last executing test programs: 5m16.633538377s ago: executing program 1 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) 5m16.58841612s ago: executing program 1 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x80) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x31, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r5 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) 5m15.71048178s ago: executing program 1 (id=828): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000340), 0x0) 5m15.647488295s ago: executing program 1 (id=830): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x10002, 0x29) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b001300000008"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884) read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/29, 0x1d) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xbf) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents64(r4, &(0x7f0000000140)=""/46, 0x2e) r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x6a23, @loopback}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000082de85395f3836b33bc000100000000e3a8d604000003652a06fe9a0000a4ae000000000000"], 0x0) read$usbmon(r5, 0x0, 0x0) 5m15.455452738s ago: executing program 1 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 5m15.025858347s ago: executing program 1 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x80) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x31, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r5 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) 5m14.884616867s ago: executing program 32 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x80) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x31, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r5 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) 1.817323946s ago: executing program 4 (id=3577): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000140000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 1.718363633s ago: executing program 4 (id=3579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@broadcast, @private}, &(0x7f00000001c0)=0x8) rseq(0x0, 0x0, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000f00)={r5}) sendmsg$NFT_BATCH(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004894) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff7ffc}, {0x6, 0x2, 0x45, 0x7f}]}) close_range(r9, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 1.443217691s ago: executing program 5 (id=3580): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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") add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x60, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r0) 1.147334152s ago: executing program 5 (id=3581): unshare(0x22020600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x4e, "5c76276f6c86622447099377e66e2ebe40decbab5fbe9cc10fa5cb0a2d53fa4d966d6ffed1fbcaafb9f3ae2151a9d7c7d003780b0d7950dae8941dd6bdd15bd59dfb0caa0a7c85d46e238e817279"}}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000740)={{}, {0x9}, 0x20, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="993edfc4f7175b09221e3fb2f25e45f847acd687fb7bef3fbe2b841511a28b273b1496e4c12e67071b91dddf4da5bf2c48063240613e3304378b2cf3e573cec758e4cf7d9bd873295c15cecc9c3773863f6d19194858c12bfaf8ce9720f97d334123eff60d1415dae664462a5599071a2ada4c13b8cf5b9b0f35a1bc4bdeaf12d0baf3673a2976ac1c61fbaa881c163cfb3ca1bb947d0148c3839e085badee62e917fb43604ad57092f783f439063bc5d46c4d5e24b13a239034b03d568df65e185f0b630d64a58da81f8aeb3b931dcf3a9035804de1041ca6a13b7a4d217e5533", 0xe1, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1aa}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1c112, 0xffffffffffffffff, 0x7a833000) 937.704836ms ago: executing program 2 (id=3584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000}, 0x50) 799.630806ms ago: executing program 4 (id=3588): r0 = socket(0x2, 0x80802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001140)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000ac0], 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000200000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000007fffffe000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fead69c292fca132"]}, 0x108) 742.825839ms ago: executing program 2 (id=3589): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x40080c0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) 678.688644ms ago: executing program 2 (id=3592): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8804) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38044891}, 0x20048851) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0x0, 0x9}}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x8800) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f00000000c0)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 678.416134ms ago: executing program 3 (id=3593): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x181, 0x6}, 0xe025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1000001, 0x12, r0, 0x28c92000) (async) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000340)=""/139, 0x8b, 0x0, &(0x7f0000000640)=""/118, 0x76}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@noauto_da_alloc}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=") r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1) unlinkat(r4, &(0x7f0000000000)='./file1\x00', 0x0) (async) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) setsockopt$sock_int(r5, 0x1, 0x26, &(0x7f00000002c0)=0x2, 0x4) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f00000007c0)=ANY=[], 0x0, 0x249, &(0x7f0000000e80)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) recvmsg$can_raw(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)}, {&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/32, 0x20}, {&(0x7f0000000d40)=""/95, 0x5f}], 0x5}, 0x1100) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="0200000001000300000000000400040000000000100003000000000020000100000000000bcac55af984bd39b18cd6d7c2291a22f7f161868ca5cdc4ceac68a5b5d6617f2b402a7e418416aeb37820e90d04deeb5077d69d52a88466ac90d9fcdf74d82912a0d6554c2d3f8f358d44153d4a4dd41672869cb14a75b5f1446127a2e6e08f4dd321fa893204f6ea22928bd73a3126aa5d1a447256b733d5d3fee83eec401f4efee49db197e2873982f95e29f7bf5731f445f191853bfcd84830414d0d50cbe265a765ddf36f7382fadda71fd67899994f6e9d996fd800"/232], 0x24, 0x3) 677.978894ms ago: executing program 4 (id=3594): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) 657.913735ms ago: executing program 4 (id=3595): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r1, 0x2) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x8, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000d00)={0x5, 0x10, 0xfa00, {&(0x7f0000000b00)}}, 0x18) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x573, &(0x7f0000000580)="$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") ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000040)={0x7ff, 0x2, 0x9, 0x7, 0x3}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_open_procfs$namespace(r4, &(0x7f0000000200)='ns/net\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f00000000c0)={0x14, 0xf, &(0x7f0000000080)="5c281e29700739260130e2af102126"}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000140)=0x1) 572.516862ms ago: executing program 0 (id=3596): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x8000000) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000040)=0x54) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) socket$nl_generic(0x10, 0x3, 0x10) r6 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}) dup(r9) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) 522.689745ms ago: executing program 3 (id=3597): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x401, 0x253237844f167991, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x48050}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='1\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x4c}}, 0x884) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x10000, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x100003, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfa}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x5a, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) accept4$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10, 0x80000) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) readv(r16, &(0x7f0000000780)=[{&(0x7f0000000240)=""/107, 0x6b}], 0x1) getpeername(r14, &(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000000)=0x80) 506.790176ms ago: executing program 4 (id=3598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x99}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x9, 0x7, 0x0, 0x2, 0xe1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0x7, 0xfff, 0x200}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000140)=[0xffffffffffffffff], &(0x7f0000000180)=[{0x4, 0x2, 0xf, 0xb}, {0x0, 0x5, 0xc, 0x2}, {0x3, 0x3, 0x8, 0x5}, {0x5, 0x5, 0x0, 0x9}, {0x0, 0x3, 0x9, 0x7}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0xd1}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x200000000008, 0x5}, 0x7e75, 0x5, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x0, r3, 0x4, 0x8, 0x2, 0x5}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1b8, 0xc8, 0x8, 0x0, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x198, 0x1b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@srh={{0x30}, {0x32, 0x6, 0x40, 0xd0, 0x0, 0x114, 0x640}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xffffffff, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffe07) lseek(r0, 0x7f, 0x3) 493.726167ms ago: executing program 0 (id=3599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x50) 406.792623ms ago: executing program 0 (id=3600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r2, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1}, 0x51bb9eb6}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="a5050f0040b500000090000008004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000020000000000020000e0000002ac1414aa070300830300442400030a01012f00000000e000000100000002ac1e000100000000ac1414bb000000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) (async) sendmsg(r2, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1}, 0x51bb9eb6}], 0x1, 0x10000, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="a5050f0040b500000090000008004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000020000000000020000e0000002ac1414aa070300830300442400030a01012f00000000e000000100000002ac1e000100000000ac1414bb000000000000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) 321.912759ms ago: executing program 0 (id=3601): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x8528c000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb0}, 0x3b) 276.513272ms ago: executing program 2 (id=3602): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0xf9ffff0000000000, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000140000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 258.739343ms ago: executing program 3 (id=3603): mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=m,inode32']) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008884) (async) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008884) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) (async) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="ffdf17c4bf9a63f0a7a4ff3918ae31869493cf5a933b7e172503edd589b08696e539e3dc03e31a6246037dd43b879c40f58f4d1141a22155", 0x38}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000c7000000000000000a000000911153000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000c7000000000000000a000000911153000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 190.696087ms ago: executing program 2 (id=3604): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) r0 = getpid() (async) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async, rerun: 64) accept4$vsock_stream(r1, 0x0, 0x0, 0x80000) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x200000, 0x0, 0xff, 0x3, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0xb, 0x508}, 0x20) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000000), 0xfe, 0x244, &(0x7f0000000400)="$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") (async) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x9, 0x3, 0x6, 0x1, 0x0, 0xfffffffffffff312, 0xa4201, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x2800, 0x2, 0x7, 0x2, 0xa, 0x1, 0x9988, 0x0, 0xb, 0x0, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x1}, 0x6580, 0x4, 0x800000, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0xc0}, r0, 0xffffffffffffffff, r7, 0x1) 190.391717ms ago: executing program 0 (id=3605): r0 = socket(0x2, 0x80802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001140)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000ac0], 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000200000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000007fffffe0000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fead69c292fca132"]}, 0x108) 190.166228ms ago: executing program 0 (id=3606): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0xffffffff, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 32) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014, 0x20808}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 184.862278ms ago: executing program 2 (id=3607): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0xb, &(0x7f00000003c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffffd, 0x4}, {0xffffffff, 0x20000201}, 0x1}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xe, 0x0, 0x0, 0x0, 0x1000, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x106200, 0x10004, 0x5, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000001440)="c7125b9346e12a5da3cd0d6ebf014bb2f496f2909343c4755a4788e600f95eae2c43079470653b395ab3611a6a56eb634aeb541c825c2063619cb83d6b24a2baafa40986e5dff322add7dc9052b584240526a7b2568976c52e7620bcd670cf0b2051320599e6266144c2dba8ce82317e8eb7bb0b5db399c8a3e21fe5db817763c9f9bbd0540775b26f1eaaf8957fed616f04cc99fc5bf4b247cacde66b64213a05a000"/185, 0xb9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r5 = semget$private(0x0, 0x6, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) semtimedop(r5, &(0x7f00000006c0)=[{0x4, 0x8008, 0x1800}, {0x4, 0x4008, 0x1800}, {0x2, 0xfff7, 0x3000}], 0x3, 0x0) semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r5, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)) 142.46036ms ago: executing program 5 (id=3608): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfd, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb02}, 0x0, 0xc8, 0x10003, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x42, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90021", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0) socket$rds(0x15, 0x5, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfdef) 140.815611ms ago: executing program 3 (id=3609): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@delalloc}, {@noload}, {@data_journal}, {@commit={'commit', 