last executing test programs: 15.590444289s ago: executing program 2 (id=818): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x6, 0xce, 0x7, 0xfff, 0x401, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x8000000000000000]}, 0x8, 0x1000) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x59, 0xef, 0xb2, 0x0, 0x7, 0x24000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0x7, 0x5, 0x5, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0xc6b4}, r0, 0xffffffffffffffff, r1, 0xb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x82, {{0xa, 0x4e21, 0x80, @remote, 0x7}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0xe}}}, 0x108) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff04, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYRESDEC=r7], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 13.717051806s ago: executing program 2 (id=830): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x10000006}}, {{&(0x7f0000000180)={0xa, 0x4e1e, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000580)='|', 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x100000, @empty, 0x2}}, 0xad7, 0x2, 0x5, 0x3, 0x50, 0x1, 0x6}, &(0x7f0000000440)=0x9c) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 13.714905406s ago: executing program 3 (id=831): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73657373696f6e3d3078303030303030303030303030303033322c6e6f6a6f6c6965742c686964652c7e28167779a8064273b73dfbdf578290757466382c6d6f64653d3078303030303030303030303030303430312c636865636b3d72656c617865642c73657373696f6e3d307830303030303030303030303030303395ef9bfa71d92dbb63db2be67cf6d6f980f5956b1d387386a8228a691eec6b30268273139a29791b84bb9fef7bd9490a0c797bf5cb3795a2422a1c0647026f41aa1962417a491bb01f4434c6ddf2238cb44d44d8a0", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x6be, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x800001}]}}]}, 0x40}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3f9, 0x200, 0x70bd2c, 0x25dfdbfe, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r0}}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x0, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) bind$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x5, 0x9, 0x3, 0x4, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0xd5) 13.597082469s ago: executing program 2 (id=835): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x94) 13.55250944s ago: executing program 2 (id=837): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) 13.440525473s ago: executing program 2 (id=838): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1b4}}, 0x4000040) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x20000000, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$eJzs3M1vG0UbAPDHmzj9fuO3lI+WFgIFUQlImvSDHrgUgcQBJCQ4tOJk0rQqdRvUBIlWFQQO5YgqcUfc+Qu4UC4IOCFxhTtCqlAvFE5Ga+8mTmI7cewkbfz7SdvOeMeZeXZ37PHM2gH0rZH0n0LE7oj4LSKG69nFBUbq/927e2Pyn7s3JgtRrb79V6FW7u+7NybzovnzdtUz1YE29d58N6JcqUxdzfJjs5c/GJu5dv3Fi5fLF6YuTF2ZOHXq+LFDQycnTnQdYxIRe9K2Hvh4+uD+18/eenPyzK33fvombe/urExjHL0yUj+6TT3b68o22Z7GzNzmtYPOpH10MCKKtf4/HAOxY37fcLz22aY2DlhX1WpS3dZ691wV2MLS0TzQj/I3+vTzb75t0NDjvnDndMzPY9zLtvqewdq8QWSfjdbLSEScmfv3q3SLdZqHAABodPt0RLzQbPyXxCMN5f6XrQ2VIuL/EbE3Ih6KiH0R8XBEreyjEfFYh/UvXSFZPv6pDq8psFVKx38vZ2tbi8d/+egvSgMNa0ilKBbOX6xMHc2OyZEobkvz423q+P7VX79ota9x/Jduaf35WDBrx5+DSybozpWL5W5ibnTn03orlsdfqK0LRLautz8iDnT4t7M1oaRdmZXjb2OwwwY1Uf064rn6+Z+LJfHnCi3XJ8dfOjlxYmx7VKaOjuVXxXI//3LzrVb1dxV/D9y5XY2dTa//+fhLhe0RM9euX6qt1850XsfN3z9v+Zlmbdf/bHmo8E4tPZQ99lF5dvbqeMRQ4Y3lj08sPDfP5+XT6//I4eb9f28sHInHI+JgRByKiCci4sms7U9FxNMRcbhN/D++8sz7ncffZla+h9L4z7U4/9kCfimNf+H8d54YuPTDt53Hn0vP//Fa6kj2SHr+V4prtQ3s8vABAADAAyGp3QNfSEbn00kyOlq/h39f7Ewq0zOzz5+f/vDKufq98qUoJvlM13DDfOh4Njec5yeW5I9l88ZfDuyo5UcnpyudzhUDvbWrRf9P/dHuCzzA1tCDdTTgAaX/Q//S/6F/6f/Qv/R/6F/N+v8nLUtvzI3JwMZY4f1/x0a1A9h4xv/Qv/R/6F/6P/Sllt+NT7r6yr/EJiW+G+rutxrSRGlVhSO5T0LeMoliNN01uOofs1hjYtvZ7MVg0a5NfmECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokf8CAAD//9OM3iE=") syz_open_procfs(r0, &(0x7f0000000080)='task\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 13.057892352s ago: executing program 3 (id=842): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x6, 0xce, 0x7, 0xfff, 0x401, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x8000000000000000]}, 0x8, 0x1000) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x59, 0xef, 0xb2, 0x0, 0x7, 0x24000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0x7, 0x5, 0x5, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0xc6b4}, r0, 0xffffffffffffffff, r1, 0xb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x82, {{0xa, 0x4e21, 0x80, @remote, 0x7}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0xe}}}, 0x108) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff04, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.120189141s ago: executing program 3 (id=844): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) r0 = perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1c6c, 0x0) (async) mmap$perf(&(0x7f00002f7000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x111, 0x6}}, 0x20) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, 0x0, 0x0) (async) ftruncate(r2, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0xa}}, 0x20) 9.113175432s ago: executing program 0 (id=845): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)={0x124, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x124}}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x20000000, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 8.878987558s ago: executing program 0 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x1e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 8.810187059s ago: executing program 1 (id=850): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xe0202, 0x108) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getdents(r2, &(0x7f00000000c0)=""/80, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) write(r2, &(0x7f0000000500)='oom_score_a', 0xb) ioctl$BLKFINISHZONE(r2, 0x40101288, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) write(r2, 0x0, 0x0) 8.803049489s ago: executing program 4 (id=851): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000003c0)={{0x2c6, 0x3}, {0x4, 0x80000001}, 0x10001}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='fd', 0x0, r2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071104f000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="468d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fchdir(r4) write$cgroup_type(r4, &(0x7f0000000400), 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18150000", @ANYRES32=r5, @ANYBLOB="0000000000000008b3080000ffffffff7b8af8ff00000080bfa2000000000000e100faa473809b07020000f8ffffffb703000008000000b7850000001d0000008500009500000000000604afb90329ea6fe92d917e9cc217ad0fbece54752e409cb4328453aa0187a56356611b457321803fedeb0bfd1b968d1294fdbcfeb2d51dd0c6164c76adabc61edfda38c4fdfeed852d7904ad27d9d871dc23eedf3c6017dbfa69acd1bb0000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000001, 0x0) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f0000000040)={0x90, 0x7, 0x1}) 8.679846142s ago: executing program 4 (id=852): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x6, 0xce, 0x7, 0xfff, 0x401, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x8000000000000000]}, 0x8, 0x1000) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x59, 0xef, 0xb2, 0x0, 0x7, 0x24000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0x7, 0x5, 0x5, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0xc6b4}, r0, 0xffffffffffffffff, r1, 0xb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x82, {{0xa, 0x4e21, 0x80, @remote, 0x7}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0xe}}}, 0x108) 8.635083724s ago: executing program 0 (id=853): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0xc, &(0x7f0000000540)=""/125, &(0x7f00000005c0)=0x7d) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x7) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000050) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, &(0x7f0000000140)) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x6}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r1, 0x1f, 0x0, 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24040084) (async) write$binfmt_elf32(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="7f454c4640f8f8e8040000000000000003000600bdf80000c1030000380000002e020000000100000500200001000070070003000000000051e5746400000000ff03000004000000040000000300000000080000020000000549855e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffffffffffff000000000000000000000000000000000000000058000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000002298ff577419717917c6cce900"/2152], 0x85c) (async) r6 = syz_io_uring_setup(0x1060, &(0x7f00000003c0)={0x0, 0x50b6, 0x2, 0x3, 0x167}, &(0x7f0000000500), 0x0, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './bus\x00'}) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x8) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_uring_enter(r6, 0xfffffdff, 0xe875, 0x3, 0x0, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) 8.583566855s ago: executing program 0 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000340)={'\x00', 0x8001, 0x6, 0x4, 0x10001, 0x80, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x6, 0x9, 0x2, 0x0, 0x5e00000000, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x5, 0x5, 0x7f, 0x8, 0x4, 0x657, 0x10, 0x0, 0x8, 0x0, 0xfffffffffffff6d5}, r2, 0xc, r1, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x10ecc8, 0x1224, 0x0, 0x7, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000009c0)={0xffffffffffffffff, &(0x7f0000000880)="12c4c817c77caebe62828b47520f9a96fa7547b8f9085c81813a7317ea640bf15bc6848d621c32cad38fe9b533717bc467deaf05144e634095d5fe58e3a64393ca11e43bbf7ae9f8b323b8a04183a4283185ba14dd4ca848d41e2d61b2b8af63983209327d65be01ead6b7d8745542be24ce0bb1b012e75894838e9e6fd1a03631a6a51a21e5b34203035c7804714d8243b5", &(0x7f0000000940)=""/100}, 0x20) shutdown(r8, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x47, 0x0, "fb54069564f50b665b0458e167f6817c2f054211e68cd0967eecc80e6a8f179a08474ef5b970009ed8865e948ef217389ab2af638d57e2c64769522ffeccb58b8e10e3cbc21cd9f4b6d77eb712020b33"}, 0xd8) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000840)={{@_ha_fsid={[0xffffffff, 0xfffffffe]}, {0x800, 0x9, 0x1, 0x8001}}, {{[0x7, 0x3, 0xa, 0x10000]}, 0x0, 0x2, 0x7ff, 0x0, &(0x7f0000000700)=[{{@_ha_fsid={[0x6, 0x3]}, {0xfc3e, 0x40, 0x0, 0x7c8}}, 0x800, 0x0, 'bond\x00'}, {{@_ha_fsid={[0x8, 0xedc0]}, {0xf6a, 0x9, 0xd, 0x5}}, 0x1, 0x0, ':#}/{\x00'}, {{@align=0x982, {0xf, 0x8, 0x4, 0x7fffffffffffffff}}, 0x1, 0x0, 'tls'}, {{@align=0x8000000000000001, {0x0, 0x0, 0x7, 0x6f1e80ce}}, 0x2aef, 0x0, '\x00'}, {{@_ha_fsid={[0x10001, 0x1]}, {0x9, 0x3, 0x1, 0x4}}, 0x5, 0x0, '\xff\xff'}, {{@align=0x6, {0x5, 0xb, 0x9, 0x25}}, 0x454, 0x0, '}\x00'}, {{@align=0x5, {0xfff4, 0x4607, 0x6}}, 0xf122926, 0x0, 'tls'}, {{@align=0x9, {0x9, 0xe478, 0x7, 0x36}}, 0x3, 0x0, '\x00'}]}}) 8.492238917s ago: executing program 3 (id=855): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x6, 0xce, 0x7, 0xfff, 0x401, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x8000000000000000]}, 0x8, 0x1000) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x59, 0xef, 0xb2, 0x0, 0x7, 0x24000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0x7, 0x5, 0x5, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0xc6b4}, r0, 0xffffffffffffffff, r1, 0xb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x82, {{0xa, 0x4e21, 0x80, @remote, 0x7}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0xe}}}, 0x108) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xff04, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.477033378s ago: executing program 1 (id=856): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x10, &(0x7f0000000000)={[{@oldalloc}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0xfe, 0x450, &(0x7f0000000140)="$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") bind$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_open_dev$usbfs(&(0x7f00000005c0), 0x4, 0x2000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x38, 0x40018, 0x15, 0x1d, 0x7, 0xda, 0x5, 0x64}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x318, 0x100000c, 0x0, 0x1c0, 0xc0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 5.527388311s ago: executing program 4 (id=857): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) 3.725428336s ago: executing program 0 (id=858): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x27}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x29, 0x3}], 0x10}}], 0x1, 0x4008080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x4, 0x61, 0x14, 0xc8}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) brk(0x80000000) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000240"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 3.458311883s ago: executing program 3 (id=859): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xfffffff8, 0x9, 0x9, 0x10400, r0, 0x8000f, '\x00', 0x0, r1, 0x3, 0x1, 0x5, 0x7}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, r5}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r6, 0x8916, &(0x7f0000000000)) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}, 0xc4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) 3.18653897s ago: executing program 1 (id=860): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)={0x124, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x124}}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x20000000, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$eJzs3M1vG0UbAPDHmzj9fuO3lI+WFgIFUQlImvSDHrgUgcQBJCQ4tOJk0rQqdRvUBIlWFQQO5YgqcUfc+Qu4UC4IOCFxhTtCqlAvFE5Ga+8mTmI7cewkbfz7SdvOeMeZeXZ37PHM2gH0rZH0n0LE7oj4LSKG69nFBUbq/927e2Pyn7s3JgtRrb79V6FW7u+7NybzovnzdtUz1YE29d58N6JcqUxdzfJjs5c/GJu5dv3Fi5fLF6YuTF2ZOHXq+LFDQycnTnQdYxIRe9K2Hvh4+uD+18/eenPyzK33fvombe/urExjHL0yUj+6TT3b68o22Z7GzNzmtYPOpH10MCKKtf4/HAOxY37fcLz22aY2DlhX1WpS3dZ691wV2MLS0TzQj/I3+vTzb75t0NDjvnDndMzPY9zLtvqewdq8QWSfjdbLSEScmfv3q3SLdZqHAABodPt0RLzQbPyXxCMN5f6XrQ2VIuL/EbE3Ih6KiH0R8XBEreyjEfFYh/UvXSFZPv6pDq8psFVKx38vZ2tbi8d/+egvSgMNa0ilKBbOX6xMHc2OyZEobkvz423q+P7VX79ota9x/Jduaf35WDBrx5+DSybozpWL5W5ibnTn03orlsdfqK0LRLautz8iDnT4t7M1oaRdmZXjb2OwwwY1Uf064rn6+Z+LJfHnCi3XJ8dfOjlxYmx7VKaOjuVXxXI//3LzrVb1dxV/D9y5XY2dTa//+fhLhe0RM9euX6qt1850XsfN3z9v+Zlmbdf/bHmo8E4tPZQ99lF5dvbqeMRQ4Y3lj08sPDfP5+XT6//I4eb9f28sHInHI+JgRByKiCci4sms7U9FxNMRcbhN/D++8sz7ncffZla+h9L4z7U4/9kCfimNf+H8d54YuPTDt53Hn0vP//Fa6kj2SHr+V4prtQ3s8vABAADAAyGp3QNfSEbn00kyOlq/h39f7Ewq0zOzz5+f/vDKufq98qUoJvlM13DDfOh4Njec5yeW5I9l88ZfDuyo5UcnpyudzhUDvbWrRf9P/dHuCzzA1tCDdTTgAaX/Q//S/6F/6f/Qv/R/6F/N+v8nLUtvzI3JwMZY4f1/x0a1A9h4xv/Qv/R/6F/6P/Sllt+NT7r6yr/EJiW+G+rutxrSRGlVhSO5T0LeMoliNN01uOofs1hjYtvZ7MVg0a5NfmECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokf8CAAD//9OM3iE=") syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 2.539167977s ago: executing program 1 (id=861): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="89070404", 0x4) 2.433295529s ago: executing program 1 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='mem', 0x3) 187.668696ms ago: executing program 4 (id=863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x1e) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 118.945697ms ago: executing program 1 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap$usbfs(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3, 0x10, r4, 0x4664) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYRES32], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{r6}], 0x1, 0x9d) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="3e4a9d", 0x3}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40010) sendmsg$kcm(r8, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000040)=0x5, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f0000001340)={'tunl0\x00', 0x0, 0x8726, 0x10, 0x3, 0x3, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x64, 0x0, 0xc, 0x4, 0x0, @empty, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x26, [@dev={0xac, 0x14, 0x14, 0x19}]}, @rr={0x7, 0x3, 0xd}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f0000001340)={'tunl0\x00', 0x0, 0x8726, 0x10, 0x3, 0x3, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x64, 0x0, 0xc, 0x4, 0x0, @empty, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x26, [@dev={0xac, 0x14, 0x14, 0x19}]}, @rr={0x7, 0x3, 0xd}, @ra={0x94, 