last executing test programs: 1m47.543626839s ago: executing program 2 (id=647): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) finit_module(0xffffffffffffffff, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x4, 0x2, 'client0\x00', 0x100000001, "ebed176727d064c0", "ada9126acf3e4e34d027a9c9f9fd02c606d0429492b9f28895ec77c061d14b88", 0x2f0, 0x5}) 1m47.486853126s ago: executing program 2 (id=651): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61fb070100542f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d270100810000013f0c78f364e8000086dd810088a808"], 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003002a00c400090210000000000000000000"], 0x38}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1m47.185196965s ago: executing program 2 (id=655): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4802}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.081975838s ago: executing program 2 (id=656): pipe(&(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00y\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0xd4}], 0x1, 0x0, 0x0, 0xc010}, 0x4040080) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2c1, &(0x7f0000000280)="$eJzs3T+LI2UYAPBnsslszi2SwkoEp7jCxuX2WpscsoK4lZLCP6CHdwfHJhxsIHAqhqv8BBYWfg87e8HGVhvBD2DnIYevTDKbxCSb7N6ZPdn7/Zp9ed7nmXnezOyGJcybT1/tH995MLj36MvfotnMotaJTjzOoh21OJUqAQBcCY9Tij/Wvb9nZ1XWa9vsCwDYnrn3/8YZKbvLob87v/6y7c4AgG15/4MP3711dHT4XlE0I/pfD7vlP/zlz8n8rXtxP3pxN25EK57MPgtIaTJ++52jw6gXpXZc74+G3bKy/8lP09Q8xvUH0Yr26vqDYmKufjTsNuKl3ciyiPudspGb0YqXl+rL+cObK+qjm8frzWqR5fn3m634+bN4EL24M/5MY3b+r/Io3krf/PnFR2VyWZ+Nht3dcd5M2rnsawMAAAAAAAAAAAAAAAAAAAAAwNW1X0y143q/DFX77+w8Gc/v/2t+vL9ObTw/qc8i8vFgYX+gUYrvTvfXuVEURar2EZ7u73OtHq/Uo/7cFg4AAAAAAAAAAAAAAAAAAAD/I4OHnx/f7vXunvwng+oh/+lj/U97nM5c5LVYn7x7oXPFTpVe9rqYc/Djx/1ppFzE0zQ/bBQR63puLEWulf1sPvJfKaWUZRHPdpka5znXhsHe+pzyBf7h2703jm9nm17D5umF+35+Ko+TwcOFaxrZuTscXfT2y9fk5NUdc67j7D3jL9Gbv09OVkWyDatozEUa1SDOuv2aF7qfL+kPEAAAAAAAAAAAAAAAAAAAMDV76HfF5KO1pbWtNQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl2z2/f+zQSxFFgajqnh1TkppNI3kcTJ4zksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgBfBPAAAA//9xIm2e") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000940)="b5", 0x1}], 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000080)={0x2, @short={0x2, 0x2}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYBLOB="05072bbd"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x30) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) setrlimit(0xf, &(0x7f0000000380)={0x3, 0x9}) timer_create(0x1, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m46.648421464s ago: executing program 2 (id=662): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x9, 0x6, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x20, 0x80, 0x5}}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @tick=0xf27, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000140)=r1) 1m46.240954326s ago: executing program 2 (id=680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) finit_module(0xffffffffffffffff, 0x0, 0x1) (fail_nth: 10) 1m46.230516327s ago: executing program 32 (id=680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) finit_module(0xffffffffffffffff, 0x0, 0x1) (fail_nth: 10) 1m29.065288353s ago: executing program 0 (id=867): setreuid(0xee01, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x4400) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x4, 0x0, 0xffffffff, 0x4, 0x7, 0xb1, 0xfffffffffffffff9, 0xa28}, {0x5a, 0x6, 0x6, 0x40}, 0x8, 0x6e6bbd, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x2, 0x6, 0xc8, 0xfffff000, 0x3}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2f, &(0x7f00000005c0)={@local, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0xd, 0x0, @opaque="fb7d7b9d64"}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) 1m29.001054691s ago: executing program 0 (id=868): creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x78, 0x27, 0x107, 0x0, 0x0, {0x8, 0x7c}, [@generic="4a63b654e3fe2287688715de4b15ce6bd07230b34b48941b68394b39dbd7d73f615b04a0adf895d2ef03b910242ca27c5d7f011db6ad5c2c272783ff21fc2f6d7d4e871203c1beea0fd8e4f247c7320f517e5baca737995efdd9384445647b618fbf9e"]}, 0x78}, 0x1, 0x0, 0x0, 0x20042090}, 0xc004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) flock(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x1010, r0, 0x6331b000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000000c0)="b9ff0303000d69fee120d4b3dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0xea, 0x47, &(0x7f0000000480)="f769192f50019efff32be94d5e47f7fd0e1ea9336eb779eaaff9cd3eb398a192310008c7ffa33eb1f16db910025271d1f03ecb0a039674d9a2bb6893ce84fe99f156c083362cde24545a57b82930249f8c3d27bb76144234af08f791336c3dca814d5e103fd9dd3ca4b63606bf2c81989a2bd8ad2b87bfec9bf46c2e62a01ffc8c98956cd3659ae07af8a6fe9c3371ebe7dd66ab239e6b98698d4fec3d1cb71cb66db0d6892dcf248b6ea60774a1c15cd74726000000000000000000000000000000002e0c0693b60715669ce036bfbd79d62865427e0ffc2148fb1e2149bb68dd3e79f0a1d52db96926", &(0x7f0000000100)="10159073a6edceb35c9342b14afa258b5a845ccc3e8b76d7adf6a50a2f5f0c8a84c7fc6ca263be194280305fb195b466035804ec516f29a9b0d0956452f787efadf27435d08f78", 0x2, 0x0, 0xffffffff}, 0x50) 1m28.669103214s ago: executing program 0 (id=871): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) 1m28.668895044s ago: executing program 0 (id=872): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYRESOCT]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001100)=ANY=[@ANYBLOB="4c01000019000100feffffff000008001d01070015000300020000400002000049fd003900000000040000001e0106000322"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140014f7c100000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket(0x1f, 0x800, 0x8) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000040)=0xa) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000180)=r7, 0x12) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r9 = dup(r8) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 1m28.554681819s ago: executing program 0 (id=874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xf3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xdc98, 0x3, 0xb, 0x8, 0xffff8000}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @local}}, 0x2, 0x0, 0x9, 0x17de, 0x54, 0xfffffffc}, 0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2a, 0x80000, 0x1) r5 = dup3(r0, r4, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x100, 0x100, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x9, {0x100}}}}, {{@arp={@loopback, @local, 0xffffffff, 0xff000000, 0x1, 0x0, {@mac, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0xe, 0x1, 0x0, 0x2e45, 0x4, 0x6, 'veth0_to_bridge\x00', 'wlan0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@local, @local, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x9, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) shutdown(r1, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x4, 0x1, 0x78, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x18be4ef1febdb874, 0x20, 0x1, 0xc}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'gre0\x00', r6, 0x7810, 0x8, 0x8d, 0x7, {{0x13, 0x4, 0x0, 0x21, 0x4c, 0x65, 0x0, 0x3, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x3, [{@private=0xa010101, 0x7fff}, {@multicast2, 0x6}, {@empty, 0x2}]}, @ssrr={0x89, 0xb, 0xfc, [@multicast2, @remote]}, @ssrr={0x89, 0xf, 0xa7, [@rand_addr=0x64010100, @local, @broadcast]}]}}}}}) socket$netlink(0x10, 0x3, 0x15) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000880)=0x0) r10 = syz_open_procfs(r9, &(0x7f00000008c0)='net/icmp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x106, &(0x7f0000000900)={@empty, @empty, @void, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}], @generic="d71eb8cfb167a9b8e158cf4d2c1f0374ce3a021cd7095d4d170fd96d4af82ed948bb3c16179663c431f9cd6c252ae3fd68bb7ac9183aaedb70d56d3dde71aebeb9cfd645aa9f57985d1425e6afb054c6ed3796a14df4e501e15ac9a4ef9e4923c9e3a5fc06136a97ac0f740a474f29cf2c7bc439ded2659b8726a892c70864c9ead4671bbd9c2758a2372b8b6be9cfb088e4f0fadd708e492766f9fedd658f642b7743dfc2e7e6e31c874cbf63770a5bf6098117bb006e0fd38d784620c59f1a70c40d7ccbc1553a20d2c14448c8ad7d72044183046ad1f3cc0e5dffafc86e98"}}}}, &(0x7f0000000a40)={0x1, 0x1, [0x88b, 0x759, 0x74, 0x8a6]}) readv(r3, &(0x7f0000000f40)=[{&(0x7f0000000a80)=""/47, 0x2f}, {&(0x7f0000000ac0)=""/15, 0xf}, {&(0x7f0000000b00)=""/178, 0xb2}, {&(0x7f0000000bc0)=""/25, 0x19}, {&(0x7f0000000c00)=""/16, 0x10}, {&(0x7f0000000c40)=""/32, 0x20}, {&(0x7f0000000c80)=""/244, 0xf4}, {&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000000e40)=""/249, 0xf9}], 0x9) r11 = open_tree(r5, &(0x7f0000001000)='./file0\x00', 0x88900) read$ptp(r11, &(0x7f0000001040)=""/85, 0x55) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r10, 0xc02c5341, &(0x7f00000010c0)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000001140)={0x0, @in6={{0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}}, 0x84) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r11) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x168, r12, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf7, 0xa8, @random="1e8954c3850ccc036dad0ca2dd727ff65838120110685f51a697d5a0d98cb870348fd75389b9076bb6006737698a137d38047d1e125b08cd74815a38a6a590eb667b565be04cac6aa8459d4a13535204067e39aac68606dbf44b0e0767232fe3e4caaaadabf524f8760058d6070c43747e2ca0652cd8e5f75aaa4e11089771b593a731cb8537ecf0ff7ceca9ccca4b4eee98a2b7839bff4939f6ed14e9bfb87a29bbfc97fae3cfaba8b8b5c95eb49ec3a2e5b03f6b8ca3b248396744d12ebbc4172b468ecca069ce03defdee7f1e2c9edd565465d7bb98240bab9a507b487fdd0bc852e0fde2a1e4b3d56af555dfd9cb467b3e"}]}, 0x168}, 0x1, 0x0, 0x0, 0x24004015}, 0x4000080) ioctl$TCSBRK(r11, 0x5409, 0x3ff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001480)={'ip6gre0\x00', r7, 0x2f, 0x9, 0x0, 0x8, 0x4f, @mcast1, @loopback, 0x20, 0x1, 0xfffffbff, 0x99}}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 1m27.703562038s ago: executing program 0 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x2000000, 0x0, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x3ffffd, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) 1m27.642758966s ago: executing program 33 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x2000000, 0x0, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x3ffffd, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) 1m9.541292672s ago: executing program 6 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) 1m9.424999798s ago: executing program 6 (id=1121): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x11000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfc5f}, 0x28) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) r5 = socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000640)={[{@bsdgroups}, {@usrjquota}, {@lazytime}, {@norecovery}, {@bsdgroups}, {@grpquota}, {@minixdf}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r6, &(0x7f0000000200)=[{&(0x7f0000002540)=""/4089, 0xff9}], 0x1, 0x7b, 0xfffffbfe, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000280)={0x3, 'qG6'}, 0x4) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x1, @vifc_lcl_ifindex=r8, @broadcast}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 1m7.837295381s ago: executing program 6 (id=1139): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100", @ANYRES64=0x0], 0x48}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 1m7.053065592s ago: executing program 6 (id=1148): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") setresuid(0x0, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) r0 = getpid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) lseek(r2, 0x1008f40, 0x4) 1m6.730667973s ago: executing program 6 (id=1154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x968b}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000002240)="db3981fcc9f3e62d68ffc698a5c17594b64996dba0f6bacbb7a413e1eadd1ccaa77e52db9e3aaafb437f55fabe77219f361ab9022f12293192fbb8a33c2c532bd3ed799016e8ada4e38846b1b281d36d12fdb0a93b4a1f943a5edb6c9a52cd16e7ac02ea6a9f9e5e7e42be2969b9470a9ca5da55b5501808d158ccc162fc3d0d7c79e2264a04843f85c81b1a32cb648b8d6e3aae90ef7c7f5a3a66", 0x9b}], 0x1}}], 0x1, 0x200040c0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 1m5.996920498s ago: executing program 6 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x25, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x98}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x64}, @cb_func={0x18, 0x5}, @alu={0x4, 0x0, 0xc, 0x2, 0x6, 0x1, 0x10}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x10, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8, 0xffffffff}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="201000001a000100000000000000000002"], 0x1020}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26000400) fcntl$getownex(r3, 0x10, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x3, 0xffff, 0xffffff00}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200840, &(0x7f0000000280)={[{@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000180)="bf6a0244766fc9ccca2a4f14ec6702a85071722852ddafb4", 0x18}], 0x1) getsockname$packet(r1, &(0x7f0000000240), &(0x7f0000000300)=0x14) 1m5.931726776s ago: executing program 34 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x25, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x98}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x64}, @cb_func={0x18, 0x5}, @alu={0x4, 0x0, 0xc, 0x2, 0x6, 0x1, 0x10}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x10, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8, 0xffffffff}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="201000001a000100000000000000000002"], 0x1020}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26000400) fcntl$getownex(r3, 0x10, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x3, 0xffff, 0xffffff00}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200840, &(0x7f0000000280)={[{@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000180)="bf6a0244766fc9ccca2a4f14ec6702a85071722852ddafb4", 0x18}], 0x1) getsockname$packet(r1, &(0x7f0000000240), &(0x7f0000000300)=0x14) 3.156846283s ago: executing program 3 (id=2081): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x4d, 0x0, &(0x7f0000000580)="0ad098a6be5f52dd98f6c25f88f3f68eac7caf248a9163d2b20b147f12a9d73e097a1207dfae852ec15903010f61f8aa1bd3512d45c220a89bbc1d70a7ff92bc74dc4f1c28a6f20e7b688ee4b9", 0x0, 0x2, 0x0, 0x5}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dfeb01001800000000000000"], &(0x7f00000001c0)=""/201, 0x26, 0xc9, 0x4}, 0x28) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) (async) set_mempolicy(0x0, &(0x7f0000000040)=0xffc, 0x5) (async) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) ppoll(&(0x7f0000000080)=[{r2, 0x180}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b2200", @ANYRES32=0x1], 0x50) 2.776728282s ago: executing program 7 (id=2084): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@local, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) 2.716000591s ago: executing program 7 (id=2086): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x11000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfc5f}, 0x28) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) r4 = socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000640)={[{@bsdgroups}, {@usrjquota}, {@lazytime}, {@norecovery}, {@bsdgroups}, {@grpquota}, {@minixdf}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r5, &(0x7f0000000200)=[{&(0x7f0000002540)=""/4089, 0xff9}], 0x1, 0x7b, 0xfffffbfe, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000280)={0x2, 'qG'}, 0x3) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x1, @vifc_lcl_ifindex=r7, @broadcast}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 2.360673266s ago: executing program 7 (id=2093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) splice(r3, 0x0, r1, 0x0, 0x80000000, 0x2) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000200)=""/69, 0xfdef}], 0x1) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0x10034) 1.757077053s ago: executing program 5 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x9e, 0x10, 0x529, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_TXQLEN={0x0, 0xd, 0xee78}, @IFLA_CARRIER_CHANGES={0x0, 0x23, 0x81}]}, 0x5c}}, 0x0) 1.750146484s ago: executing program 3 (id=2099): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xdc, 0x2d5, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="d2205d96c717ab96f0ded75d86dd026c3fa00160bb383e8e6fd8209a8cf80e5e15ca9bac4b947ccd88a75b7c441ce3ac7258ed0ce9df", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000b00000001000000070000060400000007000000000100000300000008000000060000000600000004000000400000000700000000000000000000000d8d00000f00000009000000030000000000000c03000000070000000000000e0400000000000000002e30615f300061"], 0x0, 0x83, 0x0, 0x1, 0x800000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000090095000000000000000000000000000000001de4fc5ced87a49f506d60fe4e8daa841173809213e40cc356f92872334d7009130221fe896cd976c318ee4c678c8a0bb4f4cc4c9c877544f77988a80e13a3871d9eed7ea1e120cdef904b2968b8af2fdef2e2a3c504320ccc139e8f495d9586008747a5700ccd97dfbbe2ed104cc408a52de32907b6927da3e2162d12a3d851f09473630510b8c90fca1852407f772e5d604363188719dd97ffef431b74acf5c5f41111e56c1b4dadb0bd4f178d52"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[], 0x1874}}, 0x0) 1.730807797s ago: executing program 4 (id=2100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x968b}, 0x1c, 0x0}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x1ff}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000000800)="9b", 0x1}], 