x7f0000000580)={0xfffffffd, 0xffffffff, 0xffff, 0x3, 0x3, 0x8}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) close_range(r6, 0xffffffffffffffff, 0x0) unshare(0xc000400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000340)={"7395a719256b7a0c105adc83dfcd9eb3", 0x0, 0x0, {0x44, 0xeef}, {0x3, 0xfffffffa}, 0x1, [0x8, 0x7fffffff, 0xff, 0x7, 0x6, 0x101, 0x9525, 0xa, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x1, 0x35, 0x0, 0xf38, 0x30bd, 0x8000]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r7) write(r0, &(0x7f0000000200)="516b4691d50fddacea913f0b756d98d704445186a6ef10887760265eaa28a0a2e66e54b1a083a3663056633231727dfe9eabed397eaac18f2faf1a031f4865faf46e4204aa518a4cf2f175fa73cee896b838f3c8cbe0867941d603dea1c4977c2f22d799e3e4de0c5006356a26a64369cda27d047bc87411f8563aa83649f46a0d5f5484ed9699cc49de1cae0ee8a3ee49a74121", 0x94) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmmsg$inet(r8, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="5d403fd2cfc40fcb09f5b91764a19c915c6b409d91ae44e7bd2b8cc03e3263efd45dffcb17da325091d6a84f265ff6cbb0538426835b8515bf2f408ff3b3aea4064d4e57017819e1fa07d608832e8a6c01214b7720216731eb708e5e8459e2ed09aacc788072a9d4d3ba43b2705b1621472447893efa05650de37c211ce0686fe59e3af4b2f13d7b18ca", 0x8a}, {&(0x7f0000000980)="45224ba8b87b9acc3e0773c0e481d69a1dbea24d86adfaaaa24cad68731f2c865af1934a4318c98a8e2f19055e2b09f28b57843d031233830f2017cd56fd19abb1effe8ea6a66ec426c0de6f3b22937dbef8ddf6be3d5ab70d0cb96090bb8543970d7855c46880f6868902a7e66289a2db", 0x71}], 0x2}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0)={r10}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000740)={r10, 0x5}, 0x8) 2m33.160875498s ago: executing program 5 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x38}}, 0x0) 2m33.126628069s ago: executing program 5 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m33.091769452s ago: executing program 5 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0x5, 0xe, 0x0, &(0x7f0000000240)="0101000071a78326c799dbe888a8", 0x0, 0xcff, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m32.995808287s ago: executing program 5 (id=261): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r2, &(0x7f0000000000)=""/77, 0x4d) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000c00)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045010014be5eeac8dedc77737c80423910810066000106219078ac141423ffffffff4e204e2004919078260000000577f47c", @ANYRESDEC=r0], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) getdents64(r2, 0xffffffffffffffff, 0x43) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000004000002850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0x7}, 0x80, 0xa8, 0x2, 0x5, 0x4, 0x3, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) syz_read_part_table(0x5e1, &(0x7f0000000600)="$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") syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r7, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r6, &(0x7f0000000380)="a3", 0x1, 0xe3}]) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 2m32.360622204s ago: executing program 5 (id=266): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8], 0x4, 0x301, &(0x7f0000000080)="$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") rt_sigqueueinfo(0x0, 0x29, &(0x7f0000000000)={0x1b, 0x9, 0x9}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000814) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) bind$bt_sco(r1, &(0x7f0000000440)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf251e000000080004000100000008000100f80075"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31662dbd7000fedbdf252e00000005002b000000000008000200", @ANYRES32=r7, @ANYBLOB='\x00'/12], 0x30}}, 0x4004004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa0000060001000100000008000200020000000800010000000400050002"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x6e1ad2b1e746d1aa, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4804}, 0x20000010) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r10, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbecbeba5e4101f679d1f6c6540cb9000000119078ac1414bb0a01010100004e220064907802000000000000000300000087404a1521aa3a2da05ed1edadd5f225602902d238b3605ef3d3776442bc6a4af34f90b9c395844234c7cdd78918f38eaccc904f4b9b8b3ecf498db800a9000001334600000000000000000000000000ddd7f9f3c29f2e264e7cae4935c65a5bb63a2882c1d9e7cd6f2d980ea5f7217af3b8a11f"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r13, 0x10f, 0x81, 0x0, 0x0) 2m17.299790349s ago: executing program 33 (id=266): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8], 0x4, 0x301, &(0x7f0000000080)="$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") rt_sigqueueinfo(0x0, 0x29, &(0x7f0000000000)={0x1b, 0x9, 0x9}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000814) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) bind$bt_sco(r1, &(0x7f0000000440)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf251e000000080004000100000008000100f80075"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31662dbd7000fedbdf252e00000005002b000000000008000200", @ANYRES32=r7, @ANYBLOB='\x00'/12], 0x30}}, 0x4004004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r11, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa0000060001000100000008000200020000000800010000000400050002"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r5, 0x6e1ad2b1e746d1aa, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4804}, 0x20000010) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r10, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbecbeba5e4101f679d1f6c6540cb9000000119078ac1414bb0a01010100004e220064907802000000000000000300000087404a1521aa3a2da05ed1edadd5f225602902d238b3605ef3d3776442bc6a4af34f90b9c395844234c7cdd78918f38eaccc904f4b9b8b3ecf498db800a9000001334600000000000000000000000000ddd7f9f3c29f2e264e7cae4935c65a5bb63a2882c1d9e7cd6f2d980ea5f7217af3b8a11f"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r13, 0x10f, 0x81, 0x0, 0x0) 1m31.801969854s ago: executing program 0 (id=1385): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1m31.729098208s ago: executing program 0 (id=1386): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace(0x4208, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="8b3303000000ff0100000000000000000300a0d786730c46496877c22ef71c77543c3693d849ed574d55832b26f78d33aadcb0739f35a8edf657698b4bc4c3723200", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x521, &(0x7f0000000980)="$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") 1m30.907013776s ago: executing program 0 (id=1395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m30.650711901s ago: executing program 0 (id=1400): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$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") openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x80) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x3, 0x0, 0x4007) connect$pptp(r2, &(0x7f0000000240)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) 1m29.423636152s ago: executing program 0 (id=1420): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb894f"], 0x72) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085503, &(0x7f0000000200)=0x6) 1m28.160287086s ago: executing program 0 (id=1446): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x0, 0x1}, 0x29, 0x4, &(0x7f00000000c0)={0xa0, 0x0, 0x2, 0xfff}, 0x8, 0x9, 0x80000002, 0x0, 0x9, 0x1, 0x0}) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb305000100000000000800034000008001080002"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) socket$nl_route(0x10, 0x3, 0x0) 1m28.103653799s ago: executing program 34 (id=1446): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(0x0, 0x1ff, 0x42102) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x0, 0x1}, 0x29, 0x4, &(0x7f00000000c0)={0xa0, 0x0, 0x2, 0xfff}, 0x8, 0x9, 0x80000002, 0x0, 0x9, 0x1, 0x0}) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb305000100000000000800034000008001080002"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) socket$nl_route(0x10, 0x3, 0x0) 46.678760856s ago: executing program 1 (id=2088): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2", 0xd) recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r1, &(0x7f0000000000), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x6}) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) ptrace(0x10, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x356f, 0x80, 0x3, 0x285}, &(0x7f0000000380), &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) 46.415637882s ago: executing program 1 (id=2096): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) 46.315491068s ago: executing program 1 (id=2100): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 46.231873953s ago: executing program 1 (id=2103): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000cc0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@auto_da_alloc}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x10, 0xed6, 0x8001) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x441633ba, 0x181401) write$evdev(r0, &(0x7f0000000400)=[{{}, 0x0, 0xeb5, 0x3ff}], 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2c04c054}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000140000001100010000000000000000000100000aafa4c62712f394248afc280dde3067c38bd7f38788a45f59e43da2216453fd3916c7c853af0d0a405e6c64354aacc82e0f9206e2dc74abab80b86a8cd221453038a5241ca331adfca5c6b8d7e564fe2be0f0ebec79c2d2eacc"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a2100000000a1718cfa5187f128991c000380180000800c000180060001009362000008000340000000011400000011000100000008"], 0x70}, 0x1, 0x0, 0x0, 0x4000811}, 0x40d0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r7, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1000000000000094, 0x1000, 0x4005, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143041, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x0, &(0x7f0000000f40)="20fa0f855c828f1213094907ff6446c0762bcccbf850db56392a2f8da5461fb2516d2289036a1aaf42863f76f944766b0188eeb3047a263d2d193d4401d8dc9a2b53e1dee2e54d0f9c09f50fc2e86444297b0aca37a6a875162a8c760a36a5997a9b62bbc501a1f9663c54d166de9ad3c2ab9feb59d9b70738487a6e4e042836dbbbecde17b00500bd8eb957f98ee65e15cdf06e2acfedc58c88dabf9d32dff0523889ef3fb18a7e06010e99000000000000", 0xb2, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042dbd7000fedbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="48007a8024000100008000000000e5f19730a9b9bc269e7a2625244d8aadc879511f57570153c3dc14000200d4a5c6bad435ecacb43742fcba691d480c000300971fd68efa7b46e5"], 0x64}, 0x1, 0x0, 0x0, 0x4048004}, 0x4ec3121391973a7f) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000140)={0x17c04, r8, 0x0, 0x75ea, 0xfffffffffffffffa}) 46.029885214s ago: executing program 1 (id=2111): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) 45.347766974s ago: executing program 1 (id=2127): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x89, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0x10, "b4f6db7ef939984b6ca70f000000"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}]}]}}}}}}}, 0x0) 45.317364016s ago: executing program 35 (id=2127): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x89, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0x10, "b4f6db7ef939984b6ca70f000000"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}]}]}}}}}}}, 0x0) 30.132032989s ago: executing program 7 (id=2503): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) write$ppp(r3, &(0x7f0000000140)="0647", 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x6}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f00000000c0)) socket(0x2a, 0x2, 0x0) pipe(&(0x7f0000000200)) socket$nl_rdma(0x10, 0x3, 0x14) 29.622042968s ago: executing program 7 (id=2510): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) open$dir(0x0, 0x80000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sync() 29.620933648s ago: executing program 7 (id=2515): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x2) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) socketpair(0x1d, 0x2, 0x3, &(0x7f00000006c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x2}, 0x1004, 0x100, 0x11000, 0x6, 0x100000002, 0x80000011, 0x0, 0x0, 0x100000, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r4, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 29.575928101s ago: executing program 7 (id=2519): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000180)={[{@check_relaxed}, {@check_strict}, {@dmode={'dmode', 0x3d, 0xa7}}, {}, {@unhide}, {@nojoliet}, {@map_acorn}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000180)={[{@check_relaxed}, {@check_strict}, {@dmode={'dmode', 0x3d, 0xa7}}, {}, {@unhide}, {@nojoliet}, {@map_acorn}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x20001, &(0x7f00000003c0), 0x1, 0x52a, &(0x7f00000017c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x20001, &(0x7f00000003c0), 0x1, 0x52a, &(0x7f00000017c0)="$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") r0 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x9, 0x8, 0x3e, 0x2, 0x0, 0x9, 0x108, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x2, 0x3ff, 0x8001, 0x2, 0x200, 0x10, 0x3}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYRESOCT=r2], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYRESOCT=r2], 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, @perf_bp={0x0, 0x2}, 0x8000, 0xfffc, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xf, r0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xa0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) keyctl$session_to_parent(0x12) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{}, {}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r4, 0x1) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r4, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x39, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000030000060005400000000008000640"], 0x64}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000380), 0x4) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x8000000000000, 0x2, 0x4, 0x401, 0xcf88, 0x0, 0x80000000}) 29.479971066s ago: executing program 7 (id=2522): r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 29.4043858s ago: executing program 7 (id=2526): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x1b}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x140) open(0x0, 0x109200, 0x25) fcntl$setlease(r0, 0x400, 0x0) 29.389067341s ago: executing program 36 (id=2526): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x1b}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x140) open(0x0, 0x109200, 0x25) fcntl$setlease(r0, 0x400, 0x0) 3.667949157s ago: executing program 4 (id=3287): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0xd1bc2b5}, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)='\x00R', 0x2}], 0x1, 0x0, 0x0, 0x80fe}, 0x0) 3.667766767s ago: executing program 4 (id=3288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="840000000002070f00000000000000000a00000904000180300003802c00018014000300ff01000000000000000000000000000214000400000000000000000000000000000000003c0002800c000280050001002f0000002c000180140003"], 0x84}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000) 3.667647457s ago: executing program 4 (id=3289): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.651254568s ago: executing program 4 (id=3290): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20009}, 0x94) ptrace$setregs(0x1a, r0, 0x7e, &(0x7f00000001c0)) 3.587857261s ago: executing program 4 (id=3292): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2da, &(0x7f0000000340)="$eJzs3U9r02AYAPCnf9Z1Q9zO4qHgRS9DPXspMkEsDCY9qBcLU5BNhO5SBaFfwYv4ATz5kTz4IXYaeKikydZu7RyMNNmf3w+yPcmzvXkS0rw5vG/69u7H3Z1P++9Hv39Es9mKejQjDiPWoxq1SFWSH82juBHThrUTq7EcAMBlt73da5+VGxZbCrmoz2zp99u9pbnPZt1fBRUFAAAAAAAAAABAzmbH/8dw7vj/iKieHP8/DowRBICr53/j/7ke+v12bzV9fjs1W9P4fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA89RitjUajB7fS1SSeLI1YK7s+ACB/h9P9/fHyd5TR/wPANTS//58sZdcHAORvqv+POKf/r5VXJgCQo5evXr9odzqb261WM+JgOOgOuunvNP/seWfzYWtsPSKq6daDwaBbO84/SvOtSatJfilWs/zjuflG3L+X5pPc063Oqfxy7BRzCgAAAAAAAAAAAAAAAAAAAKB0G0cv9Unn92cm8/s3Nra+//lwPP9/Kp9G2fsBqnFqfv/Xn/W4Uz9v78t5HQYAAAAAAAAAAAAAAAAAAABcafufv+z29vbe9YsJKhGRb8u1iBgH9WxLLfddTAWLazkJmjEOKjGTakTEhVtOTvr8VJK5aM3f0iDiIv/+5E3EuX9c2V2JmdRK8RftYoOV7JN4Weq5nV0tZ90xGsXdnAAAAAAAAAAAAAAAAAAA4IaZzP4tuxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKM/k+/8XF5R9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDN8C8AAP//WY11Gg==") openat$ptmx(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) shutdown(0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x8) 3.544380804s ago: executing program 4 (id=3294): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f00000003c0)={&(0x7f0000000480)={0xa, 0x4e20, 0x10001, @private1, 0xffff}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)='2', 0x1}], 0x1}, 0x0) move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.423853069s ago: executing program 9 (id=3327): r0 = semget$private(0x0, 0x20000000102, 0x291) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)) 2.328001225s ago: executing program 9 (id=3329): r0 = mq_open(&(0x7f0000000200)='#@\x00', 0x50f7bb45f81a15a, 0x120, 0x0) pselect6(0x40, &(0x7f0000000340)={0xa, 0x4, 0x6, 0x2, 0x8, 0x10000, 0xffffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 2.250869479s ago: executing program 9 (id=3332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xc27, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xe, @empty, 0xe}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="e4", 0x1}], 0x1}}], 0x1, 0x40008c0) 1.832075493s ago: executing program 8 (id=3340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(r0, 0xffffffffffffffff, 0x80000) 1.831873293s ago: executing program 8 (id=3342): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x8000000) read(r0, &(0x7f0000000100)=""/140, 0xcc) epoll_create(0x4) sendto$inet(r0, &(0x7f0000000040)="ddd6", 0x2, 0x80800, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00', @mcast1, 0x24, 0x40, 0x0, 0x580, 0xfffffffffffffffe, 0x2}) 1.395119529s ago: executing program 9 (id=3351): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe91", 0x22) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 979.637543ms ago: executing program 2 (id=3356): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 979.094553ms ago: executing program 8 (id=3357): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005740)=[{{&(0x7f0000004ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x4, "b08d"}, @noop, @rr={0x7, 0x3, 0x57}]}}}], 0x18}}], 0x1, 0x40046) 945.709855ms ago: executing program 8 (id=3358): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4043, 0xfcb, 0x121, 0x0, 0x0) 864.040429ms ago: executing program 2 (id=3359): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 845.815521ms ago: executing program 2 (id=3360): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4e95d539e1907e37) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x48040, 0xe3060f8a5d814b14) sendfile(r0, r1, 0x0, 0xfdef) 757.067986ms ago: executing program 2 (id=3361): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x90) finit_module(0xffffffffffffffff, 0x0, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1c9) lseek(r0, 0x7f, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 636.007263ms ago: executing program 2 (id=3362): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 507.84417ms ago: executing program 9 (id=3364): syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x19a, 0x3800000}, 0x4800, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/146, 0x0, 0x92, 0x20000, 0x6, 0x10000}, 0x28) 444.548854ms ago: executing program 9 (id=3367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendto$inet6(r0, &(0x7f00000000c0)='y', 0x1, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1a1, 0x30}, 0xc) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="c76e", 0x2}], 0x1) 367.964498ms ago: executing program 6 (id=3368): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 367.773948ms ago: executing program 6 (id=3369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000014) 325.283521ms ago: executing program 6 (id=3370): r0 = eventfd(0x5afa) write$eventfd(r0, &(0x7f0000000180)=0xfffffffffffffffb, 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 200.304718ms ago: executing program 6 (id=3371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7002fbebdf2501000000040001801c000280"], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 124.059123ms ago: executing program 6 (id=3372): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 123.841012ms ago: executing program 2 (id=3373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = dup2(r0, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000006c0)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x310}, 0x2000c004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000480)="6e6ca360", 0x4}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x40880) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x2221ffc4046b28bb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) 111.572963ms ago: executing program 6 (id=3374): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe91", 0x22) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 85.056435ms ago: executing program 8 (id=3375): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x3, 0x37, 0x3c, 0xe5, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x2, [{@multicast2, 0x2}, {@multicast2, 0xb}]}]}}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x2, 0x0, 0x8}}}}}}, 0x0) 0s ago: executing program 8 (id=3376): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) write$binfmt_misc(r0, &(0x7f0000000000), 0x0) r1 = creat(0x0, 0x10) splice(r1, 0x0, r0, &(0x7f0000000240), 0x100000001, 0x1) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/51, 0x33}, {0x0}, {&(0x7f0000000540)=""/69, 0x45}], 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x1) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(0xffffffffffffffff, 0xc2040) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000180)={0x8, 0x8, 0x7, 0x2, 0x9, "ce623020a5173bfe1bde6fa7ce194fcd90ab63", 0x5, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x105142, 0x2f6) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10002) kernel console output (not intermixed with test programs): it [ 135.081832][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.586320][ T9484] EXT4-fs: Ignoring removed i_version option [ 135.592458][ T9484] EXT4-fs: Ignoring removed bh option [ 135.791601][ T9484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.819031][ T9484] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.947183][ T9501] netlink: 'syz.6.1915': attribute type 27 has an invalid length. [ 135.982728][ T9501] bond2: left promiscuous mode [ 135.987579][ T9501] bond2: left allmulticast mode [ 135.992647][ T9501] wireguard0: left promiscuous mode [ 135.997881][ T9501] wireguard0: left allmulticast mode [ 136.003441][ T9501] wireguard1: left promiscuous mode [ 136.008668][ T9501] wireguard1: left allmulticast mode [ 136.129197][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.137367][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.164874][ T9505] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1909: iget: bad i_size value: 2533274857506816 [ 136.177931][ T9504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.232379][ T9508] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1909: iget: bad i_size value: 2533274857506816 [ 136.268807][ T9512] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 136.275367][ T9512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.286125][ T9512] vhci_hcd vhci_hcd.0: Device attached [ 136.312486][ T9513] vhci_hcd: connection closed [ 136.312750][ T58] vhci_hcd vhci_hcd.7: stop threads [ 136.322682][ T58] vhci_hcd vhci_hcd.7: release socket [ 136.328060][ T58] vhci_hcd vhci_hcd.7: disconnect device [ 136.365178][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.430359][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.449041][ T9527] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 136.469505][ T9527] bond3 (unregistering): Released all slaves [ 136.543233][ T9532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.559567][ T9532] ext4 filesystem being mounted at /378/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.732994][ T9532] SELinux: policydb magic number 0x5ffff does not match expected magic number 0xf97cff8c [ 136.743151][ T9532] SELinux: failed to load policy [ 136.761732][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.832958][ T9551] set_capacity_and_notify: 8 callbacks suppressed [ 136.832988][ T9551] loop2: detected capacity change from 0 to 8192 [ 136.874332][ T9565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.882988][ T9551] vfat: Unknown parameter '@' [ 137.000075][ T9557] __nla_validate_parse: 10 callbacks suppressed [ 137.000090][ T9557] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1933'. [ 137.092520][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 137.114850][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1947'. [ 137.177715][ T29] kauditd_printk_skb: 939 callbacks suppressed [ 137.177777][ T29] audit: type=1326 audit(1770263893.440:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.207879][ T29] audit: type=1326 audit(1770263893.440:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.333181][ T9614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1958'. [ 137.359043][ T9598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.367430][ T29] audit: type=1326 audit(1770263893.440:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.391040][ T29] audit: type=1326 audit(1770263893.440:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.414605][ T29] audit: type=1326 audit(1770263893.480:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.438071][ T29] audit: type=1326 audit(1770263893.480:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.461792][ T29] audit: type=1326 audit(1770263893.480:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.485244][ T29] audit: type=1326 audit(1770263893.480:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.508786][ T29] audit: type=1326 audit(1770263893.480:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.520433][ T9619] x_tables: ip_tables: ah match: only valid for protocol 51 [ 137.532262][ T29] audit: type=1326 audit(1770263893.480:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9594 comm="syz.6.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 137.816408][ T9634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1966'. [ 137.845269][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1965'. [ 137.854386][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1965'. [ 137.915029][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1965'. [ 137.924309][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1965'. [ 138.015267][ T9642] 8021q: VLANs not supported on ip6gre0 [ 138.057093][ T9642] loop2: detected capacity change from 0 to 1024 [ 138.097378][ T9642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.267864][ T9652] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1973'. [ 138.323519][ T9657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.431610][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.551162][ T9671] loop7: detected capacity change from 0 to 1024 [ 138.680480][ T9685] netlink: 'syz.4.1985': attribute type 27 has an invalid length. [ 138.789691][ T9685] bond1: left allmulticast mode [ 138.795978][ T9684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.821362][ T9687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.844337][ T9687] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.859088][ T9687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.511212][ T9702] loop2: detected capacity change from 0 to 1024 [ 140.537790][ T9702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.552698][ T9708] loop1: detected capacity change from 0 to 1024 [ 140.552714][ T9699] loop4: detected capacity change from 0 to 128 [ 140.568966][ T9702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 140.590126][ T9702] System zones: 0-1, 3-36 [ 140.597893][ T9699] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 140.610026][ T9708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.636301][ T9702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.649158][ T9699] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.682148][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.691905][ T9723] 8021q: VLANs not supported on ip6gre0 [ 140.705014][ T9699] ext2 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.705209][ T9723] loop7: detected capacity change from 0 to 1024 [ 140.716387][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.740919][ T9723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.799650][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.886914][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.185421][ T9744] 8021q: VLANs not supported on ip6gre0 [ 152.201374][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 152.201435][ T29] audit: type=1326 audit(1770263908.470:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.208114][ T9746] __nla_validate_parse: 4 callbacks suppressed [ 152.208129][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2007'. [ 152.231157][ T29] audit: type=1326 audit(1770263908.470:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.237293][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2007'. [ 152.246357][ T29] audit: type=1326 audit(1770263908.470:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.302020][ T29] audit: type=1326 audit(1770263908.470:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.325512][ T29] audit: type=1326 audit(1770263908.470:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.348987][ T29] audit: type=1326 audit(1770263908.470:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.372488][ T29] audit: type=1326 audit(1770263908.470:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.396853][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2007'. [ 152.402870][ T29] audit: type=1326 audit(1770263908.550:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 152.405845][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2007'. [ 152.429242][ T29] audit: type=1326 audit(1770263908.550:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9ee04ac22 code=0x7ffc0000 [ 152.461379][ T29] audit: type=1326 audit(1770263908.550:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.6.