0x4}]}}}}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x3, 0x0, &(0x7f00007d0000)) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmmsg$inet(r2, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001200)="ae9094edf59e820ea23682afb7a421d904cb0bdc0d7c5a6dfaa367e3fd95f2bc9547ada66cdc29345add8de3a6a0a92b0f3f5fdf4e171e84989196c2464590b4ad95638bf8919e0503b0ef7886e7da9c4e86fa70c37846e647d3cba7628340f760cf02a0a789d5c4f7c9d7167a4ef72f353c6290f64b707d5466723ccf7cfe10a07b63a07e3c299841d80b3a88e5301c7d1e78fac967faca351e786026ff325d841dbd49c0b887504316a6324b4aaf251c7f84f34d0ad8f974211239b196f9483e53a3f60cb9", 0xc6}], 0x2}}], 0x1, 0x4040810) (async) sendmmsg$inet(r2, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001200)="ae9094edf59e820ea23682afb7a421d904cb0bdc0d7c5a6dfaa367e3fd95f2bc9547ada66cdc29345add8de3a6a0a92b0f3f5fdf4e171e84989196c2464590b4ad95638bf8919e0503b0ef7886e7da9c4e86fa70c37846e647d3cba7628340f760cf02a0a789d5c4f7c9d7167a4ef72f353c6290f64b707d5466723ccf7cfe10a07b63a07e3c299841d80b3a88e5301c7d1e78fac967faca351e786026ff325d841dbd49c0b887504316a6324b4aaf251c7f84f34d0ad8f974211239b196f9483e53a3f60cb9", 0xc6}], 0x2}}], 0x1, 0x4040810) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09020000000000004d00010000000500040002000000060001004e2000"], 0x24}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028000000000211907864010100ffffffff00fd4e200014907802020001800000001a58545e2d339679a3c57697ed4a1aebf29525a2906aa8b511796aa279a881523a1f11abe1e9fc73c26d5a74c2d9409f2d9b6640f1c4d0cf836a520e3a7f5f41e67c392bc5cbcde59a28dd1dc6a954107052e511a1b4be591b594ab4b152c8d24e18059a90e20150f2ea6b"], 0x0) 55.135799ms ago: executing program 4 (id=865): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000003c0)={{0x2c6, 0x3}, {0x4, 0x80000001}, 0x10001}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='fd', 0x0, r2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071104f000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x10081, 0xffffffff, 0x4}) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="468d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fchdir(r4) write$cgroup_type(r4, &(0x7f0000000400), 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18150000", @ANYRES32=r5, @ANYBLOB="0000000000000008b3080000ffffffff7b8af8ff00000080bfa2000000000000e100faa473809b07020000f8ffffffb703000008000000b7850000001d0000008500009500000000000604afb90329ea6fe92d917e9cc217ad0fbece54752e409cb4328453aa0187a56356611b457321803fedeb0bfd1b968d1294fdbcfeb2d51dd0c6164c76adabc61edfda38c4fdfeed852d7904ad27d9d871dc23eedf3c6017dbfa69acd1bb0000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e00000095000000000000009500a505000000009858964703f6c913cca83ad61f7c2d1668d67127f19a9c757a6b9d33757910704667224801ef17c2f1ccf1a95de4d8490c7bbb8557df0733c7676351cfc0031f124b6364548b4b7ed11f35a7dd35f7186d391ed316a52e7aa90402d149655b5cb937835705c75f65954635173d53ac29092e70ac30727397543bac7424dbb3af1174f0469626125e8a021d4ce763ee1487dd27fab92e1a78dcd706e7e0f7d9c80d2a811f8209dc39674bade71e59c2c2b5f1ec4adc44f341a4d9bc803c65723f1fa4d4a4b2c3aa8a6a19e22a60"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10800, &(0x7f00000000c0)=ANY=[], 0x0, 0x325, &(0x7f00000007c0)="$eJzs3U1oXFUYxvFnJh+9E00miAoW1Fe7UZGhyVqooSQqDlS0kWpXt+ZGh1xnQu4wOkUyEQrduHDj11oFkUKguBCEUhcuRBJK9+6668K6UvzokZt750tn2jFOjJL/b5E5vO95556cc3JJzoXM9Sfeff1X59yyX1VWGWWf1EYmDsSU2NCjb2xeuf+Fl15+dq5YnH/ebGHu5MysmU09eOn0Wxcevly948Uvpr46pK3prKRrW/du3Xf95snXSpGVIitXqubbmUql6p8JA1t6P1opmD0XBn4UWKkcBWtd+eWwsrpaN7+8dOfE6loQReaX67YS1K1asepa3fxX/VLZCoWCTU4It+BJF2ofzcXNbM8Oi5//7JxuVL9z7tCG0hX3/uVRYh9Z+tpe/3f6dz4+Kenb37tuDvhf67ipe1J4vrZYW0xek/zcskoKFeio8vpN8R5xH28m6x9/fXN2s3j1sW++NrNprYeNtL5RWxzprp9RXtNj6VXb9QsZzc9Yort+TBOd9bPK6+6kprn/duqfKc7P9qwf1yNHOuoLyuvqK6oo1Palh366duL8B8369Rmz4yeKO/VZNetzWmpOkqfPftyX1QEAAAAAAAAAYHcKydH5Tdfn/L4Qdzh31swmp7XefIoY55NWer6e6Xw+8Ofz+aM9z+dHdXh0/75vAAAAAAAOkqh+Lm3Vz674YRisRbtqxH/Kxw2vFcmlkXafe6a6I865xj+66LAanob4hlJ35JO3b1OlnJqRBxZufYkjx0a2dxbrojbaqbHOFRzXsKblsHPub1Rl1Df1y6nOSH7QzTYuqRWRN+gWHdVAY1Z6+hTm+o/HkzTS+klppbLq1Tk3yMw/PabWZvthKMuUScfXv89Tp7+/eNv3Gf/L/PRzea/uRQAAAAD2VvuX/mNqLH9Za5x6/L0BS11+j8cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBBsYt/Obb9Ya+UxY27Pm1GrnSkel44c4OPkQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8JfwQAAP//4lS9fA==") ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0x90, 0x7, 0x1}) 54.736728ms ago: executing program 0 (id=866): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x6, 0xce, 0x7, 0xfff, 0x401, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x8000000000000000]}, 0x8, 0x1000) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x59, 0xef, 0xb2, 0x0, 0x7, 0x24000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x7, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0x7, 0x5, 0x5, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0xc6b4}, r0, 0xffffffffffffffff, r1, 0xb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x82, {{0xa, 0x4e21, 0x80, @remote, 0x7}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0xe}}}, 0x108) 28.330129ms ago: executing program 3 (id=867): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 25.08506ms ago: executing program 2 (id=868): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 4 (id=869): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) r1 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_getattr(0x0, &(0x7f0000001400)={0x38}, 0x75, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000001440)={{r1}, "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"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x50) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x40000000, 0x80000804, 0x81, 0xfffffffb, 0xffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/mdstat\x00', 0x1800, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x101002) ioctl$BLKBSZSET(r5, 0x40081271, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r4}, 0x38) kernel console output (not intermixed with test programs): 1] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 85.244608][ T4881] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 85.248505][ T4881] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.362: invalid indirect mapped block 1819239214 (level 0) [ 85.250633][ T4881] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 85.250916][ T4881] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.362: invalid indirect mapped block 33554432 (level 2) [ 85.254620][ T4881] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 85.255055][ T4881] EXT4-fs (loop4): 1 truncate cleaned up [ 85.258487][ T4881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.606482][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.740440][ T4921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.754685][ T4921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.883780][ T4924] veth1_to_bond: entered allmulticast mode [ 86.905725][ T4924] veth1_to_bond: entered promiscuous mode [ 86.915227][ T4924] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.471255][ T4920] veth1_to_bond: left promiscuous mode [ 87.472324][ T4920] veth1_to_bond: left allmulticast mode [ 87.494106][ T4933] SET target dimension over the limit! [ 87.550866][ T4935] tipc: Enabled bearer , priority 0 [ 87.554176][ T4935] syzkaller0: entered promiscuous mode [ 87.555457][ T4935] syzkaller0: entered allmulticast mode [ 87.580408][ T4935] tipc: Resetting bearer [ 87.587334][ T4934] tipc: Resetting bearer [ 87.594895][ T4934] tipc: Disabling bearer [ 87.765588][ T3388] IPVS: starting estimator thread 0... [ 87.865883][ T4959] IPVS: using max 2640 ests per chain, 132000 per kthread [ 87.870494][ T4971] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 87.874641][ T4971] bond2 (unregistering): Released all slaves [ 88.020466][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 88.058470][ T4998] loop2: detected capacity change from 0 to 764 [ 88.063512][ T4998] iso9660: Unknown parameter 'nokoliet' [ 88.125437][ T5008] loop0: detected capacity change from 0 to 512 [ 88.140403][ T5008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.148291][ T5008] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.163803][ T5008] EXT4-fs error (device loop0): __ext4_add_entry:2412: inode #12: comm syz.0.410: Directory hole found for htree leaf block 0 [ 88.167134][ T5014] loop1: detected capacity change from 0 to 128 [ 88.169789][ T5014] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.172473][ T5014] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.197957][ T5017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5017 comm=syz.2.406 [ 88.284448][ T5024] loop2: detected capacity change from 0 to 256 [ 88.287086][ T5024] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.319565][ T5024] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.364564][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.369905][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.377905][ T5027] veth1_to_bond: entered allmulticast mode [ 88.380114][ T5027] veth1_to_bond: entered promiscuous mode [ 88.387892][ T5026] veth1_to_bond: left promiscuous mode [ 88.391807][ T5026] veth1_to_bond: left allmulticast mode [ 88.403931][ T5031] loop1: detected capacity change from 0 to 512 [ 88.413293][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 88.416456][ T5008] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: comm syz.0.410: Directory hole found for htree leaf block 0 [ 88.427261][ T5031] loop1: detected capacity change from 0 to 256 [ 88.429853][ T5031] vfat: Unknown parameter './file2' [ 88.485805][ T5035] ucma_write: process 197 (syz.2.421) changed security contexts after opening file descriptor, this is not allowed. [ 88.579752][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.660392][ T5036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.692373][ T5042] bridge0: port 3(erspan0) entered blocking state [ 88.696413][ T5042] bridge0: port 3(erspan0) entered disabled state [ 88.698872][ T5042] erspan0: entered allmulticast mode [ 88.701048][ T5042] erspan0: entered promiscuous mode [ 88.702491][ T5042] bridge0: port 3(erspan0) entered blocking state [ 88.703814][ T5042] bridge0: port 3(erspan0) entered forwarding state [ 88.707821][ T5042] FAULT_INJECTION: forcing a failure. [ 88.707821][ T5042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.712402][ T5042] CPU: 1 UID: 0 PID: 5042 Comm: syz.2.421 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.712518][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.712529][ T5042] Call Trace: [ 88.712536][ T5042] [ 88.712573][ T5042] __dump_stack+0x1d/0x30 [ 88.712601][ T5042] dump_stack_lvl+0x95/0xd0 [ 88.712624][ T5042] dump_stack+0x15/0x1b [ 88.712662][ T5042] should_fail_ex+0x25e/0x270 [ 88.712761][ T5042] should_fail+0xb/0x20 [ 88.712791][ T5042] should_fail_usercopy+0x1a/0x20 [ 88.712822][ T5042] _copy_from_user+0x1c/0xb0 [ 88.712906][ T5042] bm_register_write+0xbe/0xc90 [ 88.712934][ T5042] ? __pfx_bm_register_write+0x10/0x10 [ 88.712966][ T5042] vfs_write+0x252/0x990 [ 88.713021][ T5042] ? __fget_files+0x184/0x1c0 [ 88.713044][ T5042] ? mutex_lock+0x57/0x90 [ 88.713081][ T5042] ksys_write+0xdc/0x1a0 [ 88.713112][ T5042] __x64_sys_write+0x40/0x50 [ 88.713129][ T5042] x64_sys_call+0x27e1/0x3020 [ 88.713153][ T5042] do_syscall_64+0x136/0x3c0 [ 88.713265][ T5042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.713380][ T5042] RIP: 0033:0x7f0809b2e019 [ 88.713398][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.713419][ T5042] RSP: 002b:00007f0808545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.713444][ T5042] RAX: ffffffffffffffda RBX: 00007f0809db6180 RCX: 00007f0809b2e019 [ 88.713468][ T5042] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 000000000000000a [ 88.713481][ T5042] RBP: 00007f0808545090 R08: 0000000000000000 R09: 0000000000000000 [ 88.713493][ T5042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.713505][ T5042] R13: 00007f0809db6218 R14: 00007f0809db6180 R15: 00007ffe17e3b7b8 [ 88.713523][ T5042] [ 88.986732][ T5044] loop4: detected capacity change from 0 to 512 [ 89.038511][ T5044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.046245][ T5044] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.079523][ T5044] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.423: iget: bad i_size value: 2533274857506816 [ 89.177597][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.301425][ T5071] FAULT_INJECTION: forcing a failure. [ 89.301425][ T5071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.307891][ T5071] CPU: 1 UID: 0 PID: 5071 Comm: syz.1.432 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.307922][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.307935][ T5071] Call Trace: [ 89.307944][ T5071] [ 89.307952][ T5071] __dump_stack+0x1d/0x30 [ 89.307979][ T5071] dump_stack_lvl+0x95/0xd0 [ 89.308154][ T5071] dump_stack+0x15/0x1b [ 89.308175][ T5071] should_fail_ex+0x25e/0x270 [ 89.308212][ T5071] should_fail+0xb/0x20 [ 89.308237][ T5071] should_fail_usercopy+0x1a/0x20 [ 89.308265][ T5071] _copy_from_user+0x1c/0xb0 [ 89.308288][ T5071] kstrtouint_from_user+0x69/0xf0 [ 89.308375][ T5071] ? 0xffffffff81000000 [ 89.308390][ T5071] ? avc_policy_seqno+0x15/0x30 [ 89.308415][ T5071] proc_fail_nth_write+0x50/0x160 [ 89.308441][ T5071] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.308468][ T5071] vfs_write+0x252/0x990 [ 89.308487][ T5071] ? irqentry_exit+0x58f/0x610 [ 89.308506][ T5071] ? __fget_files+0x184/0x1c0 [ 89.308535][ T5071] ? mutex_lock+0x57/0x90 [ 89.308567][ T5071] ksys_write+0xdc/0x1a0 [ 89.308628][ T5071] __x64_sys_write+0x40/0x50 [ 89.308731][ T5071] x64_sys_call+0x27e1/0x3020 [ 89.308753][ T5071] do_syscall_64+0x136/0x3c0 [ 89.308782][ T5071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.308834][ T5071] RIP: 0033:0x7f0020b9e84e [ 89.308852][ T5071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.308871][ T5071] RSP: 002b:00007f001f636fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.308908][ T5071] RAX: ffffffffffffffda RBX: 00007f001f6376c0 RCX: 00007f0020b9e84e [ 89.308921][ T5071] RDX: 0000000000000001 RSI: 00007f001f6370a0 RDI: 0000000000000005 [ 89.308935][ T5071] RBP: 00007f001f637090 R08: 0000000000000000 R09: 0000000000000000 [ 89.308949][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.309035][ T5071] R13: 00007f0020e66038 R14: 00007f0020e65fa0 R15: 00007fff8d2ce5a8 [ 89.309056][ T5071] [ 89.312118][ T5069] loop0: detected capacity change from 0 to 128 [ 89.346363][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 89.346383][ T28] audit: type=1400 audit(1785714554.304:530): avc: denied { setopt } for pid=5068 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.389115][ T5069] FAT-fs (loop0): bogus number of reserved sectors [ 89.391806][ T5069] FAT-fs (loop0): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 89.396561][ T5069] FAT-fs (loop0): Can't find a valid FAT filesystem [ 89.423015][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.424958][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.433009][ T5079] veth1_to_bond: entered allmulticast mode [ 89.439063][ T5079] veth1_to_bond: entered promiscuous mode [ 89.443184][ T5078] veth1_to_bond: left promiscuous mode [ 89.450259][ T5078] veth1_to_bond: left allmulticast mode [ 89.624364][ T28] audit: type=1400 audit(1785714554.614:531): avc: denied { setopt } for pid=5098 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.664182][ T28] audit: type=1400 audit(1785714554.654:532): avc: denied { create } for pid=5111 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.669577][ T5112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 89.671252][ T28] audit: type=1400 audit(1785714554.664:533): avc: denied { write } for pid=5111 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.703492][ T28] audit: type=1400 audit(1785714554.694:534): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.707980][ T28] audit: type=1400 audit(1785714554.694:535): avc: denied { open } for pid=3294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.719324][ T28] audit: type=1400 audit(1785714554.704:536): avc: denied { ioctl } for pid=3294 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.731942][ T28] audit: type=1400 audit(1785714554.724:537): avc: denied { create } for pid=5113 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.735225][ T28] audit: type=1400 audit(1785714554.724:538): avc: denied { map_create } for pid=5113 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.739268][ T28] audit: type=1400 audit(1785714554.734:539): avc: denied { prog_load } for pid=5113 comm="syz.1.