0x1, &(0x7f00000041c0)=ANY=[@ANYBLOB="140000000000000029000000340000000800000000000000481000000000000029000000370000003b0500000000000005020062050200090104000000000100fb725229fd8982bf8355ae62fc3827079fb035653bec8ee9ee6fa9bb06c32ed2888e28215838cbcee1a9f90b4f861362fb17b7e536872b4b39b5e1d1282cf0e0e459c94cef3e69828c16679019eca0f86b427945f88740f093850858942c5ea1dcd231ba7beab489efc4b8a2daef1361effcf399e2630e5f2b575a73fb9b71691a93686aa2c295ab61ab6e9431119e4fa944394bd31a123dc5eaec12c7711c2f38bd536a4721abf60219348ed28aa0fe27aa134d0eaa1cbc53fc0a035d4fde4f45b73acbb1068036c68a8a70e3d18147d3ee6cf0abbb11bc374e2c6c93ee09dc628af65a78268492c839729aa8b1bd77e98530d73cd913d1c985158ec631dd37ea1fb90016a4597665021a9ecd1df8a73c84b803db7f5defd28106589e4658bb41fe8ba2ff8db9a5d09a729426a5618d51ca4d518b1280d56a86834fc0a09e1c3353e3784832c438c7b298081c2db02f65ad75e37ebba2f410fb50152009682052a5a8e1a4a6a3d2a83df8aa2ad55618a8fa821313f33e2a061254c915ad01ad52dfad8fca2a883266babf0fdf6efff4bd9c99dca43e58dc97efb21f553f225f848aab75538d7cef6453cb070543aa92d5f96f039cf985ce169e06280443cafe7e4d3f23d07ffa50aef08e0fc328ba0a72f2c1662139a414d2b55fe698353a4c6b847ecfcfa2060f7e6008086ccbefde92b696ae80c0a82e4a91edca3055cbe58a24f8f51574585cc6428603fb3a3a69f8e707bac6b18faa80da1cf83ae688e74c9489b29e020062856375fda6aff23e9fb98cd40ac7ae74c48fa4e8a7a24c67682e48af43bda5eb31f71da202c6f8c21d902d5b7e94c4d9d8d569cd531f87aca1b8d6726d017b264abf5e4d4d481008d0880be3cd328f914152f9ff6d59a8dea7d11bda4cdfc120d4001da450290ffdc40ac5e316f676c2e7488ce83bcf4ee34e86e9891b0dc1e4f2fe7fcc0bf5378da1fdcfa3fd937e0f756dab603463e4876406b3ebee51837492ce41e11717a4b9fb72e62186dfde25a708648aaa3491d59edb5c6328b6e506c0404a91f73785e491a4d052e9e1dfcbfa6b73d07a89fb289ce520ddd02cb6ab477f1fc054d153f38f9d7206a03231ab59d145e352d9897f2032b2b8c146e855350b4affc9bb2e5cd6b985346eafbf37b0b1d008ebb08c55c8961404fb8e5a76ae37294d99651a36ec99068488578f6e704785e4d3e0fee2e2d69044ffd80a2adcf27436ea4cc6c43159bbb1f1cbf04da85017fc94a50452065c2a0a7187d7602bb4e620a5cfe7f9a9f423a6ecccb52ca75850de44ef454250a8820e16db2e3d757f51a815ecffb490c36a6744bd02d2df4314a0d574168a334adf734aa066264d6e18d6368a7b8d81e71ac7de2d7c8a86e798568f19c4f798a802b14b0f1144df671844f8a9284f7238b700a280937cf573609fd01a96096f3c1a23e065d0441ec5727914241bd1210be8bdd755fbcd494ea724031ed0d240cec043859a83df9ce8e0080c0de4fc71e199d3f2665aba0b95f1e334040899e1558854d674bf3e98b9b93cd4db8e1e0b5f4594c4a4bda5089c015aa2654aa45be48f1bf9e1b456b0f64a801e0d49f6c9e99157f58e838b04f8eaae1d73341358ba0c59b4f22d76b11d4ebdac87e3a40c933135d21ffc9cf0d09c8ec2f1365027f1a3676491b7e723c5fa53a53db163d37e0301a2dbb40713de4da4c89c99a16c6636d868c0e44d913e9161e9e67de6133e2eada6da32a778476d8630de69225f9dc166a6a04d518aa48ce87f9e1689015e8c19a8c2d1f98d6b4f5413478d76d65bc1d20e6365857b743f6c9508a838073fe018b75e7545b2ca26a7ddf9ab80d7d4f6d60f5bca8e9c8a30be3ba8d8cb4527f0472264bf2ae801728b3c9ee282d8ce44c28ad76c1afb5526e91abae99a3eb1a77136b640b9a90b8933c5d0032a042c3c15c17b4f0424285c562bf558da42cdea2f4d2a8c0d27f5da9c5aa88d69297ba2539edee4b8964ef7b46a4bd00accdeee7b097329de278126396d38dcac3a20972dc42d96aad4191e36f3dd2822e92e752cbef4ff282ea9a9ce33a31f933963c202d9ad0591fa881537f18f60cafb281828a3590e8c9ea83a2507ed3884433d499f347d3b5d5b5f67125517d713178243ae335cccf5a9db83d1d7c5e16732846ca3f4d6ff4779de14654012fc1d3a41c20690113645c98f1515e0ab92db82e6b32bb81d84c2b3caa15d3259862d67f29cd4038ce5507634e1bfd700a0707347d93c5634a99f9201456a3565ed54bb8fcfe7421d54618e5bf4f704b1c358d658d587d706fa5e7f1c859d58e1a12435ece9146abc489953cb4c6075fbc899a9031070c9d00a29f508fee7aa3ea5ff4bc24f95b9f898ef4d87322cb873e5b25f5532c5efc8b1c298e1befa14fc56e80b7fb55cd181d29f46d574c09b3e82830679496f0d724ab01e7829c8db7d9ae87dcbbbb8905d380989e53733ab25a2b9840782cc1ad1cfbfa9ec66e6adeb91441775731cbf301a2b2ef8ed2a048c68ff04bbe9a840eb43f0bba32e280e8928b4e635860f7ea9dd1325c683dd01dab4688470192bc6745ec7835af1fefb5e92a51ab0945906eac5fd0a2051d13b9b7ce6ca2959437551dd70f5021d615eee89a2ce006081fe282d360be15558b2c2dbc4af7c62dd4ba8a3cfd6cdc789ffaceacb97b7708de64c4cad29a5c36297036179f92bc3f96f344ae424838a87084dc70dc1994a33d489fbf32a67933a858cc17dcd9084d96c2513944474714de6a10d236407c7687b2f815bce221584cb17275b14489476d72185f6c7a32ca0b6f419c451f1a897999a7f72a6f915847169e6c464201e59967515ce588199a17f7c306f9773828b4043aff740cf25d41e8998cb65aeb2374955dbee454c2ee1072cae522d7ae7a89c40137299657162cc2d1d6218a83860bc833ad79b3bfe746c62a5af919c98bd85d401fd6fbd80f9ec34e3d5e36350c8d74148215c7133a6e913ae93680dd78c9f4247864b78d3f5263f55bb263ba35558fe6fa7142046966baee016057283f3ef81ed6c5fece2a83591886db24be229aa6b0fff77ca02f5bb1d30c96b9600c7855485c01906426187a9be3a549ad5a1687d298df46fd2c9a073e17c0d9c77c7f7c087a1ef396b75ffaafae47c398f9e6f768e017753c06e656c3c5d47fe5cff321fbbd8c21303a19c7f8dc2c762617268a4c3757aa4e0bfc216683186b3b5d7522f6463568bad5215642e90c4ca397254f20648d9ffca3ad17572a34b1a0b73b81bf422c4b90dca1f89afb5cb77e9f51ae7f032eac32d4ddf66169b2dd361c9bdf58dc4bdd26faa9a0f1b29b61369b28e5494abe9d6a42de47d79fa4a567f0ff9f16d7719499b37335113b34e52b61877e332022a79a0e27f4ff43bf1ad4a21ff3611956d97fd48711f1764861e9e49684e4870c650eadd07c737a21e46a4e81470681920c99c3e903704fbf2c5d9751962c47ac33767a150114b8d3ab51cd4c995b3346f4ac8848b7c3791f9707ac26f9a905d6fb7c36a21e976929cedc675ebbb23b7a73ab55772c7e636890bf7cc337d04e05c4c9b0cef638c4e5c119535fb6497eddc0edf664c839436c20b8d22fd66c3a8d7c7d894f3238892978c32b4a2d64dd46aef839552f8d086ecdf90e2953d12bbc5f059c4be384d00a7740f838f9a59972c00479eb7c62a7bbb4c2df83ed2c4e6455674ee26cb7fb39d399fa9f63e4cd57a0fabc2b77c49dea9ec8dc964d5dfb3c4482aa363e2a4412e36fa52588b56cc679cdb6d109db10de4290d07a5390eadd16c0c6aab16cfa8001fdb231e694bb82e4749d611ea9d1a066e0f7c2a5c91c48b537086523fca6c09ca5179b860e90ff2972c8ee1a6cd71c8de0a74d2393dc854b6e033326b923c037c6369435d07f0495160f8fcaa5628dd7e1671e0fabb9b82aa2f7074a39051cc89d37c21b93e1de69eae23b5ad9de0e932b3fdb324f18c5cafd77fda2d00a2d239d385e38408b3e2433dd73fee0804cc272aa22b30d7c4282a5de8028f55188549dfc3025016d5cfc892f5434cfb156208e67727530fd43b0dc00ab51ff7b12f71237f27a2361a72f2a88953545c447dd6acf39cfc8626d445497c38292094f8b46045e459f7a36cd1124a2c13976fb8172c153a49bd419095eabbd32638dfe146f3cafc33fecb7f4016a77ac74085bc69d16a78b214348fd2742e548ae5e771857d096d98d4aa0e268aa3d865f319bfbfe2c95dea6313899379acddd5e2be1f12ff09aae3ceaa6052ff52534ad0195ba2c6ccb78ccdce40342f67bf334c746f81672be24814db651fe8c0a7799e8216a5ffecdfe53301544d40ff35003bd89605067c93665961d6243463fb11bef9124dfc432073e2776aa5ae5fc1b580a4f1939c155d4fe87effdd81cfb0e8c5de247c151341063072226bd58258d09a5727f83ee1dbbf40ece21b730c8d4a55babdbc9321e5eb4b0ee24a879caddbe6f4d0b08b4ecae9d1f01657db9c7409b00c748997f583f715bc94c696d1837a143ee3c89bbcaf93e0e941d734a181fea2f42b0e3e319dc0194321f42e3c73f97addbf5b13c8a8c5878f443a952cab9d698ed4ff4ee2de4d4b98f338c9ee857ca62150ba123a54b3b7cbaf65008a498fe3c7e82c1aa543b8919f166dbdaa6822f2d03837c5e5350244fc158a0b41525c4e53e37efd9287730d9f2fd5a53a0072e5a74c681fb84dc8f5269981db21a5027203b7a179d8b6d02fae17b75866cf8e4ec27676b63fa027632cc9cb9dab0918dd5d2308047d1018eb6b282e4ef672403a9268f7f936cc7f241611d08e8a2ff6b0838adaf6f106cd4c9d9bba9a4d3a8eec28f3904276a5ed9e2d512022c68ab5dfb31bfa53b67fa1aef91b7340dd2bc9223555534c99469acce58526bbda1d7e8f7647c93fc30fbf671bf601e2eac179b0d1664f8e66d4d3db8b36ca7e8190cf3df8b46b4fafc52fec5bd58eb6cd55cb3262433545333bd5f1b76a0583f6011deb5f397ccf4c8312f447609a20d4b0826fc40ddbf616d8418311e02c143771a8a8ae3a0aa13e974a37d3ce8ab85fcc3744bfd860876b2a5c1e1bc6ba787da0f38ba5662f317ca3b1dc7fba122db9f687c09116b6ab24bc847b8f011609acb19fa7aa653d426ecb6ef5a460f9325cdf568c4ddf8a33e7c524f4508a11eff66f10c3513768e4d91c0081796451cfc38b6bcf478890578a58602f22c2cf1e965ff988ff75efd462ea886509d2007fe47b0b5ad146b710b0066820add79c43f0c5f1a846b26b678d9f770dee505aa814aab7d6b66f85ab1b8250ac4a366a0e703417336d8ef970735120e1bed6bd662b5c77c30ea93fba1999972002b3b02a2ad706d8a6ebda2bc92b5192857d00d70670155bcf27d4387fdf63fc351f953ba1d353779bd34c0d94d7f285a5050e698730ec85680a4ed24a031fda7b0d63b663fc35c619bf274265b975f4115490a8fdf94615dc5f7869862f5a7d8ce4bb9d7748da4ea9be305cefdd4d2492fcbec172cfa370dfe12a227871106a0b2e6b3a85b92da970cbdd1dbb5ad3c424252f4cf06855b810b9572032a112271afa407275c6fe6f86e802690d5a870e47da1b36ed24aebbfe752c2f758a4eb42ed470ab89fc59687dd94b3420c9f1d349dc2692b631ff83113eaba1330dc48e1fbfdee5d80a5b3b60906576b2e9ceed4704d1b848fe213f26fed0701661ef4e33def983f1e13c2ade09fcf639bb47903b76f38d56f4f93b2efa38747263f83617ac39daf485008ca3000100c910fc010000000000000000000000000000c204000000040000000000a00000000000000029000000370000002e10000000000000c20400000005c204000000030a0b2f2e97094e045b7e3baa2dc91000000000000000000000000000000000c910fe8000000000000000000000000000aa0740000000030ec005000000000000000000030000000000000004000000000000000400000000000000ffffffffffffff7f1a000000000000000700000000000000050200060000000000500000000000000029000000370000000006000000000000c20400007fff0502000032272691d6170f5ee4c7e78dcb58203cb79bfbe37ff2152707cd8adf89a647080c32fa45be425e5bcb00000000001400000000000000290000000800000001040000000000001400000000000000290000003e0000000400000000000000140000000000000029000000340000000400000000000000200000000000000029000000370000002900000000000000040108040107000014"], 0x11d0}}], 0x2, 0x200040c0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 1.645123978s ago: executing program 5 (id=2101): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000100000001c001a8018000a80140007002001000000000000000000000000000014003c"], 0x50}}, 0x0) 1.644786278s ago: executing program 4 (id=2102): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a463978044b864f940e1137ce034002852c9ef5606de83cf95a02ef4bacef1195250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27fc9eeb304bb3e260a261", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f00000009c0)="$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") creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r0 = open(0x0, 0x105342, 0x20) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1.619592781s ago: executing program 5 (id=2103): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x11000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfc5f}, 0x28) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) r5 = socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000640)={[{@bsdgroups}, {@usrjquota}, {@lazytime}, {@norecovery}, {@bsdgroups}, {@grpquota}, {@minixdf}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x774, &(0x7f00000007c0)="$eJzs3d1rW+UfAPDvSdt17fb7tYKg86ogaGEstbNuCl5MvBDBwUCv3UKaldm0GU061lJwQwRvBBUvBL3ZtS/zzltfbvW/8EI2pnbDiRdSOWmyZWvSpWuTDPL5wNM+zzkneZ5vnnOe8yTnkATQtybSP5mIQxHxURIxVlueRMRQNTcYcWJzu9vra/k0JbGx8eYfSXWbW+tr+Wh4TOpArfBkRPz4fsThzNZ6yyur87lisbBUK09VFs5PlVdWj5xbyM0V5gqLx6ZnZo4ef+H4sb2L9a9fVg9e//i1Z7858c97T1z98KckTsTB2rrGOPbKREzUXpOh9CW8x6t7XVmPJb1uAA8lPTQHNo/yOBRjMVDNtTDSzZYBAJ3ybkRsAAB9JnH+B4A+U/8c4Nb6Wr6eevuJRHfdeCUi9m/GX7++ublmsHbNbn/1OujoreSeKyNJRIzvQf0TEfHFd29/labo0HVIgGYuXY6IM+MTW8f/ZMs9Czv1XBvbTNxXNv5B93yfzn9ebDb/y9yZ/0ST+c9wk2P3YTz4+M9c24NqWkrnfy833Nt2uyH+mvGBWul/1TnfUHL2XLGQjm3/j4jJGBpOy9Pb1DF589+brdY1zv/+/OSdL9P60/93t8hcGxy+9zGzuUpuNzE3unE54qnBZvEnd/o/aTH/PdVmHa+/9MHnrdal8afx1tPW+Dtr40rEM037/+4dbcm29ydOVXeHqfpO0cS3v3422qr+xv5PU1p//b1AN6T9P7p9/ONJ4/2a5Z3X8fOVsR9arXtw/M33/33JW9X8vtqyi7lKZWk6Yl/yxtblR+8+tl6ub5/GP/l08+N/u/0/fU94ps34B6///vXDx99ZafyzO+r/nWeu3p4faFV/e/0/U81N1pa0M/6128DdvHYAAAAAAAAAAAAAAAAAAAAAAAAA0K5MRByMJJO9k89kstnN3/B+PEYzxVK5cvhsaXlxNqq/lT0eQ5n6V12ONXwf6nTt+/Dr5aP3lZ+PiMci4tPhkWo5my8VZ3sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHGjx+/+p34Z73ToAoGP297oBAEDXOf8DQP/Z2fl/pGPtAAC6x/t/AOg/zv8A0H+c/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiwUydPpmnj7/W1fFqevbCyPF+6cGS2UJ7PLizns/nS0vnsXKk0Vyxk86WFlk90afNfsVQ6PxOLyxenKoVyZaq8snp6obS8WDl9biE3VzhdGOpaZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQvvLK6nyuWCws7SaTPtFePI+MjMwjkmkcJUZ6Nj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOr+CwAA///vXCkU") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r6, &(0x7f0000000200)=[{&(0x7f0000002540)=""/4089, 0xff9}], 0x1, 0x7b, 0xfffffbfe, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000280)={0x2, 'qG'}, 0x3) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x1, @vifc_lcl_ifindex=r8, @broadcast}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619, r0}, 0x38) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 1.468098031s ago: executing program 4 (id=2104): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x6040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 1.369057973s ago: executing program 7 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "543f06fcde9e0821fad184a7cae1985949c797cb7c09"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1.359081945s ago: executing program 7 (id=2106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r2, 0x2007ffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 1.259380098s ago: executing program 5 (id=2107): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r1, 0x2007ffb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendfile(r3, r2, 0x0, 0x7ffff000) 908.651312ms ago: executing program 5 (id=2108): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x2, 0x40000000, 0xd2, 0x9, 0x4, 0x1ff, 0x7, 0x0, 0x0, 0x0, 0x400000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r1) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0, 0x700}) openat(r0, &(0x7f0000000280)='./bus\x00', 0x8801, 0x80) r2 = openat(0xffffffffffffffff, &(0x7f0000004400)='./bus\x00', 0x1c1a02, 0x22) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x5) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4088, 0xff8}], 0x1) write(r2, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x4040, 0x0, 0x0, 0x3, 0xfff, 0x8021, 0x8000, 0x0, 0x24, 0x0, 0xe6e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) uname(0x0) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x8000, 0x2, 0x297}, 0x0, 0x0) r4 = socket(0x1, 0x5, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000500)={0xe000200c}) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f00000000c0)) syz_clone(0x1000600, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffd48) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 876.961756ms ago: executing program 4 (id=2110): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800), 0x0, 0x880, 0x0, 0x0) 770.98065ms ago: executing program 3 (id=2112): pread64(0xffffffffffffffff, 0x0, 0x0, 0x9bfc) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") mount$9p_fd(0xffffffffffffff8c, &(0x7f0000000440)='./file0\x00', 0x0, 0x84, 0x0) 770.61165ms ago: executing program 4 (id=2114): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x2}}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "6598bc", 0x18, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @empty, {[], {0x4e24, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x905}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 520.774413ms ago: executing program 1 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 520.553382ms ago: executing program 3 (id=2117): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000002ac0)=""/4110, 0x100e}, {&(0x7f0000000480)=""/90, 0x5a}], 0x3}, 0x5d}], 0x1, 0x22, 0x0) 497.786035ms ago: executing program 1 (id=2118): times(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000000000095000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000280)={0x0, 0x7, 0x4, 0x6, 0x0, 0x8}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x2af7, 0x0, 0x23, 0x38}, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) 478.028408ms ago: executing program 7 (id=2119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) r3 = syz_open_pts(r2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800000a00000000000000fbdbdf25054d0000000000000a004e200000000700000000000000000000ffff64010101000000d09b000000030006002b00000002004e23ac1414370000000000000000"], 0x50}}, 0x0) r5 = dup3(r3, r2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x62, 0x0) r7 = syz_clone(0x1001080, &(0x7f0000000800)="7999ce47792a0670eae4e9f0771ed953488358883d2f5bacf4a40ed672bc00da1b883ba9d7789d9c49ccbb361626ff3cefcc0dc66075196055b02e659bd8663a8bf6a067c4842f1e5f227b7a4034c79d91d821cf94cb7712881b66e62022af13d184227c9b6256e3e8625a1588b8a18888ed230e971d1b169256eb8024949906109772c81c1f2bf56c6829af4fb1d32e4c672d6c78379f765f6484b488b6445e1f552fc08b0d1c20312463cae0bc48d97822158263871374f10348af719a", 0xbe, &(0x7f00000006c0), &(0x7f00000008c0), &(0x7f0000001500)="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") fcntl$setownex(r5, 0xf, &(0x7f0000000900)={0x1, r7}) write$nci(r5, &(0x7f0000001300)=ANY=[@ANYBLOB="6103060a0401f4de4882af606e6877eda9fc969764d325de767f4f12cd6ef58b5e40a59103e4180ca47b3692c401000000fba6479aa0cbd66e9440599045f56b5d4d4f960504417f25ef51acec9d686a37cb1fbc0e59199e989b4b3a19239d79349eff6961ed578f2f9202562e9b8d122634c1a10f7ad3d86f21d01678c5a7481434b32cd2933a324f6726a0aa459cfa3a12b031b454b26e3c51d6267df9678a4a5770a595f1255c9e1b619f3906dd1091671b4ede76b36546e4c69b22363c652b34d49bfb5e1ef62f8f6f922e247fac057726836f6a433b17b66c09f1ff2063088e1ef75f7671552e789890010fe891ae477a6dc059b4e7ac4af59e4a5ccd8b7598f802d6a21250dfb3c460c34ea73f6785d4ae8c9c7eab0e3106f5756611afb75f9a415589da8cab520732df236e2139d25584e50d92260e01a1eb7bc61274cbdc163a8c5c987cb63724f037cde91b7d4fdab6e7832c642382850a7a072c985d11cd8f49cdd0531ffb9c5937"], 0xe7) r8 = openat$cgroup_freezer_state(r5, &(0x7f0000000300), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000340)=0x3) read$watch_queue(r5, &(0x7f0000000240)=""/173, 0xad) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000040003000000400001802c0004001400010002000004ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc4, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4cc44}, 0x4040140) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=@newtaction={0x48, 0x76, 0x1, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 392.986948ms ago: executing program 5 (id=2120): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001e005f0214ffffff396bf5930f000000000000000000080808000d40ff000000", 0x24) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251b0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="ff9aaa5ac3908defba408bf8cf1197efb145ab1475e85df79efe8aafa029fbfb0a9bbed478e7d4c2dee762e0f11dc9243cb335040bf5d8445869ce975e0becf245d8fe594789487bf73c44551ba9bfa03bca836a49e0a2413e648af386f06bca38937eeacadf540a6ff5dcbac4bb433855fee26dfc4548a67e4ec750242ec17638265df96f489fe54e7a2823115f2e8f775303ab6a37dd5dd56a531576857990c17c15170a7e10dd814ec087a4f937de89c3b7a5c76b28dfa810acd846b4fda00e10713c484d"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_set_self_attr(0x64, 0x0, 0xf1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xa, 0x60, 0x8, 0xa}, {0xadbd, 0x4, 0x3, 0xfffffffa}, {0x101, 