0x3d, 0x7}}]}, 0x1, 0x783, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '', [{0x20, '-+\xed'}], 0xa, "5292b5272c5825e71b28c934f0374fa7ea3c6b229cd1bc8cbaa170d894c451ee34968e448b6a0922a3601c6dcb07a70a550f25ab51"}, 0x3d) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x5cf, 0x739}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 70.837406ms ago: executing program 5 (id=3610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0xfe, 0x60000000}, 0x50) 70.438816ms ago: executing program 5 (id=3611): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="2e0000001100810807000000000000000a483137140015a46075f7b82150eaf60d000302020400bf050005001201", 0x2e}], 0x1}, 0x14) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x60d2, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x3c28b000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) (async) getdents64(r2, &(0x7f00000004c0)=""/44, 0x2c) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000540)={0x53, 0x1, 0x0, {0x10, 0x400}, {0x5, 0x4}, @period={0x5a, 0x400, 0x6, 0x5, 0xfffe, {0xc, 0x40, 0x5, 0xf96}, 0x8, &(0x7f0000000480)=[0x9, 0x3, 0xfa90, 0xf, 0x2, 0x7, 0x7, 0x72]}}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001800040008d4b8acbb0d917b77000400030000a000050000090000000000380001000000000000000000000000000000c855fe4a1a1a211cf62446fc76d9bfce190170d5a3ab48d47df1583d93d71c5190e1f3b723909435bc39f18a80bf9e0a9bfa10fa94921a1c074f1acdaeb8e328f96619b3d94b169c933dcbc4682358bae79c8e8014cdab0647b372edc07b684343fae4e25412"], 0x34}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="e9", 0x1}], 0x1}, 0xc080) (async) close(r10) (async) tee(r2, r8, 0xf3a, 0x4) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x18c6) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x12, &(0x7f0000000940)=ANY=[@ANYBLOB="180000001a000000000000000700000018410000f8ffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000f73464bb5a6291315d64bf91fd7fc3f0fb015646270ddc8dcab656c2d3308b2ecc33cece31c87190d59e979db6880b85b137e57cea"], &(0x7f00000006c0)='syzkaller\x00', 0xdf, 0x0, &(0x7f0000000700), 0x41000, 0x10, '\x00', 0x0, @netfilter, r6, 0x8, &(0x7f0000000740)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x1, 0x3ff, 0x5}, 0x10, 0x0, r4, 0x6, &(0x7f00000007c0)=[r4, r2], &(0x7f0000000800)=[{0x0, 0x7, 0x2, 0x1}, {0x0, 0x3, 0x6, 0xb}, {0x4, 0x2, 0x2, 0x2}, {0x5, 0x2, 0xe, 0xb}, {0x1, 0x2, 0x1, 0x5}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0xffff}, 0x94) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/323], 0x0) 70.129935ms ago: executing program 3 (id=3612): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xc) mkdirat$cgroup(r4, &(0x7f0000000900)='syz0\x00', 0x1ff) fchdir(r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port0\x00', 0x72, 0x121c4a, 0x0, 0x8000008, 0x9, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r5 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) uname(&(0x7f0000000940)=""/27) sendfile(r5, r6, 0x0, 0xec0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0x9}, {0x0, 0x2}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x7, 0x0, 0x724f, 0x0, 0x55a}) r11 = open(0x0, 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) ioctl$RNDADDTOENTCNT(r11, 0x40045201, &(0x7f00000000c0)=0x1000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10009, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") 34.915948ms ago: executing program 5 (id=3613): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000400)={0x2, 'bond_slave_0\x00', {0x2}, 0x4}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000300)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r3) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0xf5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x9, 0x2, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0x5, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x1e, @void}, 0x10) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r0) r10 = fsopen(&(0x7f0000000040)='proc\x00', 0x1) fsmount(r10, 0x1, 0x0) syz_usbip_server_init(0x3) 0s ago: executing program 3 (id=3614): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") r4 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x1, 0x2, 0x2}]}]}, {0x0, [0x61, 0x6f, 0x5f]}}, &(0x7f0000002cc0)=""/4085, 0x35, 0xff5, 0x9}, 0x28) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) recvmmsg(r4, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004000)=[{0x0}, {&(0x7f00000070c0)=""/148, 0x94}], 0x2}, 0x3}], 0x1, 0x101, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4c004) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): 4 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.725483][T15567] RSP: 002b:00007f0bbdd3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.725509][T15567] RAX: ffffffffffffffda RBX: 00007f0bbf565fa0 RCX: 00007f0bbf2ec819 [ 352.725524][T15567] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 352.725535][T15567] RBP: 00007f0bbdd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 352.725546][T15567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.725626][T15567] R13: 00007f0bbf566038 R14: 00007f0bbf565fa0 R15: 00007ffcc8348418 [ 352.725646][T15567] [ 352.990770][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 353.548396][T15581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15581 comm=syz.0.3022 [ 353.634631][T15581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15581 comm=syz.0.3022 [ 353.976037][T15593] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 353.982592][T15593] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.016127][T15593] vhci_hcd vhci_hcd.0: Device attached [ 354.048796][T15594] vhci_hcd: connection closed [ 354.049038][T13030] vhci_hcd vhci_hcd.5: stop threads [ 354.061568][T15598] netlink: 'syz.3.3027': attribute type 1 has an invalid length. [ 354.083294][T15601] 9pnet_fd: Insufficient options for proto=fd [ 354.085275][T13030] vhci_hcd vhci_hcd.5: release socket [ 354.105458][T15598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.112317][T13030] vhci_hcd vhci_hcd.5: disconnect device [ 354.145966][T15598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15598 comm=syz.3.3027 [ 354.260480][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 354.260495][ T28] audit: type=1400 audit(1775845135.416:1251): avc: denied { connect } for pid=15597 comm="syz.3.3027" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.287646][ T28] audit: type=1400 audit(1775845135.416:1252): avc: denied { write } for pid=15597 comm="syz.3.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.307528][ T28] audit: type=1400 audit(1775845135.416:1253): avc: denied { connect } for pid=15597 comm="syz.3.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.382536][T15606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=15606 comm=syz.0.3029 [ 354.401925][ T28] audit: type=1400 audit(1775845135.416:1254): avc: denied { write } for pid=15597 comm="syz.3.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.453931][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.475130][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 354.696795][ T28] audit: type=1400 audit(1775845135.846:1255): avc: denied { read } for pid=15610 comm="syz.4.3031" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.752537][ T28] audit: type=1400 audit(1775845135.876:1256): avc: denied { open } for pid=15610 comm="syz.4.3031" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.777815][ T28] audit: type=1400 audit(1775845135.896:1257): avc: denied { ioctl } for pid=15610 comm="syz.4.3031" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.780347][T15615] xt_TPROXY: Can be used only with -p tcp or -p udp [ 354.803598][ T28] audit: type=1400 audit(1775845135.926:1258): avc: denied { name_bind } for pid=15610 comm="syz.4.3031" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 354.811081][T15613] loop5: detected capacity change from 0 to 4096 [ 354.835136][ T28] audit: type=1400 audit(1775845135.936:1259): avc: denied { node_bind } for pid=15610 comm="syz.4.3031" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 354.882827][T15613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.900191][ T28] audit: type=1400 audit(1775845136.056:1260): avc: denied { setopt } for pid=15614 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 354.920688][T15611] loop4: detected capacity change from 0 to 128 [ 355.599413][T15631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.616023][T15631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.555299][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.852945][T15648] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 356.859639][T15648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 356.890503][T15648] vhci_hcd vhci_hcd.0: Device attached [ 356.910392][T15650] vhci_hcd: connection closed [ 356.910591][ T4802] vhci_hcd vhci_hcd.3: stop threads [ 356.921793][ T4802] vhci_hcd vhci_hcd.3: release socket [ 356.937105][ T4802] vhci_hcd vhci_hcd.3: disconnect device [ 356.979493][T15652] loop5: detected capacity change from 0 to 512 [ 357.009835][T15652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.029849][T15652] 9pnet_fd: Insufficient options for proto=fd [ 357.144133][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 357.446711][T15661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=15661 comm=syz.0.3044 [ 357.816464][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.192624][T15686] FAULT_INJECTION: forcing a failure. [ 358.192624][T15686] name failslab, interval 1, probability 0, space 0, times 0 [ 358.234379][T15686] CPU: 1 UID: 0 PID: 15686 Comm: syz.2.3053 Tainted: G W syzkaller #0 PREEMPT(full) [ 358.234407][T15686] Tainted: [W]=WARN [ 358.234413][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 358.234428][T15686] Call Trace: [ 358.234435][T15686] [ 358.234442][T15686] __dump_stack+0x1d/0x30 [ 358.234467][T15686] dump_stack_lvl+0x95/0xd0 [ 358.234489][T15686] dump_stack+0x15/0x1b [ 358.234510][T15686] should_fail_ex+0x263/0x280 [ 358.234556][T15686] should_failslab+0x8c/0xb0 [ 358.234659][T15686] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 358.234680][T15686] ? __alloc_skb+0x2d6/0x690 [ 358.234705][T15686] __alloc_skb+0x2d6/0x690 [ 358.234807][T15686] ? __alloc_skb+0x200/0x690 [ 358.234894][T15686] netlink_ack+0xfd/0x500 [ 358.234923][T15686] ? __kmalloc_cache_noprof+0x18a/0x410 [ 358.234949][T15686] nfnetlink_rcv+0x154d/0x1720 [ 358.235035][T15686] netlink_unicast+0x5c0/0x690 [ 358.235088][T15686] netlink_sendmsg+0x5c8/0x6f0 [ 358.235109][T15686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.235128][T15686] ____sys_sendmsg+0x563/0x5b0 [ 358.235147][T15686] ___sys_sendmsg+0x195/0x1e0 [ 358.235193][T15686] __x64_sys_sendmsg+0xd4/0x160 [ 358.235237][T15686] x64_sys_call+0x194c/0x3020 [ 358.235259][T15686] do_syscall_64+0x12c/0x370 [ 358.235353][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.235375][T15686] RIP: 0033:0x7f769d4cc819 [ 358.235390][T15686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.235423][T15686] RSP: 002b:00007f769bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.235443][T15686] RAX: ffffffffffffffda RBX: 00007f769d745fa0 RCX: 00007f769d4cc819 [ 358.235536][T15686] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 358.235549][T15686] RBP: 00007f769bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 358.235561][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.235574][T15686] R13: 00007f769d746038 R14: 00007f769d745fa0 R15: 00007fff023517b8 [ 358.235636][T15686] [ 358.237647][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 358.499832][T15700] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 358.525985][T15702] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3059'. [ 358.541028][T15700] bond1: entered promiscuous mode [ 358.546676][T15700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.564539][T15703] can0: slcan on ptm0. [ 358.657260][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'. [ 358.704771][T15700] bond1: entered allmulticast mode [ 358.724485][T15703] can0 (unregistered): slcan off ptm0. [ 358.742966][T15700] bond1: (slave bridge1): making interface the new active one [ 358.767189][T15700] bridge1: entered promiscuous mode [ 358.772792][T15700] bridge1: entered allmulticast mode [ 358.778559][T15734] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3064'. [ 358.790915][T15700] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 358.972235][T15747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=15747 comm=syz.3.3065 [ 359.046335][T15751] loop2: detected capacity change from 0 to 512 [ 359.631110][T15754] loop4: detected capacity change from 0 to 512 [ 359.735192][T15754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.748626][T15754] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.763980][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 359.764022][ T28] audit: type=1400 audit(1775845140.917:1286): avc: denied { remove_name } for pid=15749 comm="syz.4.3067" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.800426][T15751] EXT4-fs (loop2): unsupported inode size: 160 [ 359.827670][T15754] bond1: entered allmulticast mode [ 359.878801][T15751] EXT4-fs (loop2): blocksize: 1024 [ 359.951532][T15766] FAULT_INJECTION: forcing a failure. [ 359.951532][T15766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.964722][T15766] CPU: 1 UID: 0 PID: 15766 Comm: syz.3.3069 Tainted: G W syzkaller #0 PREEMPT(full) [ 359.964750][T15766] Tainted: [W]=WARN [ 359.964756][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.964767][T15766] Call Trace: [ 359.964775][T15766] [ 359.964783][T15766] __dump_stack+0x1d/0x30 [ 359.964820][T15766] dump_stack_lvl+0x95/0xd0 [ 359.964843][T15766] dump_stack+0x15/0x1b [ 359.964865][T15766] should_fail_ex+0x263/0x280 [ 359.964892][T15766] should_fail+0xb/0x20 [ 359.964952][T15766] should_fail_usercopy+0x1a/0x20 [ 359.964993][T15766] _copy_to_user+0x20/0xa0 [ 359.965028][T15766] simple_read_from_buffer+0xb5/0x130 [ 359.965052][T15766] proc_fail_nth_read+0x10e/0x150 [ 359.965155][T15766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.965184][T15766] vfs_read+0x1ab/0x7f0 [ 359.965202][T15766] ? __rcu_read_unlock+0x4e/0x70 [ 359.965252][T15766] ? __fget_files+0x184/0x1c0 [ 359.965277][T15766] ? mutex_lock+0x57/0x90 [ 359.965298][T15766] ksys_read+0xdc/0x1a0 [ 359.965381][T15766] __x64_sys_read+0x40/0x50 [ 359.965396][T15766] x64_sys_call+0x2886/0x3020 [ 359.965417][T15766] do_syscall_64+0x12c/0x370 [ 359.965504][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.965528][T15766] RIP: 0033:0x7f0bbf2ad04e [ 359.965565][T15766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.965580][T15766] RSP: 002b:00007f0bbdd3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.965597][T15766] RAX: ffffffffffffffda RBX: 00007f0bbdd3f6c0 RCX: 00007f0bbf2ad04e [ 359.965621][T15766] RDX: 000000000000000f RSI: 00007f0bbdd3f0a0 RDI: 0000000000000004 [ 359.965631][T15766] RBP: 00007f0bbdd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.965645][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.965659][T15766] R13: 00007f0bbf566038 R14: 00007f0bbf565fa0 R15: 00007ffcc8348418 [ 359.965679][T15766] [ 360.263824][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 360.924218][ T28] audit: type=1400 audit(1775845140.917:1287): avc: denied { rename } for pid=15749 comm="syz.4.3067" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.679639][ T28] audit: type=1400 audit(1775845144.727:1288): avc: denied { create } for pid=15782 comm="syz.2.