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9ee00b78e code=0x7ffc0000 [ 152.524039][ T9754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2010'. [ 152.541530][ T9758] loop4: detected capacity change from 0 to 1024 [ 152.595861][ T9758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.637666][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.841476][ T9794] loop4: detected capacity change from 0 to 1024 [ 152.856237][ T9794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.878848][ T9793] loop2: detected capacity change from 0 to 1024 [ 152.882846][ T9790] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2026'. [ 152.907252][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.921416][ T9793] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.2.2028: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 152.941731][ T9793] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1697: Corrupt filesystem [ 152.956406][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.000070][ T9806] 8021q: VLANs not supported on ip6gre0 [ 153.013071][ T9806] loop4: detected capacity change from 0 to 1024 [ 153.030637][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.052682][ T9806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.189638][ T9823] loop1: detected capacity change from 0 to 1024 [ 153.224752][ T9823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.256243][ T9823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.285413][ T9823] 9p: Bad value for 'rfdno' [ 153.290187][ T9823] qrtr: Invalid version 51 [ 153.303467][ T9837] netlink: 'syz.7.2041': attribute type 27 has an invalid length. [ 153.319423][ T9836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 153.328519][ T9836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 153.346266][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.354127][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.363576][ T9837] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.381367][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.405341][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2046'. [ 153.407204][ T9847] loop4: detected capacity change from 0 to 512 [ 153.427963][ T9837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.443875][ T9836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 153.463658][ T9847] EXT4-fs: Ignoring removed bh option [ 153.473332][ T9847] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 153.482659][ T9847] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 153.500852][ T9847] EXT4-fs (loop4): failed to open journal device unknown-block(8,224) -6 [ 153.553011][ T9854] loop1: detected capacity change from 0 to 8192 [ 153.567832][ T9854] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.583136][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.592163][ T9854] FAT-fs (loop1): Filesystem has been set read-only [ 153.599614][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.609121][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.626415][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.637198][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.646363][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.655955][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.664854][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.674001][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.683143][ T9854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 153.908240][ T9870] loop4: detected capacity change from 0 to 1024 [ 153.920843][ T9870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.971284][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.055137][ T9877] loop4: detected capacity change from 0 to 8192 [ 154.103042][ T9877] vfat: Unknown parameter '@' [ 154.133846][ T9883] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 154.176982][ T9883] bond2 (unregistering): Released all slaves [ 154.233863][ T9892] 8021q: VLANs not supported on ip6gre0 [ 154.303085][ T9892] loop4: detected capacity change from 0 to 1024 [ 154.337803][ T9892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.594614][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.810571][ T9916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.862514][ T9920] 8021q: VLANs not supported on gre0 [ 154.890298][ T9924] 8021q: VLANs not supported on ip6gre0 [ 155.010158][ T9931] 8021q: VLANs not supported on ip6gre0 [ 155.043008][ T9936] 8021q: VLANs not supported on ip6gre0 [ 155.193325][ T9941] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 155.206691][ T9941] bond3 (unregistering): Released all slaves [ 155.215457][ T9944] FAULT_INJECTION: forcing a failure. [ 155.215457][ T9944] name failslab, interval 1, probability 0, space 0, times 0 [ 155.228170][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.4.2086 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.228195][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.228263][ T9944] Call Trace: [ 155.228270][ T9944] [ 155.228279][ T9944] __dump_stack+0x1d/0x30 [ 155.228305][ T9944] dump_stack_lvl+0x95/0xd0 [ 155.228328][ T9944] dump_stack+0x15/0x1b [ 155.228348][ T9944] should_fail_ex+0x263/0x280 [ 155.228423][ T9944] should_failslab+0x8c/0xb0 [ 155.228445][ T9944] kmem_cache_alloc_noprof+0x68/0x490 [ 155.228467][ T9944] ? skb_clone+0x151/0x1f0 [ 155.228538][ T9944] skb_clone+0x151/0x1f0 [ 155.228555][ T9944] __netlink_deliver_tap+0x2c9/0x500 [ 155.228646][ T9944] netlink_unicast+0x66b/0x690 [ 155.228674][ T9944] netlink_sendmsg+0x5c8/0x6f0 [ 155.228694][ T9944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.228717][ T9944] ____sys_sendmsg+0x5af/0x600 [ 155.228777][ T9944] ___sys_sendmsg+0x195/0x1e0 [ 155.228806][ T9944] __x64_sys_sendmsg+0xd4/0x160 [ 155.228842][ T9944] x64_sys_call+0x17ba/0x3000 [ 155.228982][ T9944] do_syscall_64+0xc0/0x2a0 [ 155.229078][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.229091][ T9944] RIP: 0033:0x7feb8d44aeb9 [ 155.229102][ T9944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.229113][ T9944] RSP: 002b:00007feb8bea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.229125][ T9944] RAX: ffffffffffffffda RBX: 00007feb8d6c5fa0 RCX: 00007feb8d44aeb9 [ 155.229169][ T9944] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 155.229234][ T9944] RBP: 00007feb8bea7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.229242][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.229250][ T9944] R13: 00007feb8d6c6038 R14: 00007feb8d6c5fa0 R15: 00007fffd85f01f8 [ 155.229261][ T9944] [ 155.474128][ T9950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.527549][ T9954] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.554491][ T9954] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.566745][ T9954] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.2091: lblock 0 mapped to illegal pblock 0 (length 6) [ 155.607341][ T9954] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.2091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 155.649533][ T9954] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.2091: lblock 0 mapped to illegal pblock 0 (length 1) [ 155.758029][ T9972] 8021q: VLANs not supported on ip6gre0 [ 155.881537][ T9986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.917461][ T9982] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.951333][ T9982] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.2103: lblock 3 mapped to illegal pblock 3 (length 3) [ 155.980075][ T9996] 8021q: VLANs not supported on gre0 [ 156.046997][ T3310] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /414/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 156.090808][ T3310] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /414/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 156.133583][T10009] EXT4-fs: Ignoring removed bh option [ 156.139839][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 156.159687][T10009] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 156.166498][ T3310] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /414/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 156.178486][T10009] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 156.198379][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 156.198431][T10009] EXT4-fs (loop7): failed to open journal device unknown-block(8,224) -6 [ 156.227127][ T3310] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /414/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 156.254408][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 156.274093][ T3310] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /414/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 156.295852][ T3310] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 156.415244][T10023] 8021q: VLANs not supported on ip6gre0 [ 156.465620][T10023] EXT4-fs mount: 11 callbacks suppressed [ 156.465640][T10023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.700731][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.710205][ T4733] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.771185][T10040] 8021q: VLANs not supported on ip6gre0 [ 156.809311][T10040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.991941][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.610259][ T29] kauditd_printk_skb: 1044 callbacks suppressed [ 157.610275][ T29] audit: type=1400 audit(1770263913.880:7762): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 157.659980][ T29] audit: type=1400 audit(1770263913.930:7763): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.681463][ T29] audit: type=1400 audit(1770263913.930:7764): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.703311][ T29] audit: type=1400 audit(1770263913.930:7765): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.730447][ T58] bridge_slave_1: left allmulticast mode [ 157.736206][ T58] bridge_slave_1: left promiscuous mode [ 157.737989][ T29] audit: type=1400 audit(1770263913.930:7766): avc: denied { read } for pid=3038 comm="dhcpcd" name="n39" dev="tmpfs" ino=15044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.742249][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.763694][ T29] audit: type=1400 audit(1770263913.930:7767): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=15044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.794017][ T29] audit: type=1400 audit(1770263913.930:7768): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=15044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.838310][ T58] bridge_slave_0: left allmulticast mode [ 157.844137][ T58] bridge_slave_0: left promiscuous mode [ 157.849866][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.854394][ T29] audit: type=1400 audit(1770263914.100:7769): avc: denied { read open } for pid=10076 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.882621][ T29] audit: type=1400 audit(1770263914.100:7770): avc: denied { getattr } for pid=10076 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.926585][ T29] audit: type=1326 audit(1770263914.180:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 157.979625][T10088] set_capacity_and_notify: 11 callbacks suppressed [ 157.979642][T10088] loop4: detected capacity change from 0 to 1024 [ 158.003932][T10088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.021882][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.035575][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.100584][ T58] bond0 (unregistering): Released all slaves [ 158.153088][T10074] 8021q: VLANs not supported on ip6gre0 [ 158.185825][T10115] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 158.197067][T10115] bond1 (unregistering): Released all slaves [ 158.217420][ T58] hsr_slave_0: left promiscuous mode [ 158.229021][ T58] hsr_slave_1: left promiscuous mode [ 158.247300][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.320811][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.341118][T10136] __nla_validate_parse: 14 callbacks suppressed [ 158.341135][T10136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2149'. [ 158.360935][ T58] team0 (unregistering): Port device team_slave_1 removed [ 158.372321][ T58] team0 (unregistering): Port device team_slave_0 removed [ 158.385546][T10134] netlink: 'syz.7.2148': attribute type 1 has an invalid length. [ 158.421267][T10134] loop7: detected capacity change from 0 to 2048 [ 158.442507][T10134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.459809][T10147] loop4: detected capacity change from 0 to 512 [ 158.480974][T10149] 8021q: VLANs not supported on ip6gre0 [ 158.490595][T10143] netlink: 'syz.7.2148': attribute type 2 has an invalid length. [ 158.498914][T10143] netlink: 199792 bytes leftover after parsing attributes in process `syz.7.2148'. [ 158.510258][T10137] netlink: 'syz.7.2148': attribute type 2 has an invalid length. [ 158.518123][T10137] netlink: 199792 bytes leftover after parsing attributes in process `syz.7.2148'. [ 158.539345][T10147] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 12 [ 158.608070][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.636552][T10043] chnl_net:caif_netlink_parms(): no params data found [ 158.736895][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.744116][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.781356][T10043] bridge_slave_0: entered allmulticast mode [ 158.787937][T10043] bridge_slave_0: entered promiscuous mode [ 158.794931][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.802092][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.809568][T10043] bridge_slave_1: entered allmulticast mode [ 158.816400][T10043] bridge_slave_1: entered promiscuous mode [ 