0x7, 0x60, 0x1}]}, 0x10) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x4e, 0x5, 0x0, 0x0, 0x0, 0xee, 0x80420, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff031, 0x3}, 0x103d0, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setreuid(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f00000006c0)=0xe8) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r7, r7) fchown(r6, r7, 0x0) r8 = socket(0x10, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r9, r9, 0x0) fchown(r8, r9, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000580)=@loop={'/dev/loop', 0x0}, r11, &(0x7f0000000280)={0x7, 0x6, 0x800077, 0x5, 0x6, 0x7, 0x1000, 0xf67, 0xfffffffc}) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {0x1, 0x6}, [{0x2, 0x2}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x7, 0xee01}, {0x2, 0x1, r4}, {0x2, 0x0, r5}, {0x2, 0x1, r7}, {0x2, 0x5, r9}, {0x2, 0x5, r11}], {0x4, 0x1}, [{0x8, 0x7, r12}, {0x8, 0x7, 0xee00}], {}, {0x20, 0x4}}, 0x84, 0x2) 362.154833ms ago: executing program 3 (id=2121): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x6040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 279.506643ms ago: executing program 1 (id=2122): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 153.023369ms ago: executing program 1 (id=2123): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x10000, 0x200}, 0x8007, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000280)=""/32, &(0x7f00000002c0)=0x20) socket$kcm(0x2, 0x5, 0x84) r3 = socket$can_raw(0x1d, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f00000000c0)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001640), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1001}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000390423bd7000fbdbdf2500000000", @ANYRESHEX=r0, @ANYBLOB="81b8000000000000380012800b000100697036746e6c000028000280080008002400000014000300200100000000000000000000000000800500090029000000"], 0x58}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r5, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001680)={&(0x7f00000016c0)="8c661fe3a165787f38e1403f3c66cd382564f4175391eb96bc41f2adb3b91c6824e96cde5fd7528e2c7a062a117f3c0fbd3adcd5eddcb868c895f7272ec3dc7952423d87a6924deb6e5677", &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)="1a72930709f9bf26f7662af8aeedd27e4ba49ba992df85699fff1058810d0f4c0a0b537008a44728186eede85eaab3d2671d7cb4637ba84cfc431527616e84767ceeef10b1f7430b88b62084c77a99439cb0a7167966b4dcb6c1f4e0d3b7ccafbe5a2cee6cd6b6fafee85f86982600b18721972d287a376879ba8a4e35c2c4e934365d0e38b9", &(0x7f0000001580)="4163e0f74ef0ccdec28104137555bb986ccc26000c2299197d81edb8d409288e432d2c0ec1ee1f20120ea505ca282a75951da6f2be3a697bbfd9721e40b1ef35f55590a2fac4b11f25f7986d67819e93a670ae3705ecda099a2675075c79257c3384f63a382fb3da4db802b23a6e8d070057b14b86a9214e582327b5eea3eb2318de1d897a4707db6715c702", 0x8, r4}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000300)={0x0, 0xfffffffffffffe81, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r12 = socket(0x40000000015, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e8c}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r12, 0x114, 0x271d, &(0x7f0000032100)=""/102399, &(0x7f00000000c0)=0x18fff) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x4, 0xfff, 0x500000000000000, r11}) 105.010146ms ago: executing program 4 (id=2124): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51a, &(0x7f0000000600)="$eJzs3c9vG1kdAPDv2EnJZrOku+yBXQkasYdFqhLn12oDt8ANsRKie1kkVEWtNyl14ihxpCan9F9AiAsSKhInLqnEiVuvwIVjkThw4FSpQqVIwKEYzXgmdRK7TUWa2XY+H2k67/lNPfP1y9d+M+PxBFBZU+k/ScRERPwxIiZ71aMLTPVmBwt319IpiW73yt+TbLk7C3fXikWL//dmXhmLiO/Uk/hecnK927t7N1dareZWXm901jcb27t70zfWV1abq82Nhfn5xaXFpY8/mjuzWP/1t71L7/5j+Zc///2vr/z4/qPfpZs1kbf1x3FWpmIqf01G4+2+x0ci4rtnvbKS1PN43up7LBkpcYN4IWn/fSUiPsjyfzLqofOgKrqZoc2PusBrq5aNgZPaTET0yrXazExvDP9ujNda7e3O5c/bOxvXe2PlizFa+/xGqzmb7ytcjNEkrc9l5af1+WP1hYhsDPyz+htZfeZau3X9XN/pgOPePJb//6z38h+oCLv8UF3yH6pL/kN1yX+oLvkP1SX/obrkP1SX/Ifqkv9QXfIfqkv+QyX94JNP0ql7kF//vtFevXFzbfNb87Mz6zvXZq61tzZnVtvt1eyKnfXnP1+r3d6cW4idW41Oc7vT2N7du7re3tnoXM2u67/aHD2HmIDTefvSvT8nEbH/7TeyKXUhb5Or8HrrdpMo+xpkoBz1st+AgNI49AfVZR8fGPATvUeMDWtonf22AOejVvYGAKX58D3n/6CqHP+H6nL8H6rLGB9w/B+qx/F/qK6JIff/eqvv3l2zEfHliLhfH/1Sca8v4NV3eB9uBQUFhcNC2e9MwMv2NOnL3hKgLHcW7q4VU9nbcp4eLve+BJHGfZBPvZaR/NjoWHaOdPxxcuS7EskZfXdiKiLuLf/pYjpF3g9n8LSntn87Ir46qP+T/H7vvTM/44/rJ+J/J58nvafIXq+R7L7xpzd1rP4qxf9eX/xf74v//RdYf9nxA1BN99Lxz+ygz79a9pkeh59/R8c/E2f03bGyP/+K8d/BifFf7XD8Vx8y/rt0ynX8d/Lgs2Ftafz7X/vLZDGl60/n/1dQL+Dh7Yj3B8ZfxDuWxXo8/tqAvhvmwfIvfjqsrT/+dAx83vF3fxXxYQyOv5CWGp31zcb27t509jumq82Nhfn5xaXFpY8/mmtk50gbxZnSk374k99eGbb+L0L/jw+J/3l//9845TomfvTX3wxrK/Z/hvd/7cGF5NOsVFyXdmul09mai7iQfP/k4/PP3pZimeI50vi/+cHg/H8nj7/39z9yIv5uPk9fp8v5tTRp+Un+3pguP51u39pnz8z/Yv+viL/YFzwPafzXn9P/g/I/few/p1zHv+//oTmsrez4AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMq2vbt3c6XVam69xELZMQKDjT8ejU/76klEdPN5LSIuR0Q9Lz+JiNG8Ph0RY+ly+xGzx8oAAAAAAEC5/hcAAP//YMH52g==") r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000000000000000800030000000000100000000000000020", @ANYRES64=r1, @ANYRESHEX=0x0], 0x24, 0x0) r2 = dup3(r1, r0, 0x0) bind$bt_hci(r1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) keyctl$session_to_parent(0x12) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x1, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000001c0)={0x2007}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac14140000000000000000000000000000f100000000000000000200ff010000000000000000000000000001"], 0xec}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000000)={0x20000018}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x80000001, 0x3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 64.863391ms ago: executing program 1 (id=2125): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000100000001c001a8018000a80140007002001000000000000000000000000000014003c"], 0x50}}, 0x0) 14.787607ms ago: executing program 3 (id=2126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=2127): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 12.860496][ T8022] veth3: entered promiscuous mode [ 112.898533][ T29] audit: type=1400 audit(2000000000.000:1664): avc: denied { create } for pid=8023 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.918006][ T29] audit: type=1400 audit(2000000000.000:1665): avc: denied { write } for pid=8023 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.937437][ T29] audit: type=1400 audit(2000000000.000:1666): avc: denied { ioctl } for pid=8023 comm="syz.5.1222" path="socket:[20768]" dev="sockfs" ino=20768 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.236480][ T8067] loop5: detected capacity change from 0 to 2048 [ 113.271907][ T8067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.332706][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.396834][ T8096] loop7: detected capacity change from 0 to 164 [ 113.438741][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.457512][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.470119][ T29] audit: type=1326 audit(2000000000.570:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 113.495791][ T29] audit: type=1326 audit(2000000000.590:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 113.602876][ T8115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.707371][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.768730][ T8141] netlink: 'syz.7.1265': attribute type 10 has an invalid length. [ 113.781541][ T8141] team0: Port device dummy0 added [ 113.859040][ T8134] delete_channel: no stack [ 113.876267][ T8151] EXT4-fs (loop3): filesystem is read-only [ 113.882241][ T8151] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 113.905316][ T8151] EXT4-fs (loop3): filesystem is read-only [ 113.911211][ T8151] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.922798][ T8151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1268: bg 0: block 64: padding at end of block bitmap is not set [ 113.943012][ T8151] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 113.952761][ T8151] EXT4-fs (loop3): 1 orphan inode deleted [ 113.963286][ T8151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.980223][ T8165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8165 comm=syz.4.1274 [ 113.993751][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.019784][ T8169] FAULT_INJECTION: forcing a failure. [ 114.019784][ T8169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.033080][ T8169] CPU: 0 UID: 0 PID: 8169 Comm: syz.7.1277 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.033149][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.033159][ T8169] Call Trace: [ 114.033164][ T8169] [ 114.033170][ T8169] __dump_stack+0x1d/0x30 [ 114.033202][ T8169] dump_stack_lvl+0x95/0xd0 [ 114.033221][ T8169] dump_stack+0x15/0x1b [ 114.033238][ T8169] should_fail_ex+0x263/0x280 [ 114.033316][ T8169] should_fail_alloc_page+0xf2/0x100 [ 114.033334][ T8169] __alloc_frozen_pages_noprof+0x108/0x350 [ 114.033356][ T8169] alloc_pages_mpol+0xb3/0x260 [ 114.033381][ T8169] ? css_rstat_updated+0xbb/0x280 [ 114.033540][ T8169] vma_alloc_folio_noprof+0x1a9/0x300 [ 114.033566][ T8169] handle_mm_fault+0x111f/0x3030 [ 114.033588][ T8169] ? _raw_spin_lock+0x52/0xa0 [ 114.033670][ T8169] ? __pte_offset_map_lock+0x1d9/0x240 [ 114.033693][ T8169] __get_user_pages+0x1023/0x1ea0 [ 114.033721][ T8169] __gup_longterm_locked+0x8d7/0xe30 [ 114.033791][ T8169] ? security_ptrace_access_check+0x61/0x70 [ 114.033815][ T8169] ? __ptrace_may_access+0x2bc/0x340 [ 114.033836][ T8169] ? perf_trace_mmap_lock_acquire_returned+0x230/0x270 [ 114.033854][ T8169] pin_user_pages_remote+0x7e/0xb0 [ 114.033936][ T8169] process_vm_rw+0x49b/0x9c0 [ 114.033965][ T8169] __x64_sys_process_vm_writev+0x78/0x90 [ 114.034024][ T8169] x64_sys_call+0x27ef/0x3000 [ 114.034081][ T8169] do_syscall_64+0xc0/0x2a0 [ 114.034097][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.034113][ T8169] RIP: 0033:0x7fe08a1bacb9 [ 114.034126][ T8169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.034194][ T8169] RSP: 002b:00007fe088c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 114.034210][ T8169] RAX: ffffffffffffffda RBX: 00007fe08a435fa0 RCX: 00007fe08a1bacb9 [ 114.034221][ T8169] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000030 [ 114.034231][ T8169] RBP: 00007fe088c17090 R08: 0000000000000001 R09: 0000000000000000 [ 114.034241][ T8169] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000002 [ 114.034287][ T8169] R13: 00007fe08a436038 R14: 00007fe08a435fa0 R15: 00007ffc3669d2a8 [ 114.034301][ T8169] [ 114.350698][ T8187] netlink: 'syz.4.1282': attribute type 13 has an invalid length. [ 114.504612][ T8201] set_capacity_and_notify: 2 callbacks suppressed [ 114.504667][ T8201] loop3: detected capacity change from 0 to 256 [ 114.596819][ T8212] loop5: detected capacity change from 0 to 2048 [ 114.606856][ T8212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.633088][ T8219] loop3: detected capacity change from 0 to 512 [ 114.650784][ T8219] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.664330][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.675301][ T8221] tipc: Enabling of bearer rejected, already enabled [ 114.694389][ T3319] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 114.966095][ T8246] loop5: detected capacity change from 0 to 256 [ 114.974707][ T8246] vfat: Bad value for 'check' [ 115.012747][ T8247] loop3: detected capacity change from 0 to 512 [ 115.021322][ T8247] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.035734][ T8247] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1303: bg 0: block 104: invalid block bitmap [ 115.053548][ T8247] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 115.062691][ T8247] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1303: invalid indirect mapped block 1 (level 1) [ 115.076176][ T8247] EXT4-fs (loop3): 1 truncate cleaned up [ 115.082564][ T8247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.105180][ T8247] tls_set_device_offload_rx: netdev not found [ 115.152475][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.235063][ T8260] FAULT_INJECTION: forcing a failure. [ 115.235063][ T8260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.248168][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.5.1310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.248238][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.248249][ T8260] Call Trace: [ 115.248254][ T8260] [ 115.248261][ T8260] __dump_stack+0x1d/0x30 [ 115.248295][ T8260] dump_stack_lvl+0x95/0xd0 [ 115.248312][ T8260] dump_stack+0x15/0x1b [ 115.248327][ T8260] should_fail_ex+0x263/0x280 [ 115.248357][ T8260] should_fail+0xb/0x20 [ 115.248376][ T8260] should_fail_usercopy+0x1a/0x20 [ 115.248423][ T8260] _copy_from_user+0x1c/0xb0 [ 115.248554][ T8260] ___sys_sendmsg+0xc1/0x1e0 [ 115.248589][ T8260] __x64_sys_sendmsg+0xd4/0x160 [ 115.248670][ T8260] x64_sys_call+0x17ba/0x3000 [ 115.248692][ T8260] do_syscall_64+0xc0/0x2a0 [ 115.248712][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.248731][ T8260] RIP: 0033:0x7fda9afdacb9 [ 115.248825][ T8260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.248843][ T8260] RSP: 002b:00007fda99a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.248864][ T8260] RAX: ffffffffffffffda RBX: 00007fda9b255fa0 RCX: 00007fda9afdacb9 [ 115.248879][ T8260] RDX: 0000000004000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 115.248923][ T8260] RBP: 00007fda99a37090 R08: 0000000000000000 R09: 0000000000000000 [ 115.248964][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.248974][ T8260] R13: 00007fda9b256038 R14: 00007fda9b255fa0 R15: 00007ffe98854d38 [ 115.248991][ T8260] [ 115.570753][ T8277] __nla_validate_parse: 6 callbacks suppressed [ 115.570769][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 115.585943][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 115.964774][ T8305] syzkaller0: entered promiscuous mode [ 115.970354][ T8305] syzkaller0: entered allmulticast mode [ 116.048355][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 116.411562][ T8313] loop4: detected capacity change from 0 to 512 [ 116.420332][ T8313] ext3: Unknown parameter 'pcr' [ 116.500659][ T8319] tmpfs: Unknown parameter 'ie' [ 116.530488][ T8321] bond1: option arp_all_targets: invalid value (262144) [ 116.538874][ T8321] bond1 (unregistering): Released all slaves [ 116.586108][ T8324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=8324 comm=syz.7.1335 [ 116.689622][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1337'. [ 116.698629][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1337'. [ 116.737509][ T8331] xt_TCPMSS: Only works on TCP SYN packets [ 116.938209][ T8347] loop3: detected capacity change from 0 to 1024 [ 116.955394][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1343'. [ 117.002731][ T8347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.022969][ T8347] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.040224][ T8356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1346'. [ 117.049217][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1346'. [ 117.201611][ T8374] FAULT_INJECTION: forcing a failure. [ 117.201611][ T8374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.214876][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.5.1351 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.214901][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.214947][ T8374] Call Trace: [ 117.215017][ T8374] [ 117.215022][ T8374] __dump_stack+0x1d/0x30 [ 117.215037][ T8374] dump_stack_lvl+0x95/0xd0 [ 117.215111][ T8374] dump_stack+0x15/0x1b [ 117.215121][ T8374] should_fail_ex+0x263/0x280 [ 117.215147][ T8374] should_fail+0xb/0x20 [ 117.215157][ T8374] should_fail_usercopy+0x1a/0x20 [ 117.215170][ T8374] _copy_from_user+0x1c/0xb0 [ 117.215185][ T8374] __sys_bpf+0x183/0x7b0 [ 117.215260][ T8374] __x64_sys_bpf+0x41/0x50 [ 117.215275][ T8374] x64_sys_call+0x28e1/0x3000 [ 117.215288][ T8374] do_syscall_64+0xc0/0x2a0 [ 117.215301][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.215369][ T8374] RIP: 0033:0x7fda9afdacb9 [ 117.215379][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.215389][ T8374] RSP: 002b:00007fda99a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.215400][ T8374] RAX: ffffffffffffffda RBX: 00007fda9b255fa0 RCX: 00007fda9afdacb9 [ 117.215479][ T8374] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 117.215486][ T8374] RBP: 00007fda99a37090 R08: 0000000000000000 R09: 0000000000000000 [ 117.215545][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.215552][ T8374] R13: 00007fda9b256038 R14: 00007fda9b255fa0 R15: 00007ffe98854d38 [ 117.215562][ T8374] [ 117.489443][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 117.505808][ T8388] loop7: detected capacity change from 0 to 1024 [ 117.513282][ T8389] tipc: Enabling of bearer rejected, already enabled [ 117.539328][ T8388] EXT4-fs: Invalid want_extra_isize 0 [ 117.554300][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 117.711222][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.755066][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 117.755081][ T29] audit: type=1326 audit(2000000004.850:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.784746][ T29] audit: type=1326 audit(2000000004.850:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.808149][ T29] audit: type=1326 audit(2000000004.850:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.831628][ T29] audit: type=1326 audit(2000000004.850:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.855128][ T29] audit: type=1326 audit(2000000004.850:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.878610][ T29] audit: type=1326 audit(2000000004.850:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.902025][ T29] audit: type=1326 audit(2000000004.850:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.925488][ T29] audit: type=1326 audit(2000000004.850:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1e9e1f9b97 code=0x7ffc0000 [ 117.948976][ T29] audit: type=1326 audit(2000000004.850:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 