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 363.984859][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.687498][ T28] audit: type=1400 audit(1775845145.557:1289): avc: denied { ioctl } for pid=15782 comm="syz.2.3076" path="socket:[39306]" dev="sockfs" ino=39306 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.262389][T15802] loop2: detected capacity change from 0 to 512 [ 368.733822][T15803] 9pnet_fd: Insufficient options for proto=fd [ 368.866932][T15802] EXT4-fs: error -4 creating inode table initialization thread [ 368.900191][T15802] EXT4-fs (loop2): mount failed [ 369.797068][T15815] loop4: detected capacity change from 0 to 512 [ 369.803596][T15815] ext4: Unknown parameter 'fsname' [ 369.811847][T15815] loop4: detected capacity change from 0 to 512 [ 369.818653][T15815] ext4: Unknown parameter 'fsname' [ 369.827160][T15815] loop4: detected capacity change from 0 to 512 [ 369.986018][ T28] audit: type=1400 audit(1775845151.078:1290): avc: denied { read append } for pid=15819 comm="syz.2.3085" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.046612][T15826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15826 comm=syz.2.3085 [ 370.135622][ T28] audit: type=1400 audit(1775845151.078:1291): avc: denied { open } for pid=15819 comm="syz.2.3085" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.198574][ T28] audit: type=1400 audit(1775845151.078:1292): avc: denied { ioctl } for pid=15819 comm="syz.2.3085" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.251230][ T28] audit: type=1400 audit(1775845151.248:1293): avc: denied { name_connect } for pid=15829 comm="syz.3.3089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 370.304183][ T28] audit: type=1400 audit(1775845151.318:1294): avc: denied { read } for pid=15831 comm="syz.4.3090" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 370.329333][ T28] audit: type=1400 audit(1775845151.318:1295): avc: denied { open } for pid=15831 comm="syz.4.3090" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 370.443045][T15838] loop4: detected capacity change from 0 to 128 [ 370.461028][ T28] audit: type=1400 audit(1775845151.578:1296): avc: denied { read } for pid=15837 comm="syz.4.3092" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 370.560417][ T28] audit: type=1400 audit(1775845151.578:1297): avc: denied { open } for pid=15837 comm="syz.4.3092" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 370.676759][ T28] audit: type=1400 audit(1775845151.578:1298): avc: denied { ioctl } for pid=15837 comm="syz.4.3092" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.178684][ T28] audit: type=1400 audit(1775845152.138:1299): avc: denied { shutdown } for pid=15843 comm="syz.3.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.271489][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.289036][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 371.682343][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.717232][T15866] bridge_slave_1: left allmulticast mode [ 371.717313][T15866] bridge_slave_1: left promiscuous mode [ 371.737361][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.764241][T15866] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 371.883533][T15883] syzkaller0: entered promiscuous mode [ 371.889175][T15883] syzkaller0: entered allmulticast mode [ 371.913584][T15883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3105'. [ 372.006601][T15892] loop5: detected capacity change from 0 to 128 [ 372.152977][T15899] syzkaller0: entered promiscuous mode [ 372.158725][T15899] syzkaller0: entered allmulticast mode [ 372.227676][T15905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 372.234346][T15905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.243398][T15905] vhci_hcd vhci_hcd.0: Device attached [ 372.250152][T15906] vhci_hcd: connection closed [ 372.250273][T13035] vhci_hcd vhci_hcd.3: stop threads [ 372.260523][T13035] vhci_hcd vhci_hcd.3: release socket [ 372.266311][T13035] vhci_hcd vhci_hcd.3: disconnect device [ 372.426639][T15912] loop2: detected capacity change from 0 to 4096 [ 372.498668][T15912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.856260][ T3412] IPVS: starting estimator thread 0... [ 375.467416][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.522361][T15936] IPVS: using max 2304 ests per chain, 115200 per kthread [ 375.618314][T15946] loop5: detected capacity change from 0 to 512 [ 375.645654][T15946] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 375.694913][T15953] ip6tnl1: entered promiscuous mode [ 375.709911][T15946] EXT4-fs (loop5): 1 truncate cleaned up [ 375.741564][T15946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.771228][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 375.771243][ T28] audit: type=1400 audit(1775845156.919:1315): avc: denied { create } for pid=15959 comm="syz.0.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 375.791733][T15960] SELinux: failed to load policy [ 375.797817][ T28] audit: type=1400 audit(1775845156.919:1316): avc: denied { write } for pid=15959 comm="syz.0.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 375.822829][ T28] audit: type=1400 audit(1775845156.939:1317): avc: denied { load_policy } for pid=15959 comm="syz.0.3132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 375.848565][T15946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.952225][ T28] audit: type=1400 audit(1775845157.099:1318): avc: denied { read } for pid=15975 comm="syz.4.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.982457][T15976] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3133'. [ 376.014276][T15976] loop4: detected capacity change from 0 to 2048 [ 376.021368][ T28] audit: type=1400 audit(1775845157.159:1319): avc: denied { create } for pid=15975 comm="syz.4.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 376.023053][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3138'. [ 376.055593][T15978] loop5: detected capacity change from 0 to 4096 [ 376.061453][ T28] audit: type=1400 audit(1775845157.159:1320): avc: denied { write } for pid=15975 comm="syz.4.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 376.068172][T15982] bond2: entered promiscuous mode [ 376.090835][T15982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.109243][T15793] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 376.127443][T15983] bridge2: entered promiscuous mode [ 376.128085][T15978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.238765][T15983] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 376.318227][T15982] bond2: left promiscuous mode [ 376.375384][T15982] bridge2: left promiscuous mode [ 376.380485][T15982] bond2: entered allmulticast mode [ 376.385626][T15982] bridge2: entered allmulticast mode [ 376.462807][ T28] audit: type=1400 audit(1775845157.609:1321): avc: denied { create } for pid=15981 comm="syz.2.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 377.213818][ T28] audit: type=1400 audit(1775845157.609:1322): avc: denied { write } for pid=15981 comm="syz.2.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 377.517141][ T28] audit: type=1400 audit(1775845158.669:1323): avc: denied { write } for pid=16013 comm="syz.0.3149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 377.639213][ T28] audit: type=1400 audit(1775845158.789:1324): avc: denied { read } for pid=16020 comm="syz.2.3151" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 377.760886][T16029] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 377.767631][T16029] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.829437][T16040] FAULT_INJECTION: forcing a failure. [ 377.829437][T16040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.876362][T16029] vhci_hcd vhci_hcd.0: Device attached [ 377.883528][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.0.3154 Tainted: G W syzkaller #0 PREEMPT(full) [ 377.883557][T16040] Tainted: [W]=WARN [ 377.883563][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.883575][T16040] Call Trace: [ 377.883604][T16040] [ 377.883612][T16040] __dump_stack+0x1d/0x30 [ 377.883711][T16040] dump_stack_lvl+0x95/0xd0 [ 377.883730][T16040] dump_stack+0x15/0x1b [ 377.883750][T16040] should_fail_ex+0x263/0x280 [ 377.883777][T16040] should_fail+0xb/0x20 [ 377.883797][T16040] should_fail_usercopy+0x1a/0x20 [ 377.883823][T16040] _copy_from_user+0x1c/0xb0 [ 377.883854][T16040] do_sock_getsockopt+0xf1/0x210 [ 377.883883][T16040] __x64_sys_getsockopt+0x11d/0x1a0 [ 377.883985][T16040] x64_sys_call+0x2dcf/0x3020 [ 377.884089][T16040] do_syscall_64+0x12c/0x370 [ 377.884149][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.884242][T16040] RIP: 0033:0x7fa86933c819 [ 377.884256][T16040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.884272][T16040] RSP: 002b:00007fa867d6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 377.884309][T16040] RAX: ffffffffffffffda RBX: 00007fa8695b6090 RCX: 00007fa86933c819 [ 377.884324][T16040] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 377.884391][T16040] RBP: 00007fa867d6e090 R08: 00002000000000c0 R09: 0000000000000000 [ 377.884405][T16040] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 377.884417][T16040] R13: 00007fa8695b6128 R14: 00007fa8695b6090 R15: 00007ffce5ccfc08 [ 377.884433][T16040] [ 378.161060][T16043] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 378.188966][T15976] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 378.202162][ T9] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 378.342570][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.473672][T16049] delete_channel: no stack [ 378.473703][T16049] delete_channel: no stack [ 378.487343][T16032] vhci_hcd: connection reset by peer [ 378.488125][ T9088] vhci_hcd vhci_hcd.2: stop threads [ 378.488157][ T9088] vhci_hcd vhci_hcd.2: release socket [ 378.488200][ T9088] vhci_hcd vhci_hcd.2: disconnect device [ 378.658897][T16060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16060 comm=syz.3.3162 [ 379.057759][T16070] udevd[16070]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 379.074738][T16076] udevd[16076]: inotify_add_watch(7, /dev/loop4p13, 10) failed: No such file or directory [ 379.076569][T16065] udevd[16065]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 379.095086][T16071] udevd[16071]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 379.105483][T16078] udevd[16078]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 379.117790][T16064] udevd[16064]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 379.127953][T16089] loop4: detected capacity change from 0 to 1024 [ 379.143277][T16074] udevd[16074]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory [ 379.153367][T16094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64768 sclass=netlink_route_socket pid=16094 comm=syz.5.3167 [ 379.169990][T15793] udevd[15793]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 379.181475][T16070] udevd[16070]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 379.198973][T15969] udevd[15969]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 379.294638][T16066] chnl_net:caif_netlink_parms(): no params data found [ 379.518917][T16066] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.527683][T16066] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.544949][T16066] bridge_slave_0: entered allmulticast mode [ 379.557900][T16066] bridge_slave_0: entered promiscuous mode [ 379.583980][T16066] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.633043][T16066] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.657105][T16066] bridge_slave_1: entered allmulticast mode [ 379.679199][T16066] bridge_slave_1: entered promiscuous mode [ 380.712933][ T69] bond0 (unregistering): Released all slaves [ 380.773629][T16066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.826346][T16066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.849900][T16125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.863721][T16128] FAULT_INJECTION: forcing a failure. [ 380.863721][T16128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.881913][ T69] tipc: Left network mode [ 380.891761][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 380.900801][T16125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.916953][T16066] team0: Port device team_slave_0 added [ 380.932310][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.2.3174 Tainted: G W syzkaller #0 PREEMPT(full) [ 380.932345][T16128] Tainted: [W]=WARN [ 380.932352][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.932363][T16128] Call Trace: [ 380.932370][T16128] [ 380.932436][T16128] __dump_stack+0x1d/0x30 [ 380.932463][T16128] dump_stack_lvl+0x95/0xd0 [ 380.932487][T16128] dump_stack+0x15/0x1b [ 380.932522][T16128] should_fail_ex+0x263/0x280 [ 380.932583][T16128] should_fail+0xb/0x20 [ 380.932602][T16128] should_fail_usercopy+0x1a/0x20 [ 380.932669][T16128] _copy_from_user+0x1c/0xb0 [ 380.932745][T16128] sctp_getsockopt_enable_strreset+0x71/0x340 [ 380.932769][T16128] sctp_getsockopt+0x9d4/0xaa0 [ 380.932793][T16128] sock_common_getsockopt+0x60/0x70 [ 380.932820][T16128] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 380.932917][T16128] do_sock_getsockopt+0x1c4/0x210 [ 380.933032][T16128] __x64_sys_getsockopt+0x11d/0x1a0 [ 380.933097][T16128] x64_sys_call+0x2dcf/0x3020 [ 380.933120][T16128] do_syscall_64+0x12c/0x370 [ 380.933151][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.933170][T16128] RIP: 0033:0x7f769d4cc819 [ 380.933183][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.933200][T16128] RSP: 002b:00007f769bf06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 380.933221][T16128] RAX: ffffffffffffffda RBX: 00007f769d746090 RCX: 00007f769d4cc819 [ 380.933237][T16128] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 380.933280][T16128] RBP: 00007f769bf06090 R08: 00002000000000c0 R09: 0000000000000000 [ 380.933315][T16128] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 380.933340][T16128] R13: 00007f769d746128 R14: 00007f769d746090 R15: 00007fff023517b8 [ 380.933359][T16128] [ 380.940459][T16066] team0: Port device team_slave_1 added [ 381.586272][ T69] hsr_slave_0: left promiscuous mode [ 381.594150][ T69] hsr_slave_1: left promiscuous mode [ 381.662449][ T28] kauditd_printk_skb: 1552 callbacks suppressed [ 381.662462][ T28] audit: type=1400 audit(1775845162.819:2877): avc: denied { mount } for pid=16140 comm="syz.2.3180" name="/" dev="hugetlbfs" ino=40030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 381.707312][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 381.720263][T16143] loop4: detected capacity change from 0 to 128 [ 381.744007][T16143] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.764203][T16143] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 381.809647][ T28] audit: type=1400 audit(1775845162.959:2878): avc: denied { create } for pid=16142 comm="syz.4.3181" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 381.837279][ T69] team0 (unregistering): Port device dummy0 removed [ 381.838306][ T28] audit: type=1400 audit(1775845162.989:2879): avc: denied { ioctl open } for pid=16142 comm="syz.4.3181" path="/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 381.896959][T16134] tipc: Started in network mode [ 381.904111][T16134] tipc: Node identity 4, cluster identity 4711 [ 381.918343][T16134] tipc: Node number set to 4 [ 381.941810][T16066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.944817][ T28] audit: type=1400 audit(1775845162.989:2880): avc: denied { setattr } for pid=16142 comm="syz.4.3181" path="/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 381.956100][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.020905][T16066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.032598][T16066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.039629][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.066352][T16066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.078446][T16146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3180'. [ 382.103606][T14554] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.107795][T16066] hsr_slave_0: entered promiscuous mode [ 382.118997][T16066] hsr_slave_1: entered promiscuous mode [ 382.145225][T16066] debugfs: 'hsr0' already exists in 'hsr' [ 382.152095][T16066] Cannot create hsr debugfs directory [ 382.182334][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 382.211586][T16159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3182'. [ 382.220906][ T28] audit: type=1326 audit(1775845163.359:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16158 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 382.276329][T16172] netlink: 'syz.3.3184': attribute type 10 has an invalid length. [ 382.286886][T16169] netlink: 884 bytes leftover after parsing attributes in process `syz.2.3183'. [ 382.292022][ T28] audit: type=1326 audit(1775845163.359:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16158 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 382.308329][T16172] team0: Port device vlan0 added [ 382.325518][ T28] audit: type=1326 audit(1775845163.359:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16158 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 382.360182][ T28] audit: type=1326 audit(1775845163.359:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16158 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 382.401530][ T28] audit: type=1326 audit(1775845163.359:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16158 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 382.431688][ T28] audit: type=1326 audit(1775845163.359:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16158 comm="syz.4.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 382.465298][ T69] IPVS: stop unused estimator thread 0... [ 382.633383][T16178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=769 sclass=netlink_tcpdiag_socket pid=16178 comm=syz.4.3186 [ 382.670908][T16178] Invalid ELF header magic: != ELF [ 382.679289][T16178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.688005][T16178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.728110][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16197 comm=syz.3.3187 [ 382.762043][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 383.019909][T16066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.028414][T16247] loop2: detected capacity change from 0 to 136 [ 383.042821][T16066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.051693][T16247] Attempt to read inode for relocated directory [ 383.075485][T16066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.089330][T16066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.149802][T16066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.162848][T16247] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 383.165101][T16066] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.169464][T16247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 383.199997][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.207099][T13030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.221776][T16247] vhci_hcd vhci_hcd.0: Device attached [ 383.358160][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.365585][ T4802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.574974][T16276] loop4: detected capacity change from 0 to 512 [ 383.638881][T16276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.678792][T16276] 9pnet_fd: Insufficient options for proto=fd [ 384.393662][T16066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.411769][T16066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.473454][T16261] vhci_hcd: connection reset by peer [ 384.534612][ T4802] vhci_hcd vhci_hcd.2: stop threads [ 384.539953][ T4802] vhci_hcd vhci_hcd.2: release socket [ 384.577780][T16283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3193'. [ 384.591299][ T4802] vhci_hcd vhci_hcd.2: disconnect device [ 384.667858][T13030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.694103][T13030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.732911][T16066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.771104][T13030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.835656][T13030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.017277][T16066] veth0_vlan: entered promiscuous mode [ 385.055283][T16066] veth1_vlan: entered promiscuous mode [ 385.124878][T16066] veth0_macvtap: entered promiscuous mode [ 385.135966][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.147012][T16066] veth1_macvtap: entered promiscuous mode [ 385.162786][T16066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.191360][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 385.203642][T16066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.234398][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.263495][T13024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.281303][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.291902][T13024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.407616][T13024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.439418][T13024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.460966][T16350] ip6tnl1: left promiscuous mode [ 385.474875][T16350] ip6gre1: left promiscuous mode [ 385.491997][T16356] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3199'. [ 385.526203][T13024] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.540528][T13024] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.566955][T16347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16347 comm=syz.3.3200 [ 385.594729][T16350] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3199'. [ 385.603490][T13024] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.616477][T13024] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.641864][T16350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.660111][T16373] loop4: detected capacity change from 0 to 128 [ 385.660234][T16370] loop2: detected capacity change from 0 to 512 [ 385.677792][T16350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.700504][T16350] bond0 (unregistering): Released all slaves [ 385.711002][T16370] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 385.717683][T16370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 385.728368][T16370] vhci_hcd vhci_hcd.0: Device attached [ 385.737093][T16376] vhci_hcd: connection closed [ 385.737286][T13030] vhci_hcd vhci_hcd.2: stop threads [ 385.747882][T13030] vhci_hcd vhci_hcd.2: release socket [ 385.754480][T13030] vhci_hcd vhci_hcd.2: disconnect device [ 386.187164][T16383] FAULT_INJECTION: forcing a failure. [ 386.187164][T16383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.200487][T16383] CPU: 1 UID: 0 PID: 16383 Comm: syz.3.3207 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.200507][T16383] Tainted: [W]=WARN [ 386.200510][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.200517][T16383] Call Trace: [ 386.200521][T16383] [ 386.200525][T16383] __dump_stack+0x1d/0x30 [ 386.200589][T16383] dump_stack_lvl+0x95/0xd0 [ 386.200602][T16383] dump_stack+0x15/0x1b [ 386.200625][T16383] should_fail_ex+0x263/0x280 [ 386.200726][T16383] should_fail+0xb/0x20 [ 386.200739][T16383] should_fail_usercopy+0x1a/0x20 [ 386.200755][T16383] _copy_from_user+0x1c/0xb0 [ 386.200790][T16383] ___sys_sendmsg+0xc1/0x1e0 [ 386.200806][T16383] __x64_sys_sendmsg+0xd4/0x160 [ 386.200818][T16383] x64_sys_call+0x194c/0x3020 [ 386.200856][T16383] do_syscall_64+0x12c/0x370 [ 386.200871][T16383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.200945][T16383] RIP: 0033:0x7f0bbf2ec819 [ 386.200955][T16383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.200965][T16383] RSP: 002b:00007f0bbdd3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.201017][T16383] RAX: ffffffffffffffda RBX: 00007f0bbf565fa0 RCX: 00007f0bbf2ec819 [ 386.201030][T16383] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 386.201044][T16383] RBP: 00007f0bbdd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.201057][T16383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.201071][T16383] R13: 00007f0bbf566038 R14: 00007f0bbf565fa0 R15: 00007ffcc8348418 [ 386.201090][T16383] [ 386.468247][T16395] FAULT_INJECTION: forcing a failure. [ 386.468247][T16395] name failslab, interval 1, probability 0, space 0, times 0 [ 386.483447][T16395] CPU: 1 UID: 0 PID: 16395 Comm: syz.3.3213 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.483475][T16395] Tainted: [W]=WARN [ 386.483518][T16395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.483528][T16395] Call Trace: [ 386.483534][T16395] [ 386.483540][T16395] __dump_stack+0x1d/0x30 [ 386.483623][T16395] dump_stack_lvl+0x95/0xd0 [ 386.483642][T16395] dump_stack+0x15/0x1b [ 386.483660][T16395] should_fail_ex+0x263/0x280 [ 386.483683][T16395] should_failslab+0x8c/0xb0 [ 386.483701][T16395] kmem_cache_alloc_noprof+0x66/0x400 [ 386.483853][T16395] ? pidfs_register_pid+0x87/0x180 [ 386.483880][T16395] pidfs_register_pid+0x87/0x180 [ 386.483956][T16395] unix_socketpair+0x7b/0x430 [ 386.483978][T16395] __sys_socketpair+0x21c/0x420 [ 386.484002][T16395] __x64_sys_socketpair+0x52/0x60 [ 386.484073][T16395] x64_sys_call+0x2de5/0x3020 [ 386.484141][T16395] do_syscall_64+0x12c/0x370 [ 386.484163][T16395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.484181][T16395] RIP: 0033:0x7f0bbf2ee0ba [ 386.484194][T16395] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.484230][T16395] RSP: 002b:00007f0bbdd3ef68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 386.484247][T16395] RAX: ffffffffffffffda RBX: 00007f0bbf565f00 RCX: 00007f0bbf2ee0ba [ 386.484271][T16395] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 386.484337][T16395] RBP: 00007f0bbdd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.484348][T16395] R10: 00007f0bbdd3ef88 R11: 0000000000000246 R12: 0000000000000003 [ 386.484359][T16395] R13: 00007f0bbf566038 R14: 00007f0bbf565fa0 R15: 00007ffcc8348418 [ 386.484374][T16395] [ 386.673229][T16396] loop2: detected capacity change from 0 to 2048 [ 386.754478][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 386.754569][ T28] audit: type=1400 audit(1775845167.910:2937): avc: denied { ioctl } for pid=16401 comm="syz.0.3215" path="socket:[40655]" dev="sockfs" ino=40655 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.803488][T16396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.816446][T16396] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.828353][ T28] audit: type=1400 audit(1775845167.990:2938): avc: denied { getopt } for pid=16392 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.910033][ T28] audit: type=1400 audit(1775845168.060:2939): avc: denied { connect } for pid=16397 comm="syz.4.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 386.953541][T16393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3212: bg 0: block 345: padding at end of block bitmap is not set [ 386.995020][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 387.004491][ T28] audit: type=1400 audit(1775845168.110:2940): avc: denied { read write } for pid=16392 comm="syz.2.3212" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.038718][T16393] EXT4-fs (loop2): Remounting filesystem read-only [ 387.067475][T16411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 387.079796][T16396] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3212: bg 0: block 345: padding at end of block bitmap is not set [ 387.098124][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.105597][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.114287][ T28] audit: type=1400 audit(1775845168.110:2941): avc: denied { open } for pid=16392 comm="syz.2.3212" path="/57/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 387.307295][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.345000][T16414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16414 comm=syz.3.3217 [ 387.388690][ T28] audit: type=1400 audit(1775845168.140:2942): avc: denied { getopt } for pid=16405 comm="syz.0.