158.880009][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.898339][T10191] loop4: detected capacity change from 0 to 8192 [ 158.942289][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.969481][T10191] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.005765][T10043] team0: Port device team_slave_0 added [ 159.019362][T10043] team0: Port device team_slave_1 added [ 159.029673][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.038539][T10191] FAT-fs (loop4): Filesystem has been set read-only [ 159.055972][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.063162][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.089218][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.108155][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.117486][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.128361][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.148107][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.159961][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.167006][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.193081][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.214836][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.228790][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.237593][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.261952][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.272111][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 159.276484][T10191] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 159.299258][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 159.357380][T10043] hsr_slave_0: entered promiscuous mode [ 159.367103][T10043] hsr_slave_1: entered promiscuous mode [ 159.374250][T10043] debugfs: 'hsr0' already exists in 'hsr' [ 159.380081][T10043] Cannot create hsr debugfs directory [ 159.389023][T10229] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2169'. [ 159.471505][T10236] loop2: detected capacity change from 0 to 1024 [ 159.517946][T10241] 8021q: VLANs not supported on ip6gre0 [ 159.527542][T10236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.545395][T10043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 159.569277][T10043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 159.588165][T10043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 159.626232][T10043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 159.690115][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.760770][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.782065][T10043] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.810328][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.817525][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.834361][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.854589][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.864745][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.871850][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.872297][T10257] loop7: detected capacity change from 0 to 8192 [ 159.895191][T10043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.905667][T10043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.010967][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.054309][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2189'. [ 160.187991][T10043] veth0_vlan: entered promiscuous mode [ 160.196321][T10043] veth1_vlan: entered promiscuous mode [ 160.225382][T10043] veth0_macvtap: entered promiscuous mode [ 160.233912][T10043] veth1_macvtap: entered promiscuous mode [ 160.245531][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.257780][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.276148][T10319] loop4: detected capacity change from 0 to 512 [ 160.285014][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.302843][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.325704][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.342862][T10319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 160.348363][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.363850][T10319] ext4 filesystem being mounted at /460/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.377137][T10326] 8021q: VLANs not supported on ip6gre0 [ 160.377465][T10319] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2198: Failed to acquire dquot type 0 [ 160.401724][T10319] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10319 comm=syz.4.2198 [ 160.417073][T10322] 8021q: VLANs not supported on ip6gre0 [ 160.429977][T10322] loop7: detected capacity change from 0 to 1024 [ 160.431741][T10328] loop8: detected capacity change from 0 to 512 [ 160.476595][T10328] EXT4-fs: Ignoring removed i_version option [ 160.482707][T10328] EXT4-fs: Ignoring removed bh option [ 160.491414][T10322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.510674][T10334] loop2: detected capacity change from 0 to 1024 [ 160.532554][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 160.545168][T10328] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.561013][T10328] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.608518][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.628076][T10344] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.2128: iget: bad i_size value: 2533274857506816 [ 160.641348][T10344] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.2128: iget: bad i_size value: 2533274857506816 [ 160.661920][T10346] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2206'. [ 160.673137][T10346] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2206'. [ 160.724388][T10043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.754377][T10358] 8021q: VLANs not supported on ip6gre0 [ 160.772156][T10358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.799693][T10043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.891256][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2217'. [ 160.932202][T10373] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.955673][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 160.964540][T10373] FAT-fs (loop2): Filesystem has been set read-only [ 160.973505][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 160.982482][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 160.991584][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.000581][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.011268][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.020546][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.029675][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.038571][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.057982][T10373] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 161.624605][T10404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.651208][T10408] EXT4-fs: Ignoring removed i_version option [ 161.657352][T10408] EXT4-fs: Ignoring removed bh option [ 161.681389][T10408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.702356][T10408] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.756456][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.771563][T10408] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.2233: iget: bad i_size value: 2533274857506816 [ 161.809607][T10408] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.2233: iget: bad i_size value: 2533274857506816 [ 161.914970][T10043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.061036][ T3397] syz1: Port: 1 Link DOWN [ 162.066789][T10421] netlink: 'syz.8.2236': attribute type 27 has an invalid length. [ 162.100275][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.107602][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.157465][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.167445][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.214088][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.222126][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.231101][T10426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.249721][ T3444] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.260180][ T3444] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.269319][ T3444] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.278345][ T3444] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.659725][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 162.659739][ T29] audit: type=1326 audit(1770263918.930:8473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.689442][ T29] audit: type=1326 audit(1770263918.930:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.719812][T10465] FAULT_INJECTION: forcing a failure. [ 162.719812][T10465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.720275][ T29] audit: type=1326 audit(1770263918.960:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.732955][T10465] CPU: 0 UID: 0 PID: 10465 Comm: syz.7.2255 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.732984][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.732998][T10465] Call Trace: [ 162.733006][T10465] [ 162.733015][T10465] __dump_stack+0x1d/0x30 [ 162.733064][T10465] dump_stack_lvl+0x95/0xd0 [ 162.733086][T10465] dump_stack+0x15/0x1b [ 162.733159][T10465] should_fail_ex+0x263/0x280 [ 162.733191][T10465] should_fail+0xb/0x20 [ 162.733221][T10465] should_fail_usercopy+0x1a/0x20 [ 162.733253][T10465] _copy_from_iter+0xcf/0xea0 [ 162.733274][T10465] ? alloc_pages_mpol+0x217/0x260 [ 162.733308][T10465] copy_page_from_iter+0x178/0x2a0 [ 162.733408][T10465] tun_get_user+0xbbd/0x27c0 [ 162.733436][T10465] ? ref_tracker_alloc+0x1f2/0x2f0 [ 162.733592][T10465] tun_chr_write_iter+0x15e/0x210 [ 162.733615][T10465] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.733637][T10465] vfs_write+0x5a6/0x9f0 [ 162.733734][T10465] ksys_write+0xdc/0x1a0 [ 162.733755][T10465] __x64_sys_write+0x40/0x50 [ 162.733776][T10465] x64_sys_call+0x2847/0x3000 [ 162.733803][T10465] do_syscall_64+0xc0/0x2a0 [ 162.733904][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.733932][T10465] RIP: 0033:0x7f9bf518b78e [ 162.733950][T10465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.734038][T10465] RSP: 002b:00007f9bf3c26fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.734077][T10465] RAX: ffffffffffffffda RBX: 00007f9bf3c276c0 RCX: 00007f9bf518b78e [ 162.734092][T10465] RDX: 0000000000000036 RSI: 0000200000000d00 RDI: 00000000000000c8 [ 162.734186][T10465] RBP: 00007f9bf3c27090 R08: 0000000000000000 R09: 0000000000000000 [ 162.734201][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.734214][T10465] R13: 00007f9bf5446038 R14: 00007f9bf5445fa0 R15: 00007ffce8220d38 [ 162.734234][T10465] [ 162.741555][T10463] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.756366][ T29] audit: type=1326 audit(1770263918.960:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.802722][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.804504][ T29] audit: type=1326 audit(1770263918.960:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.809590][T10463] FAT-fs (loop4): Filesystem has been set read-only [ 162.814241][ T29] audit: type=1326 audit(1770263918.960:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.834813][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.839289][ T29] audit: type=1326 audit(1770263918.960:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.845257][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.849155][ T29] audit: type=1326 audit(1770263918.960:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.849182][ T29] audit: type=1326 audit(1770263918.960:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.854007][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 162.857998][ T29] audit: type=1326 audit(1770263918.960:8482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.6.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 162.863006][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.174390][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.184249][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.193459][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.202290][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.211752][T10463] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.244810][T10473] set_capacity_and_notify: 6 callbacks suppressed [ 163.244826][T10473] loop8: detected capacity change from 0 to 1024 [ 163.567326][T10492] 8021q: VLANs not supported on ip6gre0 [ 163.582057][T10492] loop7: detected capacity change from 0 to 1024 [ 163.589675][T10495] netlink: 'syz.8.2266': attribute type 27 has an invalid length. [ 163.595050][T10492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.629163][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.654845][T10501] __nla_validate_parse: 6 callbacks suppressed [ 163.654941][T10501] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2269'. [ 163.667993][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.679275][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.688857][T10499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.704722][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 163.713725][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 163.865182][T10516] loop2: detected capacity change from 0 to 8192 [ 163.875430][T10516] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.893115][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.902000][T10516] FAT-fs (loop2): Filesystem has been set read-only [ 163.909149][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.918014][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.928511][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.937927][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.947086][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.955984][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.965200][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.974339][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.983726][T10516] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 163.994503][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 163.999827][T10523] loop7: detected capacity change from 0 to 1024 [ 164.502014][T10538] loop8: detected capacity change from 0 to 8192 [ 164.584416][T10545] loop7: detected capacity change from 0 to 1024 [ 164.621694][T10546] netlink: 'syz.4.2287': attribute type 27 has an invalid length. [ 164.651087][T10546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.659749][T10546] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.713875][T10546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.732293][T10551] 8021q: VLANs not supported on ip6gre0 [ 164.738779][ T4382] syz1: Port: 1 Link ACTIVE [ 164.745838][T10551] loop8: detected capacity change from 0 to 1024 [ 164.809676][T10559] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2294'. [ 