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.941459][ T5126] bridge0: port 3(erspan0) entered blocking state [ 89.942598][ T5126] bridge0: port 3(erspan0) entered disabled state [ 89.943740][ T5126] erspan0: entered allmulticast mode [ 89.945140][ T5126] erspan0: entered promiscuous mode [ 89.946658][ T5126] bridge0: port 3(erspan0) entered blocking state [ 89.947796][ T5126] bridge0: port 3(erspan0) entered forwarding state [ 90.130411][ T5139] loop0: detected capacity change from 0 to 512 [ 90.256012][ T5139] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.456: invalid indirect mapped block 11 (level 0) [ 90.269272][ T5139] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.269667][ T5139] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.456: attempt to clear invalid blocks 1024 len 1 [ 90.292493][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 90.292831][ C0] EXT4-fs (loop0): initial error at time 1785714555: ext4_free_branches:1023: inode 13 [ 90.293285][ C0] EXT4-fs (loop0): last error at time 1785714555: ext4_free_branches:1023: inode 13 [ 90.327092][ T5139] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.328024][ T5139] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 90.390401][ T5139] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.456: invalid indirect mapped block 1819239214 (level 0) [ 90.404427][ T5139] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.548213][ T5148] loop1: detected capacity change from 0 to 512 [ 90.590578][ T5139] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.456: invalid indirect mapped block 33554432 (level 2) [ 90.608691][ T5139] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.628380][ T5139] EXT4-fs (loop0): 1 truncate cleaned up [ 90.655391][ T5139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.723560][ T5148] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.458: invalid indirect mapped block 11 (level 0) [ 90.738400][ T5148] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.742682][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 90.755711][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 90.755732][ C1] EXT4-fs (loop1): initial error at time 1785714555: ext4_free_branches:1023: inode 13 [ 90.755795][ C1] EXT4-fs (loop1): last error at time 1785714555: ext4_free_branches:1023: inode 13 [ 90.757891][ T5148] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.458: attempt to clear invalid blocks 1024 len 1 [ 90.758980][ T5148] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.795505][ T5148] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 90.861475][ T5148] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.458: invalid indirect mapped block 1819239214 (level 0) [ 90.898497][ T5148] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.908443][ T5148] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.458: invalid indirect mapped block 33554432 (level 2) [ 90.944314][ T5148] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.958517][ T5148] EXT4-fs (loop1): 1 truncate cleaned up [ 91.001361][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.005802][ T5148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.131303][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.149837][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.219600][ T5171] veth1_to_bond: entered allmulticast mode [ 91.247470][ T5171] veth1_to_bond: entered promiscuous mode [ 91.259313][ T5171] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.279364][ T5170] veth1_to_bond: left promiscuous mode [ 91.291135][ T5170] veth1_to_bond: left allmulticast mode [ 91.336668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.378888][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.592917][ T5180] EXT4-fs: Ignoring removed orlov option [ 92.616752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.621497][ T5180] EXT4-fs: Mount option(s) incompatible with ext3 [ 93.342186][ T5198] set_capacity_and_notify: 2 callbacks suppressed [ 93.342203][ T5198] loop0: detected capacity change from 0 to 512 [ 93.379690][ T5198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.464991][ T5198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.479977][ T5198] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.493928][ T5198] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 93.824256][ T5215] loop2: detected capacity change from 0 to 512 [ 93.937266][ T5215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.478: invalid indirect mapped block 11 (level 0) [ 93.953169][ T5215] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.955718][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 93.971446][ C0] EXT4-fs (loop2): initial error at time 1785714558: ext4_free_branches:1023: inode 13 [ 93.981555][ C0] EXT4-fs (loop2): last error at time 1785714558: ext4_free_branches:1023: inode 13 [ 93.996720][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 94.056985][ T5216] FAULT_INJECTION: forcing a failure. [ 94.056985][ T5216] name failslab, interval 1, probability 0, space 0, times 0 [ 94.145909][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 94.191516][ T5215] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.478: attempt to clear invalid blocks 1024 len 1 [ 94.210301][ T5215] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 94.216905][ T5215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 94.251551][ T5215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.478: invalid indirect mapped block 1819239214 (level 0) [ 94.286578][ T5215] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.478: invalid indirect mapped block 33554432 (level 2) [ 94.313815][ T5215] EXT4-fs (loop2): 1 truncate cleaned up [ 94.348109][ T5215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.809988][ T5198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.819075][ T5216] CPU: 0 UID: 0 PID: 5216 Comm: syz.3.481 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.819176][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.819188][ T5216] Call Trace: [ 94.819196][ T5216] [ 94.819250][ T5216] __dump_stack+0x1d/0x30 [ 94.819273][ T5216] dump_stack_lvl+0x95/0xd0 [ 94.819315][ T5216] dump_stack+0x15/0x1b [ 94.819337][ T5216] should_fail_ex+0x25e/0x270 [ 94.819411][ T5216] should_failslab+0x8c/0xb0 [ 94.819434][ T5216] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 94.819462][ T5216] ? skb_clone+0x151/0x1f0 [ 94.819479][ T5216] ? skb_clone+0x151/0x1f0 [ 94.819560][ T5216] skb_clone+0x151/0x1f0 [ 94.819577][ T5216] __netlink_deliver_tap+0x2be/0x510 [ 94.819716][ T5216] netlink_unicast+0x654/0x680 [ 94.819739][ T5216] netlink_sendmsg+0x5be/0x6f0 [ 94.819782][ T5216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.819813][ T5216] ____sys_sendmsg+0x532/0x580 [ 94.819836][ T5216] ___sys_sendmsg+0x195/0x1e0 [ 94.819868][ T5216] __x64_sys_sendmsg+0xd4/0x160 [ 94.819946][ T5216] x64_sys_call+0x194c/0x3020 [ 94.819985][ T5216] do_syscall_64+0x136/0x3c0 [ 94.820016][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.820039][ T5216] RIP: 0033:0x7f253c78e019 [ 94.820060][ T5216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.820081][ T5216] RSP: 002b:00007f253b1c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.820104][ T5216] RAX: ffffffffffffffda RBX: 00007f253ca16090 RCX: 00007f253c78e019 [ 94.820120][ T5216] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 94.820133][ T5216] RBP: 00007f253b1c6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.820146][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.820165][ T5216] R13: 00007f253ca16128 R14: 00007f253ca16090 R15: 00007fffb54211b8 [ 94.820183][ T5216] [ 95.122970][ T5224] loop1: detected capacity change from 0 to 256 [ 95.184279][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 95.184305][ T28] audit: type=1400 audit(1785714560.174:628): avc: denied { mount } for pid=5219 comm="syz.1.482" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 95.633449][ T28] audit: type=1400 audit(1785714560.624:629): avc: denied { setopt } for pid=5231 comm="syz.0.484" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.668903][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.700450][ T28] audit: type=1400 audit(1785714560.624:630): avc: denied { connect } for pid=5231 comm="syz.0.484" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.735799][ T28] audit: type=1400 audit(1785714560.644:631): avc: denied { write } for pid=5231 comm="syz.0.484" laddr=fe80::78d3:afff:fee0:e16a lport=7 faddr=fe88::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.761596][ T28] audit: type=1400 audit(1785714560.734:632): avc: denied { tracepoint } for pid=5238 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.784844][ T5239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 95.814424][ T28] audit: type=1400 audit(1785714560.774:633): avc: denied { append } for pid=5238 comm="syz.2.485" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.900257][ T28] audit: type=1400 audit(1785714560.774:634): avc: denied { bind } for pid=5238 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.940486][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 95.954618][ T28] audit: type=1400 audit(1785714560.774:635): avc: denied { name_bind } for pid=5238 comm="syz.2.485" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 95.996244][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 96.009854][ T28] audit: type=1400 audit(1785714560.774:636): avc: denied { node_bind } for pid=5238 comm="syz.2.485" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 96.038848][ T28] audit: type=1400 audit(1785714560.774:637): avc: denied { setopt } for pid=5238 comm="syz.2.485" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.062933][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 96.108484][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 96.121083][ T5273] netlink: 256 bytes leftover after parsing attributes in process `syz.1.497'. [ 96.152724][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 96.199027][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 96.277634][ T5297] tipc: Enabling of bearer rejected, failed to enable media [ 96.318607][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 96.331561][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.359115][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 96.375292][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.387886][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.397745][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.456641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.480739][ T5320] netlink: 'syz.2.513': attribute type 5 has an invalid length. [ 96.592782][ T5323] loop4: detected capacity change from 0 to 512 [ 96.602234][ T5323] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 96.613670][ T5323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.649833][ T5323] block device autoloading is deprecated and will be removed. [ 96.657957][ T5323] EXT4-fs (loop4): couldn't read superblock of external journal [ 98.100697][ T5370] syzkaller0: entered promiscuous mode [ 98.150664][ T5370] syzkaller0: entered allmulticast mode [ 98.376300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.463750][ T5373] loop1: detected capacity change from 0 to 512 [ 98.650534][ T5373] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.530: invalid indirect mapped block 11 (level 0) [ 98.667746][ T5373] fserror_report: 2 callbacks suppressed [ 98.667762][ T5373] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.676899][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.699458][ C1] EXT4-fs (loop1): initial error at time 1785714563: ext4_free_branches:1023: inode 13 [ 98.714428][ C1] EXT4-fs (loop1): last error at time 1785714563: ext4_free_branches:1023: inode 13 [ 98.746581][ T5373] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.530: attempt to clear invalid blocks 1024 len 1 [ 98.764889][ T5373] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.774582][ T5373] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 98.807776][ T5373] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.530: invalid indirect mapped block 1819239214 (level 0) [ 98.823520][ T5373] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.827861][ T5373] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.530: invalid indirect mapped block 33554432 (level 2) [ 98.859821][ T5373] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.874760][ T5373] EXT4-fs (loop1): 1 truncate cleaned up [ 98.943900][ T5373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.190721][ T5381] netlink: 'syz.3.532': attribute type 4 has an invalid length. [ 99.358018][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.656491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.874854][ T5414] bond4 (unregistering): Released all slaves [ 100.010193][ T5427] loop1: detected capacity change from 0 to 512 [ 100.019575][ T5427] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.546: invalid indirect mapped block 11 (level 0) [ 100.034394][ T5427] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.037441][ T5427] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.546: attempt to clear invalid blocks 1024 len 1 [ 100.047192][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 100.047433][ C0] EXT4-fs (loop1): initial error at time 1785714565: ext4_free_branches:1023: inode 13 [ 100.047640][ C0] EXT4-fs (loop1): last error at time 1785714565: ext4_free_branches:1023: inode 13 [ 100.146587][ T5427] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.151339][ T5427] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 100.175284][ T5427] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.546: invalid indirect mapped block 1819239214 (level 0) [ 100.191748][ T5427] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.196507][ T5427] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.546: invalid indirect mapped block 33554432 (level 2) [ 100.313237][ T5434] loop3: detected capacity change from 0 to 512 [ 100.318245][ T5434] vfat: Unknown parameter 'iocerrors' [ 100.394325][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.394472][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.502356][ T5427] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 100.518056][ T5427] EXT4-fs (loop1): 1 truncate cleaned up [ 100.564169][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.585016][ T5434] lo speed is unknown, defaulting to 1000 [ 100.594867][ T5434] lo speed is unknown, defaulting to 1000 [ 100.602172][ T5434] lo speed is unknown, defaulting to 1000 [ 100.789560][ T5434] infiniband sz1: set active [ 100.794595][ T5434] infiniband sz1: added lo [ 100.820934][ T5434] RDS/IB: sz1: added [ 100.825365][ T5434] smc: adding ib device sz1 with port count 1 [ 100.832342][ T5434] smc: ib device sz1 port 1 has no pnetid [ 100.861883][ T842] lo speed is unknown, defaulting to 1000 [ 100.871071][ T5434] lo speed is unknown, defaulting to 1000 [ 100.936283][ T3527] lo speed is unknown, defaulting to 1000 [ 100.993356][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.153669][ T5434] lo speed is unknown, defaulting to 1000 [ 101.291351][ T5445] loop2: detected capacity change from 0 to 512 [ 101.298283][ T5445] ext4: Unknown parameter 'smackfsroot' [ 101.306120][ T5445] SELinux: Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped). [ 101.316306][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 101.316339][ T28] audit: type=1400 audit(1785714566.304:750): avc: denied { mac_admin } for pid=5443 comm="syz.2.550" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.381416][ T28] audit: type=1400 audit(1785714566.374:751): avc: denied { relabelto } for pid=5443 comm="syz.2.550" name="file1" dev="tmpfs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_tbl_t:s0" [ 101.412555][ T28] audit: type=1400 audit(1785714566.374:752): avc: denied { associate } for pid=5443 comm="syz.2.550" name="file1" dev="tmpfs" ino=484 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_tbl_t:s0" [ 101.495396][ T5434] lo speed is unknown, defaulting to 1000 [ 101.500716][ T5459] geneve2: entered allmulticast mode [ 101.650462][ T5434] lo speed is unknown, defaulting to 1000 [ 101.700955][ T28] audit: type=1400 audit(1785714566.694:753): avc: denied { rmdir } for pid=3298 comm="syz-executor" name="file1" dev="tmpfs" ino=484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_tbl_t:s0" [ 101.853758][ T5434] lo speed is unknown, defaulting to 1000 [ 102.027164][ T5434] lo speed is unknown, defaulting to 1000 [ 102.067419][ T5434] lo speed is unknown, defaulting to 1000 [ 102.070988][ T5464] loop2: detected capacity change from 0 to 512 [ 102.226258][ T5464] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.556: invalid indirect mapped block 11 (level 0) [ 102.242528][ T5464] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.247315][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 102.268038][ C1] EXT4-fs (loop2): initial error at time 1785714567: ext4_free_branches:1023: inode 13 [ 102.281537][ C1] EXT4-fs (loop2): last error at time 1785714567: ext4_free_branches:1023: inode 13 [ 102.327812][ T5464] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.556: attempt to clear invalid blocks 1024 len 1 [ 102.343701][ T5464] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.350771][ T5464] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 102.384464][ T5464] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.556: invalid indirect mapped block 1819239214 (level 0) [ 102.405399][ T5464] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.556: invalid indirect mapped block 33554432 (level 2) [ 102.432069][ T5464] EXT4-fs (loop2): 1 truncate cleaned up [ 102.481078][ T5464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.759095][ T5442] Set syz1 is full, maxelem 65536 reached [ 102.797768][ T5471] No such timeout policy "syz1" [ 102.861728][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.943916][ T28] audit: type=1400 audit(1785714567.934:754): avc: denied { write } for pid=5474 comm="syz.3.560" name="rt_cache" dev="proc" ino=4026532517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 102.988578][ T5477] bond4: option ad_select: invalid value (34) [ 103.013604][ T5477] bond4 (unregistering): Released all slaves [ 103.053694][ T28] audit: type=1400 audit(1785714568.034:755): avc: denied { write } for pid=5476 comm="syz.2.559" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.188724][ T28] audit: type=1400 audit(1785714568.174:756): avc: denied { watch watch_reads } for pid=5476 comm="syz.2.559" path="/88" dev="tmpfs" ino=496 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.219219][ T5483] loop3: detected capacity change from 0 to 512 [ 103.359904][ T5483] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.368298][ T5483] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.374897][ T5483] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.562: bad orphan inode 15 [ 103.407428][ T5483] loop3: lost filesystem error report for type 5 error -117 [ 103.415618][ T5483] ext4_test_bit(bit=14, block=5) = 0 [ 103.415989][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 103.421041][ T5482] loop4: detected capacity change from 0 to 512 [ 103.424356][ C0] EXT4-fs (loop3): initial error at time 1785714568: ext4_orphan_get:1425 [ 103.424410][ C0] EXT4-fs (loop3): last error at time 1785714568: ext4_orphan_get:1425 [ 103.438317][ T5487] PM: suspend entry (deep) [ 103.444842][ T5483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.484487][ T28] audit: type=1400 audit(1785714568.464:757): avc: denied { mount } for pid=5476 comm="syz.2.559" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.549010][ T5482] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 103.576773][ T5483] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 103.585800][ T5482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.620002][ T5482] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.620736][ T5482] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 103.624128][ T5482] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #16: comm syz.4.561: corrupted xattr block 31: invalid header [ 103.624603][ T5482] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 103.624734][ T5482] EXT4-fs (loop4): 1 orphan inode deleted [ 103.637324][ T5482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.643635][ T5471] __nla_validate_parse: 2 callbacks suppressed [ 103.643654][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 103.708420][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.729132][ T5491] tipc: Enabling of bearer rejected, failed to enable media [ 103.790894][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.816115][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.845316][ T5499] loop3: detected capacity change from 0 to 512 [ 103.845377][ T5497] ip6gretap0: entered promiscuous mode [ 103.859746][ T4314] Filesystems sync: 0.321 seconds [ 103.861369][ T5499] EXT4-fs: Ignoring removed i_version option [ 103.866828][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 103.881677][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 103.909403][ T5499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.935304][ T28] audit: type=1400 audit(1785714568.914:758): avc: denied { append } for pid=5492 comm="syz.4.565" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.965854][ T5499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.979425][ T5487] Freezing user space processes [ 103.985366][ T28] audit: type=1400 audit(1785714568.914:759): avc: denied { create } for pid=5492 comm="syz.4.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.995668][ T5499] EXT4-fs (loop3): 1 truncate cleaned up [ 104.011522][ T5499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.025926][ T5487] Freezing user space processes completed (elapsed 0.041 seconds) [ 104.033760][ T5487] OOM killer disabled. [ 104.037877][ T5487] Freezing remaining freezable tasks [ 104.044543][ T5487] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 104.053011][ T5487] printk: Suspending console(s) (use no_console_suspend to debug) [ 104.097160][ T5487] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 104.097331][ T5487] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 104.097674][ T5487] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 104.097754][ T5487] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 104.097787][ T5487] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 104.097866][ T5487] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 104.097887][ T5487] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 104.106339][ T5487] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 104.107111][ T5487] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 104.107151][ T5487] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 104.107327][ T5487] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 104.107350][ T5487] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 104.107384][ T5487] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 104.107407][ T5487] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 104.107439][ T5487] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 104.107531][ T5487] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 104.145811][ T4453] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 104.669765][ T5487] ACPI: PM: Preparing to enter system sleep state S3 [ 104.669995][ T5487] ACPI: PM: Saving platform NVS memory [ 104.670091][ T5487] Disabling non-boot CPUs ... [ 104.674438][ T5487] smpboot: CPU 1 is now offline [ 104.683759][ T5487] ACPI: PM: Low-level resume complete [ 104.683824][ T5487] ACPI: PM: Restoring platform NVS memory [ 104.700106][ T5487] Enabling non-boot CPUs ... [ 104.700370][ T5487] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 104.705032][ T5487] CPU1 is up [ 104.705265][ T5487] ACPI: PM: Waking up from system sleep state S3 [ 104.753833][ T4458] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 104.941888][ T5487] OOM killer enabled. [ 104.942802][ T5487] Restarting tasks: Starting [ 104.956614][ T5487] Restarting tasks: Done [ 104.957786][ T5487] random: crng reseeded on system resumption [ 104.960414][ T5487] PM: suspend exit [ 104.964559][ T4410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.970293][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.974591][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.018009][ T5521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58128 sclass=netlink_route_socket pid=5521 comm=syz.0.570 [ 105.046020][ T5501] loop2: detected capacity change from 0 to 512 [ 105.060534][ T5501] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.061069][ T5499] capability: warning: `syz.3.566' uses deprecated v2 capabilities in a way that may be insecure [ 105.100624][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.112265][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.133623][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.149538][ T5527] veth1_to_bond: entered allmulticast mode [ 105.153155][ T5527] veth1_to_bond: entered promiscuous mode [ 105.159268][ T5526] lo speed is unknown, defaulting to 1000 [ 105.160909][ T5524] veth1_to_bond: left promiscuous mode [ 105.162128][ T5524] veth1_to_bond: left allmulticast mode [ 105.595695][ T4410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.598762][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.064231][ T5548] bond2: option ad_select: invalid value (34) [ 106.072829][ T5548] bond2 (unregistering): Released all slaves [ 106.133998][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 106.251794][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.399268][ T5574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=5574 comm=syz.2.587 [ 106.418751][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 106.418766][ T28] audit: type=1400 audit(1785714571.409:774): avc: denied { create } for pid=5573 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.463757][ T28] audit: type=1400 audit(1785714571.409:775): avc: denied { bind } for pid=5573 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.625122][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.636823][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.659734][ T5579] veth1_to_bond: entered allmulticast mode [ 106.661176][ T5579] veth1_to_bond: entered promiscuous mode [ 106.663964][ T5578] veth1_to_bond: left promiscuous mode [ 106.665364][ T5578] veth1_to_bond: left allmulticast mode [ 106.691973][ T5581] Illegal XDP return value 74 on prog (id 63) dev syz_tun, expect packet loss! [ 106.738802][ T5581] loop2: detected capacity change from 0 to 2048 [ 106.743177][ T5581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.755027][ T5581] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 106.810319][ T28] audit: type=1400 audit(1785714571.799:776): avc: denied { ioctl } for pid=5582 comm="syz.2.591" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.860610][ T28] audit: type=1400 audit(1785714571.849:777): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 107.031898][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 107.040295][ T5592] geneve0: entered promiscuous mode [ 107.061868][ T5594] loop3: detected capacity change from 0 to 4096 [ 107.069963][ T5594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.192805][ T5602] x_tables: duplicate underflow at hook 1 [ 107.213297][ T28] audit: type=1400 audit(1785714572.199:778): avc: denied { write } for pid=5593 comm="syz.3.597" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 107.275992][ T28] audit: type=1400 audit(1785714572.239:779): avc: denied { open } for pid=5593 comm="syz.3.597" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 107.376872][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.421256][ T5620] bond2: option ad_select: invalid value (34) [ 107.423900][ T5620] bond2 (unregistering): Released all slaves [ 107.433691][ T5623] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 107.437152][ T5623] bond2 (unregistering): Released all slaves [ 107.478180][ T28] audit: type=1400 audit(1785714572.469:780): avc: denied { create } for pid=5622 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.496187][ T28] audit: type=1400 audit(1785714572.489:781): avc: denied { setopt } for pid=5629 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.532832][ T5632] FAULT_INJECTION: forcing a failure. [ 107.532832][ T5632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.535714][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz.2.609 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.535769][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.535834][ T5632] Call Trace: [ 107.535841][ T5632] [ 107.535849][ T5632] __dump_stack+0x1d/0x30 [ 107.535877][ T5632] dump_stack_lvl+0x95/0xd0 [ 107.535951][ T5632] dump_stack+0x15/0x1b [ 107.535972][ T5632] should_fail_ex+0x25e/0x270 [ 107.536050][ T5632] should_fail+0xb/0x20 [ 107.536078][ T5632] should_fail_usercopy+0x1a/0x20 [ 107.536109][ T5632] _copy_from_user+0x1c/0xb0 [ 107.536178][ T5632] copy_from_sockptr+0x48/0x70 [ 107.536205][ T5632] raw_setsockopt+0x4c9/0xda0 [ 107.536257][ T5632] ? __pfx_raw_setsockopt+0x10/0x10 [ 107.536291][ T5632] __sys_setsockopt+0x184/0x200 [ 107.536381][ T5632] __x64_sys_setsockopt+0x64/0x80 [ 107.536415][ T5632] x64_sys_call+0x2327/0x3020 [ 107.536459][ T5632] do_syscall_64+0x136/0x3c0 [ 107.536483][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.536507][ T5632] RIP: 0033:0x7f0809b2e019 [ 107.536581][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.536601][ T5632] RSP: 002b:00007f0808587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.536659][ T5632] RAX: ffffffffffffffda RBX: 00007f0809db5fa0 RCX: 00007f0809b2e019 [ 107.536673][ T5632] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000006 [ 107.536685][ T5632] RBP: 00007f0808587090 R08: 0000000000000008 R09: 0000000000000000 [ 107.536698][ T5632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.536712][ T5632] R13: 00007f0809db6038 R14: 00007f0809db5fa0 R15: 00007ffe17e3b7b8 [ 107.536733][ T5632] [ 107.592862][ T28] audit: type=1400 audit(1785714572.579:782): avc: denied { bind } for pid=5635 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.597800][ T28] audit: type=1400 audit(1785714572.589:783): avc: denied { listen } for pid=5635 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.629168][ T5636] netlink: 368 bytes leftover after parsing attributes in process `syz.2.611'. [ 107.665656][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.668230][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.673332][ T5641] veth1_to_bond: entered allmulticast mode [ 107.685395][ T5641] veth1_to_bond: entered promiscuous mode [ 107.691722][ T5640] veth1_to_bond: left promiscuous mode [ 107.692655][ T5640] veth1_to_bond: left allmulticast mode [ 107.765069][ T5645] loop4: detected capacity change from 0 to 512 [ 107.827129][ T5645] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.613: invalid indirect mapped block 11 (level 0) [ 107.829336][ T5645] fserror_report: 3 callbacks suppressed [ 107.829367][ T5645] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.839024][ T5645] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.613: attempt to clear invalid blocks 1024 len 1 [ 107.843102][ T5645] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.843336][ T5645] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 107.848289][ T5645] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.613: invalid indirect mapped block 1819239214 (level 0) [ 107.850584][ T5645] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.850762][ T5645] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.613: invalid indirect mapped block 33554432 (level 2) [ 107.854498][ T5645] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.854925][ T5645] EXT4-fs (loop4): 1 truncate cleaned up [ 107.856352][ C0] EXT4-fs (loop4): error count since last fsck: 5 [ 107.856371][ C0] EXT4-fs (loop4): initial error at time 1785714572: ext4_free_branches:1023: inode 13 [ 107.856407][ C0] EXT4-fs (loop4): last error at time 1785714572: ext4_free_branches:1023: inode 13 [ 107.862942][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.055689][ T5646] loop2: detected capacity change from 0 to 512 [ 108.088809][ T5646] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.614: invalid indirect mapped block 11 (level 0) [ 108.094289][ T5646] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 108.110965][ T5646] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.614: attempt