117.972479][ T29] audit: type=1326 audit(2000000004.850:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 118.174322][ T8419] loop3: detected capacity change from 0 to 8192 [ 118.305741][ T8425] netlink: 'syz.4.1370': attribute type 6 has an invalid length. [ 118.391861][ T8435] loop3: detected capacity change from 0 to 128 [ 118.448512][ T8435] bpf: Bad value for 'uid' [ 118.455785][ T8425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.481724][ T8435] syz.3.1371: attempt to access beyond end of device [ 118.481724][ T8435] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 118.519756][ T8441] net_ratelimit: 9 callbacks suppressed [ 118.519772][ T8441] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 118.551311][ T8435] syz.3.1371: attempt to access beyond end of device [ 118.551311][ T8435] loop3: rw=0, sector=97, nr_sectors = 32 limit=128 [ 118.567902][ T8425] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.611380][ T8425] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 118.623790][ T8425] EXT4-fs (loop4): This should not happen!! Data will be lost [ 118.623790][ T8425] [ 118.624922][ T8435] syz.3.1371: attempt to access beyond end of device [ 118.624922][ T8435] loop3: rw=0, sector=145, nr_sectors = 3 limit=128 [ 118.633443][ T8425] EXT4-fs (loop4): Total free blocks count 0 [ 118.652643][ T8425] EXT4-fs (loop4): Free/Dirty block details [ 118.658619][ T8425] EXT4-fs (loop4): free_blocks=2415919104 [ 118.664328][ T8425] EXT4-fs (loop4): dirty_blocks=32 [ 118.669471][ T8425] EXT4-fs (loop4): Block reservation details [ 118.675511][ T8425] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 118.858932][ T8459] EXT4-fs: Ignoring removed oldalloc option [ 118.883428][ T8459] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1379: Parent and EA inode have the same ino 15 [ 118.899170][ T8459] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.1379: Parent and EA inode have the same ino 15 [ 118.912310][ T8459] EXT4-fs (loop7): 1 orphan inode deleted [ 118.918587][ T8459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.922080][ T8461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.956243][ T8461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.018584][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.157769][ T8473] tipc: Enabling of bearer rejected, already enabled [ 119.553817][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.588444][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.693040][ T8486] set_capacity_and_notify: 3 callbacks suppressed [ 119.693057][ T8486] loop7: detected capacity change from 0 to 8192 [ 119.855517][ T8497] netlink: 'syz.3.1393': attribute type 6 has an invalid length. [ 119.897410][ T8509] xt_hashlimit: max too large, truncated to 1048576 [ 119.904809][ T8509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.923634][ T8497] loop3: detected capacity change from 0 to 2048 [ 119.967947][ T8497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.017829][ T8520] loop7: detected capacity change from 0 to 2048 [ 120.031043][ T8524] loop5: detected capacity change from 0 to 1024 [ 120.043870][ T8524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.069865][ T8497] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.076282][ T8520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.104640][ T8497] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 120.117059][ T8497] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.117059][ T8497] [ 120.126830][ T8497] EXT4-fs (loop3): Total free blocks count 0 [ 120.131795][ T8524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.132814][ T8497] EXT4-fs (loop3): Free/Dirty block details [ 120.132829][ T8497] EXT4-fs (loop3): free_blocks=2415919104 [ 120.156560][ T8497] EXT4-fs (loop3): dirty_blocks=32 [ 120.161664][ T8497] EXT4-fs (loop3): Block reservation details [ 120.167699][ T8497] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 120.187012][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.273864][ T8539] loop7: detected capacity change from 0 to 8192 [ 120.304344][ T8542] netlink: 'syz.1.1406': attribute type 30 has an invalid length. [ 120.337776][ T42] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.355113][ T42] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.365616][ T42] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.403739][ T42] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.546012][ T8555] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 120.556030][ T8544] loop3: detected capacity change from 0 to 512 [ 120.578310][ T8544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.601176][ T8544] EXT4-fs (loop3): 1 truncate cleaned up [ 120.666382][ T8559] __nla_validate_parse: 4 callbacks suppressed [ 120.666452][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1410'. [ 120.681796][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1410'. [ 120.715924][ T8564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8564 comm=syz.3.1412 [ 120.775446][ T8569] loop5: detected capacity change from 0 to 2048 [ 120.841319][ T8575] loop3: detected capacity change from 0 to 1024 [ 120.848225][ T8575] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.867917][ T8575] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.889228][ T8575] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1416: lblock 3 mapped to illegal pblock 3 (length 3) [ 120.891100][ T8579] netlink: 'syz.5.1417': attribute type 6 has an invalid length. [ 120.905802][ T8575] EXT4-fs (loop3): Remounting filesystem read-only [ 120.925833][ T8579] loop5: detected capacity change from 0 to 2048 [ 120.943160][ T8579] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.958395][ T8579] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 120.970945][ T8579] EXT4-fs (loop5): This should not happen!! Data will be lost [ 120.970945][ T8579] [ 120.980908][ T8579] EXT4-fs (loop5): Total free blocks count 0 [ 120.986924][ T8579] EXT4-fs (loop5): Free/Dirty block details [ 120.992818][ T8579] EXT4-fs (loop5): free_blocks=2415919104 [ 120.998665][ T8579] EXT4-fs (loop5): dirty_blocks=32 [ 121.003828][ T8579] EXT4-fs (loop5): Block reservation details [ 121.009823][ T8579] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 121.038210][ T8584] netlink: 'syz.3.1418': attribute type 6 has an invalid length. [ 121.056710][ T8584] loop3: detected capacity change from 0 to 2048 [ 121.070754][ T8586] FAULT_INJECTION: forcing a failure. [ 121.070754][ T8586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.083958][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz.5.1419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.083984][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.083995][ T8586] Call Trace: [ 121.084003][ T8586] [ 121.084011][ T8586] __dump_stack+0x1d/0x30 [ 121.084032][ T8586] dump_stack_lvl+0x95/0xd0 [ 121.084053][ T8586] dump_stack+0x15/0x1b [ 121.084068][ T8586] should_fail_ex+0x263/0x280 [ 121.084088][ T8586] should_fail+0xb/0x20 [ 121.084141][ T8586] should_fail_usercopy+0x1a/0x20 [ 121.084163][ T8586] _copy_from_user+0x1c/0xb0 [ 121.084388][ T8586] ___sys_sendmsg+0xc1/0x1e0 [ 121.084420][ T8586] __x64_sys_sendmsg+0xd4/0x160 [ 121.084448][ T8586] x64_sys_call+0x17ba/0x3000 [ 121.084540][ T8586] do_syscall_64+0xc0/0x2a0 [ 121.084558][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.084575][ T8586] RIP: 0033:0x7fda9afdacb9 [ 121.084591][ T8586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.084660][ T8586] RSP: 002b:00007fda99a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.084680][ T8586] RAX: ffffffffffffffda RBX: 00007fda9b255fa0 RCX: 00007fda9afdacb9 [ 121.084694][ T8586] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000004 [ 121.084706][ T8586] RBP: 00007fda99a37090 R08: 0000000000000000 R09: 0000000000000000 [ 121.084718][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.084730][ T8586] R13: 00007fda9b256038 R14: 00007fda9b255fa0 R15: 00007ffe98854d38 [ 121.084803][ T8586] [ 121.402630][ T8607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8607 comm=syz.4.1426 [ 121.512133][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 121.543603][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1425'. [ 121.569237][ T8617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.597585][ T8627] FAULT_INJECTION: forcing a failure. [ 121.597585][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 121.610279][ T8627] CPU: 1 UID: 0 PID: 8627 Comm: syz.7.1433 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.610305][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.610317][ T8627] Call Trace: [ 121.610356][ T8627] [ 121.610363][ T8627] __dump_stack+0x1d/0x30 [ 121.610386][ T8627] dump_stack_lvl+0x95/0xd0 [ 121.610404][ T8627] dump_stack+0x15/0x1b [ 121.610491][ T8627] should_fail_ex+0x263/0x280 [ 121.610519][ T8627] should_failslab+0x8c/0xb0 [ 121.610536][ T8627] __kmalloc_cache_noprof+0x64/0x4a0 [ 121.610566][ T8627] ? rtnl_newlink+0x5c/0x1370 [ 121.610586][ T8627] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.610636][ T8627] rtnl_newlink+0x5c/0x1370 [ 121.610664][ T8627] ? strlen+0x19/0x40 [ 121.610679][ T8627] ? __memcg_slab_free_hook+0x135/0x230 [ 121.610759][ T8627] ? __rcu_read_unlock+0x4e/0x70 [ 121.610780][ T8627] ? avc_has_perm_noaudit+0xab/0x130 [ 121.610829][ T8627] ? cred_has_capability+0x224/0x290 [ 121.610876][ T8627] ? selinux_capable+0x31/0x40 [ 121.610972][ T8627] ? security_capable+0x7b/0x90 [ 121.610996][ T8627] ? ns_capable+0x7c/0xb0 [ 121.611065][ T8627] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.611084][ T8627] rtnetlink_rcv_msg+0x64b/0x720 [ 121.611105][ T8627] netlink_rcv_skb+0x123/0x220 [ 121.611129][ T8627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.611183][ T8627] rtnetlink_rcv+0x1c/0x30 [ 121.611266][ T8627] netlink_unicast+0x5c0/0x690 [ 121.611289][ T8627] netlink_sendmsg+0x5c8/0x6f0 [ 121.611361][ T8627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.611375][ T8627] __sock_sendmsg+0x145/0x170 [ 121.611392][ T8627] ____sys_sendmsg+0x31e/0x4a0 [ 121.611415][ T8627] ___sys_sendmsg+0x195/0x1e0 [ 121.611506][ T8627] __x64_sys_sendmsg+0xd4/0x160 [ 121.611533][ T8627] x64_sys_call+0x17ba/0x3000 [ 121.611551][ T8627] do_syscall_64+0xc0/0x2a0 [ 121.611568][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.611593][ T8627] RIP: 0033:0x7fe08a1bacb9 [ 121.611606][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.611620][ T8627] RSP: 002b:00007fe088c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.611636][ T8627] RAX: ffffffffffffffda RBX: 00007fe08a435fa0 RCX: 00007fe08a1bacb9 [ 121.611732][ T8627] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 121.611742][ T8627] RBP: 00007fe088c17090 R08: 0000000000000000 R09: 0000000000000000 [ 121.611752][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.611762][ T8627] R13: 00007fe08a436038 R14: 00007fe08a435fa0 R15: 00007ffc3669d2a8 [ 121.611776][ T8627] [ 121.896300][ T8634] IPVS: length: 40 != 24 [ 121.985047][ T8633] delete_channel: no stack [ 122.347720][ T8647] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 122.375791][ T8647] EXT4-fs (loop7): 1 truncate cleaned up [ 122.442877][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'. [ 122.613522][ T8704] syzkaller0: entered promiscuous mode [ 122.619137][ T8704] syzkaller0: entered allmulticast mode [ 122.765295][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 122.765309][ T29] audit: type=1326 audit(2000000009.870:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.806878][ T29] audit: type=1326 audit(2000000009.900:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.830329][ T29] audit: type=1326 audit(2000000009.900:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.853871][ T29] audit: type=1326 audit(2000000009.900:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.877366][ T29] audit: type=1326 audit(2000000009.900:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.900851][ T29] audit: type=1326 audit(2000000009.900:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.924347][ T29] audit: type=1326 audit(2000000009.900:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.924438][ T29] audit: type=1326 audit(2000000009.900:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.924458][ T29] audit: type=1326 audit(2000000009.900:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 122.924479][ T29] audit: type=1326 audit(2000000009.900:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f06307fb58e code=0x7ffc0000 [ 123.892640][ T8745] program syz.3.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.235437][ T8763] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 124.260901][ T8763] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 124.269976][ T8743] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.328694][ T8743] EXT4-fs (loop4): 1 truncate cleaned up [ 124.353973][ T8779] EXT4-fs: Ignoring removed bh option [ 124.379164][ T8779] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.435277][ T8785] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 124.464222][ T8785] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 124.561324][ T1681] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.578397][ T4842] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 124.583611][ T4842] loop5: partition table partially beyond EOD, truncated [ 124.597782][ T4842] loop5: p1 start 4278190080 is beyond EOD, truncated [ 124.605144][ T1681] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 124.617472][ T1681] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.617472][ T1681] [ 124.628008][ T4842] loop5: p3 start 4284289 is beyond EOD, truncated [ 124.640621][ T4842] loop5: p5 start 4278190080 is beyond EOD, truncated [ 124.730917][ T8795] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 124.736170][ T8795] loop5: partition table partially beyond EOD, truncated [ 124.768223][ T8795] loop5: p1 start 4278190080 is beyond EOD, truncated [ 124.841143][ T8810] set_capacity_and_notify: 12 callbacks suppressed [ 124.841197][ T8810] loop3: detected capacity change from 0 to 1024 [ 124.880112][ T8795] loop5: p3 start 4284289 is beyond EOD, truncated [ 124.905070][ T8795] loop5: p5 start 4278190080 is beyond EOD, truncated [ 124.918396][ T8810] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.924913][ T3008] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 124.930126][ T3008] loop5: partition table partially beyond EOD, truncated [ 124.937649][ T3008] loop5: p1 start 4278190080 is beyond EOD, truncated [ 124.945498][ T3008] loop5: p3 start 4284289 is beyond EOD, truncated [ 124.961901][ T3008] loop5: p5 start 4278190080 is beyond EOD, truncated [ 125.093067][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 125.103690][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 125.103913][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 125.203848][ T8826] loop5: detected capacity change from 0 to 512 [ 125.268350][ T8826] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 125.354076][ T8833] 9p: Bad value for 'rfdno' [ 125.363982][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'. [ 125.373071][ T8836] loop5: detected capacity change from 0 to 512 [ 125.401146][ T8836] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 125.418496][ T8836] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 125.565999][ T8842] loop3: detected capacity change from 0 to 8192 [ 125.586012][ T8851] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1488'. [ 125.636652][ T8854] tipc: Enabling of bearer rejected, already enabled [ 125.755316][ T8858] tmpfs: Bad value for 'huge' [ 125.870202][ T8868] xt_CT: No such helper "snmp" [ 125.879552][ T8868] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1492'. [ 125.890555][ T8873] loop4: detected capacity change from 0 to 1024 [ 125.898070][ T8873] EXT4-fs: Ignoring removed nobh option [ 125.904280][ T8873] EXT4-fs (loop4): unsupported inode size: 16384 [ 125.910664][ T8873] EXT4-fs (loop4): blocksize: 1024 [ 126.047724][ T8885] loop4: detected capacity change from 0 to 1024 [ 126.087718][ T8885] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1500: bad orphan inode 134217728 [ 126.596662][ T8907] loop5: detected capacity change from 0 to 512 [ 126.614545][ T8907] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.1509: corrupted xattr block 95: invalid header [ 126.667049][ T8907] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1509: bg 0: block 7: invalid block bitmap [ 126.715043][ T8907] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 126.737413][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 126.747910][ T8913] loop7: detected capacity change from 0 to 736 [ 126.754524][ T8907] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1509: corrupted xattr block 95: invalid header [ 126.782996][ T8914] loop3: detected capacity change from 0 to 1024 [ 126.795155][ T8914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.816346][ T8907] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 126.836734][ T8907] EXT4-fs (loop5): 1 orphan inode deleted [ 127.056853][ T8932] loop7: detected capacity change from 0 to 512 [ 127.084559][ T8932] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 127.582905][ T8950] netlink: 'syz.7.1524': attribute type 4 has an invalid length. [ 127.652237][ T8950] netlink: 'syz.7.1524': attribute type 4 has an invalid length. [ 127.684308][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1524'. [ 127.786912][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.794046][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.864811][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 127.871053][ T29] audit: type=1326 audit(2000000014.960:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 127.916047][ T29] audit: type=1326 audit(2000000014.960:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 127.939508][ T29] audit: type=1326 audit(2000000014.970:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 127.963024][ T29] audit: type=1326 audit(2000000014.990:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8924 comm="syz.4.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 127.991606][ T29] audit: type=1326 audit(2000000015.090:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 128.015126][ T29] audit: type=1326 audit(2000000015.090:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 128.038407][ T29] audit: type=1326 audit(2000000015.090:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 128.061931][ T29] audit: type=1326 audit(2000000015.090:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm="syz.1.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 128.094035][ T8948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.105687][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.116616][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.138934][ T8968] netlink: 'syz.5.1530': attribute type 6 has an invalid length. [ 128.157721][ T8948] EXT4-fs (loop3): 1 truncate cleaned up [ 128.170010][ T29] audit: type=1326 audit(2000000015.270:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.7.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 128.216121][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.217770][ T29] audit: type=1326 audit(2000000015.290:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.7.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 128.249781][ T3319] EXT4-fs unmount: 37 callbacks suppressed [ 128.249796][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.275762][ T52] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.285031][ T52] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.295684][ T8971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.308791][ T52] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.364669][ T8980] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.1533'. [ 128.376518][ T8973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.445226][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.628727][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1542'. [ 128.672737][ T9010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.687973][ T9010] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1543: invalid indirect mapped block 4294967295 (level 1) [ 128.749844][ T9010] EXT4-fs (loop5): Remounting filesystem read-only [ 128.756658][ T9010] EXT4-fs (loop5): 2 truncates cleaned up [ 128.763053][ T9010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.811293][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.967103][ T9026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.996700][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.015357][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.101786][ T9036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.121031][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1553'. [ 129.275488][ T52] tipc: Subscription rejected, illegal request [ 129.276050][ T9044] vhci_hcd vhci_hcd.1: default hub control req: 5f00 v0000 i0000 l0 [ 129.508553][ T9056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.545272][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.555576][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.686640][ T9068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.778263][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1560'. [ 130.463024][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.517885][ T9090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9090 comm=syz.5.1567 [ 130.642841][ T9096] set_capacity_and_notify: 8 callbacks suppressed [ 130.642856][ T9096] loop4: detected capacity change from 0 to 2048 [ 130.679751][ T9096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.780967][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.827965][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1570'. [ 130.837263][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1570'. [ 130.846225][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1570'. [ 131.478698][ T9113] tipc: Started in network mode [ 131.483612][ T9113] tipc: Node identity ac14140f, cluster identity 4711 [ 131.552212][ T9113] tipc: New replicast peer: 255.255.255.255 [ 131.558351][ T9113] tipc: Enabled bearer , priority 10 [ 132.391744][ T9137] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1580'. [ 132.401018][ T9137] netlink: zone id is out of range [ 132.406233][ T9137] netlink: zone id is out of range [ 132.411615][ T9137] netlink: zone id is out of range [ 132.416753][ T9137] netlink: zone id is out of range [ 132.421920][ T9137] netlink: zone id is out of range [ 132.427034][ T9137] netlink: zone id is out of range [ 132.432131][ T9137] netlink: zone id is out of range [ 132.437272][ T9137] netlink: zone id is out of range [ 132.442380][ T9137] netlink: zone id is out of range [ 132.447492][ T9137] netlink: zone id is out of range [ 132.684944][ T3532] tipc: Node number set to 2886997007 [ 133.698560][ T9172] loop5: detected capacity change from 0 to 2048 [ 133.858032][ T9172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.870838][ T9175] tipc: Enabling of bearer rejected, already enabled [ 134.059032][ T9186] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1594'. [ 134.537744][ T9191] loop3: detected capacity change from 0 to 512 [ 134.567490][ T9191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.609720][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.648047][ T9191] EXT4-fs (loop3): 1 truncate cleaned up [ 134.700295][ T9191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.703764][ T9197] loop5: detected capacity change from 0 to 2048 [ 134.760114][ T9200] loop4: detected capacity change from 0 to 8192 [ 134.778329][ T9197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.811155][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.826201][ T9200] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 134.834733][ T9200] FAT-fs (loop4): Filesystem has been set read-only [ 135.132294][ T9216] netlink: 'syz.3.1604': attribute type 3 has an invalid length. [ 135.140091][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1604'. [ 135.310965][ T9228] loop3: detected capacity change from 0 to 2048 [ 135.346586][ T9228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.376734][ T9233] tipc: Enabling of bearer rejected, already enabled [ 135.548625][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.990095][ T9251] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1609'. [ 136.484193][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.576035][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.641311][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.694150][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.724394][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.754263][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.780196][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.789962][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.805373][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.815111][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.823601][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.832395][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.855953][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.937751][ T9278] loop3: detected capacity change from 0 to 512 [ 136.958977][ T9278] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 136.978331][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 137.041963][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1626'. [ 137.964929][ T9301] syz.3.1632(9301): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 138.168999][ T9308] loop3: detected capacity change from 0 to 512 [ 138.206163][ T9308] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 138.475040][ C1] net_ratelimit: 29 callbacks suppressed [ 138.475055][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 138.495445][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 138.616490][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1646'. [ 138.731946][ T9335] loop5: detected capacity change from 0 to 1024 [ 138.761962][ T9339] loop7: detected capacity change from 0 to 512 [ 138.802171][ T9339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.818268][ T9335] EXT4-fs: Ignoring removed bh option [ 138.844300][ T9335] EXT4-fs: inline encryption not supported [ 138.860380][ T9335] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.896263][ T9335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 138.909253][ T9335] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1647: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.923726][ T9335] __quota_error: 19 callbacks suppressed [ 138.923743][ T9335] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 138.985129][ T9335] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.1647: Invalid inode table block 1 in block_group 0 [ 138.999037][ T9356] netlink: 'syz.7.1648': attribute type 4 has an invalid length. [ 139.007850][ T9356] netlink: 'syz.7.1648': attribute type 4 has an invalid length. [ 139.095115][ T9335] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 139.114540][ T9335] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1647: mark_inode_dirty error [ 139.140738][ T9335] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 139.149597][ T9335] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1647: Failed to acquire dquot type 0 [ 139.172033][ T9335] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 139.286989][ T9335] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1647: mark_inode_dirty error [ 139.396888][ T9335] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 139.419000][ T9335] EXT4-fs (loop5): 1 orphan inode deleted [ 139.455369][ T9335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.584774][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'. [ 139.593892][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'. [ 139.609129][ T12] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.646665][ T12] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 139.655202][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 139.693687][ T9335] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 139.693797][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.739780][ T9335] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 139.757744][ T9366] loop7: detected capacity change from 0 to 512 [ 139.764078][ T9335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 139.780927][ T9335] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 139.794996][ T9366] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.804041][ T9366] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 139.833258][ T9366] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 139.843135][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.877790][ T9366] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 139.899119][ T5873] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.918361][ T9366] System zones: 0-2, 18-18, 34-35 [ 139.924144][ T9366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.936638][ T5873] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 139.936755][ T5873] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 139.971943][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.089353][ T9380] loop7: detected capacity change from 0 to 512 [ 140.167938][ T9380] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 140.248193][ T9382] loop3: detected capacity change from 0 to 512 [ 140.265266][ T29] audit: type=1326 audit(2000000027.370:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.307813][ T9382] EXT4-fs (loop3): filesystem is read-only [ 140.316204][ T9382] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 140.344959][ T29] audit: type=1326 audit(2000000027.390:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.368471][ T29] audit: type=1326 audit(2000000027.400:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.391891][ T29] audit: type=1326 audit(2000000027.400:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.415436][ T29] audit: type=1326 audit(2000000027.400:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.438907][ T29] audit: type=1326 audit(2000000027.400:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.462318][ T29] audit: type=1326 audit(2000000027.400:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9383 comm="syz.7.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x7ffc0000 [ 140.487265][ T9382] EXT4-fs (loop3): filesystem is read-only [ 140.493101][ T9382] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.500691][ T9382] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1665: bg 0: block 64: padding at end of block bitmap is not set [ 140.515390][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1666'. [ 140.588713][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1669'. [ 140.595467][ T9393] netlink: 'syz.1.1668': attribute type 4 has an invalid length. [ 140.675289][ T9382] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 140.714987][ T9382] EXT4-fs (loop3): 1 orphan inode deleted [ 140.721337][ T9382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.801241][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.899184][ T9409] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.367812][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 141.609198][ T9427] loop4: detected capacity change from 0 to 512 [ 141.635977][ T9427] EXT4-fs (loop4): filesystem is read-only [ 141.642026][ T9427] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.680926][ T9427] EXT4-fs (loop4): filesystem is read-only [ 141.687466][ T9427] EXT4-fs (loop4): orphan cleanup on readonly fs [ 141.694530][ T9427] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1682: bg 0: block 64: padding at end of block bitmap is not set [ 141.747984][ T9427] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 141.795173][ T9427] EXT4-fs (loop4): 1 orphan inode deleted [ 141.829996][ T9427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.088180][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.147708][ T9439] loop3: detected capacity change from 0 to 8192 [ 142.278040][ T9443] netlink: 'syz.1.1688': attribute type 6 has an invalid length. [ 142.371953][ T9449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9449 comm=syz.4.1691 [ 142.432727][ T9453] IPVS: Error connecting to the multicast addr [ 142.454940][ T9453] netlink: 'syz.1.1693': attribute type 4 has an invalid length. [ 142.462695][ T9453] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1693'. [ 142.481484][ T9453] .`: renamed from bond0 [ 142.698653][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1701'. [ 142.974539][ T9476] netlink: 'syz.1.1703': attribute type 6 has an invalid length. [ 143.462142][ T9481] loop4: detected capacity change from 0 to 1024 [ 143.576104][ T9481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.709365][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.953800][ T9494] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1706'. [ 143.963145][ T9494] netlink: zone id is out of range [ 143.968270][ T9494] netlink: zone id is out of range [ 143.973516][ T9494] netlink: zone id is out of range [ 143.978912][ T9494] netlink: zone id is out of range [ 143.984082][ T9494] netlink: zone id is out of range [ 143.989193][ T9494] netlink: zone id is out of range [ 143.994289][ T9494] netlink: zone id is out of range [ 143.999505][ T9494] netlink: zone id is out of range [ 144.004622][ T9494] netlink: zone id is out of range [ 144.009735][ T9494] netlink: zone id is out of range [ 144.208438][ T9502] loop7: detected capacity change from 0 to 1024 [ 144.238139][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 144.238155][ T29] audit: type=1326 audit(2000000031.340:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.268548][ T29] audit: type=1326 audit(2000000031.340:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.271599][ T9502] EXT4-fs: Ignoring removed bh option [ 144.292398][ T29] audit: type=1326 audit(2000000031.340:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.297567][ T9502] EXT4-fs: inline encryption not supported [ 144.297909][ T9502] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.338295][ T29] audit: type=1326 audit(2000000031.340:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.362353][ T29] audit: type=1326 audit(2000000031.340:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.386470][ T29] audit: type=1326 audit(2000000031.340:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0630839b97 code=0x7ffc0000 [ 144.409856][ T29] audit: type=1326 audit(2000000031.340:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.433891][ T29] audit: type=1326 audit(2000000031.340:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.458034][ T29] audit: type=1326 audit(2000000031.340:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.481482][ T29] audit: type=1326 audit(2000000031.340:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9503 comm="syz.1.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f063083acb9 code=0x7ffc0000 [ 144.535597][ T9502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 144.547458][ T9502] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.1710: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.573925][ T9510] loop4: detected capacity change from 0 to 2048 [ 144.585060][ T9502] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.1710: Invalid inode table block 1 in block_group 0 [ 144.607765][ T9502] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 144.617540][ T9502] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.1710: mark_inode_dirty error [ 144.618572][ T9510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.629845][ T9502] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1710: Failed to acquire dquot type 0 [ 144.758740][ T9502] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 144.776449][ T9502] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.1710: mark_inode_dirty error [ 144.840213][ T9502] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 144.892876][ T9502] EXT4-fs (loop7): 1 orphan inode deleted [ 144.904980][ T52] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.919830][ T9502] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.985830][ T52] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 145.065154][ T9525] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1717'. [ 145.091953][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.133867][ T7752] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.399089][ T7752] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 145.429041][ T7752] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 145.645340][ T9530] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1719'. [ 145.859485][ T9532] netlink: 'syz.3.1720': attribute type 6 has an invalid length. [ 145.931931][ T9532] loop3: detected capacity change from 0 to 2048 [ 145.981323][ T9532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.220852][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.364720][ T9548] xt_socket: unknown flags 0x50 [ 146.585313][ T9553] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1724'. [ 146.639826][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.862099][ T9561] loop4: detected capacity change from 0 to 512 [ 146.877004][ T9561] EXT4-fs (loop4): filesystem is read-only [ 146.905114][ T9561] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 146.935855][ T9561] EXT4-fs (loop4): filesystem is read-only [ 146.941788][ T9561] EXT4-fs (loop4): orphan cleanup on readonly fs [ 146.948583][ T9561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1726: bg 0: block 64: padding at end of block bitmap is not set [ 146.963177][ T9561] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 146.972631][ T9561] EXT4-fs (loop4): 1 orphan inode deleted [ 146.979018][ T9561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.034624][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.197651][ T9575] netlink: 'syz.1.1732': attribute type 6 has an invalid length. [ 147.227447][ T9576] tipc: Enabling of bearer rejected, already enabled [ 147.536636][ T9589] loop3: detected capacity change from 0 to 2048 [ 147.579717][ T9589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.989621][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.052100][ T9616] netlink: 'syz.4.1746': attribute type 6 has an invalid length. [ 148.061251][ T9608] veth0_to_team: entered promiscuous mode [ 148.080399][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 148.085427][ T9616] loop4: detected capacity change from 0 to 2048 [ 148.131975][ T9616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.132456][ T9608] syz_tun: entered allmulticast mode [ 148.204757][ T9627] tipc: Enabling of bearer rejected, already enabled [ 148.266289][ T9606] syz_tun: left allmulticast mode [ 148.287381][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.607829][ T9644] loop4: detected capacity change from 0 to 512 [ 148.635278][ T9644] EXT4-fs (loop4): filesystem is read-only [ 148.651584][ T9644] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 148.675389][ T9644] EXT4-fs (loop4): filesystem is read-only [ 148.681224][ T9644] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.688750][ T9644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1754: bg 0: block 64: padding at end of block bitmap is not set [ 148.703513][ T9644] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 148.712953][ T9644] EXT4-fs (loop4): 1 orphan inode deleted [ 148.720700][ T9644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.764628][ T9654] SELinux: failed to load policy [ 148.764771][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.792135][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1759'. [ 148.988288][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1760'. [ 149.006592][ T9668] loop3: detected capacity change from 0 to 1024 [ 149.031552][ T9668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.058117][ T9668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.502099][ T9684] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1765'. [ 149.529534][ T9688] loop5: detected capacity change from 0 to 164 [ 149.537282][ T9688] Unable to read rock-ridge attributes [ 149.592500][ T9693] loop5: detected capacity change from 0 to 512 [ 149.602097][ T9693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.634568][ T9693] EXT4-fs (loop5): 1 truncate cleaned up [ 149.653417][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.715362][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.858983][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.913908][ T9705] tipc: Enabling of bearer rejected, already enabled [ 149.931267][ T9707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9707 comm=syz.5.1774 [ 150.243498][ T9712] loop5: detected capacity change from 0 to 8192 [ 150.336693][ T9712] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 150.345332][ T9712] FAT-fs (loop5): Filesystem has been set read-only [ 151.038151][ T9738] loop5: detected capacity change from 0 to 512 [ 151.065471][ T9738] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.103185][ T9743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9743 comm=syz.4.1786 [ 151.118405][ T9745] loop7: detected capacity change from 0 to 512 [ 151.135777][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 151.155349][ T9745] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 151.173180][ T9746] loop3: detected capacity change from 0 to 1024 [ 151.180405][ T9746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.187334][ T9738] EXT4-fs (loop5): 1 truncate cleaned up [ 151.207892][ T9738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.231880][ T9745] EXT4-fs (loop7): 1 truncate cleaned up [ 151.242343][ T9745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.268128][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.268802][ T9746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.316111][ T9754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1789'. [ 151.343733][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.450564][ T9766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.484810][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 151.490964][ T29] audit: type=1400 audit(2000000038.580:2964): avc: denied { append } for pid=9765 comm="syz.5.1793" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.525932][ T9771] tipc: Enabling of bearer rejected, already enabled [ 151.542766][ T9765] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.557932][ T9765] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 151.570921][ T9765] EXT4-fs (loop5): This should not happen!! Data will be lost [ 151.570921][ T9765] [ 151.580578][ T9765] EXT4-fs (loop5): Total free blocks count 0 [ 151.586665][ T9765] EXT4-fs (loop5): Free/Dirty block details [ 151.592579][ T9765] EXT4-fs (loop5): free_blocks=2415919104 [ 151.599059][ T9765] EXT4-fs (loop5): dirty_blocks=32 [ 151.604222][ T9765] EXT4-fs (loop5): Block reservation details [ 151.610206][ T9765] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 151.767250][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.837950][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.080566][ T9783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9783 comm=syz.1.1799 [ 152.149384][ T9787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.239117][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1803'. [ 152.283191][ T9795] netlink: 'syz.1.1804': attribute type 4 has an invalid length. [ 152.680137][ T9802] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1805'. [ 152.689525][ T9802] net_ratelimit: 29 callbacks suppressed [ 152.689538][ T9802] netlink: zone id is out of range [ 152.700378][ T9802] netlink: zone id is out of range [ 152.705734][ T9802] netlink: zone id is out of range [ 152.710892][ T9802] netlink: zone id is out of range [ 152.716087][ T9802] netlink: zone id is out of range [ 152.721181][ T9802] netlink: zone id is out of range [ 152.726303][ T9802] netlink: zone id is out of range [ 152.731403][ T9802] netlink: zone id is out of range [ 152.736507][ T9802] netlink: zone id is out of range [ 152.741594][ T9802] netlink: zone id is out of range [ 152.996316][ T9821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9821 comm=syz.1.1810 [ 153.247225][ T9835] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1816'. [ 153.274915][ T9836] tipc: Enabling of bearer rejected, already enabled [ 153.401192][ T9819] set_capacity_and_notify: 1 callbacks suppressed [ 153.401275][ T9819] loop3: detected capacity change from 0 to 512 [ 153.436623][ T9819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.473273][ T9819] EXT4-fs (loop3): 1 truncate cleaned up [ 153.485877][ T9819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.695964][ T9847] loop3: detected capacity change from 0 to 512 [ 153.715157][ T9847] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 153.738205][ T9847] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 153.824624][ T9854] loop7: detected capacity change from 0 to 512 [ 153.852066][ T9854] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.874928][ T9854] EXT4-fs (loop7): 1 truncate cleaned up [ 153.909763][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.921721][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.931815][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.941293][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.267560][ T9872] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1827'. [ 154.481212][ T9878] loop3: detected capacity change from 0 to 512 [ 154.531343][ T9878] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 154.541288][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 154.564245][ T9878] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 154.638238][ T9896] loop4: detected capacity change from 0 to 512 [ 154.651728][ T9900] loop5: detected capacity change from 0 to 512 [ 154.664462][ T9896] EXT4-fs (loop4): filesystem is read-only [ 154.673637][ T9896] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 154.701440][ T9900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.720080][ T9896] EXT4-fs (loop4): filesystem is read-only [ 154.726035][ T9896] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.734462][ T9896] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1829: bg 0: block 64: padding at end of block bitmap is not set [ 154.738733][ T9900] EXT4-fs (loop5): 1 truncate cleaned up [ 154.767236][ T9896] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 154.856668][ T9896] EXT4-fs (loop4): 1 orphan inode deleted [ 155.019429][ T9937] tipc: Enabling of bearer rejected, already enabled [ 155.103733][ T9941] loop4: detected capacity change from 0 to 1024 [ 155.110428][ T9941] EXT4-fs: Ignoring removed orlov option [ 155.122969][ T9944] loop7: detected capacity change from 0 to 512 [ 155.141944][ T9944] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 155.215949][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 155.232394][ T29] audit: type=1400 audit(2000000042.330:2965): avc: denied { setattr } for pid=9940 comm="syz.4.1846" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.420351][ T29] audit: type=1400 audit(2000000042.520:2966): avc: denied { getopt } for pid=9959 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.485123][ T29] audit: type=1400 audit(2000000042.520:2967): avc: denied { create } for pid=9959 comm="syz.1.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.505384][ T29] audit: type=1400 audit(2000000042.520:2968): avc: denied { ioctl } for pid=9959 comm="syz.1.1851" path="socket:[27390]" dev="sockfs" ino=27390 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.543492][ T9962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9962 comm=syz.4.1852 [ 155.580252][ T29] audit: type=1326 audit(2000000042.680:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.7.1854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08a1bacb9 code=0x0 [ 155.653854][ T9973] loop4: detected capacity change from 0 to 512 [ 155.673731][ T9973] EXT4-fs (loop4): filesystem is read-only [ 155.692415][ T9973] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.722775][ T9973] EXT4-fs (loop4): filesystem is read-only [ 155.728721][ T9973] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.760965][ T9973] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1855: bg 0: block 64: padding at end of block bitmap is not set [ 155.785339][ T9973] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 155.794425][ T9973] EXT4-fs (loop4): 1 orphan inode deleted [ 155.875267][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1857'. [ 156.006239][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 156.015264][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1860'. [ 156.024249][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 156.086220][ T9995] loop5: detected capacity change from 0 to 8192 [ 156.095698][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 156.104614][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1860'. [ 156.113610][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 156.457655][T10008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10008 comm=syz.7.1867 [ 156.574558][T10011] FAT-fs (loop5): bogus logical sector size 0 [ 156.580819][T10011] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 156.590871][T10011] FAT-fs (loop5): Can't find a valid FAT filesystem [ 156.669444][T10011] EXT4-fs: dax option not supported [ 156.833559][T10030] ext4: Unknown parameter 'dont_appraise' [ 156.972057][ T29] audit: type=1326 audit(2000000044.070:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10041 comm="syz.4.1877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x0 [ 157.913080][T10070] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.930808][T10080] wireguard1: entered promiscuous mode [ 157.936365][T10080] wireguard1: entered allmulticast mode [ 158.154869][ T29] audit: type=1400 audit(2000000045.250:2971): avc: denied { setattr } for pid=10069 comm="syz.4.1884" path="/340/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.289438][ T3328] EXT4-fs unmount: 15 callbacks suppressed [ 158.289454][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.629403][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.689303][ T29] audit: type=1400 audit(2000000045.790:2972): avc: denied { append } for pid=10099 comm="syz.7.1892" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.709687][T10101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.810634][T10101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.889409][T10105] set_capacity_and_notify: 6 callbacks suppressed [ 158.889426][T10105] loop7: detected capacity change from 0 to 512 [ 158.917656][T10105] EXT4-fs (loop7): filesystem is read-only [ 158.965606][T10105] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 159.080753][T10105] EXT4-fs (loop7): filesystem is read-only [ 159.086686][T10105] EXT4-fs (loop7): orphan cleanup on readonly fs [ 159.110299][T10105] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1897: bg 0: block 64: padding at end of block bitmap is not set [ 159.125084][T10105] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 159.135719][T10105] EXT4-fs (loop7): 1 orphan inode deleted [ 159.142023][T10105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.277136][ T29] audit: type=1326 audit(2000000046.380:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.5.1894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda9afdacb9 code=0x0 [ 159.308744][T10120] __nla_validate_parse: 6 callbacks suppressed [ 159.308830][T10120] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1899'. [ 159.324411][T10120] net_ratelimit: 16 callbacks suppressed [ 159.324425][T10120] netlink: zone id is out of range [ 159.335219][T10120] netlink: zone id is out of range [ 159.340677][T10120] netlink: zone id is out of range [ 159.345802][T10120] netlink: zone id is out of range [ 159.350892][T10120] netlink: zone id is out of range [ 159.355999][T10120] netlink: zone id is out of range [ 159.361099][T10120] netlink: zone id is out of range [ 159.366238][T10120] netlink: zone id is out of range [ 159.371328][T10120] netlink: zone id is out of range [ 159.376435][T10120] netlink: zone id is out of range [ 159.427464][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.545810][T10122] loop4: detected capacity change from 0 to 2048 [ 159.560188][T10122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.889241][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1905'. [ 159.909166][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'. [ 159.933341][T10145] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 160.023200][T10154] loop3: detected capacity change from 0 to 512 [ 160.036711][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.057267][T10154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.080617][T10154] ext4 filesystem being mounted at /407/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.154492][T10162] loop4: detected capacity change from 0 to 512 [ 160.181093][ T29] audit: type=1400 audit(2000000047.280:2974): avc: denied { rename } for pid=10153 comm="syz.3.1909" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.240285][T10162] EXT4-fs (loop4): filesystem is read-only [ 160.248660][T10162] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 160.261206][T10162] EXT4-fs (loop4): filesystem is read-only [ 160.267136][T10162] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.300245][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.360777][T10162] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1911: bg 0: block 64: padding at end of block bitmap is not set [ 160.376549][T10162] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 160.397075][T10162] EXT4-fs (loop4): 1 orphan inode deleted [ 160.416171][T10162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.496737][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.577172][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 160.664029][T10176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10176 comm=syz.3.1916 [ 160.676844][T10176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=10176 comm=syz.3.1916 [ 160.761578][ T29] audit: type=1400 audit(2000000047.850:2975): avc: denied { accept } for pid=10180 comm="syz.1.1918" path="socket:[28853]" dev="sockfs" ino=28853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.453157][T10194] syzkaller0: entered promiscuous mode [ 161.458717][T10194] syzkaller0: entered allmulticast mode [ 161.531651][ T29] audit: type=1326 audit(2000000048.630:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.1.1928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f063083acb9 code=0x0 [ 161.588556][ T29] audit: type=1400 audit(2000000048.670:2977): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.608666][ T29] audit: type=1326 audit(2000000048.670:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 161.632237][ T29] audit: type=1326 audit(2000000048.670:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e9e1facb9 code=0x7ffc0000 [ 161.818684][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1929'. [ 161.850339][T10222] loop5: detected capacity change from 0 to 1024 [ 161.857373][T10222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.934408][T10222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.970247][T10231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1936'. [ 162.052417][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 162.052483][ T29] audit: type=1326 audit(2000000049.140:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.082124][ T29] audit: type=1326 audit(2000000049.140:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.105685][ T29] audit: type=1326 audit(2000000049.140:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.129372][ T29] audit: type=1326 audit(2000000049.140:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.152953][ T29] audit: type=1326 audit(2000000049.140:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.176460][ T29] audit: type=1326 audit(2000000049.140:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.199880][ T29] audit: type=1326 audit(2000000049.140:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.223404][ T29] audit: type=1326 audit(2000000049.140:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.246985][ T29] audit: type=1326 audit(2000000049.140:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a9b8acb9 code=0x7ffc0000 [ 162.275480][ T29] audit: type=1400 audit(2000000049.380:3012): avc: denied { create } for pid=10236 comm="syz.3.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.337549][T10243] loop3: detected capacity change from 0 to 512 [ 162.351980][T10243] ------------[ cut here ]------------ [ 162.357508][T10243] EA inode 11 i_nlink=2 [ 162.357529][T10243] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.1942/10243 [ 162.373185][T10243] Modules linked in: [ 162.377206][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.3.1942 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.387044][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.397896][T10243] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 162.404505][T10243] Code: b4 ce 9b ff 4c 8d 2d 1d a7 3f 05 49 8d 7e 40 e8 64 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 98 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f b8 c5 03 66 66 66 66 66 66 2e [ 162.424312][T10243] RSP: 0000:ffffc90002cab778 EFLAGS: 00010246 [ 162.431082][T10243] RAX: ffff888103b01b10 RBX: ffff88811b94c1a8 RCX: ffffffff81bc6a88 [ 162.439137][T10243] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc1190 [ 162.447160][T10243] RBP: 000000000000000b R08: 000188811b94c15b R09: 0000000000000000 [ 162.455830][T10243] R10: 0001c90002ceb58a R11: 0001c90002cab6a8 R12: ffff88811b94c158 [ 162.463804][T10243] R13: ffffffff86fc1190 R14: ffff88811b94c110 R15: 0000000000000001 [ 162.471798][T10243] FS: 00007fd2a85e76c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 162.480900][T10243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.488290][T10243] CR2: 00007f49c24ba000 CR3: 0000000127d76000 CR4: 00000000003506f0 [ 162.496411][T10243] DR0: 0000000000000000 DR1: 0000200000000000 DR2: 0000000000000000 [ 162.504389][T10243] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 162.512761][T10243] Call Trace: [ 162.516611][T10243] [ 162.519531][T10243] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 162.525609][T10243] ? errseq_check+0x2c/0x50 [ 162.528086][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1944'. [ 162.530122][T10243] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 162.543202][T10248] loop4: detected capacity change from 0 to 512 [ 162.544553][T10243] ? ext4_truncate+0x92b/0xad0 [ 162.556223][T10243] ext4_evict_inode+0xa1f/0xd40 [ 162.561067][T10243] ? __pfx_ext4_evict_inode+0x10/0x10 [ 162.566557][T10243] evict+0x2af/0x510 [ 162.567134][T10248] EXT4-fs: Mount option(s) incompatible with ext2 [ 162.570475][T10243] ? __dquot_initialize+0x146/0x7c0 [ 162.570512][T10243] iput+0x4b9/0x650 [ 162.570530][T10243] ext4_process_orphan+0x1a9/0x1c0 [ 162.570551][T10243] ext4_orphan_cleanup+0x6a8/0xa00 [ 162.596874][T10243] ext4_fill_super+0x3476/0x3800 [ 162.601825][T10243] ? set_blocksize+0x1a3/0x310 [ 162.607285][T10243] ? setup_bdev_super+0x30e/0x370 [ 162.612342][T10243] ? __pfx_ext4_fill_super+0x10/0x10 [ 162.617696][T10243] get_tree_bdev_flags+0x291/0x300 [ 162.622813][T10243] ? __pfx_ext4_fill_super+0x10/0x10 [ 162.628129][T10243] get_tree_bdev+0x1f/0x30 [ 162.632548][T10243] ext4_get_tree+0x1c/0x30 [ 162.637650][T10243] vfs_get_tree+0x57/0x1d0 [ 162.642061][T10243] do_new_mount+0x288/0x700 [ 162.646600][T10243] path_mount+0x4c0/0xb90 [ 162.650935][T10243] ? user_path_at+0xbf/0x130 [ 162.655626][T10243] __se_sys_mount+0x28c/0x2e0 [ 162.660336][T10243] __x64_sys_mount+0x67/0x80 [ 162.665626][T10243] x64_sys_call+0x2cca/0x3000 [ 162.670310][T10243] do_syscall_64+0xc0/0x2a0 [ 162.674810][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.680831][T10243] RIP: 0033:0x7fd2a9b8bf4a [ 162.685291][T10243] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.705418][T10243] RSP: 002b:00007fd2a85e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.713814][T10243] RAX: ffffffffffffffda RBX: 00007fd2a85e6ee0 RCX: 00007fd2a9b8bf4a [ 162.721868][T10243] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd2a85e6ea0 [ 162.729862][T10243] RBP: 0000200000000180 R08: 00007fd2a85e6ee0 R09: 0000000000800718 [ 162.738274][T10243] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 162.746293][T10243] R13: 00007fd2a85e6ea0 R14: 000000000000047f R15: 0000200000000200 [ 162.754288][T10243] [ 162.757349][T10243] ---[ end trace 0000000000000000 ]--- [ 162.764331][T10243] EXT4-fs (loop3): 1 orphan inode deleted [ 162.771350][T10243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.792512][T10243] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 162.823158][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.907399][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.992151][T10269] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 162.992151][T10269] The task syz.3.1949 (10269) triggered the difference, watch for misbehavior. [ 163.022085][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1951'. [ 163.144444][T10274] loop5: detected capacity change from 0 to 8192 [ 163.250700][T10274] lo speed is unknown, defaulting to 1000 [ 163.256514][T10274] lo speed is unknown, defaulting to 1000 [ 163.262386][T10274] lo speed is unknown, defaulting to 1000 [ 163.269300][T10274] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 163.289608][T10274] lo speed is unknown, defaulting to 1000 [ 163.302253][T10274] lo speed is unknown, defaulting to 1000 [ 163.310765][T10274] lo speed is unknown, defaulting to 1000 [ 163.331450][T10274] lo speed is unknown, defaulting to 1000 [ 163.356425][T10274] lo speed is unknown, defaulting to 1000 [ 163.441340][T10296] loop5: detected capacity change from 0 to 512 [ 163.457275][T10296] EXT4-fs (loop5): filesystem is read-only [ 163.472457][T10298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=10298 comm=syz.1.1962 [ 163.475069][T10296] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 163.504386][T10300] loop4: detected capacity change from 0 to 1024 [ 163.517953][T10300] EXT4-fs: Ignoring removed nobh option [ 163.523944][T10296] EXT4-fs (loop5): filesystem is read-only [ 163.529854][T10296] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.537444][T10296] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1961: bg 0: block 64: padding at end of block bitmap is not set [ 163.541741][T10298] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 163.559507][T10298] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 163.567241][T10298] netlink: 'syz.1.1962': attribute type 2 has an invalid length. [ 163.574983][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1962'. [ 163.584141][T10296] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 163.584634][T10300] EXT4-fs: inline encryption not supported [ 163.600587][T10296] EXT4-fs (loop5): 1 orphan inode deleted [ 163.607679][T10296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.620925][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'. [ 163.647298][T10300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.661313][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.673657][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.682277][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.693717][T10300] delete_channel: no stack [ 163.698489][T10300] delete_channel: no stack [ 163.827511][T10320] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 164.096313][T10326] lo speed is unknown, defaulting to 1000 [ 164.234196][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.396616][T10331] __nla_validate_parse: 1 callbacks suppressed [ 164.396631][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1972'. [ 164.501946][T10334] set_capacity_and_notify: 1 callbacks suppressed [ 164.501962][T10334] loop7: detected capacity change from 0 to 512 [ 164.556990][T10334] EXT4-fs (loop7): filesystem is read-only [ 164.562960][T10334] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 164.581720][T10334] EXT4-fs (loop7): filesystem is read-only [ 164.587599][T10334] EXT4-fs (loop7): orphan cleanup on readonly fs [ 164.594352][T10334] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1973: bg 0: block 64: padding at end of block bitmap is not set [ 164.609850][T10334] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 164.619473][T10334] EXT4-fs (loop7): 1 orphan inode deleted [ 164.625928][T10334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.656464][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.789062][T10354] loop7: detected capacity change from 0 to 128 [ 165.244930][T10375] loop5: detected capacity change from 0 to 1024 [ 165.358139][T10375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.438994][T10375] SELinux: policydb table sizes (8,0) do not match mine (8,7) [ 165.487593][T10375] SELinux: failed to load policy [ 165.495864][T10387] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 165.514214][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1993'. [ 165.550724][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1993'. [ 165.588534][T10389] netlink: 'syz.7.1993': attribute type 10 has an invalid length. [ 165.623745][T10389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.638597][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 165.672553][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1993'. [ 165.711942][T10389] team0: Port device bond0 added [ 165.767294][T10397] team0 (unregistering): Port device team_slave_0 removed [ 165.781560][T10397] team0 (unregistering): Port device team_slave_1 removed [ 165.794495][T10397] team0 (unregistering): Port device dummy0 removed [ 165.811156][T10397] team0 (unregistering): Port device bond0 removed [ 165.926429][T10406] loop3: detected capacity change from 0 to 512 [ 165.951683][T10406] EXT4-fs (loop3): filesystem is read-only [ 165.957790][T10406] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 165.969629][T10406] EXT4-fs (loop3): filesystem is read-only [ 165.976154][T10406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.984655][T10406] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1999: bg 0: block 64: padding at end of block bitmap is not set [ 165.999186][T10406] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 166.009106][T10406] EXT4-fs (loop3): 1 orphan inode deleted [ 166.015641][T10406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 166.049544][T10412] loop4: detected capacity change from 0 to 2048 [ 166.177511][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.227128][T10412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.315067][T10426] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 166.337109][T10424] SELinux: failed to load policy [ 166.652900][T10435] loop7: detected capacity change from 0 to 8192 [ 166.846710][T10440] siw: device registration error -23 [ 167.156749][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.236899][T10464] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 167.743616][T10480] lo speed is unknown, defaulting to 1000 [ 167.839757][T10481] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2021'. [ 167.849170][T10481] net_ratelimit: 7 callbacks suppressed [ 167.849184][T10481] netlink: zone id is out of range [ 167.859865][T10481] netlink: zone id is out of range [ 167.865216][T10481] netlink: zone id is out of range [ 167.887564][T10481] netlink: set zone limit has 8 unknown bytes [ 168.130540][T10489] netlink: 'syz.7.2024': attribute type 2 has an invalid length. [ 168.138426][T10489] netlink: 'syz.7.2024': attribute type 1 has an invalid length. [ 168.209182][T10493] loop4: detected capacity change from 0 to 512 [ 168.215760][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 168.215773][ T29] audit: type=1400 audit(2000000055.320:3051): avc: denied { remount } for pid=10490 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.245663][T10493] EXT4-fs (loop4): filesystem is read-only [ 168.251846][T10493] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 168.268933][T10493] EXT4-fs (loop4): filesystem is read-only [ 168.274921][T10493] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.295328][T10493] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2027: bg 0: block 64: padding at end of block bitmap is not set [ 168.325201][T10493] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 168.343518][T10493] EXT4-fs (loop4): 1 orphan inode deleted [ 168.354169][T10493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 168.475412][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.600477][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 168.606585][T10515] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2037'. [ 168.663590][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.698003][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.306531][T10538] lo speed is unknown, defaulting to 1000 [ 169.481059][T10547] netlink: 'syz.7.2048': attribute type 6 has an invalid length. [ 169.573832][T10552] netlink: 'syz.3.2050': attribute type 29 has an invalid length. [ 169.582865][T10552] netlink: 'syz.3.2050': attribute type 29 has an invalid length. [ 169.593191][T10552] netlink: 508 bytes leftover after parsing attributes in process `syz.3.2050'. [ 169.602460][T10547] loop7: detected capacity change from 0 to 2048 [ 169.646028][T10552] bond2: entered promiscuous mode [ 169.680015][T10552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.688199][T10552] team0: Port device bond2 added [ 169.756318][T10547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.787544][T10565] loop3: detected capacity change from 0 to 512 [ 169.825144][T10565] EXT4-fs (loop3): filesystem is read-only [ 169.838183][T10565] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 169.871552][T10547] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 169.894719][T10565] EXT4-fs (loop3): filesystem is read-only [ 169.900647][T10565] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.920916][T10565] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2053: bg 0: block 64: padding at end of block bitmap is not set [ 169.929870][T10547] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 169.948343][T10547] EXT4-fs (loop7): This should not happen!! Data will be lost [ 169.948343][T10547] [ 169.955682][T10565] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 169.958147][T10547] EXT4-fs (loop7): Total free blocks count 0 [ 169.972688][T10547] EXT4-fs (loop7): Free/Dirty block details [ 169.979413][T10547] EXT4-fs (loop7): free_blocks=2415919104 [ 169.979777][T10565] EXT4-fs (loop3): 1 orphan inode deleted [ 169.985300][T10547] EXT4-fs (loop7): dirty_blocks=32 [ 169.996090][T10547] EXT4-fs (loop7): Block reservation details [ 170.002053][T10547] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 170.010420][T10565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.066534][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.077393][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 170.106527][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.127141][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.174509][ T29] audit: type=1400 audit(2000000057.270:3052): avc: denied { lock } for pid=10586 comm="syz.5.2060" path="socket:[29650]" dev="sockfs" ino=29650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.197879][ T29] audit: type=1400 audit(2000000057.270:3053): avc: denied { ioctl } for pid=10586 comm="syz.5.2060" path="socket:[29650]" dev="sockfs" ino=29650 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.222682][ T29] audit: type=1400 audit(2000000057.270:3054): avc: denied { setattr } for pid=10586 comm="syz.5.2060" name="XDP" dev="sockfs" ino=29650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.302723][T10585] loop3: detected capacity change from 0 to 8192 [ 170.366614][T10585] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 