164.819744][T10551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.842472][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2294'. [ 164.869761][T10043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.984064][T10583] 8021q: VLANs not supported on ip6gre0 [ 165.004343][T10583] loop2: detected capacity change from 0 to 1024 [ 165.011130][T10577] loop8: detected capacity change from 0 to 8192 [ 165.015663][T10583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.058069][T10588] 8021q: VLANs not supported on ip6gre0 [ 165.078406][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.127173][T10594] loop2: detected capacity change from 0 to 512 [ 165.134340][T10594] EXT4-fs: Ignoring removed i_version option [ 165.140441][T10594] EXT4-fs: Ignoring removed bh option [ 165.159295][T10596] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2308'. [ 165.162715][T10594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.184570][T10594] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.198538][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2308'. [ 165.203177][T10601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2309'. [ 165.249983][T10594] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.2307: iget: bad i_size value: 2533274857506816 [ 165.285933][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2311'. [ 165.296047][T10610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10610 comm=syz.6.2312 [ 165.330865][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.673311][T10660] netlink: 'syz.7.2331': attribute type 27 has an invalid length. [ 165.681847][T10658] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 165.702916][T10658] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.704819][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.730754][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.733373][T10658] ext2 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.761198][T10660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.789269][T10668] 8021q: VLANs not supported on ip6gre0 [ 165.823099][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.151041][T10715] 8021q: VLANs not supported on ip6gre0 [ 166.173227][T10717] FAULT_INJECTION: forcing a failure. [ 166.173227][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 166.185939][T10717] CPU: 1 UID: 0 PID: 10717 Comm: syz.2.2360 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.185966][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.185983][T10717] Call Trace: [ 166.185991][T10717] [ 166.185998][T10717] __dump_stack+0x1d/0x30 [ 166.186022][T10717] dump_stack_lvl+0x95/0xd0 [ 166.186045][T10717] dump_stack+0x15/0x1b [ 166.186067][T10717] should_fail_ex+0x263/0x280 [ 166.186150][T10717] should_failslab+0x8c/0xb0 [ 166.186172][T10717] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 166.186215][T10717] ? alloc_inode+0x9a/0x170 [ 166.186285][T10717] alloc_inode+0x9a/0x170 [ 166.186307][T10717] path_from_stashed+0xec/0x330 [ 166.186346][T10717] ? do_vfs_ioctl+0x7c9/0xe70 [ 166.186390][T10717] ? __pfx_ns_ioctl+0x10/0x10 [ 166.186451][T10717] open_namespace+0x59/0x140 [ 166.186481][T10717] ns_ioctl+0x6e2/0xa20 [ 166.186501][T10717] ? __pfx_ns_ioctl+0x10/0x10 [ 166.186520][T10717] __se_sys_ioctl+0xce/0x140 [ 166.186583][T10717] __x64_sys_ioctl+0x43/0x50 [ 166.186615][T10717] x64_sys_call+0x14b0/0x3000 [ 166.186645][T10717] do_syscall_64+0xc0/0x2a0 [ 166.186679][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.186703][T10717] RIP: 0033:0x7feb9128aeb9 [ 166.186722][T10717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.186810][T10717] RSP: 002b:00007feb8fce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.186831][T10717] RAX: ffffffffffffffda RBX: 00007feb91505fa0 RCX: 00007feb9128aeb9 [ 166.186847][T10717] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 166.186862][T10717] RBP: 00007feb8fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.186879][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.186893][T10717] R13: 00007feb91506038 R14: 00007feb91505fa0 R15: 00007ffe6c91ae88 [ 166.186914][T10717] [ 166.689950][T10741] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 166.753732][T10747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.794331][T10741] System zones: 0-2, 18-18, 34-35 [ 166.844180][T10741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.860431][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.899399][T10741] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.917948][T10755] 8021q: VLANs not supported on ip6gre0 [ 166.950835][T10755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.067026][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.457366][T10782] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 167.468084][T10782] bond2 (unregistering): Released all slaves [ 167.657988][T10788] 8021q: VLANs not supported on ip6gre0 [ 168.022024][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 168.022038][ T29] audit: type=1326 audit(1770263924.290:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.051761][ T29] audit: type=1326 audit(1770263924.290:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.080505][ T29] audit: type=1326 audit(1770263924.320:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8d44aeb9 code=0x7ffc0000 [ 168.104436][ T29] audit: type=1326 audit(1770263924.320:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8d44aeb9 code=0x7ffc0000 [ 168.127967][ T29] audit: type=1326 audit(1770263924.320:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.4.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7feb8d44aeb9 code=0x7ffc0000 [ 168.151571][ T29] audit: type=1326 audit(1770263924.350:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.175658][ T29] audit: type=1326 audit(1770263924.350:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.199436][ T29] audit: type=1326 audit(1770263924.350:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.223074][ T29] audit: type=1326 audit(1770263924.350:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.246564][ T29] audit: type=1326 audit(1770263924.350:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.2.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9128aeb9 code=0x7ffc0000 [ 168.344260][T10818] 8021q: VLANs not supported on ip6gre0 [ 168.355792][T10817] set_capacity_and_notify: 10 callbacks suppressed [ 168.355837][T10817] loop8: detected capacity change from 0 to 1024 [ 168.391386][T10817] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.430911][T10043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.505653][T10828] loop4: detected capacity change from 0 to 1024 [ 168.525206][T10828] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.544693][T10828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.557284][T10828] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.579981][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.631042][T10836] loop8: detected capacity change from 0 to 1024 [ 168.665776][T10837] netlink: 'syz.4.2406': attribute type 27 has an invalid length. [ 168.694094][T10841] loop2: detected capacity change from 0 to 512 [ 168.732649][T10837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.741103][T10837] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.746052][T10841] SELinux: failed to load policy [ 168.759140][T10837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.889703][T10851] 8021q: VLANs not supported on ip6gre0 [ 168.910292][T10851] loop2: detected capacity change from 0 to 1024 [ 168.925272][T10851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.952549][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.014096][T10860] __nla_validate_parse: 8 callbacks suppressed [ 169.014113][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2417'. [ 169.423183][T10881] 8021q: VLANs not supported on ip6gre0 [ 169.432345][T10881] loop2: detected capacity change from 0 to 1024 [ 169.462465][T10881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.488632][T10884] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 169.499695][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.499868][T10884] bond2 (unregistering): Released all slaves [ 169.537105][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.570046][T10887] loop2: detected capacity change from 0 to 8192 [ 169.594606][T10887] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.629269][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.635057][T10895] loop4: detected capacity change from 0 to 1024 [ 169.638128][T10887] FAT-fs (loop2): Filesystem has been set read-only [ 169.658892][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.690145][T10901] 8021q: VLANs not supported on ip6gre0 [ 169.700792][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.725141][T10901] loop8: detected capacity change from 0 to 1024 [ 169.737808][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.748488][T10901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.763238][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.787018][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.796485][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.802204][T10043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.815777][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.824884][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.834843][T10887] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.845419][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 170.078313][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2438'. [ 170.158546][T10939] loop8: detected capacity change from 0 to 512 [ 170.190677][T10938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.201898][T10939] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 170.219031][T10939] System zones: 0-2, 18-18, 34-35 [ 170.230471][T10939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.289548][T10938] EXT4-fs (loop4): 1 truncate cleaned up [ 170.297241][T10939] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.310883][T10938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.375957][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.447429][T10959] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 170.459739][T10959] bond2 (unregistering): Released all slaves [ 170.468993][T10957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.532030][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.565386][T10971] FAULT_INJECTION: forcing a failure. [ 170.565386][T10971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.578583][T10971] CPU: 1 UID: 0 PID: 10971 Comm: syz.2.2456 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.578613][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.578626][T10971] Call Trace: [ 170.578705][T10971] [ 170.578728][T10971] __dump_stack+0x1d/0x30 [ 170.578754][T10971] dump_stack_lvl+0x95/0xd0 [ 170.578838][T10971] dump_stack+0x15/0x1b [ 170.578859][T10971] should_fail_ex+0x263/0x280 [ 170.578952][T10971] should_fail+0xb/0x20 [ 170.578976][T10971] should_fail_usercopy+0x1a/0x20 [ 170.579070][T10971] _copy_from_user+0x1c/0xb0 [ 170.579090][T10971] __sys_bpf+0x183/0x7b0 [ 170.579121][T10971] __x64_sys_bpf+0x41/0x50 [ 170.579148][T10971] x64_sys_call+0x28e1/0x3000 [ 170.579175][T10971] do_syscall_64+0xc0/0x2a0 [ 170.579242][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.579265][T10971] RIP: 0033:0x7feb9128aeb9 [ 170.579280][T10971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.579396][T10971] RSP: 002b:00007feb8fce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.579415][T10971] RAX: ffffffffffffffda RBX: 00007feb91505fa0 RCX: 00007feb9128aeb9 [ 170.579431][T10971] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 170.579447][T10971] RBP: 00007feb8fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.579462][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.579477][T10971] R13: 00007feb91506038 R14: 00007feb91505fa0 R15: 00007ffe6c91ae88 [ 170.579572][T10971] [ 170.826827][T10993] FAULT_INJECTION: forcing a failure. [ 170.826827][T10993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.839973][T10993] CPU: 0 UID: 0 PID: 10993 Comm: syz.2.2461 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.840040][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.840051][T10993] Call Trace: [ 170.840058][T10993] [ 170.840067][T10993] __dump_stack+0x1d/0x30 [ 170.840095][T10993] dump_stack_lvl+0x95/0xd0 [ 170.840120][T10993] dump_stack+0x15/0x1b [ 170.840220][T10993] should_fail_ex+0x263/0x280 [ 170.840278][T10993] should_fail+0xb/0x20 [ 170.840327][T10993] should_fail_usercopy+0x1a/0x20 [ 170.840359][T10993] _copy_from_user+0x1c/0xb0 [ 170.840462][T10993] ___sys_sendmsg+0xc1/0x1e0 [ 170.840544][T10993] __x64_sys_sendmsg+0xd4/0x160 [ 170.840570][T10993] x64_sys_call+0x17ba/0x3000 [ 170.840609][T10993] do_syscall_64+0xc0/0x2a0 [ 170.840642][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.840722][T10993] RIP: 0033:0x7feb9128aeb9 [ 170.840741][T10993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.840761][T10993] RSP: 002b:00007feb8fce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.840915][T10993] RAX: ffffffffffffffda RBX: 00007feb91505fa0 RCX: 00007feb9128aeb9 [ 170.840931][T10993] RDX: 0000000020000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 170.840945][T10993] RBP: 00007feb8fce7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.840985][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.841000][T10993] R13: 00007feb91506038 R14: 00007feb91505fa0 R15: 00007ffe6c91ae88 [ 170.841049][T10993] [ 171.029827][T10990] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.039017][T10990] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 171.047894][T10990] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 171.057722][T10990] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 171.068954][T10990] System zones: 0-2, 18-18, 34-35 [ 171.079774][T10990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.105876][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.135692][T11029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.214496][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.435372][T11074] 8021q: VLANs not supported on ip6gre0 [ 171.437521][T11072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.485118][T11074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.504506][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 171.515473][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'. [ 171.515690][ T8011] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.546018][T11082] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 171.581972][T11082] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.593262][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.672175][T11082] FAT-fs (loop2): FAT read failed (blocknr 128) [ 