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 387.408675][ T28] audit: type=1400 audit(1775845168.150:2943): avc: denied { block_suspend } for pid=16405 comm="syz.0.3216" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 387.493844][T16424] FAULT_INJECTION: forcing a failure. [ 387.493844][T16424] name failslab, interval 1, probability 0, space 0, times 0 [ 387.510226][T16424] CPU: 0 UID: 0 PID: 16424 Comm: syz.4.3221 Tainted: G W syzkaller #0 PREEMPT(full) [ 387.510260][T16424] Tainted: [W]=WARN [ 387.510266][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.510340][T16424] Call Trace: [ 387.510347][T16424] [ 387.510382][T16424] __dump_stack+0x1d/0x30 [ 387.510407][T16424] dump_stack_lvl+0x95/0xd0 [ 387.510426][T16424] dump_stack+0x15/0x1b [ 387.510444][T16424] should_fail_ex+0x263/0x280 [ 387.510469][T16424] should_failslab+0x8c/0xb0 [ 387.510514][T16424] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 387.510537][T16424] ? __alloc_skb+0x2d6/0x690 [ 387.510561][T16424] __alloc_skb+0x2d6/0x690 [ 387.510583][T16424] ? __alloc_skb+0x200/0x690 [ 387.510630][T16424] netlink_alloc_large_skb+0xbf/0xf0 [ 387.510700][T16424] netlink_sendmsg+0x40c/0x6f0 [ 387.510804][T16424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.510901][T16424] ____sys_sendmsg+0x563/0x5b0 [ 387.510921][T16424] ___sys_sendmsg+0x195/0x1e0 [ 387.511067][T16424] __x64_sys_sendmsg+0xd4/0x160 [ 387.511094][T16424] x64_sys_call+0x194c/0x3020 [ 387.511115][T16424] do_syscall_64+0x12c/0x370 [ 387.511163][T16424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.511209][T16424] RIP: 0033:0x7f030760c819 [ 387.511224][T16424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.511239][T16424] RSP: 002b:00007f030605f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.511256][T16424] RAX: ffffffffffffffda RBX: 00007f0307885fa0 RCX: 00007f030760c819 [ 387.511270][T16424] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 387.511287][T16424] RBP: 00007f030605f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.511299][T16424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.511312][T16424] R13: 00007f0307886038 R14: 00007f0307885fa0 R15: 00007ffdc23c72e8 [ 387.511394][T16424] [ 387.634770][T16428] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3222'. [ 387.765892][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 387.946020][T16443] FAULT_INJECTION: forcing a failure. [ 387.946020][T16443] name failslab, interval 1, probability 0, space 0, times 0 [ 387.959709][T16443] CPU: 1 UID: 0 PID: 16443 Comm: syz.4.3227 Tainted: G W syzkaller #0 PREEMPT(full) [ 387.959735][T16443] Tainted: [W]=WARN [ 387.959741][T16443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.959751][T16443] Call Trace: [ 387.959756][T16443] [ 387.959762][T16443] __dump_stack+0x1d/0x30 [ 387.959785][T16443] dump_stack_lvl+0x95/0xd0 [ 387.959844][T16443] dump_stack+0x15/0x1b [ 387.959866][T16443] should_fail_ex+0x263/0x280 [ 387.959889][T16443] should_failslab+0x8c/0xb0 [ 387.959926][T16443] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 387.959997][T16443] ? __d_alloc+0x37/0x340 [ 387.960028][T16443] __d_alloc+0x37/0x340 [ 387.960056][T16443] d_alloc_pseudo+0x1e/0x80 [ 387.960120][T16443] alloc_file_pseudo+0x91/0x190 [ 387.960153][T16443] ? pidfs_register_pid+0x53/0x180 [ 387.960311][T16443] sock_alloc_file+0x9c/0x1e0 [ 387.960438][T16443] __sys_socketpair+0x23c/0x420 [ 387.960467][T16443] __x64_sys_socketpair+0x52/0x60 [ 387.960537][T16443] x64_sys_call+0x2de5/0x3020 [ 387.960621][T16443] do_syscall_64+0x12c/0x370 [ 387.960791][T16443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.960812][T16443] RIP: 0033:0x7f030760e0ba [ 387.960828][T16443] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.960844][T16443] RSP: 002b:00007f030605ef68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 387.960865][T16443] RAX: ffffffffffffffda RBX: 00007f0307885f00 RCX: 00007f030760e0ba [ 387.960916][T16443] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 387.960980][T16443] RBP: 00007f030605f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.960993][T16443] R10: 00007f030605ef88 R11: 0000000000000246 R12: 0000000000000003 [ 387.961004][T16443] R13: 00007f0307886038 R14: 00007f0307885fa0 R15: 00007ffdc23c72e8 [ 387.961020][T16443] [ 389.291097][ T28] audit: type=1326 audit(1775845170.450:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.2.3231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f769d4cc819 code=0x0 [ 389.611735][T16465] FAULT_INJECTION: forcing a failure. [ 389.611735][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.625277][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.4.3233 Tainted: G W syzkaller #0 PREEMPT(full) [ 389.625374][T16465] Tainted: [W]=WARN [ 389.625381][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.625395][T16465] Call Trace: [ 389.625401][T16465] [ 389.625409][T16465] __dump_stack+0x1d/0x30 [ 389.625438][T16465] dump_stack_lvl+0x95/0xd0 [ 389.625468][T16465] dump_stack+0x15/0x1b [ 389.625521][T16465] should_fail_ex+0x263/0x280 [ 389.625545][T16465] should_fail+0xb/0x20 [ 389.625567][T16465] should_fail_usercopy+0x1a/0x20 [ 389.625591][T16465] _copy_from_iter+0xcf/0xea0 [ 389.625658][T16465] ? __alloc_skb+0x4f6/0x690 [ 389.625681][T16465] ? __alloc_skb+0x200/0x690 [ 389.625703][T16465] netlink_sendmsg+0x4ae/0x6f0 [ 389.625754][T16465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.625774][T16465] ____sys_sendmsg+0x563/0x5b0 [ 389.625846][T16465] ___sys_sendmsg+0x195/0x1e0 [ 389.625927][T16465] __x64_sys_sendmsg+0xd4/0x160 [ 389.625950][T16465] x64_sys_call+0x194c/0x3020 [ 389.625977][T16465] do_syscall_64+0x12c/0x370 [ 389.626032][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.626104][T16465] RIP: 0033:0x7f030760c819 [ 389.626130][T16465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.626146][T16465] RSP: 002b:00007f030605f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.626165][T16465] RAX: ffffffffffffffda RBX: 00007f0307885fa0 RCX: 00007f030760c819 [ 389.626178][T16465] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 389.626189][T16465] RBP: 00007f030605f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.626201][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.626264][T16465] R13: 00007f0307886038 R14: 00007f0307885fa0 R15: 00007ffdc23c72e8 [ 389.626280][T16465] [ 389.886107][ T28] audit: type=1400 audit(1775845170.990:2945): avc: denied { create } for pid=16463 comm="syz.5.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 389.953462][T16472] loop5: detected capacity change from 0 to 764 [ 389.985028][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3237'. [ 390.038539][T16481] bridge1: entered promiscuous mode [ 390.046308][T16481] bridge1: entered allmulticast mode [ 390.456986][ T28] audit: type=1400 audit(1775845171.610:2946): avc: denied { create } for pid=16504 comm="syz.2.3248" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 390.533500][T16515] FAULT_INJECTION: forcing a failure. [ 390.533500][T16515] name failslab, interval 1, probability 0, space 0, times 0 [ 390.559593][T16515] CPU: 1 UID: 0 PID: 16515 Comm: syz.4.3250 Tainted: G W syzkaller #0 PREEMPT(full) [ 390.559650][T16515] Tainted: [W]=WARN [ 390.559657][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.559669][T16515] Call Trace: [ 390.559676][T16515] [ 390.559685][T16515] __dump_stack+0x1d/0x30 [ 390.559711][T16515] dump_stack_lvl+0x95/0xd0 [ 390.559739][T16515] dump_stack+0x15/0x1b [ 390.559811][T16515] should_fail_ex+0x263/0x280 [ 390.559839][T16515] should_failslab+0x8c/0xb0 [ 390.559861][T16515] kmem_cache_alloc_noprof+0x66/0x400 [ 390.559916][T16515] ? skb_clone+0x151/0x1f0 [ 390.559967][T16515] skb_clone+0x151/0x1f0 [ 390.559986][T16515] __netlink_deliver_tap+0x2c9/0x500 [ 390.560010][T16515] netlink_unicast+0x66b/0x690 [ 390.560042][T16515] netlink_sendmsg+0x5c8/0x6f0 [ 390.560140][T16515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.560162][T16515] ____sys_sendmsg+0x563/0x5b0 [ 390.560185][T16515] ___sys_sendmsg+0x195/0x1e0 [ 390.560223][T16515] __x64_sys_sendmsg+0xd4/0x160 [ 390.560272][T16515] x64_sys_call+0x194c/0x3020 [ 390.560297][T16515] do_syscall_64+0x12c/0x370 [ 390.560325][T16515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.560348][T16515] RIP: 0033:0x7f030760c819 [ 390.560373][T16515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.560391][T16515] RSP: 002b:00007f030605f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.560412][T16515] RAX: ffffffffffffffda RBX: 00007f0307885fa0 RCX: 00007f030760c819 [ 390.560427][T16515] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 390.560441][T16515] RBP: 00007f030605f090 R08: 0000000000000000 R09: 0000000000000000 [ 390.560496][T16515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.560507][T16515] R13: 00007f0307886038 R14: 00007f0307885fa0 R15: 00007ffdc23c72e8 [ 390.560524][T16515] [ 390.845662][T16519] loop4: detected capacity change from 0 to 1024 [ 390.853323][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 390.926360][T16529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3257'. [ 391.090624][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 391.444392][T16547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16547 comm=syz.3.3260 [ 391.472898][T16545] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3251'. [ 391.548122][T16545] IPVS: Unknown mcast interface: [ 391.558895][T16550] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 391.565450][T16550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 391.583321][T16554] FAULT_INJECTION: forcing a failure. [ 391.583321][T16554] name failslab, interval 1, probability 0, space 0, times 0 [ 391.596217][T16554] CPU: 1 UID: 0 PID: 16554 Comm: syz.3.3262 Tainted: G W syzkaller #0 PREEMPT(full) [ 391.596247][T16554] Tainted: [W]=WARN [ 391.596253][T16554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.596263][T16554] Call Trace: [ 391.596269][T16554] [ 391.596277][T16554] __dump_stack+0x1d/0x30 [ 391.596304][T16554] dump_stack_lvl+0x95/0xd0 [ 391.596376][T16554] dump_stack+0x15/0x1b [ 391.596396][T16554] should_fail_ex+0x263/0x280 [ 391.596425][T16554] should_failslab+0x8c/0xb0 [ 391.596446][T16554] kmem_cache_alloc_noprof+0x66/0x400 [ 391.596528][T16554] ? skb_clone+0x151/0x1f0 [ 391.596550][T16554] skb_clone+0x151/0x1f0 [ 391.596568][T16554] nfnetlink_rcv+0x316/0x1720 [ 391.596594][T16554] ? nlmon_xmit+0x4f/0x60 [ 391.596632][T16554] ? consume_skb+0x4b/0x160 [ 391.596662][T16554] ? nlmon_xmit+0x4f/0x60 [ 391.596684][T16554] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 391.596725][T16554] ? __dev_queue_xmit+0x136c/0x1f20 [ 391.596797][T16554] ? __dev_queue_xmit+0x148/0x1f20 [ 391.596853][T16554] ? ref_tracker_free+0x37d/0x3e0 [ 391.596887][T16554] netlink_unicast+0x5c0/0x690 [ 391.596914][T16554] netlink_sendmsg+0x5c8/0x6f0 [ 391.596933][T16554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.596995][T16554] ____sys_sendmsg+0x563/0x5b0 [ 391.597018][T16554] ___sys_sendmsg+0x195/0x1e0 [ 391.597049][T16554] __x64_sys_sendmsg+0xd4/0x160 [ 391.597100][T16554] x64_sys_call+0x194c/0x3020 [ 391.597137][T16554] do_syscall_64+0x12c/0x370 [ 391.597163][T16554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.597260][T16554] RIP: 0033:0x7f0bbf2ec819 [ 391.597277][T16554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.597296][T16554] RSP: 002b:00007f0bbdd3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.597317][T16554] RAX: ffffffffffffffda RBX: 00007f0bbf565fa0 RCX: 00007f0bbf2ec819 [ 391.597333][T16554] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 391.597345][T16554] RBP: 00007f0bbdd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.597429][T16554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.597502][T16554] R13: 00007f0bbf566038 R14: 00007f0bbf565fa0 R15: 00007ffcc8348418 [ 391.597522][T16554] [ 391.827832][T16550] vhci_hcd vhci_hcd.0: Device attached [ 391.899161][T16551] vhci_hcd: connection closed [ 391.905636][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 391.905653][ T28] audit: type=1400 audit(1775845173.060:2952): avc: denied { ioctl } for pid=16555 comm="syz.0.3263" path="socket:[42002]" dev="sockfs" ino=42002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.905844][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'. [ 391.926008][T16562] xt_hashlimit: size too large, truncated to 1048576 [ 391.945881][ T28] audit: type=1400 audit(1775845173.060:2953): avc: denied { setopt } for pid=16555 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 391.978780][T13024] vhci_hcd vhci_hcd.2: stop threads [ 391.986492][T13024] vhci_hcd vhci_hcd.2: release socket [ 392.004410][T13024] vhci_hcd vhci_hcd.2: disconnect device [ 392.006254][ T28] audit: type=1400 audit(1775845173.160:2954): avc: denied { read write } for pid=16565 comm="syz.5.3267" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 392.070536][ T28] audit: type=1400 audit(1775845173.160:2955): avc: denied { open } for pid=16565 comm="syz.5.3267" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 392.095247][ T28] audit: type=1400 audit(1775845173.200:2956): avc: denied { ioctl } for pid=16565 comm="syz.5.3267" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 392.135112][T16576] loop5: detected capacity change from 0 to 512 [ 392.142024][T16576] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.161705][ T28] audit: type=1400 audit(1775845173.320:2957): avc: denied { mount } for pid=16567 comm="syz.4.3266" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 392.195941][T16578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3270'. [ 392.200417][T16576] EXT4-fs (loop5): Invalid default hash set in the superblock [ 392.209260][T16578] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3270'. [ 392.350182][T16585] syzkaller0: entered promiscuous mode [ 392.355844][T16585] syzkaller0: entered allmulticast mode [ 392.580207][ T28] audit: type=1400 audit(1775845173.730:2958): avc: denied { append } for pid=16601 comm="syz.4.3280" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 392.908359][ T28] audit: type=1400 audit(1775845173.850:2959): avc: denied { ioctl } for pid=16599 comm="syz.5.3279" path="socket:[42091]" dev="sockfs" ino=42091 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.996816][ T28] audit: type=1400 audit(1775845174.060:2960): avc: denied { read append } for pid=16610 comm="syz.4.3283" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 393.020566][ T28] audit: type=1400 audit(1775845174.060:2961): avc: denied { open } for pid=16610 comm="syz.4.3283" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 393.045514][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3283'. [ 393.057184][T16612] SELinux: failure in sel_netif_sid_slow(), invalid network interface (11) [ 393.507310][T16638] netlink: 'syz.0.3292': attribute type 32 has an invalid length. [ 393.589621][T16639] loop4: detected capacity change from 0 to 512 [ 393.655358][T16639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.692105][T16639] 9pnet_fd: Insufficient options for proto=fd [ 395.187959][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.326868][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 395.345758][T16673] syz.4.3303 (16673): attempted to duplicate a private mapping with mremap. This is not supported. [ 395.484893][T16681] loop5: detected capacity change from 0 to 256 [ 395.580074][T16686] program syz.3.3308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.843316][T16698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 395.958304][T16701] loop2: detected capacity change from 0 to 4096 [ 396.058276][T16701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.320284][T16680] coredump: 1413(syz.5.3306): Core dump to core aborted: cannot preserve file permissions [ 396.784455][T16711] loop5: detected capacity change from 0 to 2048 [ 396.891963][T16064] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 397.011132][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 397.011148][ T28] audit: type=1400 audit(1775845178.171:2979): avc: denied { append } for pid=16710 comm="syz.5.3314" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 397.440647][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.519631][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 397.541865][T16719] SELinux: syz.2.3315 (16719) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 397.598150][ T28] audit: type=1400 audit(1775845178.751:2980): avc: denied { create } for pid=16718 comm="syz.2.