170.375190][T10585] FAT-fs (loop3): Filesystem has been set read-only [ 170.542064][T10601] loop3: detected capacity change from 0 to 512 [ 170.567357][T10601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.580007][T10601] ext4 filesystem being mounted at /444/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.683901][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.723972][T10621] tipc: Enabling of bearer rejected, already enabled [ 170.833979][T10624] lo speed is unknown, defaulting to 1000 [ 171.181872][T10644] loop4: detected capacity change from 0 to 164 [ 171.206853][T10645] FAULT_INJECTION: forcing a failure. [ 171.206853][T10645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.220167][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.5.2079 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.220217][T10645] Tainted: [W]=WARN [ 171.220299][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.220309][T10645] Call Trace: [ 171.220316][T10645] [ 171.220322][T10645] __dump_stack+0x1d/0x30 [ 171.220342][T10645] dump_stack_lvl+0x95/0xd0 [ 171.220358][T10645] dump_stack+0x15/0x1b [ 171.220375][T10645] should_fail_ex+0x263/0x280 [ 171.220392][T10645] should_fail+0xb/0x20 [ 171.220406][T10645] should_fail_usercopy+0x1a/0x20 [ 171.220424][T10645] _copy_from_user+0x1c/0xb0 [ 171.220454][T10645] do_sock_getsockopt+0xf1/0x210 [ 171.220481][T10645] __x64_sys_getsockopt+0x11d/0x1a0 [ 171.220608][T10645] x64_sys_call+0x2dc7/0x3000 [ 171.220627][T10645] do_syscall_64+0xc0/0x2a0 [ 171.220688][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.220705][T10645] RIP: 0033:0x7fda9afdacb9 [ 171.220719][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.220733][T10645] RSP: 002b:00007fda99a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 171.220766][T10645] RAX: ffffffffffffffda RBX: 00007fda9b256090 RCX: 00007fda9afdacb9 [ 171.220910][T10645] RDX: 0000000000000020 RSI: 0000000000000084 RDI: 0000000000000004 [ 171.220919][T10645] RBP: 00007fda99a16090 R08: 0000200000000200 R09: 0000000000000000 [ 171.220928][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.220958][T10645] R13: 00007fda9b256128 R14: 00007fda9b256090 R15: 00007ffe98854d38 [ 171.220972][T10645] [ 171.417969][T10647] loop4: detected capacity change from 0 to 512 [ 171.426773][T10647] EXT4-fs (loop4): filesystem is read-only [ 171.444013][T10647] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 171.460551][T10647] EXT4-fs (loop4): filesystem is read-only [ 171.466452][T10647] EXT4-fs (loop4): orphan cleanup on readonly fs [ 171.473914][T10647] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2083: bg 0: block 64: padding at end of block bitmap is not set [ 171.488994][T10647] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 171.499043][T10647] EXT4-fs (loop4): 1 orphan inode deleted [ 171.505657][T10647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.529466][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.607765][ T29] audit: type=1400 audit(2000000058.710:3055): avc: denied { mount } for pid=10654 comm="syz.1.2087" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.637379][T10655] netlink: 'syz.7.2086': attribute type 6 has an invalid length. [ 171.660451][T10655] loop7: detected capacity change from 0 to 2048 [ 171.672594][ T29] audit: type=1400 audit(2000000058.710:3056): avc: denied { search } for pid=10654 comm="syz.1.2087" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.705190][T10655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.721097][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 171.734428][T10655] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.750321][T10655] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 171.762800][T10655] EXT4-fs (loop7): This should not happen!! Data will be lost [ 171.762800][T10655] [ 171.772475][T10655] EXT4-fs (loop7): Total free blocks count 0 [ 171.778510][T10655] EXT4-fs (loop7): Free/Dirty block details [ 171.785292][T10655] EXT4-fs (loop7): free_blocks=2415919104 [ 171.791360][T10655] EXT4-fs (loop7): dirty_blocks=32 [ 171.796548][T10655] EXT4-fs (loop7): Block reservation details [ 171.803103][T10655] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 171.937671][ T7752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.020489][ T29] audit: type=1400 audit(2000000059.120:3057): avc: denied { ioctl } for pid=10675 comm="syz.5.2094" path="socket:[29780]" dev="sockfs" ino=29780 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.050600][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 172.062276][ T3319] CPU: 0 UID: 0 PID: 3319 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.062306][ T3319] Tainted: [W]=WARN [ 172.062313][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.062326][ T3319] Call Trace: [ 172.062333][ T3319] [ 172.062342][ T3319] __dump_stack+0x1d/0x30 [ 172.062362][ T3319] dump_stack_lvl+0x95/0xd0 [ 172.062406][ T3319] dump_stack+0x15/0x1b [ 172.062424][ T3319] dump_header+0x80/0x240 [ 172.062445][ T3319] oom_kill_process+0x295/0x350 [ 172.062467][ T3319] out_of_memory+0x97d/0xb80 [ 172.062489][ T3319] try_charge_memcg+0x62e/0xa10 [ 172.062591][ T3319] charge_memcg+0x51/0xc0 [ 172.062614][ T3319] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 172.062660][ T3319] __read_swap_cache_async+0x17b/0x2d0 [ 172.062740][ T3319] swap_cluster_readahead+0x362/0x3c0 [ 172.062768][ T3319] swapin_readahead+0xde/0x840 [ 172.062788][ T3319] ? next_uptodate_folio+0x84c/0x8c0 [ 172.062845][ T3319] ? percpu_counter_add_batch+0xb6/0x130 [ 172.062867][ T3319] ? __rcu_read_unlock+0x4e/0x70 [ 172.062916][ T3319] ? swap_cache_get_folio+0x26f/0x280 [ 172.062941][ T3319] do_swap_page+0x2f4/0x2140 [ 172.062964][ T3319] ? css_rstat_updated+0xbb/0x280 [ 172.063023][ T3319] ? __pfx_default_wake_function+0x10/0x10 [ 172.063053][ T3319] handle_mm_fault+0xb40/0x3030 [ 172.063141][ T3319] ? vma_start_read+0x1c7/0x2c0 [ 172.063221][ T3319] do_user_addr_fault+0x62f/0x1050 [ 172.063247][ T3319] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 172.063270][ T3319] ? irqentry_exit+0x3c/0x510 [ 172.063297][ T3319] exc_page_fault+0x62/0xa0 [ 172.063399][ T3319] asm_exc_page_fault+0x26/0x30 [ 172.063416][ T3319] RIP: 0033:0x7fd2a9a58db7 [ 172.063433][ T3319] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 39 7c 24 [ 172.063451][ T3319] RSP: 002b:00007ffcc26d68a0 EFLAGS: 00010202 [ 172.063537][ T3319] RAX: 0000001b34024000 RBX: 0000000000000493 RCX: 0000000000029fe0 [ 172.063549][ T3319] RDX: 00000000000208eb RSI: 00007ffcc26d6930 RDI: 000000000000000b [ 172.063560][ T3319] RBP: 00007ffcc26d68dc R08: 000000000007c325 R09: 7fffffffffffffff [ 172.063572][ T3319] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 172.063585][ T3319] R13: 00000000000927c0 R14: 0000000000029cc4 R15: 00007ffcc26d6930 [ 172.063601][ T3319] [ 172.063607][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 12446 [ 172.309461][ T3319] memory+swap: usage 67020kB, limit 9007199254740988kB, failcnt 0 [ 172.317272][ T3319] kmem: usage 920kB, limit 9007199254740988kB, failcnt 0 [ 172.324285][ T3319] Memory cgroup stats for /syz3: [ 172.324536][ T3319] cache 0 [ 172.332496][ T3319] rss 24576 [ 172.335739][ T3319] shmem 0 [ 172.338721][ T3319] mapped_file 0 [ 172.342191][ T3319] dirty 0 [ 172.345240][ T3319] writeback 0 [ 172.348512][ T3319] workingset_refault_anon 57 [ 172.353084][ T3319] workingset_refault_file 1088 [ 172.357875][ T3319] swap 67420160 [ 172.361324][ T3319] swapcached 4096 [ 172.365100][ T3319] pgpgin 407506 [ 172.368557][ T3319] pgpgout 407498 [ 172.372091][ T3319] pgfault 197604 [ 172.375688][ T3319] pgmajfault 41 [ 172.379137][ T3319] inactive_anon 0 [ 172.382947][ T3319] active_anon 28672 [ 172.386859][ T3319] inactive_file 0 [ 172.390558][ T3319] active_file 4096 [ 172.394266][ T3319] unevictable 0 [ 172.397824][ T3319] hierarchical_memory_limit 314572800 [ 172.403184][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 172.409347][ T3319] total_cache 0 [ 172.412877][ T3319] total_rss 24576 [ 172.416610][ T3319] total_shmem 0 [ 172.420061][ T3319] total_mapped_file 0 [ 172.424026][ T3319] total_dirty 0 [ 172.427500][ T3319] total_writeback 0 [ 172.431296][ T3319] total_workingset_refault_anon 57 [ 172.436436][ T3319] total_workingset_refault_file 1088 [ 172.441715][ T3319] total_swap 67420160 [ 172.445734][ T3319] total_swapcached 4096 [ 172.449886][ T3319] total_pgpgin 407506 [ 172.453863][ T3319] total_pgpgout 407498 [ 172.458033][ T3319] total_pgfault 197604 [ 172.462097][ T3319] total_pgmajfault 41 [ 172.466091][ T3319] total_inactive_anon 0 [ 172.470255][ T3319] total_active_anon 28672 [ 172.474646][ T3319] total_inactive_file 0 [ 172.478922][ T3319] total_active_file 4096 [ 172.483153][ T3319] total_unevictable 0 [ 172.487174][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2081,pid=10640,uid=0 [ 172.501990][ T3319] Memory cgroup out of memory: Killed process 10640 (syz.3.2081) total-vm:90292kB, anon-rss:1204kB, file-rss:21432kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 172.525713][T10688] tipc: Enabling of bearer rejected, already enabled [ 172.552723][T10691] loop3: detected capacity change from 0 to 256 [ 172.573088][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.581921][T10691] FAT-fs (loop3): Filesystem has been set read-only [ 172.618735][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.629036][T10696] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2101'. [ 172.640035][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.649670][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.660682][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.680782][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.696630][T10701] netlink: 'syz.5.2103': attribute type 6 has an invalid length. [ 172.723933][T10701] loop5: detected capacity change from 0 to 2048 [ 172.731637][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.740498][T10702] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.761984][T10699] loop4: detected capacity change from 0 to 8192 [ 172.775105][T10702] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.785384][T10701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.802679][T10701] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 172.817708][T10701] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 172.830197][T10701] EXT4-fs (loop5): This should not happen!! Data will be lost [ 172.830197][T10701] [ 172.839892][T10701] EXT4-fs (loop5): Total free blocks count 0 [ 172.845905][T10701] EXT4-fs (loop5): Free/Dirty block details [ 172.851820][T10701] EXT4-fs (loop5): free_blocks=2415919104 [ 172.852245][T10691] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 172.857641][T10701] EXT4-fs (loop5): dirty_blocks=32 [ 172.857658][T10701] EXT4-fs (loop5): Block reservation details [ 172.857667][T10701] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 172.906418][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2104'. [ 172.991994][T10714] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 173.026779][ T5873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.095259][T10710] macvlan2: entered promiscuous mode [ 173.100617][T10710] macvlan2: entered allmulticast mode [ 173.259585][T10710] bond1: entered promiscuous mode [ 173.264704][T10710] bridge3: entered promiscuous mode [ 173.270927][T10710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.278543][T10710] bond1: left promiscuous mode [ 173.283394][T10710] bridge3: left promiscuous mode [ 173.439411][T10718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=10718 comm=syz.1.2109 [ 173.538947][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2113'. [ 173.550234][T10727] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 173.574975][T10727] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.2112: iget: bad i_size value: 12154757448730 [ 173.595855][T10727] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2112: couldn't read orphan inode 13 (err -117) [ 173.661319][T10733] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2108: bad orphan inode 134217728 [ 173.691738][T10727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.714520][T10733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.775542][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.826460][ T29] audit: type=1400 audit(2000000060.930:3058): avc: denied { name_bind } for pid=10732 comm="syz.5.2108" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 173.864284][ T5873] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 173.878503][ T5873] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 173.959043][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2121'. [ 173.969738][T10752] tipc: Enabling of bearer rejected, already enabled [ 174.036554][T10751] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 174.088164][T10751] macvlan2: entered promiscuous mode [ 174.093469][T10751] macvlan2: entered allmulticast mode [ 174.122567][ T29] audit: type=1400 audit(2000000061.210:3059): avc: denied { getopt } for pid=10756 comm="syz.1.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.142096][ T29] audit: type=1400 audit(2000000061.210:3060): avc: denied { lock } for pid=10756 comm="syz.1.2123" path="socket:[29909]" dev="sockfs" ino=29909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.166739][T10751] bond3: entered promiscuous mode [ 174.171773][T10751] bridge3: entered promiscuous mode [ 174.179157][T10751] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.197427][T10751] bond3: left promiscuous mode [ 174.202255][T10751] bridge3: left promiscuous mode [ 174.239738][T10762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2125'. [ 174.240437][T10759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.326295][T10770] netlink: 'syz.4.2124': attribute type 4 has an invalid length. [ 174.335888][T10770] netlink: 'syz.4.2124': attribute type 4 has an invalid length. [ 174.347508][ T29] audit: type=1400 audit(2000000061.450:3061): avc: denied { write } for pid=10758 comm="syz.4.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 174.430574][ T1652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.445125][T10772] ================================================================== [ 174.453224][T10772] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 174.461558][T10772] [ 174.463878][T10772] write to 0xffff88811b8b82dc of 4 bytes by task 10767 on cpu 0: [ 174.471595][T10772] inode_update_timestamps+0x147/0x270 [ 174.477064][T10772] file_update_time_flags+0x269/0x300 [ 174.482443][T10772] file_update_time+0x17/0x20 [ 174.487122][T10772] __generic_file_write_iter+0x4e/0x120 [ 174.492675][T10772] generic_file_write_iter+0x8d/0x310 [ 174.498490][T10772] iter_file_splice_write+0x6bc/0xa80 [ 174.503862][T10772] direct_splice_actor+0x156/0x2a0 [ 174.508972][T10772] splice_direct_to_actor+0x311/0x670 [ 174.514433][T10772] do_splice_direct+0x119/0x1a0 [ 174.519286][T10772] do_sendfile+0x380/0x650 [ 174.523709][T10772] __x64_sys_sendfile64+0x105/0x150 [ 174.528906][T10772] x64_sys_call+0x2db1/0x3000 [ 174.533586][T10772] do_syscall_64+0xc0/0x2a0 [ 174.538098][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.543991][T10772] [ 174.546312][T10772] read to 0xffff88811b8b82dc of 4 bytes by task 10772 on cpu 1: [ 174.553938][T10772] atime_needs_update+0x2a8/0x3e0 [ 174.559053][T10772] touch_atime+0x4a/0x340 [ 174.563471][T10772] filemap_splice_read+0x6f1/0x780 [ 174.568597][T10772] splice_direct_to_actor+0x26e/0x670 [ 174.573983][T10772] do_splice_direct+0x119/0x1a0 [ 174.578839][T10772] do_sendfile+0x380/0x650 [ 174.583265][T10772] __x64_sys_sendfile64+0x105/0x150 [ 174.588474][T10772] x64_sys_call+0x2db1/0x3000 [ 174.593161][T10772] do_syscall_64+0xc0/0x2a0 [ 174.597669][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.603568][T10772] [ 174.605887][T10772] value changed: 0x202fc027 -> 0x20c856a7 [ 174.611684][T10772] [ 174.614007][T10772] Reported by Kernel Concurrency Sanitizer on: [ 174.620160][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.3.2126 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.631531][T10772] Tainted: [W]=WARN [ 174.635331][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.645385][T10772] ================================================================== [ 174.658774][T10740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.697747][ T1652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.785979][ T1652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.848223][ T1652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.922729][ T1652] bridge_slave_1: left allmulticast mode [ 174.928427][ T1652] bridge_slave_1: left promiscuous mode [ 174.934139][ T1652] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.974048][ T1652] bridge_slave_0: left allmulticast mode [ 174.979799][ T1652] bridge_slave_0: left promiscuous mode [ 174.985610][ T1652] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.059273][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.206936][ T1652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.216908][ T1652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.226338][ T1652] bond0 (unregistering): Released all slaves [ 175.287186][ T1652] tipc: Disabling bearer [ 175.292412][ T1652] tipc: Left network mode [ 175.301828][ T1652] hsr_slave_0: left promiscuous mode [ 175.315316][ T1652] hsr_slave_1: left promiscuous mode [ 175.320859][ T1652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.328309][ T1652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.355410][ T1652] veth1_macvtap: left promiscuous mode [ 175.360977][ T1652] veth0_macvtap: left promiscuous mode [ 175.374992][ T1652] veth1_vlan: left promiscuous mode [ 175.380248][ T1652] veth0_vlan: left promiscuous mode [ 175.451443][ T1652] team0 (unregistering): Port device team_slave_1 removed [ 175.462551][ T1652] team0 (unregistering): Port device team_slave_0 removed [ 175.502497][ T3428] lo speed is unknown, defaulting to 1000 [ 175.508288][ T3428] infiniband syz2: ib_query_port failed (-19) [ 175.737676][ T1652] IPVS: stop unused estimator thread 0...