171.869328][T11117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.916204][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.007388][T11134] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 172.019485][T11134] bond3 (unregistering): Released all slaves [ 172.172189][T11141] SELinux: failed to load policy [ 172.500826][T11165] ext2: Unknown parameter 'permit_directio' [ 172.513130][T11165] netlink: 391 bytes leftover after parsing attributes in process `syz.2.2516'. [ 172.522291][T11165] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 172.530589][T11165] openvswitch: netlink: Message has 4 unknown bytes. [ 172.601038][T11176] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 172.616924][T11176] bond2 (unregistering): Released all slaves [ 172.773280][T11188] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.785419][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2529'. [ 172.796005][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.804885][T11188] FAT-fs (loop2): Filesystem has been set read-only [ 172.818883][T11197] EXT4-fs: Ignoring removed i_version option [ 172.824932][T11197] EXT4-fs: Ignoring removed bh option [ 172.834565][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.843750][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.852962][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.863174][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.864250][T11197] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.872309][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.891704][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.901395][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.927660][T11197] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.2530: iget: bad i_size value: 2533274857506816 [ 172.940877][T11197] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.2530: iget: bad i_size value: 2533274857506816 [ 172.963953][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 172.991433][T11188] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 173.065548][T11192] chnl_net:caif_netlink_parms(): no params data found [ 173.103803][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 173.103819][ T29] audit: type=1326 audit(1770263929.370:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.112892][T11212] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2532'. [ 173.158763][ T29] audit: type=1326 audit(1770263929.370:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.169298][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.182307][ T29] audit: type=1326 audit(1770263929.370:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.189352][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.212954][ T29] audit: type=1400 audit(1770263929.380:9432): avc: denied { create } for pid=11211 comm="syz.4.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.220027][T11192] bridge_slave_0: entered allmulticast mode [ 173.239454][ T29] audit: type=1400 audit(1770263929.380:9433): avc: denied { write } for pid=11211 comm="syz.4.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.246183][T11192] bridge_slave_0: entered promiscuous mode [ 173.264610][ T29] audit: type=1326 audit(1770263929.410:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.267726][ T29] audit: type=1326 audit(1770263929.430:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.314480][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.317468][ T29] audit: type=1326 audit(1770263929.430:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.324474][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.347892][ T29] audit: type=1326 audit(1770263929.430:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.378544][ T29] audit: type=1326 audit(1770263929.430:9438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.6.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 173.410927][T11192] bridge_slave_1: entered allmulticast mode [ 173.412472][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'. [ 173.417475][T11192] bridge_slave_1: entered promiscuous mode [ 173.444743][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.466638][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.494370][T11227] set_capacity_and_notify: 15 callbacks suppressed [ 173.494384][T11227] loop4: detected capacity change from 0 to 512 [ 173.496686][T11192] team0: Port device team_slave_0 added [ 173.529874][T11192] team0: Port device team_slave_1 added [ 173.575172][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2540'. [ 173.577207][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.591279][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.617211][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.631574][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.638593][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.664558][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.721531][T11192] hsr_slave_0: entered promiscuous mode [ 173.727789][T11192] hsr_slave_1: entered promiscuous mode [ 173.734057][T11192] debugfs: 'hsr0' already exists in 'hsr' [ 173.739867][T11192] Cannot create hsr debugfs directory [ 173.854376][T11247] FAULT_INJECTION: forcing a failure. [ 173.854376][T11247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.867613][T11247] CPU: 0 UID: 0 PID: 11247 Comm: syz.2.2544 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.867641][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.867655][T11247] Call Trace: [ 173.867662][T11247] [ 173.867670][T11247] __dump_stack+0x1d/0x30 [ 173.867770][T11247] dump_stack_lvl+0x95/0xd0 [ 173.867793][T11247] dump_stack+0x15/0x1b [ 173.867816][T11247] should_fail_ex+0x263/0x280 [ 173.867849][T11247] should_fail+0xb/0x20 [ 173.867899][T11247] should_fail_usercopy+0x1a/0x20 [ 173.867931][T11247] _copy_from_iter+0xcf/0xea0 [ 173.867983][T11247] ? locks_free_lock_context+0x2c/0x60 [ 173.868001][T11247] ? __account_obj_stock+0x211/0x350 [ 173.868025][T11247] ? __rcu_read_unlock+0x4e/0x70 [ 173.868059][T11247] copy_page_from_iter+0x178/0x2a0 [ 173.868135][T11247] ? anon_pipe_write+0x81/0xb30 [ 173.868156][T11247] anon_pipe_write+0x53f/0xb30 [ 173.868181][T11247] ? anon_pipe_write+0x81/0xb30 [ 173.868217][T11247] ? __pfx_anon_pipe_write+0x10/0x10 [ 173.868240][T11247] vfs_write+0x5a6/0x9f0 [ 173.868261][T11247] ksys_write+0xdc/0x1a0 [ 173.868279][T11247] __x64_sys_write+0x40/0x50 [ 173.868341][T11247] x64_sys_call+0x2847/0x3000 [ 173.868365][T11247] do_syscall_64+0xc0/0x2a0 [ 173.868396][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.868418][T11247] RIP: 0033:0x7feb9124b78e [ 173.868470][T11247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.868487][T11247] RSP: 002b:00007feb8fce6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.868533][T11247] RAX: ffffffffffffffda RBX: 00007feb8fce76c0 RCX: 00007feb9124b78e [ 173.868578][T11247] RDX: 0000000000000029 RSI: 00007feb8fce6e90 RDI: 0000000000000002 [ 173.868592][T11247] RBP: 00007feb8fce6e90 R08: 0000000000000000 R09: 0000000000000000 [ 173.868607][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 173.868622][T11247] R13: 00007feb914d4640 R14: 00007feb914cb4a0 R15: 0000000000000001 [ 173.868640][T11247] [ 174.113027][T11249] loop8: detected capacity change from 0 to 512 [ 174.158947][T11249] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 174.209086][T11249] EXT4-fs (loop8): orphan cleanup on readonly fs [ 174.225116][T11249] EXT4-fs error (device loop8): __ext4_iget:5426: inode #11: block 8: comm syz.8.2546: invalid block [ 174.267400][T11249] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2546: couldn't read orphan inode 11 (err -117) [ 174.282491][T11249] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2546: Block bitmap for bg 0 marked uninitialized [ 174.367863][ T4381] syz1: Port: 1 Link DOWN [ 174.411358][T11268] loop4: detected capacity change from 0 to 1024 [ 174.425724][T11265] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2552'. [ 174.437782][ T4394] IPVS: starting estimator thread 0... [ 174.440530][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2552'. [ 174.499806][T11192] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 174.526378][T11192] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 174.531120][T11274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2555'. [ 174.548996][T11270] IPVS: using max 2064 ests per chain, 103200 per kthread [ 174.561784][T11192] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 174.579912][T11192] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 174.598701][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2558'. [ 174.676331][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.712739][T11192] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.729785][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.736514][T11293] loop4: detected capacity change from 0 to 1024 [ 174.736878][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.794469][T11192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.804856][T11192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.825534][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.832346][T11300] loop4: detected capacity change from 0 to 1024 [ 174.832658][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.950716][T11303] loop8: detected capacity change from 0 to 8192 [ 175.001293][T11192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.061845][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2570'. [ 175.095358][T11325] loop4: detected capacity change from 0 to 1024 [ 175.142199][T11333] loop2: detected capacity change from 0 to 512 [ 175.189747][T11342] netlink: 'syz.8.2572': attribute type 27 has an invalid length. [ 175.232531][T11333] SELinux: ebitmap: truncated map [ 175.237935][T11333] SELinux: failed to load policy [ 175.274478][T11347] loop2: detected capacity change from 0 to 1024 [ 175.295414][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.333864][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.351923][T11345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.375475][T11192] veth0_vlan: entered promiscuous mode [ 175.384329][T11192] veth1_vlan: entered promiscuous mode [ 175.401063][T11192] veth0_macvtap: entered promiscuous mode [ 175.417309][T11192] veth1_macvtap: entered promiscuous mode [ 175.451753][T11192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.463805][T11192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.476268][ T3429] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.500563][ T3429] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.521043][ T3429] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.532376][ T3429] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.541430][T11364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11364 comm=syz.2.2581 [ 175.815478][T11386] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2588'. [ 176.300456][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2599'. [ 176.363066][T11414] loop8: detected capacity change from 0 to 1024 [ 176.475490][T11428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11428 comm=syz.8.2607 [ 176.538950][T11432] FAULT_INJECTION: forcing a failure. [ 176.538950][T11432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.552062][T11432] CPU: 0 UID: 0 PID: 11432 Comm: syz.8.2609 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.552100][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.552128][T11432] Call Trace: [ 176.552136][T11432] [ 176.552145][T11432] __dump_stack+0x1d/0x30 [ 176.552172][T11432] dump_stack_lvl+0x95/0xd0 [ 176.552196][T11432] dump_stack+0x15/0x1b [ 176.552286][T11432] should_fail_ex+0x263/0x280 [ 176.552318][T11432] should_fail+0xb/0x20 [ 176.552417][T11432] should_fail_usercopy+0x1a/0x20 [ 176.552449][T11432] _copy_from_user+0x1c/0xb0 [ 176.552469][T11432] __sys_bpf+0x183/0x7b0 [ 176.552501][T11432] __x64_sys_bpf+0x41/0x50 [ 176.552539][T11432] x64_sys_call+0x28e1/0x3000 [ 176.552563][T11432] do_syscall_64+0xc0/0x2a0 [ 176.552592][T11432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.552620][T11432] RIP: 0033:0x7f56dbccaeb9 [ 176.552635][T11432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.552653][T11432] RSP: 002b:00007f56da727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.552672][T11432] RAX: ffffffffffffffda RBX: 00007f56dbf45fa0 RCX: 00007f56dbccaeb9 [ 176.552686][T11432] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 176.552743][T11432] RBP: 00007f56da727090 R08: 0000000000000000 R09: 0000000000000000 [ 176.552755][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.552767][T11432] R13: 00007f56dbf46038 R14: 00007f56dbf45fa0 R15: 00007ffe8a8951d8 [ 176.552785][T11432] [ 176.783434][T11442] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2612'. [ 176.802835][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2613'. [ 176.813456][T11441] ext4 filesystem being mounted at /516/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.823306][T11443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11443 comm=syz.9.2613 [ 176.875890][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2613'. [ 176.892006][T11438] ext4: Invalid gid '0x00000000ffffffff' [ 177.002388][T11460] netlink: 'syz.8.2618': attribute type 27 has an invalid length. [ 177.043922][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.075391][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.099753][T11460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.120719][T11463] netlink: 'syz.6.2619': attribute type 27 has an invalid length. [ 177.267776][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.287801][T11470] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 177.296353][T11470] System zones: 0-2, 18-18, 34-35 [ 177.303438][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.311376][T11470] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.331051][T11463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.830773][T11493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11493 comm=syz.2.2631 [ 178.109310][T11524] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 178.120589][T11526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11526 comm=syz.6.2646 [ 178.134982][T11524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.143411][T11526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11526 comm=syz.6.2646 [ 178.157500][T11529] netlink: 'syz.8.2641': attribute type 27 has an invalid length. [ 178.205316][T11529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.214041][T11529] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.224589][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 178.224606][ T29] audit: type=1326 audit(1770263934.490:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.254664][ T29] audit: type=1326 audit(1770263934.490:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.285746][ T29] audit: type=1326 audit(1770263934.490:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.309434][ T29] audit: type=1326 audit(1770263934.490:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.333027][ T29] audit: type=1326 audit(1770263934.490:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.356766][ T29] audit: type=1326 audit(1770263934.530:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.380401][ T29] audit: type=1326 audit(1770263934.530:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9ee04ac22 code=0x7ffc0000 [ 178.403850][ T29] audit: type=1326 audit(1770263934.530:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9ee04ac22 code=0x7ffc0000 [ 178.427313][ T29] audit: type=1326 audit(1770263934.530:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.450993][ T29] audit: type=1326 audit(1770263934.530:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.6.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ee04aeb9 code=0x7ffc0000 [ 178.474850][T11529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.495964][T11524] bond2: (slave gretap1): making interface the new active one [ 178.505072][T11524] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 178.739956][T11545] set_capacity_and_notify: 5 callbacks suppressed [ 178.739972][T11545] loop2: detected capacity change from 0 to 4096 [ 178.899302][T11558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11558 comm=syz.6.2657 [ 178.913626][T11558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11558 comm=syz.6.2657 [ 179.045008][T11569] loop8: detected capacity change from 0 to 736 [ 179.051925][T11569] iso9660: Unknown parameter 'showasso' [ 179.077683][T11570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.193091][T11586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11586 comm=syz.4.2670 [ 179.210224][T11586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11586 comm=syz.4.2670 [ 179.348082][T11603] loop4: detected capacity change from 0 to 512 [ 179.356588][T11603] EXT4-fs: Ignoring removed i_version option [ 179.362697][T11603] EXT4-fs: Ignoring removed bh option [ 179.386635][T11603] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.422557][T11603] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.2678: iget: bad i_size value: 2533274857506816 [ 179.439563][T11603] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.2678: iget: bad i_size value: 2533274857506816 [ 179.555800][T11615] __nla_validate_parse: 16 callbacks suppressed [ 179.555814][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2683'. [ 179.718084][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2691'. [ 180.125733][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2695'. [ 180.142649][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2695'. [ 180.241965][T11652] loop8: detected capacity change from 0 to 512 [ 180.380673][T11652] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 180.397403][T11652] EXT4-fs (loop8): orphan cleanup on readonly fs [ 180.415089][T11652] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.2697: corrupted inode contents [ 180.561984][T11658] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2699'. [ 180.623519][T11652] EXT4-fs (loop8): Remounting filesystem read-only [ 180.633523][T11669] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2702'. [ 180.653708][T11673] loop4: detected capacity change from 0 to 128 [ 180.673316][T11652] EXT4-fs (loop8): 1 truncate cleaned up [ 180.686167][ T3429] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 180.696759][ T3429] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 180.729044][T11673] ext4 filesystem being mounted at /560/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.739475][ T3429] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 180.817842][T11684] loop2: detected capacity change from 0 to 512 [ 180.836012][T11684] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c028, mo2=0002] [ 180.852834][T11682] loop9: detected capacity change from 0 to 8192 [ 180.861815][T11684] System zones: 0-2, 18-18, 34-35 [ 180.871014][T11682] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.886649][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 180.891069][T11684] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.895498][T11682] FAT-fs (loop9): Filesystem has been set read-only [ 180.979837][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.010103][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.049139][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.092526][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.147338][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.222763][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.266511][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.282008][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 181.302866][T11682] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 182.776389][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 182.809317][T11829] syzkaller0: entered promiscuous mode [ 182.814886][T11829] syzkaller0: entered allmulticast mode [ 183.018184][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2792'. [ 183.209998][T11900] tmpfs: Unsupported parameter 'huge' [ 183.607682][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 183.607719][ T29] audit: type=1400 audit(1770263939.870:9936): avc: denied { block_suspend } for pid=11933 comm="syz.6.2823" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.779497][ T29] audit: type=1400 audit(1770263940.050:9937): avc: denied { shutdown } for pid=11937 comm="syz.2.2825" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.862220][ T29] audit: type=1400 audit(1770263940.130:9938): avc: denied { append } for pid=11946 comm="syz.2.2829" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 183.923250][T11952] xt_hashlimit: size too large, truncated to 1048576 [ 184.161956][T11977] sg_write: data in/out 3338560/1 bytes for SCSI command 0x30-- guessing data in; [ 184.161956][T11977] program syz.4.2841 not setting count and/or reply_len properly [ 184.620666][ T3429] smc: removing ib device syz1 [ 184.634379][ T29] audit: type=1400 audit(1770263940.900:9939): avc: denied { unmount } for pid=11192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.131372][ T29] audit: type=1400 audit(1770263941.400:9940): avc: denied { read } for pid=12033 comm="syz.2.2865" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.135796][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2867'. [ 185.195034][T11992] chnl_net:caif_netlink_parms(): no params data found [ 185.260758][T12040] bond1: entered promiscuous mode [ 185.265850][T12040] bond1: entered allmulticast mode [ 185.339337][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.346423][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.354614][T11992] bridge_slave_0: entered allmulticast mode [ 185.361202][T11992] bridge_slave_0: entered promiscuous mode [ 185.367889][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2867'. [ 185.372872][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.383993][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.391442][T11992] bridge_slave_1: entered allmulticast mode [ 185.395773][ T29] audit: type=1400 audit(1770263941.660:9941): avc: denied { append } for pid=12058 comm="syz.8.2873" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.398157][T11992] bridge_slave_1: entered promiscuous mode [ 185.428312][T12040] bond1: left promiscuous mode [ 185.433256][T12040] bond1: left allmulticast mode [ 185.438301][T12040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.464047][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.474542][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.504968][T11992] team0: Port device team_slave_0 added [ 185.507202][T12063] loop9: detected capacity change from 0 to 512 [ 185.512019][T11992] team0: Port device team_slave_1 added [ 185.539620][T12063] SELinux: ebitmap: truncated map [ 185.545209][T12063] SELinux: failed to load policy [ 185.550529][ T1675] bond0: (slave netdevsim1): Releasing backup interface [ 185.574252][T11992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.581370][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.607422][T11992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.618788][T11992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.625724][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.640927][ T29] audit: type=1400 audit(1770263941.890:9942): avc: denied { watch watch_reads } for pid=12066 comm="syz.9.2877" path="/proc/108" dev="proc" ino=35028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 185.651839][T11992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.713480][T11992] hsr_slave_0: entered promiscuous mode [ 185.726241][T11992] hsr_slave_1: entered promiscuous mode [ 185.736438][T11992] debugfs: 'hsr0' already exists in 'hsr' [ 185.742221][T11992] Cannot create hsr debugfs directory [ 185.768828][ T29] audit: type=1400 audit(1770263942.030:9943): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 185.819784][ T1675] bridge_slave_1: left allmulticast mode [ 185.825521][ T1675] bridge_slave_1: left promiscuous mode [ 185.831255][ T1675] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.838798][ T1675] bridge_slave_0: left allmulticast mode [ 185.844500][ T1675] bridge_slave_0: left promiscuous mode [ 185.850190][ T1675] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.964486][ T1675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.979713][ T1675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.002108][ T1675] bond0 (unregistering): Released all slaves [ 186.010446][ T1675] bond1 (unregistering): Released all slaves [ 186.030834][ T1675] bond2 (unregistering): Released all slaves [ 186.099929][ T1675] hsr_slave_0: left promiscuous mode [ 186.108760][ T1675] hsr_slave_1: left promiscuous mode [ 186.114361][ T29] audit: type=1400 audit(1770263942.380:9944): avc: denied { remount } for pid=12099 comm="syz.2.2892" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.114374][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.141957][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.203048][ T29] audit: type=1326 audit(1770263942.460:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12113 comm="syz.2.2896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb9128aeb9 code=0x0 [ 186.235330][ T1675] team0 (unregistering): Port device macvlan1 removed [ 186.296131][ T1675] team0 (unregistering): Port device team_slave_1 removed [ 186.320167][ T1675] team0 (unregistering): Port device team_slave_0 removed [ 186.589807][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2908'. [ 186.766928][T12191] loop4: detected capacity change from 0 to 7 [ 186.773360][T12191] buffer_io_error: 1087 callbacks suppressed [ 186.773375][T12191] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.787498][T12191] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.795474][T12191] loop4: unable to read partition table [ 186.801199][T12191] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 187.001529][T11992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.015157][T11992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.038150][T11992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.052698][T11992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.064788][T12220] syzkaller0: entered promiscuous mode [ 187.070420][T12220] syzkaller0: entered allmulticast mode [ 187.128246][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.149275][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.173235][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.180330][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.215494][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.222727][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.390317][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.557307][T11992] veth0_vlan: entered promiscuous mode [ 187.574547][T11992] veth1_vlan: entered promiscuous mode [ 187.591334][T11992] veth0_macvtap: entered promiscuous mode [ 187.603768][T11992] veth1_macvtap: entered promiscuous mode [ 187.617513][T11992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.637525][T11992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.654529][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.668355][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.687607][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.699489][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.889469][T12295] loop9: detected capacity change from 0 to 164 [ 187.939274][T12299] netlink: 75 bytes leftover after parsing attributes in process `syz.4.2946'. [ 187.972716][T12302] xt_hashlimit: max too large, truncated to 1048576 [ 188.204402][T12290] chnl_net:caif_netlink_parms(): no params data found [ 188.392612][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.399826][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.410501][T12290] bridge_slave_0: entered allmulticast mode [ 188.417076][T12290] bridge_slave_0: entered promiscuous mode [ 188.425697][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.432890][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.441123][T12290] bridge_slave_1: entered allmulticast mode [ 188.460912][T12290] bridge_slave_1: entered promiscuous mode [ 188.540355][T12290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.562296][T12353] netlink: 'syz.4.2965': attribute type 3 has an invalid length. [ 188.591731][T12290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.636963][T12290] team0: Port device team_slave_0 added [ 188.673988][T12290] team0: Port device team_slave_1 added [ 188.818766][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 188.818784][ T29] audit: type=1400 audit(1770263945.080:9951): avc: denied { accept } for pid=12365 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.860970][T12372] loop6: detected capacity change from 0 to 2048 [ 188.869259][ T5491] bond0: (slave syz_tun): Releasing backup interface [ 188.893378][ T29] audit: type=1400 audit(1770263945.100:9952): avc: denied { listen } for pid=12365 comm="syz.2.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.913168][ T29] audit: type=1400 audit(1770263945.130:9953): avc: denied { append } for pid=12371 comm="syz.9.2972" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 188.946993][T12290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.954070][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.980240][T12290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.033631][ T29] audit: type=1400 audit(1770263945.290:9954): avc: denied { name_bind } for pid=12381 comm="syz.4.2977" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 189.060437][T12380] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2976'. [ 189.079901][T12380] gretap0: entered promiscuous mode [ 189.129419][T12290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.136470][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.162507][T12290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.293883][ T29] audit: type=1400 audit(1770263945.560:9955): avc: denied { ioctl } for pid=12395 comm="syz.2.2982" path="socket:[35719]" dev="sockfs" ino=35719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.331481][T12398] loop4: detected capacity change from 0 to 512 [ 189.355376][T12290] hsr_slave_0: entered promiscuous mode [ 189.420528][T12290] hsr_slave_1: entered promiscuous mode [ 189.438878][T12290] debugfs: 'hsr0' already exists in 'hsr' [ 189.444630][T12290] Cannot create hsr debugfs directory [ 189.463396][T12396] batadv_slave_0: entered promiscuous mode [ 189.743821][T12406] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2986'. [ 189.774377][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 189.876493][ T29] audit: type=1400 audit(1770263946.140:9956): avc: denied { read } for pid=12409 comm="syz.4.2989" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.913368][T12290] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.929515][T12290] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.948891][T12290] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.961666][T12290] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.047553][T12290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.072098][T12290] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.102809][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.109909][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.151646][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.158760][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.288193][ T29] audit: type=1400 audit(1770263946.550:9957): avc: denied { map } for pid=12443 comm="syz.9.2999" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.352124][T12290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.560258][T12290] veth0_vlan: entered promiscuous mode [ 190.573693][T12290] veth1_vlan: entered promiscuous mode [ 190.597067][T12290] veth0_macvtap: entered promiscuous mode [ 190.605208][T12290] veth1_macvtap: entered promiscuous mode [ 190.616735][T12290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.629131][T12290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.641799][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.655214][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.671744][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.689154][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.721633][ T2999] loop5: p1 < > p4 < > [ 191.286925][ T29] audit: type=1400 audit(1770263947.550:9958): avc: denied { mounton } for pid=12501 comm="syz.9.3018" path="/93/file0" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.403553][ T29] audit: type=1400 audit(1770263947.670:9959): avc: denied { write } for pid=12505 comm="syz.9.3020" name="file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.556370][ T29] audit: type=1400 audit(1770263947.820:9960): avc: denied { ioctl } for pid=12505 comm="syz.9.3020" path="/94/file0" dev="tmpfs" ino=500 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.632236][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3029'. [ 192.116713][T12544] loop8: detected capacity change from 0 to 164 [ 192.301801][T12568] loop4: detected capacity change from 0 to 764 [ 192.372200][T12579] syzkaller0: entered promiscuous mode [ 192.377783][T12579] syzkaller0: entered allmulticast mode [ 192.419662][T12583] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3053'. [ 192.458152][T12589] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3056'. [ 192.548318][T12600] loop8: detected capacity change from 0 to 764 [ 192.659538][T12616] syzkaller0: entered promiscuous mode [ 192.665057][T12616] syzkaller0: entered allmulticast mode [ 192.742803][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3075'. [ 193.779504][T12699] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.805182][T12701] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3108'. [ 193.845175][T12708] netlink: 'syz.8.3111': attribute type 4 has an invalid length. [ 193.891332][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 193.891347][ T29] audit: type=1400 audit(1770263950.160:9963): avc: denied { create } for pid=12713 comm="syz.9.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 193.926917][ T29] audit: type=1400 audit(1770263950.160:9964): avc: denied { write } for pid=12713 comm="syz.9.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 194.004648][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3119'. [ 194.014080][ T29] audit: type=1400 audit(1770263950.290:9965): avc: denied { relabelfrom } for pid=12717 comm="syz.8.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 194.042503][ T29] audit: type=1400 audit(1770263950.290:9966): avc: denied { relabelto } for pid=12717 comm="syz.8.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 194.062942][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3119'. [ 194.081394][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3119'. [ 194.156118][ T4385] Process accounting resumed [ 194.351262][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3141'. [ 194.398889][ T29] audit: type=1400 audit(1770263950.660:9967): avc: denied { sqpoll } for pid=12777 comm="syz.8.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.512423][T12795] loop8: detected capacity change from 0 to 128 [ 195.183127][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3174'. [ 195.474409][T12858] syzkaller0: entered promiscuous mode [ 195.480151][T12858] syzkaller0: entered allmulticast mode [ 195.911537][T12874] chnl_net:caif_netlink_parms(): no params data found [ 195.967554][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.974785][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.983134][T12874] bridge_slave_0: entered allmulticast mode [ 195.989708][T12874] bridge_slave_0: entered promiscuous mode [ 196.000051][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.007297][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.014958][T12874] bridge_slave_1: entered allmulticast mode [ 196.021893][T12874] bridge_slave_1: entered promiscuous mode [ 196.061864][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.076321][ T42] bridge_slave_1: left allmulticast mode [ 196.082101][ T42] bridge_slave_1: left promiscuous mode [ 196.087771][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.102677][ T42] bridge_slave_0: left allmulticast mode [ 196.108385][ T42] bridge_slave_0: left promiscuous mode [ 196.114151][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.163082][ T42] bond2 (unregistering): (slave gretap1): Releasing active interface [ 196.239495][T12936] loop4: detected capacity change from 0 to 512 [ 196.247428][T12936] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.260593][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.270919][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.280280][ T42] bond0 (unregistering): Released all slaves [ 196.292155][ T42] bond1 (unregistering): Released all slaves [ 196.302716][ T42] bond2 (unregistering): Released all slaves [ 196.318637][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.357217][ T42] hsr_slave_0: left promiscuous mode [ 196.363372][ T42] hsr_slave_1: left promiscuous mode [ 196.372565][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.380099][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.422509][ T42] team0 (unregistering): Port device team_slave_1 removed [ 196.432053][ T42] team0 (unregistering): Port device team_slave_0 removed [ 196.456648][T12947] tmpfs: Unsupported parameter 'huge' [ 196.476057][T12874] team0: Port device team_slave_0 added [ 196.490029][T12874] team0: Port device team_slave_1 added [ 196.552141][T12874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.559240][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.585284][T12874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.637474][T12874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.644602][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.670691][T12874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.716390][T12874] hsr_slave_0: entered promiscuous mode [ 196.740402][T12874] hsr_slave_1: entered promiscuous mode [ 196.751337][T12985] __nla_validate_parse: 3 callbacks suppressed [ 196.751388][T12985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3226'. [ 196.753573][T12874] debugfs: 'hsr0' already exists in 'hsr' [ 196.772332][T12874] Cannot create hsr debugfs directory [ 196.792614][T12988] syzkaller0: entered promiscuous mode [ 196.798123][T12988] syzkaller0: entered allmulticast mode [ 197.161419][T13051] syzkaller0: entered promiscuous mode [ 197.166949][T13051] syzkaller0: entered allmulticast mode [ 197.225424][T12874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 197.226029][ T29] audit: type=1400 audit(1770263953.490:9968): avc: denied { mounton } for pid=13059 comm="syz.4.3248" path="/82/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 197.257217][T12874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 197.270943][T12874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 197.296782][T12874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 197.320156][T13072] TCP: tcp_parse_options: Illegal window scaling value 15 > 14 received [ 197.389962][T12874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.406118][T13088] loop4: detected capacity change from 0 to 128 [ 197.418530][T12874] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.444722][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.451855][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.470738][T13097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13097 comm=syz.6.3256 [ 197.489998][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.497148][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.610565][T12874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.662637][T13099] bio_check_eod: 1089 callbacks suppressed [ 197.662655][T13099] syz.4.3255: attempt to access beyond end of device [ 197.662655][T13099] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 197.682350][T13099] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 197.692127][T13117] raw_sendmsg: syz.6.3258 forgot to set AF_INET. Fix it! [ 197.703402][T13099] syz.4.3255: attempt to access beyond end of device [ 197.703402][T13099] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 197.717174][T13099] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 197.758308][T12874] veth0_vlan: entered promiscuous mode [ 197.767236][T12874] veth1_vlan: entered promiscuous mode [ 197.781364][T12874] veth0_macvtap: entered promiscuous mode [ 197.797713][T12874] veth1_macvtap: entered promiscuous mode [ 197.810753][T12874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.821192][T12874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.833398][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.850636][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.860143][T13129] loop4: detected capacity change from 0 to 256 [ 197.867299][ T3429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.879573][ T3429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.903718][T13129] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.915743][T13132] netlink: 'syz.2.3185': attribute type 4 has an invalid length. [ 197.991557][T13138] loop2: detected capacity change from 0 to 164 [ 198.233048][T13167] syzkaller0: entered promiscuous mode [ 198.238542][T13167] syzkaller0: entered allmulticast mode [ 198.420714][T13185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3288'. [ 198.488258][T13192] loop4: detected capacity change from 0 to 512 [ 198.497776][T13192] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.543817][ T29] audit: type=1400 audit(1770263954.810:9969): avc: denied { write } for pid=13195 comm="syz.9.3293" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 198.834393][T13232] xt_hashlimit: size too large, truncated to 1048576 [ 199.189066][ T29] audit: type=1400 audit(1770263955.450:9970): avc: denied { write } for pid=13259 comm="syz.8.3321" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 199.606191][ T29] audit: type=1400 audit(1770263955.860:9971): avc: denied { write } for pid=13269 comm="syz.2.3325" name="igmp" dev="proc" ino=4026533827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 200.093239][T13297] loop8: detected capacity change from 0 to 164 [ 200.104548][T13297] rock: directory entry would overflow storage [ 200.110872][T13297] rock: sig=0x4f50, size=4, remaining=3 [ 200.116443][T13297] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.925397][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3371'. [ 202.080210][T13385] ================================================================== [ 202.088429][T13385] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 202.097046][T13385] [ 202.099357][T13385] write to 0xffff88811bce86a8 of 8 bytes by task 13382 on cpu 1: [ 202.107061][T13385] shmem_file_splice_read+0x470/0x600 [ 202.112458][T13385] splice_direct_to_actor+0x26e/0x670 [ 202.117828][T13385] do_splice_direct+0x119/0x1a0 [ 202.122674][T13385] do_sendfile+0x382/0x650 [ 202.127085][T13385] __x64_sys_sendfile64+0x105/0x150 [ 202.132280][T13385] x64_sys_call+0x2db1/0x3000 [ 202.136948][T13385] do_syscall_64+0xc0/0x2a0 [ 202.141458][T13385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.147351][T13385] [ 202.149665][T13385] write to 0xffff88811bce86a8 of 8 bytes by task 13385 on cpu 0: [ 202.157365][T13385] shmem_file_splice_read+0x470/0x600 [ 202.162744][T13385] splice_direct_to_actor+0x26e/0x670 [ 202.168111][T13385] do_splice_direct+0x119/0x1a0 [ 202.172955][T13385] do_sendfile+0x382/0x650 [ 202.177365][T13385] __x64_sys_sendfile64+0x105/0x150 [ 202.182565][T13385] x64_sys_call+0x2db1/0x3000 [ 202.187237][T13385] do_syscall_64+0xc0/0x2a0 [ 202.191828][T13385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.197766][T13385] [ 202.200087][T13385] value changed: 0x000000000000c31a -> 0x000000000000c44c [ 202.207186][T13385] [ 202.209498][T13385] Reported by Kernel Concurrency Sanitizer on: [ 202.215739][T13385] CPU: 0 UID: 0 PID: 13385 Comm: syz.6.3374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.225541][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.235593][T13385] ==================================================================