to clear invalid blocks 1024 len 1 [ 108.127702][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.133322][ C1] EXT4-fs (loop2): initial error at time 1785714573: ext4_free_branches:1023: inode 13 [ 108.135562][ C1] EXT4-fs (loop2): last error at time 1785714573: ext4_free_branches:1023: inode 13 [ 108.151785][ T5646] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 108.164783][ T5646] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 108.176944][ T5646] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.614: invalid indirect mapped block 1819239214 (level 0) [ 108.179344][ T5646] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 108.179743][ T5646] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.614: invalid indirect mapped block 33554432 (level 2) [ 108.183293][ T5646] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 108.187570][ T5654] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.617'. [ 108.196018][ T5654] netlink: zone id is out of range [ 108.196930][ T5654] netlink: zone id is out of range [ 108.197701][ T5654] netlink: zone id is out of range [ 108.198470][ T5654] netlink: zone id is out of range [ 108.199364][ T5654] netlink: zone id is out of range [ 108.200179][ T5654] netlink: zone id is out of range [ 108.201636][ T5654] netlink: zone id is out of range [ 108.202569][ T5654] netlink: zone id is out of range [ 108.204272][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.207489][ T5654] netlink: zone id is out of range [ 108.208468][ T5654] netlink: zone id is out of range [ 108.216635][ T5646] EXT4-fs (loop2): 1 truncate cleaned up [ 108.243688][ T5646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.276747][ T5658] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 108.294392][ T5658] bond2 (unregistering): Released all slaves [ 108.307179][ T5663] loop4: detected capacity change from 0 to 136 [ 108.310601][ T5663] iso9660: Unknown parameter 'uid>00000000000000000000' [ 108.547886][ T5682] bond2: option ad_select: invalid value (34) [ 108.550969][ T5682] bond2 (unregistering): Released all slaves [ 108.620854][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.699155][ T5698] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 108.702224][ T5698] syz_tun: entered promiscuous mode [ 108.710380][ T5698] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.988419][ T5697] loop1: detected capacity change from 0 to 512 [ 109.421768][ T5697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.629: invalid indirect mapped block 11 (level 0) [ 109.429356][ T5697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 109.444426][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 109.450993][ C1] EXT4-fs (loop1): initial error at time 1785714574: ext4_free_branches:1023: inode 13 [ 109.458324][ C1] EXT4-fs (loop1): last error at time 1785714574: ext4_free_branches:1023: inode 13 [ 109.467437][ T5697] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.629: attempt to clear invalid blocks 1024 len 1 [ 109.472096][ T5697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 109.478318][ T5697] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 109.489203][ T5697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.629: invalid indirect mapped block 1819239214 (level 0) [ 109.591638][ T5697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.629: invalid indirect mapped block 33554432 (level 2) [ 109.651671][ T5697] EXT4-fs (loop1): 1 truncate cleaned up [ 109.705601][ T5697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.623029][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.629742][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.837173][ T5714] loop4: detected capacity change from 0 to 512 [ 111.019659][ T5714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.632: invalid indirect mapped block 11 (level 0) [ 111.025614][ C0] EXT4-fs (loop4): initial error at time 1785714576: ext4_free_branches:1023: inode 13 [ 111.030493][ C0] EXT4-fs (loop4): last error at time 1785714576: ext4_free_branches:1023: inode 13 [ 111.101450][ T5714] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.632: attempt to clear invalid blocks 1024 len 1 [ 111.170615][ T5714] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 111.178575][ T5714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.632: invalid indirect mapped block 1819239214 (level 0) [ 111.186802][ T5714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.632: invalid indirect mapped block 33554432 (level 2) [ 111.259299][ T5714] EXT4-fs (loop4): 1 truncate cleaned up [ 111.264632][ T5714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.667831][ T5717] lo speed is unknown, defaulting to 1000 [ 111.710354][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.829646][ T5738] PM: suspend entry (deep) [ 111.836723][ T5735] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 111.842798][ T5735] bond2 (unregistering): Released all slaves [ 111.971028][ T5741] loop2: detected capacity change from 0 to 512 [ 112.143476][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.156298][ T4410] Filesystems sync: 0.325 seconds [ 112.203201][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 112.203220][ T28] audit: type=1400 audit(1785714577.189:786): avc: denied { setopt } for pid=5742 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.207387][ T28] audit: type=1400 audit(1785714577.189:787): avc: denied { read } for pid=5742 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.219812][ T5745] tipc: Enabled bearer , priority 0 [ 112.221297][ T5745] syzkaller0: entered promiscuous mode [ 112.222171][ T5745] syzkaller0: entered allmulticast mode [ 112.229819][ T5745] tipc: Resetting bearer [ 112.233622][ T5744] tipc: Resetting bearer [ 112.239808][ T5744] tipc: Disabling bearer [ 112.255968][ T5738] Freezing user space processes [ 112.391118][ T5738] Freezing user space processes completed (elapsed 0.134 seconds) [ 112.392485][ T5738] OOM killer disabled. [ 112.393369][ T5738] Freezing remaining freezable tasks [ 112.395825][ T5738] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 112.397059][ T5738] printk: Suspending console(s) (use no_console_suspend to debug) [ 112.437229][ T5738] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 112.437423][ T5738] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 112.437470][ T5738] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 112.437575][ T5738] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 112.437613][ T5738] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 112.437675][ T5738] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 112.437739][ T5738] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 112.437759][ T5738] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 112.437796][ T5738] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 112.437872][ T5738] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 112.437908][ T5738] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 112.437928][ T5738] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 112.438029][ T5738] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 112.438052][ T5738] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 112.438089][ T5738] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 112.438158][ T5738] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 112.485044][ T4421] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 113.015692][ T5738] ACPI: PM: Preparing to enter system sleep state S3 [ 113.015856][ T5738] ACPI: PM: Saving platform NVS memory [ 113.015906][ T5738] Disabling non-boot CPUs ... [ 113.019484][ T5738] smpboot: CPU 1 is now offline [ 113.026649][ T5738] ACPI: PM: Low-level resume complete [ 113.026713][ T5738] ACPI: PM: Restoring platform NVS memory [ 113.041676][ T5738] Enabling non-boot CPUs ... [ 113.041826][ T5738] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 113.046435][ T5738] CPU1 is up [ 113.046683][ T5738] ACPI: PM: Waking up from system sleep state S3 [ 113.085360][ T4340] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 113.296776][ T5738] OOM killer enabled. [ 113.297503][ T5738] Restarting tasks: Starting [ 113.305993][ T5738] Restarting tasks: Done [ 113.306777][ T5738] random: crng reseeded on system resumption [ 113.310037][ T5738] PM: suspend exit [ 113.464808][ T5753] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 113.471083][ T5753] bond2 (unregistering): Released all slaves [ 115.372077][ C0] net_ratelimit: 3558 callbacks suppressed [ 115.372097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.732112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.733578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.735086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.736438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.737887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.739523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.740897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.742207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.743706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.068666][ T28] audit: type=1400 audit(1785714582.061:788): avc: denied { write } for pid=5794 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 117.110927][ T5797] : renamed from bond_slave_0 (while UP) [ 117.172965][ T5789] loop3: detected capacity change from 0 to 512 [ 117.221166][ T5804] PM: suspend entry (deep) [ 117.268162][ T5808] netlink: 'syz.2.658': attribute type 28 has an invalid length. [ 117.268186][ T5808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.658'. [ 117.489447][ T5820] loop1: detected capacity change from 0 to 1024 [ 117.498803][ T5820] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 117.640228][ T5807] tipc: Enabling of bearer rejected, failed to enable media [ 117.643115][ T4319] Filesystems sync: 0.399 seconds [ 117.684624][ T5804] Freezing user space processes [ 117.777081][ T5804] Freezing user space processes completed (elapsed 0.063 seconds) [ 117.778339][ T5804] OOM killer disabled. [ 117.778921][ T5804] Freezing remaining freezable tasks [ 117.781329][ T5804] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 117.782661][ T5804] printk: Suspending console(s) (use no_console_suspend to debug) [ 117.825544][ T5804] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 117.825590][ T5804] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 117.825672][ T5804] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 117.825755][ T5804] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 117.825779][ T5804] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 117.825841][ T5804] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 117.825863][ T5804] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 117.825885][ T5804] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 117.826030][ T5804] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 117.826110][ T5804] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 117.826219][ T5804] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 117.826239][ T5804] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 117.826281][ T5804] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 117.826346][ T5804] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 117.826368][ T5804] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 117.826429][ T5804] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 117.862400][ T4343] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 118.389396][ T5804] ACPI: PM: Preparing to enter system sleep state S3 [ 118.389576][ T5804] ACPI: PM: Saving platform NVS memory [ 118.389637][ T5804] Disabling non-boot CPUs ... [ 118.393586][ T5804] smpboot: CPU 1 is now offline [ 118.401035][ T5804] ACPI: PM: Low-level resume complete [ 118.401100][ T5804] ACPI: PM: Restoring platform NVS memory [ 118.419748][ T5804] Enabling non-boot CPUs ... [ 118.420010][ T5804] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 118.424322][ T5804] CPU1 is up [ 118.424549][ T5804] ACPI: PM: Waking up from system sleep state S3 [ 118.450246][ T4450] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 118.628257][ T5804] OOM killer enabled. [ 118.628987][ T5804] Restarting tasks: Starting [ 118.631539][ T5804] Restarting tasks: Done [ 118.632994][ T5804] random: crng reseeded on system resumption [ 118.634892][ T5804] PM: suspend exit [ 118.736605][ T5830] loop1: detected capacity change from 0 to 128 [ 118.862325][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.877090][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.890337][ T5841] PM: suspend entry (deep) [ 119.035069][ T4450] Filesystems sync: 0.143 seconds [ 119.116082][ T5841] Freezing user space processes [ 120.583575][ T5841] Freezing user space processes completed (elapsed 1.466 seconds) [ 120.585006][ T5841] OOM killer disabled. [ 120.585911][ T5841] Freezing remaining freezable tasks [ 120.588187][ T5841] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 120.590082][ T5841] printk: Suspending console(s) (use no_console_suspend to debug) [ 120.626819][ T5841] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 120.626869][ T5841] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 120.626922][ T5841] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 120.626958][ T5841] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 120.626994][ T5841] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 120.627059][ T5841] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 120.627092][ T5841] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 120.627159][ T5841] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 120.628169][ T5841] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 120.628214][ T5841] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 120.628328][ T5841] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 120.628370][ T5841] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 120.628415][ T5841] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 120.628604][ T5841] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 120.628633][ T5841] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 120.628721][ T5841] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 120.675559][ T4427] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 121.201468][ T5841] ACPI: PM: Preparing to enter system sleep state S3 [ 121.201626][ T5841] ACPI: PM: Saving platform NVS memory [ 121.201679][ T5841] Disabling non-boot CPUs ... [ 121.205481][ T5841] smpboot: CPU 1 is now offline [ 121.209336][ T5841] ACPI: PM: Low-level resume complete [ 121.209395][ T5841] ACPI: PM: Restoring platform NVS memory [ 121.224713][ T5841] Enabling non-boot CPUs ... [ 121.224919][ T5841] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 121.229546][ T5841] CPU1 is up [ 121.229777][ T5841] ACPI: PM: Waking up from system sleep state S3 [ 121.261078][ T4432] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 121.418426][ T5841] OOM killer enabled. [ 121.419098][ T5841] Restarting tasks: Starting [ 121.467211][ T5841] Restarting tasks: Done [ 121.468357][ T5841] random: crng reseeded on system resumption [ 121.491011][ T5841] PM: suspend exit [ 121.685758][ T5854] tipc: Enabling of bearer rejected, failed to enable media [ 121.730096][ T5858] loop2: detected capacity change from 0 to 512 [ 121.941380][ T5869] loop3: detected capacity change from 0 to 512 [ 121.987099][ T5869] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.667: invalid indirect mapped block 11 (level 0) [ 121.989937][ T5869] fserror_report: 6 callbacks suppressed [ 121.989949][ T5869] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 121.991253][ T5869] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.667: attempt to clear invalid blocks 1024 len 1 [ 121.992839][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 121.992856][ C1] EXT4-fs (loop3): initial error at time 1785714586: ext4_free_branches:1023: inode 13 [ 121.992891][ C1] EXT4-fs (loop3): last error at time 1785714586: ext4_free_branches:1023: inode 13 [ 122.002917][ T5869] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.003411][ T5869] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 122.016495][ T5869] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.667: invalid indirect mapped block 1819239214 (level 0) [ 122.024113][ T5869] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.024727][ T5869] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.667: invalid indirect mapped block 33554432 (level 2) [ 122.030712][ T5877] Need at least one configuration in g1. [ 122.034964][ T5877] udc usbip-vudc.0: failed to start g1: -22 [ 122.036167][ T5877] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 122.042440][ T5877] UDC core: g1: couldn't find an available UDC or it's busy [ 122.044137][ T5869] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.044673][ T5869] EXT4-fs (loop3): 1 truncate cleaned up [ 122.050109][ T5869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.083299][ T28] audit: type=1400 audit(1785714587.004:789): avc: denied { name_bind } for pid=5876 comm="syz.1.681" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.087107][ T28] audit: type=1400 audit(1785714587.014:790): avc: denied { write } for pid=5876 comm="syz.1.681" name="UDC" dev="configfs" ino=11669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 122.105485][ T28] audit: type=1400 audit(1785714587.014:791): avc: denied { open } for pid=5876 comm="syz.1.681" path="/144/config/usb_gadget/g1/UDC" dev="configfs" ino=11669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 122.412098][ T5882] loop1: detected capacity change from 0 to 512 [ 122.607043][ T5882] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.682: invalid indirect mapped block 11 (level 0) [ 122.612155][ T5882] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.622005][ T5882] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.682: attempt to clear invalid blocks 1024 len 1 [ 122.622914][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 122.623034][ C1] EXT4-fs (loop1): initial error at time 1785714587: ext4_free_branches:1023: inode 13 [ 122.623386][ C1] EXT4-fs (loop1): last error at time 1785714587: ext4_free_branches:1023: inode 13 [ 122.636515][ T5882] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.645269][ T5882] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 122.659759][ T5882] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.682: invalid indirect mapped block 1819239214 (level 0) [ 122.665030][ T5882] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.671555][ T5882] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.682: invalid indirect mapped block 33554432 (level 2) [ 122.681775][ T5882] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.694490][ T5882] EXT4-fs (loop1): 1 truncate cleaned up [ 122.732579][ T5882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.751186][ T5902] loop4: detected capacity change from 0 to 512 [ 123.761966][ T5902] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.683: invalid indirect mapped block 11 (level 0) [ 123.764103][ T5902] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 123.764904][ T5902] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.683: attempt to clear invalid blocks 1024 len 1 [ 123.768876][ T5902] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 123.769163][ T5902] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 123.773192][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 123.773213][ C1] EXT4-fs (loop4): initial error at time 1785714588: ext4_free_branches:1023: inode 13 [ 123.773247][ C1] EXT4-fs (loop4): last error at time 1785714588: ext4_clear_blocks:876: inode 13 [ 123.777515][ T5902] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.683: invalid indirect mapped block 1819239214 (level 0) [ 123.780422][ T5902] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.683: invalid indirect mapped block 33554432 (level 2) [ 123.783172][ T5902] EXT4-fs (loop4): 1 truncate cleaned up [ 123.784587][ T5902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.821119][ T5897] bond4 (unregistering): Released all slaves [ 123.845168][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.850131][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.002305][ T28] audit: type=1400 audit(1785714588.984:792): avc: denied { listen } for pid=5907 comm="syz.1.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.036760][ T28] audit: type=1400 audit(1785714589.014:793): avc: denied { read } for pid=5907 comm="syz.1.686" path="socket:[11702]" dev="sockfs" ino=11702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.052401][ T5911] loop1: detected capacity change from 0 to 256 [ 124.088947][ T5911] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.158573][ T5913] tipc: Enabled bearer , priority 0 [ 124.162001][ T5913] syzkaller0: entered promiscuous mode [ 124.163058][ T5913] syzkaller0: entered allmulticast mode [ 124.168013][ T5911] net_ratelimit: 134 callbacks suppressed [ 124.168032][ T5911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.170605][ T5913] tipc: Resetting bearer [ 124.176785][ T28] audit: type=1400 audit(1785714589.164:794): avc: denied { getopt } for pid=5907 comm="syz.1.686" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.207850][ T5912] tipc: Resetting bearer [ 124.254719][ T5912] tipc: Disabling bearer [ 124.417488][ T5930] Need at least one configuration in g1. [ 124.423380][ T5930] udc usbip-vudc.0: failed to start g1: -22 [ 124.424686][ T5930] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 124.433195][ T5930] UDC core: g1: couldn't find an available UDC or it's busy [ 124.538051][ T28] audit: type=1400 audit(1785714589.524:795): avc: denied { firmware_load } for pid=5934 comm="syz.3.693" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 124.612703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.614158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.615567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.617056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.619045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.620850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.622209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.623619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.625146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.657033][ T28] audit: type=1400 audit(1785714589.644:796): avc: denied { kexec_image_load } for pid=5918 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 124.736769][ T5950] loop2: detected capacity change from 0 to 256 [ 126.947483][ T5957] netlink: 'syz.1.697': attribute type 14 has an invalid length. [ 126.952232][ T5957] PM: suspend entry (deep) [ 128.240859][ T5961] FAULT_INJECTION: forcing a failure. [ 128.240859][ T5961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.242973][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.2.699 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.243009][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.243024][ T5961] Call Trace: [ 128.243033][ T5961] [ 128.243042][ T5961] __dump_stack+0x1d/0x30 [ 128.243065][ T5961] dump_stack_lvl+0x95/0xd0 [ 128.243145][ T5961] dump_stack+0x15/0x1b [ 128.243164][ T5961] should_fail_ex+0x25e/0x270 [ 128.243198][ T5961] should_fail+0xb/0x20 [ 128.243227][ T5961] should_fail_usercopy+0x1a/0x20 [ 128.243355][ T5961] _copy_to_user+0x20/0xa0 [ 128.243405][ T5961] simple_read_from_buffer+0xb5/0x130 [ 128.243431][ T5961] proc_fail_nth_read+0x10e/0x150 [ 128.243456][ T5961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.243511][ T5961] vfs_read+0x18e/0x7c0 [ 128.243528][ T5961] ? __rcu_read_unlock+0x4e/0x70 [ 128.243554][ T5961] ? __fget_files+0x184/0x1c0 [ 128.243652][ T5961] ? mutex_lock+0x57/0x90 [ 128.243741][ T5961] ksys_read+0xdc/0x1a0 [ 128.243759][ T5961] __x64_sys_read+0x40/0x50 [ 128.243778][ T5961] x64_sys_call+0x2886/0x3020 [ 128.243868][ T5961] do_syscall_64+0x136/0x3c0 [ 128.243893][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.243913][ T5961] RIP: 0033:0x7f0809aee84e [ 128.243930][ T5961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.244027][ T5961] RSP: 002b:00007f0808586fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.244126][ T5961] RAX: ffffffffffffffda RBX: 00007f08085876c0 RCX: 00007f0809aee84e [ 128.244195][ T5961] RDX: 000000000000000f RSI: 00007f08085870a0 RDI: 0000000000000004 [ 128.244208][ T5961] RBP: 00007f0808587090 R08: 0000000000000000 R09: 0000000000000000 [ 128.244223][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.244237][ T5961] R13: 00007f0809db6038 R14: 00007f0809db5fa0 R15: 00007ffe17e3b7b8 [ 128.244317][ T5961] [ 128.332043][ T4394] Filesystems sync: 1.377 seconds [ 128.562947][ T5970] bond2 (unregistering): Released all slaves [ 128.573951][ T5957] Freezing user space processes [ 129.291412][ T5957] Freezing user space processes completed (elapsed 0.716 seconds) [ 129.292980][ T5957] OOM killer disabled. [ 129.293685][ T5957] Freezing remaining freezable tasks [ 129.296442][ T5957] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 129.297804][ T5957] printk: Suspending console(s) (use no_console_suspend to debug) [ 129.334858][ T5957] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 129.335285][ T5957] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 129.335408][ T5957] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 129.335448][ T5957] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 129.335568][ T5957] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 129.335608][ T5957] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 129.335647][ T5957] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 129.335973][ T5957] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 129.336168][ T5957] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 129.336197][ T5957] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 129.336293][ T5957] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 129.336368][ T5957] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 129.336389][ T5957] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 129.336411][ T5957] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 129.336444][ T5957] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 129.336522][ T5957] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 129.373168][ T4433] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 129.895539][ T5957] ACPI: PM: Preparing to enter system sleep state S3 [ 129.895720][ T5957] ACPI: PM: Saving platform NVS memory [ 129.895784][ T5957] Disabling non-boot CPUs ... [ 129.900192][ T5957] smpboot: CPU 1 is now offline [ 129.907235][ T5957] ACPI: PM: Low-level resume complete [ 129.907294][ T5957] ACPI: PM: Restoring platform NVS memory [ 129.922582][ T5957] Enabling non-boot CPUs ... [ 129.922765][ T5957] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 129.927291][ T5957] CPU1 is up [ 129.927678][ T5957] ACPI: PM: Waking up from system sleep state S3 [ 129.965311][ T4325] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 130.156399][ T5957] OOM killer enabled. [ 130.157030][ T5957] Restarting tasks: Starting [ 130.163961][ T4430] net_ratelimit: 135 callbacks suppressed [ 130.163981][ T4430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.170401][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.177129][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.201794][ T5957] Restarting tasks: Done [ 130.202874][ T5957] random: crng reseeded on system resumption [ 130.203999][ T5957] PM: suspend exit [ 130.221157][ T5978] loop2: detected capacity change from 0 to 512 [ 130.228816][ T5978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.231260][ T5978] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.234120][ T5978] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.702: unexpected EA_INODE flag [ 130.268785][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.303302][ T5983] loop1: detected capacity change from 0 to 512 [ 130.349957][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 130.407249][ T5985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.706'. [ 130.417066][ T5985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.706'. [ 130.540144][ T5994] loop4: detected capacity change from 0 to 1024 [ 130.544412][ T5994] EXT4-fs: Ignoring removed bh option [ 130.628344][ T5994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 130.660901][ T28] audit: type=1400 audit(1785714595.622:797): avc: denied { write } for pid=5993 comm="syz.4.710" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.666770][ T28] audit: type=1400 audit(1785714595.622:798): avc: denied { read write } for pid=5993 comm="syz.4.710" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.694098][ T28] audit: type=1400 audit(1785714595.622:799): avc: denied { open } for pid=5993 comm="syz.4.710" path="/146/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.718993][ T28] audit: type=1400 audit(1785714595.622:800): avc: denied { map } for pid=5993 comm="syz.4.710" path="/146/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.749082][ T5989] loop1: detected capacity change from 0 to 764 [ 130.759679][ T28] audit: type=1400 audit(1785714595.622:801): avc: denied { execute } for pid=5993 comm="syz.4.710" path="/146/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.770547][ T28] audit: type=1400 audit(1785714595.622:802): avc: denied { write } for pid=5993 comm="syz.4.710" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 130.778319][ T5987] loop3: detected capacity change from 0 to 512 [ 130.828504][ T28] audit: type=1400 audit(1785714595.762:803): avc: denied { mounton } for pid=5993 comm="syz.4.710" path="/146/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.904096][ T5989] iso9660: Bad value for 'uid' [ 130.905347][ T5989] iso9660: Bad value for 'uid' [ 130.924052][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.927095][ T5987] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.707: invalid indirect mapped block 11 (level 0) [ 130.930633][ T28] audit: type=1400 audit(1785714595.892:804): avc: denied { ioctl } for pid=5988 comm="syz.1.708" path="socket:[12833]" dev="sockfs" ino=12833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.932280][ T5987] fserror_report: 2 callbacks suppressed [ 130.932304][ T5987] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 130.937399][ T5989] netlink: 52 bytes leftover after parsing attributes in process `syz.1.708'. [ 130.937809][ T5989] bridge0: port 3(erspan0) entered disabled state [ 130.937974][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.938215][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.000286][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 131.003903][ C1] EXT4-fs (loop3): initial error at time 1785714595: ext4_free_branches:1023: inode 13 [ 131.006322][ T28] audit: type=1400 audit(1785714595.982:805): avc: denied { write } for pid=5993 comm="syz.4.710" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.007412][ C1] EXT4-fs (loop3): last error at time 1785714595: ext4_free_branches:1023: inode 13 [ 131.022468][ T6003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.708'. [ 131.047065][ T5987] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.707: attempt to clear invalid blocks 1024 len 1 [ 131.053624][ T5987] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 131.086325][ T5987] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 131.094680][ T6006] loop1: detected capacity change from 0 to 1024 [ 131.100639][ T6006] EXT4-fs: test_dummy_encryption option not supported [ 131.101484][ T5987] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.707: invalid indirect mapped block 1819239214 (level 0) [ 131.103381][ T28] audit: type=1400 audit(1785714596.072:806): avc: denied { getopt } for pid=5988 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.106311][ T5987] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 131.125639][ T5987] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.707: invalid indirect mapped block 33554432 (level 2) [ 131.136288][ T5987] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 131.157413][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 131.171055][ T5987] EXT4-fs (loop3): 1 truncate cleaned up [ 131.234951][ T5987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.659824][ T6013] loop2: detected capacity change from 0 to 128 [ 131.734577][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.245062][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.258353][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.181749][ T6031] veth1_to_bond: entered allmulticast mode [ 133.182980][ T6031] veth1_to_bond: entered promiscuous mode [ 133.921920][ T6022] veth1_to_bond: left promiscuous