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.721306][T16711] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 397.910003][T16711] loop5: p141 could not be added: -ENOMEM [ 398.138469][T16730] netlink: 'syz.4.3320': attribute type 16 has an invalid length. [ 398.159745][T16730] netlink: 'syz.4.3320': attribute type 17 has an invalid length. [ 398.187977][T16730] netlink: 'syz.4.3320': attribute type 27 has an invalid length. [ 398.209093][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 398.732078][T16064] udevd[16064]: inotify_add_watch(7, /dev/loop5p23, 10) failed: No such file or directory [ 398.760698][T16074] udevd[16074]: inotify_add_watch(7, /dev/loop5p28, 10) failed: No such file or directory [ 398.771950][T16078] udevd[16078]: inotify_add_watch(7, /dev/loop5p30, 10) failed: No such file or directory [ 398.783430][T15806] udevd[15806]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory [ 398.801387][T16071] udevd[16071]: inotify_add_watch(7, /dev/loop5p33, 10) failed: No such file or directory [ 398.814898][T16076] udevd[16076]: inotify_add_watch(7, /dev/loop5p25, 10) failed: No such file or directory [ 398.821002][T16067] udevd[16067]: inotify_add_watch(7, /dev/loop5p27, 10) failed: No such file or directory [ 398.826111][T15793] udevd[15793]: inotify_add_watch(7, /dev/loop5p24, 10) failed: No such file or directory [ 398.836249][T16069] udevd[16069]: inotify_add_watch(7, /dev/loop5p29, 10) failed: No such file or directory [ 398.846644][T16065] udevd[16065]: inotify_add_watch(7, /dev/loop5p34, 10) failed: No such file or directory [ 398.868880][T16740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16740 comm=syz.5.3322 [ 399.059775][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 399.223876][ T28] audit: type=1400 audit(1775845180.381:2981): avc: denied { bind } for pid=16755 comm="syz.3.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.386490][T16768] loop4: detected capacity change from 0 to 512 [ 399.441056][T16768] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 399.460293][T16765] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3326'. [ 399.552652][T16768] EXT4-fs (loop4): 1 truncate cleaned up [ 399.587194][T16768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.602073][T16768] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.445139][T16775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16775 comm=syz.3.3336 [ 400.668445][T16781] loop5: detected capacity change from 0 to 512 [ 400.735553][T16781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.753695][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 400.975783][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 401.243577][T16790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3342'. [ 401.440227][T16806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.569765][T16811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16811 comm=syz.4.3347 [ 401.570336][ T28] audit: type=1400 audit(1775845182.721:2982): avc: denied { read } for pid=16812 comm="syz.3.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.663469][ T28] audit: type=1400 audit(1775845182.801:2983): avc: denied { mount } for pid=16818 comm="syz.0.3348" name="/" dev="ramfs" ino=43035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 401.698374][T16819] lo speed is unknown, defaulting to 1000 [ 401.722967][T16825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.730048][T16819] lo speed is unknown, defaulting to 1000 [ 401.736123][T16819] lo speed is unknown, defaulting to 1000 [ 401.749010][T16822] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 401.755556][T16822] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 401.764984][T16822] vhci_hcd vhci_hcd.0: Device attached [ 401.772210][T16826] vhci_hcd: connection closed [ 401.772457][ T69] vhci_hcd vhci_hcd.3: stop threads [ 401.782632][ T69] vhci_hcd vhci_hcd.3: release socket [ 401.796485][T16819] infiniband lyz2: set down [ 401.801340][ T3397] lo speed is unknown, defaulting to 1000 [ 401.817485][T16819] infiniband lyz2: added lo [ 401.828315][ T69] vhci_hcd vhci_hcd.3: disconnect device [ 401.852052][T16819] RDS/IB: lyz2: added [ 401.866196][T16819] smc: adding ib device lyz2 with port count 1 [ 401.882943][T16819] smc: ib device lyz2 port 1 has no pnetid [ 401.889981][ T9] lo speed is unknown, defaulting to 1000 [ 401.895792][T16819] lo speed is unknown, defaulting to 1000 [ 401.931342][T16819] lo speed is unknown, defaulting to 1000 [ 401.978178][T16819] lo speed is unknown, defaulting to 1000 [ 402.026651][T16819] lo speed is unknown, defaulting to 1000 [ 402.065478][T16819] lo speed is unknown, defaulting to 1000 [ 402.166729][T16842] loop4: detected capacity change from 0 to 128 [ 402.187509][ T28] audit: type=1326 audit(1775845183.342:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 402.219993][ T28] audit: type=1326 audit(1775845183.372:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 402.253877][ T28] audit: type=1326 audit(1775845183.372:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 402.278301][ T28] audit: type=1326 audit(1775845183.372:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 402.303410][ T28] audit: type=1326 audit(1775845183.372:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 402.327496][ T28] audit: type=1326 audit(1775845183.372:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f030760c819 code=0x7ffc0000 [ 402.351198][ T28] audit: type=1326 audit(1775845183.372:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f030760e087 code=0x7ffc0000 [ 402.387960][ T28] audit: type=1326 audit(1775845183.372:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f03075cd04e code=0x7ffc0000 [ 402.426920][ T28] audit: type=1326 audit(1775845183.372:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f03075cd04e code=0x7ffc0000 [ 402.452230][ T28] audit: type=1326 audit(1775845183.372:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f03075cd04e code=0x7ffc0000 [ 402.583610][T16857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16857 comm=syz.4.3360 [ 402.734762][T16861] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3361'. [ 403.011918][T16878] xt_policy: too many policy elements [ 403.059329][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 403.271125][T16900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=16900 comm=syz.0.3373 [ 403.697658][T16913] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3375'. [ 403.830629][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.030028][T16958] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3389'. [ 404.260642][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3391'. [ 404.398347][T16974] loop4: detected capacity change from 0 to 512 [ 404.411187][T16970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16970 comm=syz.0.3391 [ 404.510951][T16974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.617286][T16980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3394'. [ 404.800956][T16987] 9pnet_fd: Insufficient options for proto=fd [ 404.817529][T16989] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3398'. [ 404.847130][T16989] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3398'. [ 404.951052][T17002] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3401'. [ 405.139295][T17021] netlink: 1392 bytes leftover after parsing attributes in process `syz.2.3404'. [ 405.238985][T17025] loop2: detected capacity change from 0 to 1024 [ 405.422386][T17019] lo speed is unknown, defaulting to 1000 [ 405.688218][T17033] loop2: detected capacity change from 0 to 512 [ 405.830160][T17033] EXT4-fs (loop2): 1 orphan inode deleted [ 405.842304][T17033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.857993][T17033] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.650570][T17062] x_tables: duplicate underflow at hook 1 [ 407.185339][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.194462][ T28] kauditd_printk_skb: 233 callbacks suppressed [ 407.194487][ T28] audit: type=1326 audit(1775845188.112:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787fffc819 code=0x7ffc0000 [ 407.315029][ T28] audit: type=1326 audit(1775845188.112:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787fffc819 code=0x7ffc0000 [ 407.338745][ T28] audit: type=1326 audit(1775845188.112:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787fffc819 code=0x7ffc0000 [ 407.363082][ T28] audit: type=1326 audit(1775845188.112:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787fffc819 code=0x7ffc0000 [ 407.441456][ T28] audit: type=1326 audit(1775845188.112:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787fffc819 code=0x7ffc0000 [ 407.500892][ T28] audit: type=1326 audit(1775845188.112:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787fffc819 code=0x7ffc0000 [ 407.572972][ T28] audit: type=1326 audit(1775845188.112:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f787fffc582 code=0x7ffc0000 [ 407.613846][ T28] audit: type=1326 audit(1775845188.112:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f787fffc617 code=0x7ffc0000 [ 407.686220][ T28] audit: type=1326 audit(1775845188.112:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f787ffb9511 code=0x7ffc0000 [ 407.772784][ T28] audit: type=1326 audit(1775845188.112:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.0.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f787fffd609 code=0x7ffc0000 [ 407.848236][T17081] bond0: entered promiscuous mode [ 407.853335][T17081] bond_slave_0: entered promiscuous mode [ 407.859266][T17081] bond_slave_1: entered promiscuous mode [ 407.866406][T17081] batadv0: entered promiscuous mode [ 407.872179][T17081] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 407.891722][T17081] bond0: left promiscuous mode [ 407.896534][T17081] bond_slave_0: left promiscuous mode [ 407.902155][T17081] bond_slave_1: left promiscuous mode [ 407.910154][T17081] batadv0: left promiscuous mode [ 408.452846][T17101] __nla_validate_parse: 7 callbacks suppressed [ 408.452868][T17101] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3427'. [ 408.626163][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.688002][T17113] loop4: detected capacity change from 0 to 512 [ 408.717903][T17113] msdos: Unknown parameter 'nęb€ots' [ 408.821532][T17113] loop4: detected capacity change from 0 to 512 [ 409.313827][T17128] 9pnet_fd: Insufficient options for proto=fd [ 409.412225][T17130] loop4: detected capacity change from 0 to 512 [ 409.498124][T17130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.808160][T17138] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3439'. [ 410.510745][T17155] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3443'. [ 410.559903][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3443'. [ 410.801046][T17158] 9pnet_fd: Insufficient options for proto=fd [ 410.850175][T17160] loop2: detected capacity change from 0 to 1024 [ 410.867425][T17160] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 410.876223][T17160] System zones: 0-1, 3-36 [ 410.881419][T17160] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3444: bad orphan inode 134217728 [ 411.018343][T17160] loop2: lost filesystem error report for type 5 error -117 [ 411.038193][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 411.051958][ C0] EXT4-fs (loop2): initial error at time 1775845192: ext4_orphan_get:1423 [ 411.060589][ C0] EXT4-fs (loop2): last error at time 1775845192: ext4_orphan_get:1423 [ 411.070440][T17160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.138875][T17156] lo speed is unknown, defaulting to 1000 [ 411.158542][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.228954][T17170] loop2: detected capacity change from 0 to 2048 [ 411.239403][T17170] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 411.288917][T17170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.304623][T17168] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 411.311187][T17168] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 411.498558][T17167] Cannot find add_set index 0 as target [ 411.507153][T17168] vhci_hcd vhci_hcd.0: Device attached [ 411.738470][ T3591] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 411.961740][T17171] vhci_hcd: connection reset by peer [ 411.967462][T13035] vhci_hcd vhci_hcd.5: stop threads [ 411.981054][T13035] vhci_hcd vhci_hcd.5: release socket [ 411.986761][T13035] vhci_hcd vhci_hcd.5: disconnect device [ 412.080777][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.142011][T17187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3452'. [ 412.160605][T17187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3452'. [ 412.207759][T17187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3452'. [ 412.263399][T17201] loop2: detected capacity change from 0 to 512 [ 412.278765][ T28] kauditd_printk_skb: 259 callbacks suppressed [ 412.278780][ T28] audit: type=1400 audit(1775845193.443:3496): avc: denied { mounton } for pid=17200 comm="syz.2.3455" path="/102/file1" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 412.308025][T17201] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 412.317959][T17201] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 412.345821][T17201] EXT4-fs (loop2): group descriptors corrupted! [ 412.381835][ T28] audit: type=1400 audit(1775845193.543:3497): avc: denied { create } for pid=17202 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 412.494926][ T28] audit: type=1400 audit(1775845193.543:3498): avc: denied { setopt } for pid=17202 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 412.515606][ T28] audit: type=1400 audit(1775845193.573:3499): avc: denied { ioctl } for pid=17202 comm="syz.3.3456" path="socket:[44067]" dev="sockfs" ino=44067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 412.542130][ T28] audit: type=1400 audit(1775845193.583:3500): avc: denied { bind } for pid=17202 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 412.562077][ T28] audit: type=1400 audit(1775845193.583:3501): avc: denied { create } for pid=17202 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 412.582076][ T28] audit: type=1400 audit(1775845193.583:3502): avc: denied { ioctl } for pid=17202 comm="syz.3.3456" path="socket:[44071]" dev="sockfs" ino=44071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 412.712942][T17218] loop2: detected capacity change from 0 to 512 [ 412.745161][ T28] audit: type=1400 audit(1775845193.903:3503): avc: denied { create } for pid=17214 comm="syz.5.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.817015][T17218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.854929][T17218] 9pnet_fd: Insufficient options for proto=fd [ 413.075113][ T28] audit: type=1400 audit(1775845194.013:3504): avc: denied { mounton } for pid=17205 comm="syz.2.3457" path="/103/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.150628][T17224] loop5: detected capacity change from 0 to 512 [ 413.224980][T17224] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 413.510892][T17224] EXT4-fs (loop5): 1 truncate cleaned up [ 413.587361][T17224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.602668][ T28] audit: type=1400 audit(1775845194.763:3505): avc: denied { create } for pid=17221 comm="syz.5.3461" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 413.656971][T17237] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3463'. [ 413.683106][T17237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3463'. [ 413.738966][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.269818][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.403914][T17248] loop5: detected capacity change from 0 to 512 [ 414.444340][T17250] loop2: detected capacity change from 0 to 1024 [ 414.451397][T17250] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.458523][T17248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 414.468154][T17250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 414.492487][T17250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.501688][T17248] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 414.550080][T17248] EXT4-fs (loop5): group descriptors corrupted! [ 415.136187][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.837265][T17273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3472'. [ 415.838533][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3472'. [ 417.249423][T17289] loop5: detected capacity change from 0 to 1024 [ 417.279462][T17289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.312589][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 417.312605][ T28] audit: type=1400 audit(1775845198.473:3665): avc: denied { read } for pid=17293 comm="syz.3.3480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.357500][ T3591] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 417.364159][ T28] audit: type=1400 audit(1775845198.473:3666): avc: denied { ioctl } for pid=17293 comm="syz.3.3480" path="socket:[43849]" dev="sockfs" ino=43849 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.426179][T17297] FAULT_INJECTION: forcing a failure. [ 417.426179][T17297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.440982][T17297] CPU: 0 UID: 0 PID: 17297 Comm: syz.3.3481 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.441011][T17297] Tainted: [W]=WARN [ 417.441059][T17297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.441070][T17297] Call Trace: [ 417.441075][T17297] [ 417.441082][T17297] __dump_stack+0x1d/0x30 [ 417.441105][T17297] dump_stack_lvl+0x95/0xd0 [ 417.441172][T17297] dump_stack+0x15/0x1b [ 417.441190][T17297] should_fail_ex+0x263/0x280 [ 417.441219][T17297] should_fail+0xb/0x20 [ 417.441287][T17297] should_fail_usercopy+0x1a/0x20 [ 417.441311][T17297] _copy_from_user+0x1c/0xb0 [ 417.441337][T17297] ___sys_sendmsg+0xc1/0x1e0 [ 417.441362][T17297] __x64_sys_sendmsg+0xd4/0x160 [ 417.441382][T17297] x64_sys_call+0x194c/0x3020 [ 417.441404][T17297] do_syscall_64+0x12c/0x370 [ 417.441427][T17297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.441453][T17297] RIP: 0033:0x7f0bbf2ec819 [ 417.441467][T17297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.441482][T17297] RSP: 002b:00007f0bbdd3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.441545][T17297] RAX: ffffffffffffffda RBX: 00007f0bbf565fa0 RCX: 00007f0bbf2ec819 [ 417.441557][T17297] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 417.441568][T17297] RBP: 00007f0bbdd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 417.441580][T17297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.441591][T17297] R13: 00007f0bbf566038 R14: 00007f0bbf565fa0 R15: 00007ffcc8348418 [ 417.441606][T17297] [ 417.481498][T17302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 417.484292][T17303] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3483'. [ 417.497505][T17302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 417.643632][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.663362][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.687304][ T28] audit: type=1400 audit(1775845198.843:3667): avc: denied { create } for pid=17306 comm="syz.3.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.712837][ T28] audit: type=1400 audit(1775845198.873:3668): avc: denied { connect } for pid=17306 comm="syz.3.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.715660][ T28] audit: type=1400 audit(1775845198.873:3669): avc: denied { write } for pid=17306 comm="syz.3.3486" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 417.715889][ T28] audit: type=1400 audit(1775845198.873:3670): avc: denied { open } for pid=17306 comm="syz.3.3486" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 417.718367][ T28] audit: type=1400 audit(1775845198.883:3671): avc: denied { name_bind } for pid=17306 comm="syz.3.3486" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 417.718872][T17317] l2tp_ppp: sess 2/0: no socket in recv [ 417.721483][ T28] audit: type=1400 audit(1775845198.883:3672): avc: denied { write } for pid=17306 comm="syz.3.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 417.722372][T17319] loop4: detected capacity change from 0 to 1764 [ 417.748773][ T28] audit: type=1400 audit(1775845198.913:3673): avc: denied { mount } for pid=17318 comm="syz.4.3487" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 417.777275][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3491'. [ 417.778981][ T28] audit: type=1400 audit(1775845198.943:3674): avc: denied { create } for pid=17324 comm="syz.0.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.784397][T17323] loop2: detected capacity change from 0 to 1024 [ 417.784734][T17323] ext4: Unknown parameter 'nouser_xattr' [ 417.857642][T17332] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3487'. [ 417.858492][T17331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 417.858665][T17331] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 417.858839][T17331] vhci_hcd vhci_hcd.0: Device attached [ 417.893356][T17323] loop2: detected capacity change from 0 to 8192 [ 417.932591][T17334] vhci_hcd: connection closed [ 418.079256][T17345] loop2: detected capacity change from 0 to 512 [ 418.080116][T17343] FAULT_INJECTION: forcing a failure. [ 418.080116][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 418.101153][T17345] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 418.112348][T13030] vhci_hcd vhci_hcd.3: stop threads [ 418.112868][T17343] CPU: 0 UID: 0 PID: 17343 Comm: syz.4.3496 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.112958][T17343] Tainted: [W]=WARN [ 418.112989][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.113001][T17343] Call Trace: [ 418.113008][T17343] [ 418.113036][T17343] __dump_stack+0x1d/0x30 [ 418.113063][T17343] dump_stack_lvl+0x95/0xd0 [ 418.113139][T17343] dump_stack+0x15/0x1b [ 418.113161][T17343] should_fail_ex+0x263/0x280 [ 418.113191][T17343] should_failslab+0x8c/0xb0 [ 418.113281][T17343] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 418.113306][T17343] ? __alloc_skb+0x2d6/0x690 [ 418.113334][T17343] __alloc_skb+0x2d6/0x690 [ 418.113478][T17343] ? __alloc_skb+0x200/0x690 [ 418.113581][T17343] netlink_alloc_large_skb+0xbf/0xf0 [ 418.113620][T17343] netlink_sendmsg+0x40c/0x6f0 [ 418.113698][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.113718][T17343] ____sys_sendmsg+0x563/0x5b0 [ 418.113739][T17343] ___sys_sendmsg+0x195/0x1e0 [ 418.113766][T17343] __x64_sys_sendmsg+0xd4/0x160 [ 418.113788][T17343] x64_sys_call+0x194c/0x3020 [ 418.113883][T17343] do_syscall_64+0x12c/0x370 [ 418.113909][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.113930][T17343] RIP: 0033:0x7f030760c819 [ 418.113945][T17343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.113966][T17343] RSP: 002b:00007f030605f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.114003][T17343] RAX: ffffffffffffffda RBX: 00007f0307885fa0 RCX: 00007f030760c819 [ 418.114029][T17343] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 418.114041][T17343] RBP: 00007f030605f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.114054][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.114144][T17343] R13: 00007f0307886038 R14: 00007f0307885fa0 R15: 00007ffdc23c72e8 [ 418.114162][T17343] [ 418.187174][T17345] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3494: iget: bogus i_mode (2) [ 418.191710][T13030] vhci_hcd vhci_hcd.3: release socket [ 418.197037][T17345] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.201780][T13030] vhci_hcd vhci_hcd.3: disconnect device [ 418.207695][T17345] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3494: couldn't read orphan inode 15 (err -117) [ 418.222202][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 418.222221][ C0] EXT4-fs (loop2): initial error at time 1775845199: ext4_orphan_get:1397: inode 15 [ 418.222258][ C0] EXT4-fs (loop2): last error at time 1775845199: ext4_orphan_get:1397: inode 15 [ 418.262747][ T23] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 418.271510][T17345] loop2: lost filesystem error report for type 5 error -117 [ 418.329856][T17353] loop4: detected capacity change from 0 to 512 [ 418.373740][T17345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.391287][T17353] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 418.441909][T17353] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 418.451212][T17353] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 418.459360][T17353] System zones: 0-2, 18-18, 34-35 [ 418.465590][T17353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 418.481459][T17345] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 418.497414][T17345] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.3494: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 418.502951][T17361] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3501'. [ 418.525365][T17353] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 418.537409][T17353] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 418.547389][T17353] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 418.682910][T17353] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.3498: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 4(0), depth 0(0) [ 418.701549][T17384] FAULT_INJECTION: forcing a failure. [ 418.701549][T17384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.731327][T17384] CPU: 1 UID: 0 PID: 17384 Comm: syz.0.3507 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.731402][T17384] Tainted: [W]=WARN [ 418.731410][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.731422][T17384] Call Trace: [ 418.731429][T17384] [ 418.731435][T17384] __dump_stack+0x1d/0x30 [ 418.731461][T17384] dump_stack_lvl+0x95/0xd0 [ 418.731485][T17384] dump_stack+0x15/0x1b [ 418.731537][T17384] should_fail_ex+0x263/0x280 [ 418.731566][T17384] should_fail+0xb/0x20 [ 418.731634][T17384] should_fail_usercopy+0x1a/0x20 [ 418.731661][T17384] _copy_from_iter+0xcf/0xea0 [ 418.731724][T17384] ? __alloc_skb+0x4f6/0x690 [ 418.731823][T17384] ? __alloc_skb+0x200/0x690 [ 418.731853][T17384] netlink_sendmsg+0x4ae/0x6f0 [ 418.731972][T17384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.731994][T17384] ____sys_sendmsg+0x563/0x5b0 [ 418.732090][T17384] ___sys_sendmsg+0x195/0x1e0 [ 418.732130][T17384] __x64_sys_sendmsg+0xd4/0x160 [ 418.732154][T17384] x64_sys_call+0x194c/0x3020 [ 418.732203][T17384] do_syscall_64+0x12c/0x370 [ 418.732231][T17384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.732303][T17384] RIP: 0033:0x7f787fffc819 [ 418.732320][T17384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.732339][T17384] RSP: 002b:00007f787ea57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.732360][T17384] RAX: ffffffffffffffda RBX: 00007f7880275fa0 RCX: 00007f787fffc819 [ 418.732373][T17384] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 418.732387][T17384] RBP: 00007f787ea57090 R08: 0000000000000000 R09: 0000000000000000 [ 418.732452][T17384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.732464][T17384] R13: 00007f7880276038 R14: 00007f7880275fa0 R15: 00007ffc23fe5ec8 [ 418.732484][T17384] [ 419.001942][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.029782][T17389] loop5: detected capacity change from 0 to 512 [ 419.043795][T17389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.055540][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.078693][T17389] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 419.120398][T17389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 419.159519][T17389] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3508: Allocating blocks 41-42 which overlap fs metadata [ 419.173642][T17389] loop5: lost filesystem error report for type 5 error -117 [ 419.174314][T17389] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3508: Allocating blocks 41-42 which overlap fs metadata [ 419.181669][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 419.181689][ C0] EXT4-fs (loop5): initial error at time 1775845200: ext4_mb_mark_diskspace_used:4222 [ 419.181717][ C0] EXT4-fs (loop5): last error at time 1775845200: ext4_mb_mark_diskspace_used:4222 [ 419.649300][T17389] loop5: lost filesystem error report for type 5 error -117 [ 419.650511][T17389] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.3508: Failed to acquire dquot type 1 [ 419.692259][T17413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17413 comm=syz.4.3514 [ 419.747402][T17389] loop5: lost filesystem error report for type 5 error -117 [ 419.755505][T17389] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 419.770551][T17389] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #12: comm syz.5.3508: corrupted inode contents [ 419.774728][T17413] syzkaller0: entered promiscuous mode [ 419.788530][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.788693][T17389] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #12: comm syz.5.3508: mark_inode_dirty error [ 419.811784][T17413] syzkaller0: entered allmulticast mode [ 419.830520][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.830776][T17389] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #12: comm syz.5.3508: corrupted inode contents [ 419.852197][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.852719][T17389] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.3508: mark_inode_dirty error [ 419.873529][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.874362][T17389] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #12: comm syz.5.3508: corrupted inode contents [ 419.898466][T17423] __nla_validate_parse: 1 callbacks suppressed [ 419.898532][T17423] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3517'. [ 419.914495][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.917667][T17389] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 419.938008][T17389] loop5: lost filesystem error report for type 5 error -117 [ 419.938177][T17389] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #12: comm syz.5.3508: corrupted inode contents [ 419.958686][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.958952][T17389] EXT4-fs error (device loop5): ext4_truncate:4602: inode #12: comm syz.5.3508: mark_inode_dirty error [ 419.971996][T17433] FAULT_INJECTION: forcing a failure. [ 419.971996][T17433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.992690][T17389] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 419.992909][T17389] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 420.011192][T17433] CPU: 0 UID: 0 PID: 17433 Comm: syz.0.3520 Tainted: G W syzkaller #0 PREEMPT(full) [ 420.011221][T17433] Tainted: [W]=WARN [ 420.011301][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.011353][T17433] Call Trace: [ 420.011360][T17433] [ 420.011369][T17433] __dump_stack+0x1d/0x30 [ 420.011396][T17433] dump_stack_lvl+0x95/0xd0 [ 420.011418][T17433] dump_stack+0x15/0x1b [ 420.011440][T17433] should_fail_ex+0x263/0x280 [ 420.011490][T17433] should_fail+0xb/0x20 [ 420.011513][T17433] should_fail_usercopy+0x1a/0x20 [ 420.011605][T17433] _copy_from_iter+0xcf/0xea0 [ 420.011635][T17433] ? __alloc_skb+0x4f6/0x690 [ 420.011664][T17433] ? __alloc_skb+0x200/0x690 [ 420.011766][T17433] netlink_sendmsg+0x4ae/0x6f0 [ 420.011860][T17433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.011926][T17433] ____sys_sendmsg+0x563/0x5b0 [ 420.011949][T17433] ___sys_sendmsg+0x195/0x1e0 [ 420.011989][T17433] __x64_sys_sendmsg+0xd4/0x160 [ 420.012011][T17433] x64_sys_call+0x194c/0x3020 [ 420.012077][T17433] do_syscall_64+0x12c/0x370 [ 420.012105][T17433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.012126][T17433] RIP: 0033:0x7f787fffc819 [ 420.012144][T17433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.012199][T17433] RSP: 002b:00007f787ea57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.012320][T17433] RAX: ffffffffffffffda RBX: 00007f7880275fa0 RCX: 00007f787fffc819 [ 420.012332][T17433] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 420.012360][T17433] RBP: 00007f787ea57090 R08: 0000000000000000 R09: 0000000000000000 [ 420.012375][T17433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.012388][T17433] R13: 00007f7880276038 R14: 00007f7880275fa0 R15: 00007ffc23fe5ec8 [ 420.012409][T17433] [ 420.012868][T17389] loop5: lost filesystem error report for type 5 error -117 [ 420.180238][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'. [ 420.187439][T17389] EXT4-fs (loop5): 1 truncate cleaned up [ 420.224900][T17389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.241182][T17389] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.3508: Allocating blocks 41-42 which overlap fs metadata [ 420.255652][T17389] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.3508: Failed to acquire dquot type 1 [ 420.331585][T17447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3518'. [ 420.353460][T17449] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 420.362505][T17439] team0: Port device vlan0 removed [ 420.369106][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.422345][T17447] IPVS: Unknown mcast interface: [ 420.581786][T17458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17458 comm=syz.0.3523 [ 420.731027][T17460] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3526'. [ 421.110738][T17486] loop2: detected capacity change from 0 to 512 [ 421.121307][T17486] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 421.152452][T17486] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29249!=33349) [ 421.162096][T17486] EXT4-fs (loop2): group descriptors corrupted! [ 421.216635][T17495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17495 comm=syz.2.3539 [ 421.229995][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'. [ 421.239383][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3535'. [ 421.240201][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3538'. [ 421.288253][T17505] syz.2.3543 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 421.306395][T17512] loop2: detected capacity change from 0 to 512 [ 421.369601][T17527] loop2: detected capacity change from 0 to 1024 [ 421.379831][T17527] EXT4-fs: Ignoring removed oldalloc option [ 421.386078][T17527] EXT4-fs: Ignoring removed oldalloc option [ 421.393806][T17527] EXT4-fs (loop2): unable to read superblock [ 421.432516][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3548'. [ 421.442913][T17533] loop2: detected capacity change from 0 to 512 [ 421.450313][T17533] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 421.469628][T17533] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 421.484653][T17533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3549: bg 0: block 248: padding at end of block bitmap is not set [ 421.500939][T17533] loop2: lost filesystem error report for type 5 error -117 [ 421.501274][T17533] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.3549: Failed to acquire dquot type 1 [ 421.509121][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 421.509143][ C1] EXT4-fs (loop2): last error at time 1775845202: ext4_validate_block_bitmap:441 [ 421.536326][T17533] loop2: lost filesystem error report for type 5 error -28 [ 421.538389][T17533] EXT4-fs (loop2): 1 truncate cleaned up [ 421.551993][T17533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 421.576166][T17543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.585258][T17543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.092406][T17566] loop5: detected capacity change from 0 to 512 [ 422.104915][T17566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 422.125977][T17566] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 8192)! [ 422.136708][T17566] EXT4-fs (loop5): group descriptors corrupted! [ 422.205096][T17575] lo speed is unknown, defaulting to 1000 [ 422.318480][ T28] kauditd_printk_skb: 197 callbacks suppressed [ 422.318492][ T28] audit: type=1326 audit(1775845203.354:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.379997][ T28] audit: type=1326 audit(1775845203.484:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.558160][ T28] audit: type=1326 audit(1775845203.514:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.655968][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 422.670533][ T28] audit: type=1326 audit(1775845203.514:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.694557][ T28] audit: type=1326 audit(1775845203.514:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.698274][T17580] loop5: detected capacity change from 0 to 8192 [ 422.725874][ T28] audit: type=1326 audit(1775845203.514:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.755245][ T28] audit: type=1326 audit(1775845203.514:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.764279][T17580] vfat: Unknown parameter '00000000000000000000000’’’’’’’’0177777777777777777777700000000000000000000000' [ 422.779691][ T28] audit: type=1326 audit(1775845203.514:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.847149][ T28] audit: type=1326 audit(1775845203.514:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 422.908625][T17600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3570'. [ 422.969863][ T28] audit: type=1326 audit(1775845203.514:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.3.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbf2ec819 code=0x7ffc0000 [ 423.153352][T17622] loop4: detected capacity change from 0 to 512 [ 423.164611][T17622] EXT4-fs: Ignoring removed nobh option [ 423.183376][T17622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #3: comm syz.4.3579: corrupted inode contents [ 423.267525][T17622] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 423.268093][T17622] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #3: comm syz.4.3579: mark_inode_dirty error [ 423.277357][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 423.277379][ C0] EXT4-fs (loop4): initial error at time 1775845204: ext4_do_update_inode:5602: inode 3 [ 423.277412][ C0] EXT4-fs (loop4): last error at time 1775845204: ext4_do_update_inode:5602: inode 3 [ 423.325534][T17622] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 423.326982][T17622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #3: comm syz.4.3579: corrupted inode contents [ 423.405457][T17628] loop5: detected capacity change from 0 to 512 [ 423.450342][T17628] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 423.501296][T17628] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 423.512023][T17622] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 423.512230][T17622] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.3579: mark_inode_dirty error [ 423.533151][T17622] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 423.533358][T17622] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.3579: Failed to acquire dquot type 0 [ 423.554212][T17622] loop4: lost filesystem error report for type 5 error -117 [ 423.554508][T17628] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3580: inode #15: comm syz.5.3580: iget: illegal inode # [ 423.554818][T17622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3579: corrupted inode contents [ 423.562712][T17628] loop5: lost filesystem error report for type 5 error -117 [ 423.575478][T17622] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.591220][T17628] EXT4-fs (loop5): Remounting filesystem read-only [ 423.604149][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 423.604174][ C1] EXT4-fs (loop5): initial error at time 1775845204: ext4_orphan_get:1397 [ 423.604201][ C1] EXT4-fs (loop5): last error at time 1775845204: ext4_orphan_get:1397 [ 423.605435][T17622] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #16: comm syz.4.3579: mark_inode_dirty error [ 423.611453][T17628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.617666][T17622] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.659052][T17622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3579: corrupted inode contents [ 423.680477][T17622] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.684038][T17622] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.3579: mark_inode_dirty error [ 423.687263][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3582'. [ 423.695795][T17622] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.705086][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.724139][T17622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3579: corrupted inode contents [ 423.744595][T17622] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.744869][T17622] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 423.773003][T17622] loop4: lost filesystem error report for type 5 error -117 [ 423.775059][T17622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #16: comm syz.4.3579: corrupted inode contents [ 423.794704][T17622] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 423.794975][T17622] EXT4-fs error (device loop4): ext4_truncate:4602: inode #16: comm syz.4.3579: mark_inode_dirty error [ 423.823114][T17622] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 423.832459][T17622] loop4: lost filesystem error report for type 5 error -117 [ 423.832882][T17622] EXT4-fs (loop4): 1 truncate cleaned up [ 423.847053][T17622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.859983][T17622] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.999421][T17622] syz.4.3579 (17622) used greatest stack depth: 8568 bytes left [ 424.024051][T14554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.043050][T17650] batadv_slave_0: entered promiscuous mode [ 424.054285][T17648] batadv_slave_0: left promiscuous mode [ 424.138274][T17658] lo speed is unknown, defaulting to 1000 [ 424.179179][T17670] netlink: zone id is out of range [ 424.184416][T17670] netlink: zone id is out of range [ 424.198185][T17670] netlink: zone id is out of range [ 424.208281][T17670] netlink: zone id is out of range [ 424.232566][T17670] netlink: zone id is out of range [ 424.254144][T17670] netlink: zone id is out of range [ 424.259552][T17672] loop4: detected capacity change from 0 to 164 [ 424.259843][T17670] netlink: zone id is out of range [ 424.266407][T17672] iso9660: Unknown parameter '/dev/infiniband/rdma_cm' [ 424.274220][T17670] netlink: zone id is out of range [ 424.345452][T17682] netlink: 'syz.3.3597': attribute type 1 has an invalid length. [ 424.356843][T17670] netlink: zone id is out of range [ 424.380589][T17670] netlink: zone id is out of range [ 424.451622][T17675] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 424.755997][T17722] syz.5.3611 (17722): /proc/17721/oom_adj is deprecated, please use /proc/17721/oom_score_adj instead. [ 424.816085][T17727] xt_hashlimit: size too large, truncated to 1048576 [ 424.865933][T17730] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(16) [ 424.872873][T17730] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.884566][T17711] loop2: detected capacity change from 0 to 2048 [ 424.903810][T17730] vhci_hcd vhci_hcd.0: Device attached [ 424.932402][T17711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.000550][T17731] vhci_hcd: connection closed [ 425.001634][T13024] vhci_hcd vhci_hcd.5: stop threads [ 425.012161][T13024] vhci_hcd vhci_hcd.5: release socket [ 425.017879][T13024] vhci_hcd vhci_hcd.5: disconnect device [ 425.076749][ T35] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 425.160561][T17729] ================================================================== [ 425.168676][T17729] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 425.178396][T17729] [ 425.180715][T17729] write to 0xffff88810b2b0280 of 8 bytes by task 17735 on cpu 0: [ 425.188497][T17729] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 425.194586][T17729] page_pool_alloc_pages+0xd0/0x130 [ 425.199977][T17729] bpf_test_run_xdp_live+0x66c/0x1360 [ 425.205820][T17729] bpf_prog_test_run_xdp+0x57b/0xa10 [ 425.211222][T17729] bpf_prog_test_run+0x204/0x340 [ 425.216255][T17729] __sys_bpf+0x52e/0x7e0 [ 425.220588][T17729] __x64_sys_bpf+0x41/0x50 [ 425.225006][T17729] x64_sys_call+0x10cb/0x3020 [ 425.229691][T17729] do_syscall_64+0x12c/0x370 [ 425.234829][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.240833][T17729] [ 425.243153][T17729] read to 0xffff88810b2b0280 of 8 bytes by task 17729 on cpu 1: [ 425.250770][T17729] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 425.256660][T17729] napi_pp_put_page+0xe9/0x200 [ 425.261436][T17729] skb_release_data+0x5e8/0x630 [ 425.266394][T17729] __kfree_skb+0x44/0x150 [ 425.270809][T17729] sk_skb_reason_drop+0xbd/0x290 [ 425.275839][T17729] udpv6_recvmsg+0x1f7/0xca0 [ 425.280487][T17729] inet6_recvmsg+0x143/0x290 [ 425.285188][T17729] sock_recvmsg+0x95/0x120 [ 425.289611][T17729] ____sys_recvmsg+0xf5/0x280 [ 425.294289][T17729] ___sys_recvmsg+0x11f/0x3b0 [ 425.298959][T17729] do_recvmmsg+0x1ef/0x560 [ 425.303489][T17729] __x64_sys_recvmmsg+0xe5/0x170 [ 425.308514][T17729] x64_sys_call+0x80f/0x3020 [ 425.313189][T17729] do_syscall_64+0x12c/0x370 [ 425.318040][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.324030][T17729] [ 425.326382][T17729] value changed: 0xffffea00071faf40 -> 0x0000000000000000 [ 425.333569][T17729] [ 425.335877][T17729] Reported by Kernel Concurrency Sanitizer on: [ 425.342189][T17729] CPU: 1 UID: 0 PID: 17729 Comm: syz.3.3614 Tainted: G W syzkaller #0 PREEMPT(full) [ 425.353556][T17729] Tainted: [W]=WARN [ 425.357400][T17729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 425.367464][T17729] ================================================================== [ 425.524606][T14887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.