mode [ 133.923497][ T6022] veth1_to_bond: left allmulticast mode [ 133.943976][ T6036] loop4: detected capacity change from 0 to 512 [ 134.650652][ T6037] loop2: detected capacity change from 0 to 1764 [ 135.320338][ T6052] loop2: detected capacity change from 0 to 764 [ 135.322157][ T6052] iso9660: Bad value for 'gid' [ 135.323168][ T6052] iso9660: Bad value for 'gid' [ 135.340126][ T6055] netlink: 168 bytes leftover after parsing attributes in process `syz.0.725'. [ 135.361426][ T6051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6051 comm=syz.4.722 [ 135.397093][ T6051] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 135.416832][ T6057] loop3: detected capacity change from 0 to 1764 [ 135.494402][ T6051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.500085][ T6051] netlink: 56 bytes leftover after parsing attributes in process `syz.4.722'. [ 135.658391][ T4412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.661495][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.666855][ T4455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.674155][ T6064] loop4: detected capacity change from 0 to 256 [ 135.674974][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.677473][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.679171][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.682232][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.687912][ T6064] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.759496][ T6067] loop4: detected capacity change from 0 to 128 [ 136.332741][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 136.332768][ T28] audit: type=1400 audit(1785714601.322:812): avc: denied { read } for pid=6075 comm="syz.2.732" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.338238][ T28] audit: type=1400 audit(1785714601.322:813): avc: denied { open } for pid=6075 comm="syz.2.732" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.363691][ T28] audit: type=1400 audit(1785714601.342:814): avc: denied { ioctl } for pid=6075 comm="syz.2.732" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.470574][ T6088] FAULT_INJECTION: forcing a failure. [ 136.470574][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.488912][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz.3.735 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.488940][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.488952][ T6088] Call Trace: [ 136.488960][ T6088] [ 136.489015][ T6088] __dump_stack+0x1d/0x30 [ 136.489042][ T6088] dump_stack_lvl+0x95/0xd0 [ 136.489066][ T6088] dump_stack+0x15/0x1b [ 136.489086][ T6088] should_fail_ex+0x25e/0x270 [ 136.489181][ T6088] should_fail+0xb/0x20 [ 136.489204][ T6088] should_fail_usercopy+0x1a/0x20 [ 136.489301][ T6088] _copy_from_user+0x1c/0xb0 [ 136.489320][ T6088] ____sys_sendmsg+0x1c1/0x580 [ 136.489341][ T6088] ___sys_sendmsg+0x195/0x1e0 [ 136.489370][ T6088] __sys_sendmmsg+0x185/0x320 [ 136.489410][ T6088] __x64_sys_sendmmsg+0x57/0x70 [ 136.489471][ T6088] x64_sys_call+0x27aa/0x3020 [ 136.489499][ T6088] do_syscall_64+0x136/0x3c0 [ 136.489523][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.489543][ T6088] RIP: 0033:0x7f253c78e019 [ 136.489627][ T6088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.489649][ T6088] RSP: 002b:00007f253b1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.489678][ T6088] RAX: ffffffffffffffda RBX: 00007f253ca15fa0 RCX: 00007f253c78e019 [ 136.489695][ T6088] RDX: 0000000000000002 RSI: 0000200000000e40 RDI: 0000000000000004 [ 136.489711][ T6088] RBP: 00007f253b1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.489756][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.489768][ T6088] R13: 00007f253ca16038 R14: 00007f253ca15fa0 R15: 00007fffb54211b8 [ 136.489893][ T6088] [ 136.892768][ T6090] Need at least one configuration in g1. [ 136.898724][ T6090] udc usbip-vudc.0: failed to start g1: -22 [ 136.905323][ T6090] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 136.916134][ T6090] UDC core: g1: couldn't find an available UDC or it's busy [ 136.946054][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.043475][ T6093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6093 comm=syz.3.737 [ 137.057669][ T6092] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 137.074231][ T6092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.085144][ T6092] netlink: 56 bytes leftover after parsing attributes in process `syz.3.737'. [ 137.131662][ T28] audit: type=1400 audit(1785714602.122:815): avc: denied { read } for pid=6095 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.151387][ T28] audit: type=1400 audit(1785714602.122:816): avc: denied { write } for pid=6095 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.308945][ T6096] lo speed is unknown, defaulting to 1000 [ 137.670590][ T6042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.746018][ T28] audit: type=1400 audit(1785714602.722:817): avc: denied { bind } for pid=6105 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.859628][ T6123] loop4: detected capacity change from 0 to 512 [ 137.873813][ T28] audit: type=1400 audit(1785714602.862:818): avc: denied { bind } for pid=6115 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.898778][ T6123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.908349][ T28] audit: type=1400 audit(1785714602.882:819): avc: denied { write } for pid=6117 comm="syz.3.748" path="socket:[13176]" dev="sockfs" ino=13176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.913876][ T6120] tipc: Can't bind to reserved service type 1 [ 137.960351][ T6123] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.747: bad orphan inode 131072 [ 137.977108][ T6123] loop4: lost filesystem error report for type 5 error -117 [ 137.980380][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 137.994198][ C0] EXT4-fs (loop4): initial error at time 1785714602: ext4_orphan_get:1425 [ 138.002778][ C0] EXT4-fs (loop4): last error at time 1785714602: ext4_orphan_get:1425 [ 138.012033][ T6123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.024618][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.034350][ T28] audit: type=1400 audit(1785714603.022:820): avc: denied { write } for pid=6122 comm="syz.4.747" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.066541][ T6120] tipc: Cannot configure node identity twice [ 138.083035][ T28] audit: type=1400 audit(1785714603.022:821): avc: denied { write } for pid=6122 comm="syz.4.747" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.284061][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.430466][ T6146] lo speed is unknown, defaulting to 1000 [ 139.190389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.705418][ T6161] FAULT_INJECTION: forcing a failure. [ 139.705418][ T6161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.720759][ T6161] CPU: 1 UID: 0 PID: 6161 Comm: syz.4.759 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.720808][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.720822][ T6161] Call Trace: [ 139.720831][ T6161] [ 139.720846][ T6161] __dump_stack+0x1d/0x30 [ 139.720872][ T6161] dump_stack_lvl+0x95/0xd0 [ 139.720953][ T6161] dump_stack+0x15/0x1b [ 139.720971][ T6161] should_fail_ex+0x25e/0x270 [ 139.720997][ T6161] should_fail+0xb/0x20 [ 139.721024][ T6161] should_fail_usercopy+0x1a/0x20 [ 139.721084][ T6161] _copy_from_user+0x1c/0xb0 [ 139.721103][ T6161] ___sys_sendmsg+0xc1/0x1e0 [ 139.721159][ T6161] __x64_sys_sendmsg+0xd4/0x160 [ 139.721181][ T6161] x64_sys_call+0x194c/0x3020 [ 139.721237][ T6161] do_syscall_64+0x136/0x3c0 [ 139.721268][ T6161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.721292][ T6161] RIP: 0033:0x7fe56b11e019 [ 139.721309][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.721336][ T6161] RSP: 002b:00007fe569b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.721416][ T6161] RAX: ffffffffffffffda RBX: 00007fe56b3a5fa0 RCX: 00007fe56b11e019 [ 139.721434][ T6161] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 139.721450][ T6161] RBP: 00007fe569b77090 R08: 0000000000000000 R09: 0000000000000000 [ 139.721465][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.721478][ T6161] R13: 00007fe56b3a6038 R14: 00007fe56b3a5fa0 R15: 00007ffe7060f928 [ 139.721570][ T6161] [ 140.263577][ T6168] bond3 (unregistering): Released all slaves [ 140.414089][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.0.764'. [ 140.428113][ T6180] Need at least one configuration in g1. [ 140.434576][ T6179] tipc: Cannot configure node identity twice [ 140.444585][ T6178] loop4: detected capacity change from 0 to 128 [ 140.456960][ T6180] udc usbip-vudc.0: failed to start g1: -22 [ 140.472154][ T6178] syz.4.766: attempt to access beyond end of device [ 140.472154][ T6178] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 140.501032][ T6180] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 140.541223][ T6180] UDC core: g1: couldn't find an available UDC or it's busy [ 140.549433][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.767'. [ 140.799747][ T6204] FAULT_INJECTION: forcing a failure. [ 140.799747][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 140.812535][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.812567][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.812581][ T6204] Call Trace: [ 140.812590][ T6204] [ 140.812655][ T6204] __dump_stack+0x1d/0x30 [ 140.812683][ T6204] dump_stack_lvl+0x95/0xd0 [ 140.812706][ T6204] dump_stack+0x15/0x1b [ 140.812728][ T6204] should_fail_ex+0x25e/0x270 [ 140.812782][ T6204] should_failslab+0x8c/0xb0 [ 140.812808][ T6204] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 140.812834][ T6204] ? __alloc_skb+0x2db/0x6f0 [ 140.812900][ T6204] ? __alloc_skb+0x2db/0x6f0 [ 140.812982][ T6204] __alloc_skb+0x2db/0x6f0 [ 140.813012][ T6204] ? __alloc_skb+0x205/0x6f0 [ 140.813042][ T6204] netlink_alloc_large_skb+0xbf/0xf0 [ 140.813083][ T6204] netlink_sendmsg+0x40c/0x6f0 [ 140.813115][ T6204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.813144][ T6204] ____sys_sendmsg+0x532/0x580 [ 140.813179][ T6204] ___sys_sendmsg+0x195/0x1e0 [ 140.813213][ T6204] __x64_sys_sendmsg+0xd4/0x160 [ 140.813237][ T6204] x64_sys_call+0x194c/0x3020 [ 140.813263][ T6204] do_syscall_64+0x136/0x3c0 [ 140.813292][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.813325][ T6204] RIP: 0033:0x7f253c78e019 [ 140.813352][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.813429][ T6204] RSP: 002b:00007f253b1e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.813452][ T6204] RAX: ffffffffffffffda RBX: 00007f253ca15fa0 RCX: 00007f253c78e019 [ 140.813468][ T6204] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 140.813483][ T6204] RBP: 00007f253b1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.813551][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.813566][ T6204] R13: 00007f253ca16038 R14: 00007f253ca15fa0 R15: 00007fffb54211b8 [ 140.813588][ T6204] [ 140.821905][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.773'. [ 141.081559][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.091228][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.102270][ T6211] veth1_to_bond: entered allmulticast mode [ 141.108274][ T6211] veth1_to_bond: entered promiscuous mode [ 141.117056][ T6210] veth1_to_bond: left promiscuous mode [ 141.124225][ T6210] veth1_to_bond: left allmulticast mode [ 141.350023][ T6237] netlink: 84 bytes leftover after parsing attributes in process `syz.4.786'. [ 141.368747][ C0] net_ratelimit: 138 callbacks suppressed [ 141.368771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.393730][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.405075][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.492946][ T6244] netlink: 52 bytes leftover after parsing attributes in process `syz.4.786'. [ 141.542173][ T6244] loop4: detected capacity change from 0 to 512 [ 141.574638][ T6244] EXT4-fs: inline encryption not supported [ 141.653575][ T6244] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.718056][ T6244] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.727200][ T6244] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 142.083661][ T6249] loop3: detected capacity change from 0 to 128 [ 142.142535][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 142.142556][ T28] audit: type=1400 audit(1785714607.135:826): avc: denied { setopt } for pid=6251 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.178540][ T6249] netlink: 224 bytes leftover after parsing attributes in process `syz.3.789'. [ 142.226209][ T6249] netlink: 80 bytes leftover after parsing attributes in process `syz.3.789'. [ 142.245139][ T28] audit: type=1400 audit(1785714607.165:827): avc: denied { mounton } for pid=6248 comm="syz.3.789" path="/150/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.274914][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'. [ 142.301808][ T28] audit: type=1400 audit(1785714607.185:828): avc: denied { mount } for pid=6251 comm="syz.2.790" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.369066][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.460992][ T6256] loop3: detected capacity change from 0 to 8192 [ 142.471970][ T6256] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.101226][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.110488][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.120029][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.130915][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.208271][ T28] audit: type=1400 audit(1785714608.195:829): avc: denied { execute } for pid=6272 comm="syz.0.798" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.243378][ T28] audit: type=1400 audit(1785714608.235:830): avc: denied { mount } for pid=6272 comm="syz.0.798" name="/" dev="rpc_pipefs" ino=13549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 143.344267][ T28] audit: type=1400 audit(1785714608.335:831): avc: denied { create } for pid=6268 comm="syz.2.796" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.365172][ T28] audit: type=1400 audit(1785714608.335:832): avc: denied { write } for pid=6268 comm="syz.2.796" name="file2" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.389156][ T28] audit: type=1400 audit(1785714608.335:833): avc: denied { open } for pid=6268 comm="syz.2.796" path="/140/file2" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.412873][ T28] audit: type=1400 audit(1785714608.335:834): avc: denied { ioctl } for pid=6268 comm="syz.2.796" path="/140/file2" dev="tmpfs" ino=778 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.437896][ T28] audit: type=1400 audit(1785714608.385:835): avc: denied { write } for pid=6282 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.459501][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.715821][ T6294] syz_tun: entered allmulticast mode [ 144.482879][ T6307] loop4: detected capacity change from 0 to 128 [ 144.675972][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 144.854460][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.862802][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.871058][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.004089][ T6319] loop4: detected capacity change from 0 to 128 [ 145.101555][ T6319] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 145.141543][ T6319] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.567020][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 145.583216][ T6333] batadv_slave_0: entered promiscuous mode [ 145.591988][ T6332] batadv_slave_0: left promiscuous mode [ 145.627608][ T6337] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 145.642769][ T6337] team0: Port device veth1_to_hsr added [ 145.668360][ T6339] Need at least one configuration in g1. [ 145.675017][ T6339] udc usbip-vudc.0: failed to start g1: -22 [ 145.681207][ T6339] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 145.691991][ T6339] UDC core: g1: couldn't find an available UDC or it's busy [ 145.758174][ T6348] Need at least one configuration in g1. [ 145.775874][ T6348] udc usbip-vudc.0: failed to start g1: -22 [ 145.798217][ T6348] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 145.962623][ T6348] UDC core: g1: couldn't find an available UDC or it's busy [ 146.103392][ T6356] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 146.155101][ T6361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.822'. [ 146.390435][ C0] net_ratelimit: 7 callbacks suppressed [ 146.390455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.494027][ T6356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.544763][ T6362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.713932][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.783568][ T6374] loop4: detected capacity change from 0 to 512 [ 146.796355][ T6374] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.829: invalid indirect mapped block 11 (level 0) [ 146.884566][ T6374] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 146.890290][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 146.905984][ C0] EXT4-fs (loop4): initial error at time 1785714611: ext4_free_branches:1023: inode 13 [ 146.915673][ C0] EXT4-fs (loop4): last error at time 1785714611: ext4_free_branches:1023: inode 13 [ 146.937292][ T6374] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.829: attempt to clear invalid blocks 1024 len 1 [ 146.950784][ T6374] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 146.951055][ T6374] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 147.029935][ T6374] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.829: invalid indirect mapped block 1819239214 (level 0) [ 147.050046][ T6374] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 147.195559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.220356][ T6374] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.829: invalid indirect mapped block 33554432 (level 2) [ 147.287704][ T6374] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 147.304073][ T6374] EXT4-fs (loop4): 1 truncate cleaned up [ 147.319381][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.458126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.470785][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.493687][ T6381] netlink: 10 bytes leftover after parsing attributes in process `syz.0.832'. [ 147.496491][ T6378] loop2: detected capacity change from 0 to 7 [ 147.515716][ T6379] loop3: detected capacity change from 0 to 764 [ 147.536708][ T6379] iso9660: Unknown parameter '~(wy¨Bs·' [ 147.546932][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.562842][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 147.562938][ T28] audit: type=1400 audit(1785714612.555:870): avc: denied { cpu } for pid=6383 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.593935][ T28] audit: type=1400 audit(1785714612.585:871): avc: denied { nlmsg_tty_audit } for pid=6377 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 147.625381][ T6388] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 147.721342][ T6393] loop4: detected capacity change from 0 to 512 [ 147.735863][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 147.750773][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.761390][ T6388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.801037][ T6389] lo speed is unknown, defaulting to 1000 [ 148.093786][ T28] audit: type=1400 audit(1785714612.985:872): avc: denied { create } for pid=6405 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.093829][ T28] audit: type=1400 audit(1785714612.985:873): avc: denied { setopt } for pid=6405 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.094112][ T28] audit: type=1400 audit(1785714612.985:874): avc: denied { bind } for pid=6405 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.094137][ T28] audit: type=1400 audit(1785714612.985:875): avc: denied { listen } for pid=6405 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.094160][ T28] audit: type=1400 audit(1785714613.065:876): avc: denied { write } for pid=6405 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.254792][ T6419] loop4: detected capacity change from 0 to 128 [ 148.470452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.075875][ T4430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.129083][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.212971][ T6426] loop2: detected capacity change from 0 to 512 [ 152.219931][ T3388] net_ratelimit: 3 callbacks suppressed [ 152.219947][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.253804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.266156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.338483][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.838: invalid indirect mapped block 11 (level 0) [ 152.449230][ T6426] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 152.450288][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 152.466003][ C0] EXT4-fs (loop2): initial error at time 1785714617: ext4_free_branches:1023: inode 13 [ 152.475793][ C0] EXT4-fs (loop2): last error at time 1785714617: ext4_free_branches:1023: inode 13 [ 152.594064][ T6426] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.838: attempt to clear invalid blocks 1024 len 1 [ 152.607821][ T6426] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 152.650166][ T6426] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 153.633723][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.644161][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.652692][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.838: invalid indirect mapped block 1819239214 (level 0) [ 154.658773][ T6474] loop1: detected capacity change from 0 to 512 [ 154.669873][ T6426] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.670041][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.838: invalid indirect mapped block 33554432 (level 2) [ 154.681468][ T6474] EXT4-fs: Ignoring removed oldalloc option [ 154.693540][ T6426] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 155.650129][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.674664][ T6474] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.856: invalid block [ 155.677959][ T6426] EXT4-fs (loop2): 1 truncate cleaned up [ 155.696790][ T6474] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 155.698614][ T6474] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.856: invalid indirect mapped block 1024 (level 0) [ 155.707853][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 155.707874][ C1] EXT4-fs (loop1): initial error at time 1785714620: ext4_get_branch:178: inode 13: block 1024 [ 155.707933][ C1] EXT4-fs (loop1): last error at time 1785714620: ext4_get_branch:178: inode 13: block 1024 [ 156.641827][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.661581][ T6474] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 156.661811][ T6474] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.856: bg 0: block 35: padding at end of block bitmap is not set [ 156.720432][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.730712][ T6474] loop1: lost filesystem error report for type 5 error -117 [ 156.730888][ T6474] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 156.749521][ T6474] loop1: lost filesystem error report for type 5 error -117 [ 156.749788][ T6474] EXT4-fs (loop1): 1 truncate cleaned up [ 157.356357][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.364953][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.536977][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.650140][ T6474] IPv6: addrconf: prefix option has invalid lifetime [ 157.761907][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.804691][ T28] audit: type=1400 audit(1785714622.795:877): avc: denied { write } for pid=6473 comm="syz.1.856" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.990428][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.991082][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.116572][ T6488] loop1: detected capacity change from 0 to 512 [ 158.128557][ T6488] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.860: invalid indirect mapped block 11 (level 0) [ 158.141954][ T6488] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.144343][ T6488] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.860: attempt to clear invalid blocks 1024 len 1 [ 158.154676][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 158.155348][ C0] EXT4-fs (loop1): initial error at time 1785714623: ext4_free_branches:1023: inode 13 [ 158.156122][ C0] EXT4-fs (loop1): last error at time 1785714623: ext4_free_branches:1023: inode 13 [ 158.269953][ T6488] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.272490][ T6488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 158.367646][ T6488] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.860: invalid indirect mapped block 1819239214 (level 0) [ 158.381593][ T6488] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.382077][ T6488] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.860: invalid indirect mapped block 33554432 (level 2) [ 158.418830][ T6488] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.422362][ T6488] EXT4-fs (loop1): 1 truncate cleaned up [ 158.438699][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.638209][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.782436][ T6494] netlink: 'syz.1.862': attribute type 14 has an invalid length. [ 158.790462][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.823570][ T6494] PM: suspend entry (deep) [ 159.076347][ T4433] Filesystems sync: 0.235 seconds [ 159.131153][ T6494] Freezing user space processes [ 159.831247][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.841254][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.850960][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.017104][ T6494] Freezing user space processes completed (elapsed 0.877 seconds) [ 160.025585][ T6494] OOM killer disabled. [ 160.030344][ T6494] Freezing remaining freezable tasks [ 160.037630][ T6494] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 160.047189][ T6494] printk: Suspending console(s) (use no_console_suspend to debug) [ 160.092457][ T6494] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 160.092571][ T6494] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 160.092613][ T6494] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 160.092670][ T6494] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 160.093175][ T6494] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 160.093234][ T6494] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 160.093275][ T6494] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 160.093362][ T6494] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 160.093390][ T6494] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 160.093411][ T6494] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 160.093492][ T6494] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 160.093579][ T6494] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 160.093600][ T6494] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 160.093684][ T6494] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 160.093782][ T6494] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 160.093924][ T6494] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 160.132348][ T4394] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 160.654974][ T6494] ACPI: PM: Preparing to enter system sleep state S3 [ 160.655107][ T6494] ACPI: PM: Saving platform NVS memory [ 160.655211][ T6494] Disabling non-boot CPUs ... [ 160.659413][ T6494] smpboot: CPU 1 is now offline [ 160.670865][ T6494] ACPI: PM: Low-level resume complete [ 160.670925][ T6494] ACPI: PM: Restoring platform NVS memory [ 160.686726][ T6494] Enabling non-boot CPUs ... [ 160.687034][ T6494] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 160.691935][ T6494] CPU1 is up [ 160.692199][ T6494] ACPI: PM: Waking up from system sleep state S3 [ 160.741186][ T4373] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 160.880123][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.965122][ T6494] OOM killer enabled. [ 160.965741][ T6494] Restarting tasks: Starting [ 160.984764][ T6494] Restarting tasks: Done [ 160.985647][ T6494] random: crng reseeded on system resumption [ 160.999226][ T6498] loop4: detected capacity change from 0 to 512 [ 161.002448][ T6494] PM: suspend exit [ 161.084635][ T28] audit: type=1400 audit(1785714626.076:878): avc: denied { getopt } for pid=6499 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.125641][ T6504] loop4: detected capacity change from 0 to 128 [ 161.144218][ T6503] raw_sendmsg: syz.1.864 forgot to set AF_INET. Fix it! [ 161.146024][ T28] audit: type=1400 audit(1785714626.136:879): avc: denied { write } for pid=6499 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.154886][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.155198][ T28] audit: type=1400 audit(1785714626.136:880): avc: denied { ioctl } for pid=6499 comm="syz.1.864" path="socket:[14545]" dev="sockfs" ino=14545 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.171990][ T35] ================================================================== [ 161.173486][ T35] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt [ 161.174644][ T35] [ 161.175040][ T35] write to 0xffff888103d5dc48 of 8 bytes by interrupt on cpu 0: [ 161.176171][ T35] ps2_interrupt+0x50d/0x550 [ 161.176923][ T35] serio_interrupt+0x66/0xf0 [ 161.177729][ T35] i8042_handle_data+0x388/0x680 [ 161.178666][ T35] i8042_interrupt+0x15/0x90 [ 161.179425][ T35] __handle_irq_event_percpu+0x8b/0x480 [ 161.180311][ T35] handle_irq_event+0x64/0xf0 [ 161.181159][ T35] handle_edge_irq+0x155/0x440 [ 161.182047][ T35] __common_interrupt+0x60/0xb0 [ 161.183022][ T35] common_interrupt+0x7e/0x90 [ 161.183873][ T35] asm_common_interrupt+0x26/0x40 [ 161.184780][ T35] __sanitizer_cov_trace_pc+0x8/0x70 [ 161.185673][ T35] selinux_capable+0x19/0x40 [ 161.186636][ T35] security_capable+0x7b/0x90 [ 161.187372][ T35] ns_capable+0x4c/0xb0 [ 161.188187][ T35] do_ebt_get_ctl+0x81/0x1450 [ 161.189027][ T35] nf_getsockopt+0x190/0x1b0 [ 161.189837][ T35] ip_getsockopt+0x137/0x180 [ 161.190597][ T35] tcp_getsockopt+0xad/0xe0 [ 161.191429][ T35] sock_common_getsockopt+0x60/0x70 [ 161.192287][ T35] do_sock_getsockopt+0x2f5/0x570 [ 161.193355][ T35] __x64_sys_getsockopt+0x11d/0x1a0 [ 161.194477][ T35] x64_sys_call+0x2dcf/0x3020 [ 161.195296][ T35] do_syscall_64+0x136/0x3c0 [ 161.196068][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.197026][ T35] [ 161.197429][ T35] read to 0xffff888103d5dc48 of 8 bytes by task 35 on cpu 1: [ 161.198867][ T35] ps2_do_sendbyte+0x10b/0x320 [ 161.199777][ T35] __ps2_command+0x364/0xaa0 [ 161.200984][ T35] ps2_command+0x52/0x90 [ 161.201660][ T35] alps_rpt_cmd+0x7a/0x150 [ 161.202546][ T35] alps_identify+0x190/0x5e0 [ 161.203926][ T35] alps_detect+0x31/0x250 [ 161.204700][ T35] psmouse_extensions+0x5e6/0x960 [ 161.205554][ T35] __psmouse_reconnect+0x3da/0x8b0 [ 161.206444][ T35] psmouse_reconnect+0x17/0x20 [ 161.207174][ T35] serio_handle_event+0x1c7/0xac0 [ 161.208087][ T35] process_scheduled_works+0x4d4/0x9a0 [ 161.209094][ T35] worker_thread+0x569/0x750 [ 161.209912][ T35] kthread+0x221/0x270 [ 161.210661][ T35] ret_from_fork+0x146/0x330 [ 161.211397][ T35] ret_from_fork_asm+0x1a/0x30 [ 161.212180][ T35] [ 161.212564][ T35] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 161.213817][ T35] [ 161.214242][ T35] Reported by Kernel Concurrency Sanitizer on: [ 161.215190][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.216581][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.218152][ T35] Workqueue: events_long serio_handle_event [ 161.219214][ T35] ================================================================== [ 162.490805][ T4425] net_ratelimit: 4 callbacks suppressed [ 162.490825][ T4425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.491971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.493103][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.496846][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.499626][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.968635][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.009403][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.049404][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.528987][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.088658][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.610959][ C0] net_ratelimit: 1 callbacks suppressed [ 167.610976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.178649][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.568935][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.208679][ T3527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.249412][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog