last executing test programs: 1m4.323305688s ago: executing program 4 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) r1 = socket$inet(0x2, 0x0, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xd, 0x0, &(0x7f0000000240)="e460cdfbef2408002900119386", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {}, 0x1}, 0x18) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x4, @perf_config_ext={0x40, 0x8800000000000004}, 0x0, 0x2, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, 0x0, 0x24008004) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r7 = socket(0x1d, 0x2, 0x6) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7daa000000000000711019000000000089a3d4fe0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r9, @ANYRES16=r9], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1m1.841141097s ago: executing program 4 (id=19): socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000145, 0x100, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f0000000200)={0x1e, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m0.629628216s ago: executing program 4 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0], 0x68}, 0x1, 0x0, 0x0, 0x8051}, 0x20048880) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x21e6, 0x1}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x81, 0x14b280) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1c080, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x8, 0xfffffffe, 0x3, 0x2f, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) unshare(0x20000400) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000100)={{r9}, 0xa, 0x4, 0x7ffffffffffffffe}) r10 = fcntl$getown(r4, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5934, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x7, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10007}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd, 0x0, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x302, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 58.39213061s ago: executing program 4 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010000000000000000002d000000fa210000050002"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x8257, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a1000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a030000000000000000000a0000060900020073797a31000000000900010073797a310000ddff17000380100000800c00018006000100000000000400008014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f00000002c0)='16\x00', 0x3) rt_sigqueueinfo(0x0, 0xc, &(0x7f0000000400)={0x38, 0xadc, 0x4b6c010c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000300012800c0001006d6163766c616e002000028008000300030000000a0004000180c20000010000060002"], 0x5c}}, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 58.213649464s ago: executing program 4 (id=42): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0xfffffffffffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000240)=""/181, 0xb5}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 58.034094328s ago: executing program 4 (id=45): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab", 0xd1}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="656d95cd9ed9f1565af2479128e280f708fafde86df6b4c823810f663d539f8615f5b042309e66fdc1850783f99ebd0d7211ff0fc4a6633a650c33b9362d17a0b1b7134bb78276789fec4d25dedec31fd0d82446bc92e8a07aae24d4a58f9681a00cbd9963e313a9e743bc80a8e29dba35c5e1f673603a135293545bd3bf840d9c25240377ebeedd374411fdf5303f49b3994f15c17a885067b2427fc869e1fd480e865c0635c460a5ee31358326c64598c001afdb03f1cf418b9cee68be0928ce7fb4230579a9004e0bc139c2", 0xcd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x2040, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0xf40d8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@orlov}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 42.992649779s ago: executing program 32 (id=45): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab", 0xd1}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f0000000040)="656d95cd9ed9f1565af2479128e280f708fafde86df6b4c823810f663d539f8615f5b042309e66fdc1850783f99ebd0d7211ff0fc4a6633a650c33b9362d17a0b1b7134bb78276789fec4d25dedec31fd0d82446bc92e8a07aae24d4a58f9681a00cbd9963e313a9e743bc80a8e29dba35c5e1f673603a135293545bd3bf840d9c25240377ebeedd374411fdf5303f49b3994f15c17a885067b2427fc869e1fd480e865c0635c460a5ee31358326c64598c001afdb03f1cf418b9cee68be0928ce7fb4230579a9004e0bc139c2", 0xcd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000140)='sysfs\x00', 0x2040, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0xf40d8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@orlov}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 3.023993657s ago: executing program 0 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x3, 0x0, {0x80, 0x5, 0x0, 0xd3, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x2800000, 0x6}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xed}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x90}}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310004000008000540000000020900020073797a310000000008000a40fffffffc0800034000000130140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x48055) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.023579887s ago: executing program 5 (id=471): socket$tipc(0x1e, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x28200, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x101001, 0x10000, 0x9e4, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8P7Uv7h/al/UNbWvov8fnjVrJrQuv/8j+14+hqnhhw+xNz/a0vHvVnza58hR3NFS6eftH0mpsrnEQU4aQN4qqRiLQy5a/8aZKlKZ3lMl3N7+raJ9JlyzyxXG10ruiZGD01amNfnuiOiGbXc2nNarW4QiSeMgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxo/wQAAP//HfHjTg==") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) write(r3, &(0x7f0000003300)="ac", 0x1) r8 = syz_clone(0x6a00211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r8, &(0x7f0000000100), 0x61000004, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) 2.759886823s ago: executing program 0 (id=475): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0x9, 0x4) 2.748562774s ago: executing program 2 (id=476): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, @in={0x2, 0x4000, @remote}}}, 0x118) 2.710901715s ago: executing program 2 (id=477): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = syz_io_uring_setup(0x68be, &(0x7f0000000180)={0x0, 0x617d, 0x20, 0x3, 0xcf}, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)) r2 = syz_io_uring_setup(0x20da, &(0x7f0000000080)={0x0, 0x6968, 0x10000, 0x1, 0x2ca, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc3, &(0x7f0000000340)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 2.705724665s ago: executing program 0 (id=478): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 2.620195907s ago: executing program 2 (id=479): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2c01, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="10000000020000008400000008000000180000000000000084000000000000000092"], 0x28}, 0x880) 2.619996307s ago: executing program 2 (id=480): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000b0603000000000000000000040000070900020073797a3000000000b79ba44d79eb7e78b67eed972be86731525608e9735b0e799297ca9a69d7c22205c7f722fcbe68821370642c08650cd266a1a253397caf78f60a03ae2585e74176fd9a5faa872800"/115], 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x814) fchdir(r1) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f4, &(0x7f00000005c0)="$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") personality(0x619641b6fb4b8591) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@noload}]}, 0x1, 0x236, &(0x7f0000000c40)="$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") mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f00000001c0)=""/2, 0xfffffec0, 0x5) 2.218834867s ago: executing program 2 (id=482): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2.09296389s ago: executing program 5 (id=483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x401, @mcast2, 0x400}}, 0x0, 0x0, 0xe, 0x0, "b308cd085b4342e75b68ec1a3a61bb5efb3ac8b3c511d7eaedaefe851ac4909ecaa6db400dfe6fc6c7b41c0fac092b7076ef575452ff9adc44aec7700ef2c12b99bbc7ae698bd9aef5b2e5898841d56c"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0001000000000000080004150006000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) 1.915087194s ago: executing program 5 (id=484): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x3, "12ff00"}}, 0x9) r1 = socket(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.899142384s ago: executing program 1 (id=485): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0x20000000000000fb, 0x100000000000, 0x0, 0x858, 0x6, 0x0, 0x0, 0x20000, 0x8000000000000001, 0xde1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x401, 0x3}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000b1a000/0x4000)=nil, 0x4000, 0x12) (async) close_range(r0, r1, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000009c0), 0x8, 0x400242) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)=@caif, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4000040) (async) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1f, &(0x7f0000000100), 0x120) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3800000000000000000000000700000007235c64010102ac1414bbac1e0105e0000002ac1414bbe0000001ac1414bb0a010e0b9404010000b46352f23ce03439da8fb00b48f66acf84076ec7be74131155011b63ca7c120796def8b37f9678f3db9578691315c6e5acf71792ba802834267113d07c67"], 0x38}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000280)}], 0x1}}], 0x2, 0x50008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(r3, 0x80106f05, &(0x7f0000006d80)={0x0}) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x1) (async) sync_file_range(r4, 0x7, 0x2000, 0x6) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r4) 1.777938307s ago: executing program 1 (id=487): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, @in={0x2, 0x4000, @remote}}}, 0x118) 1.63926914s ago: executing program 5 (id=488): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2d, 0x40, 0x0, 0x0, 0x0, 0x1000000000010009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x100003, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xffffffffffffffff, &(0x7f0000000140)) 1.412005266s ago: executing program 1 (id=489): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x2, 0x4, 0xfffffffefffffffc, 0xffffffffffffff7f, 0x5, 0x7ffffffffffffffe, 0xfffffffffffffffc, 0x87, 0xe934}) 1.25998568s ago: executing program 3 (id=490): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x28}, 0xc) fallocate(r2, 0x2, 0x7fffffffffffffff, 0x329) syz_open_dev$loop(0x0, 0x8, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() rt_sigqueueinfo(r4, 0x1000002f, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x81, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e75, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() sched_setaffinity(r7, 0x0, 0x0) get_robust_list(r7, &(0x7f00000005c0)=&(0x7f0000000580)={&(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000240)}}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={&(0x7f0000000380)}}}, &(0x7f0000000600)=0x18) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000400000005", @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000"], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$can_bcm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x90) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 1.2596468s ago: executing program 5 (id=491): r0 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x2, 0x0, 0x40}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRESOCT], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64760e7ac0bdecc465d6bdb5f172325940329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614c"], 0x2, 0x2bc, &(0x7f0000000980)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r5, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x2, 0x4}}, 0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r4, 0x0, 0x200000000000000}, 0x38) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb3e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x80000001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff7fff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000022) 1.096722973s ago: executing program 1 (id=492): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000b00)=[0xee00]) setregid(0x0, r1) setreuid(0xffffffffffffffff, 0xee01) io_setup(0x3fe, &(0x7f00000001c0)=0x0) r3 = eventfd2(0x48, 0x80000) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x2000000, 0x0, 0x0, 0x1, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) 912.872718ms ago: executing program 1 (id=493): socket$tipc(0x1e, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x28200, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x101001, 0x10000, 0x9e4, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) write(r3, &(0x7f0000003300)="ac", 0x1) r8 = syz_clone(0x6a00211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r8, &(0x7f0000000100), 0x61000004, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) 870.811099ms ago: executing program 3 (id=494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x401, @mcast2, 0x400}}, 0x0, 0x0, 0xe, 0x0, "b308cd085b4342e75b68ec1a3a61bb5efb3ac8b3c511d7eaedaefe851ac4909ecaa6db400dfe6fc6c7b41c0fac092b7076ef575452ff9adc44aec7700ef2c12b99bbc7ae698bd9aef5b2e5898841d56c"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0001000000000000080004150006000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r1, 0x2000009) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff004) 866.260249ms ago: executing program 2 (id=495): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5420) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000030000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004"], 0xb4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x16, 0x633, 0x70bd27, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x5, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x8, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/serial8250/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='serial8250', 0xa) 735.966732ms ago: executing program 0 (id=496): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000007c0)={@cgroup, 0xffffffffffffffff, 0xc}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r3 = dup3(r2, r0, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000007c0)={@cgroup, 0xffffffffffffffff, 0xc}, 0x20) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) (async) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) (async) dup3(r2, r0, 0x0) (async) openat(r3, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) (async) 680.346484ms ago: executing program 3 (id=497): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x210, @tick=0x7, 0x9, {0x8}, 0x5, 0x0, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setregid(0xee00, 0xee00) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @local, 0x1c0000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095", @ANYRES8=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0xe4, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x54, 0x48, 0x932, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setns(r8, 0x24020000) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5}, 0x0, 0x0}, 0x20) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x10c8}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 493.256178ms ago: executing program 3 (id=498): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x3, "12ff00"}}, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 377.572391ms ago: executing program 3 (id=499): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x306, @multicast}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}, 'tunl0\x00'}) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='9', 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000480)=0xe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={r6, @in6={{0xa, 0xe20, 0xff, @empty, 0xdf54}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0xd2, 0xffffff7f}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r8, 0x0, 0x0) close_range(r8, r8, 0x0) ppoll(&(0x7f0000000540)=[{r7, 0x6001}, {r7, 0x9013}, {r3, 0x29b6fbd0f589e717}, {0xffffffffffffffff, 0x9332}, {r8, 0x5102}], 0x5, 0x0, &(0x7f00000005c0)={[0x4]}, 0x8) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000000)) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 298.114142ms ago: executing program 3 (id=500): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x121d80) ioctl$BLKCRYPTOPREPAREKEY(r2, 0xc040128b, &(0x7f00000001c0)={&(0x7f0000000100)="ba08b4917421e880d16b89f62e812e38dfab87c73c2631b37458c2b8debccb952ded15ba73d9707bf0f043d4e5", 0x2d, &(0x7f0000000140)=""/12, 0xc}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={0x0}, 0x1000, 0x6, 0xffffff7e, 0x9, 0x3, 0x3, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae91faff0000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) poll(&(0x7f0000000380)=[{r3, 0xe14}], 0x1, 0x400) 208.125155ms ago: executing program 0 (id=501): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001d40)=@raw={'raw\x00', 0x64, 0x3, 0x310, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x278, 0x268, 0x268, 0x278, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x178, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x7fffffff, 0x400, 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = io_uring_setup(0x5d2c, &(0x7f0000000340)={0x0, 0x4255, 0x40, 0x0, 0x2f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xd4af48e9738743eb}], 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x4a9544369168e754, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x81, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x0, 0x30d, 0xffffffff, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x5c}, 0x1, 0xf000, 0x0, 0x3000800}, 0x8001) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000840)={[{@barrier}, {@journal_async_commit}, {@norecovery}, {@noinit_itable}, {@jqfmt_vfsv0}, {@data_err_abort}, {@usrjquota}, {@nobarrier}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@data_err_abort}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c05, &(0x7f0000000040)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272695b65726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00"], 0x2, 0x6b8, &(0x7f0000000180)="$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") r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r5) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x43d1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x40) chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto$inet6(r0, &(0x7f00000004c0)="99b9b558", 0x4, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 75.445818ms ago: executing program 0 (id=502): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0x4, 0x1, 0xfffffff7}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2b}, 0x28) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001340)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x27}, 0x24008015) r3 = socket$kcm(0x10, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000005000)='synaptics-smbus', 0xf) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001640)=ANY=[@ANYBLOB], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0xfc, 0x0, &(0x7f0000000340)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 59.600518ms ago: executing program 5 (id=503): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}}, 0x1, 0x2}, &(0x7f0000000300)=0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x3, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r2, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d00, &(0x7f0000000a00)="0000020000000000000002") 0s ago: executing program 1 (id=504): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010200000000000000000200"], 0x14}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x3a89, &(0x7f0000000040)={0x0, 0xc89d, 0x2000, 0x204, 0xc1}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x4, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 5905][ T3818] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.785581][ T3818] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.817275][ T3818] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 52.830007][ T3818] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.97: couldn't read orphan inode 26 (err -116) [ 52.857174][ T3789] iso9660: Unknown parameter '' [ 52.889007][ T3818] loop3: lost filesystem error report for type 5 error -116 [ 52.889189][ T3818] EXT4-fs (loop3): Remounting filesystem read-only [ 52.896546][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 52.896559][ C0] EXT4-fs (loop3): initial error at time 1786493448: ext4_orphan_get:1404 [ 52.896577][ C0] EXT4-fs (loop3): last error at time 1786493448: ext4_orphan_get:1404 [ 53.066593][ T3805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 53.110306][ T3818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.105428][ T3825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 54.118596][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 54.118607][ T28] audit: type=1400 audit(1786493449.298:699): avc: denied { ioctl } for pid=3804 comm="syz.1.92" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.634754][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.654584][ T28] audit: type=1400 audit(1786493450.288:700): avc: denied { write } for pid=3804 comm="syz.1.92" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.751225][ T3831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.100'. [ 55.801592][ T3828] FAULT_INJECTION: forcing a failure. [ 55.801592][ T3828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.822857][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'. [ 55.833362][ T28] audit: type=1400 audit(1786493450.298:701): avc: denied { create } for pid=3824 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.873866][ T3831] netlink: 56 bytes leftover after parsing attributes in process `syz.3.100'. [ 55.890215][ T3828] CPU: 0 UID: 0 PID: 3828 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.890309][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.890381][ T3828] Call Trace: [ 55.890386][ T3828] [ 55.890393][ T3828] __dump_stack+0x1d/0x30 [ 55.890416][ T3828] dump_stack_lvl+0x95/0xd0 [ 55.890435][ T3828] dump_stack+0x15/0x1b [ 55.890452][ T3828] should_fail_ex+0x25e/0x270 [ 55.890522][ T3828] should_fail+0xb/0x20 [ 55.890546][ T3828] should_fail_usercopy+0x1a/0x20 [ 55.890646][ T3828] strncpy_from_user+0x27/0x250 [ 55.890667][ T3828] ? io_fsetxattr_prep+0xc2/0x150 [ 55.890686][ T3828] setxattr_copy+0x4c/0x160 [ 55.890709][ T3828] io_fsetxattr_prep+0xe5/0x150 [ 55.890797][ T3828] io_submit_sqes+0x737/0x1180 [ 55.890823][ T3828] __se_sys_io_uring_enter+0x25c/0xf90 [ 55.890868][ T3828] ? mutex_unlock+0x4e/0x90 [ 55.890903][ T3828] ? fput+0x8f/0xc0 [ 55.890928][ T3828] __x64_sys_io_uring_enter+0x78/0x90 [ 55.890948][ T3828] x64_sys_call+0x1e16/0x3020 [ 55.891036][ T3828] do_syscall_64+0x136/0x3c0 [ 55.891064][ T3828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.891083][ T3828] RIP: 0033:0x7f66f2f7e0d9 [ 55.891177][ T3828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.891193][ T3828] RSP: 002b:00007f66f19d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 55.891218][ T3828] RAX: ffffffffffffffda RBX: 00007f66f3205fa0 RCX: 00007f66f2f7e0d9 [ 55.891231][ T3828] RDX: 000000000000cf74 RSI: 0000000000002219 RDI: 0000000000000000 [ 55.891272][ T3828] RBP: 00007f66f19d7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.891284][ T3828] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 55.891295][ T3828] R13: 00007f66f3206038 R14: 00007f66f3205fa0 R15: 00007ffd789961b8 [ 55.891312][ T3828] [ 56.094887][ T28] audit: type=1400 audit(1786493450.858:702): avc: denied { module_request } for pid=3827 comm="syz.2.101" kmod="ip6t_tos" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.230773][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.245062][ T3839] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 56.342065][ T3839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.407272][ T3844] bond1: (slave geneve2): making interface the new active one [ 56.425508][ T28] audit: type=1400 audit(1786493451.608:703): avc: denied { create } for pid=3847 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.479914][ T3844] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 56.504158][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.525590][ T3851] set_capacity_and_notify: 1 callbacks suppressed [ 56.525602][ T3851] loop1: detected capacity change from 0 to 256 [ 56.540245][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.550611][ T28] audit: type=1400 audit(1786493451.628:704): avc: denied { bind } for pid=3847 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.609089][ T3844] syz.3.104 (3844) used greatest stack depth: 10200 bytes left [ 56.617074][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.662253][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.688191][ T28] audit: type=1400 audit(1786493451.628:705): avc: denied { connect } for pid=3847 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.720594][ T3851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 56.799292][ T28] audit: type=1400 audit(1786493451.688:706): avc: denied { write } for pid=3847 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.839643][ T3861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.880898][ T28] audit: type=1400 audit(1786493451.758:707): avc: denied { read } for pid=3847 comm="syz.2.106" path="socket:[6016]" dev="sockfs" ino=6016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.279687][ T3868] netlink: 292 bytes leftover after parsing attributes in process `syz.0.111'. [ 57.301766][ T3870] netlink: 292 bytes leftover after parsing attributes in process `syz.2.112'. [ 57.339108][ T3868] loop0: detected capacity change from 0 to 256 [ 57.368443][ T3870] loop2: detected capacity change from 0 to 256 [ 57.384198][ T3874] netlink: 116 bytes leftover after parsing attributes in process `syz.1.113'. [ 57.423918][ T3868] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.456329][ T28] audit: type=1400 audit(1786493452.628:708): avc: denied { watch watch_reads } for pid=3873 comm="syz.1.113" path="/33" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.494818][ T3870] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.507525][ T3874] vhci_hcd vhci_hcd.1: invalid port number 0 [ 57.586108][ T3879] netlink: 'syz.0.111': attribute type 29 has an invalid length. [ 57.822120][ T3884] loop1: detected capacity change from 0 to 1024 [ 57.860379][ T3884] EXT4-fs: Ignoring removed bh option [ 57.948099][ T3884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 58.100377][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 58.240265][ T3870] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 58.274880][ T3868] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 58.293696][ T3870] FAT-fs (loop2): Filesystem has been set read-only [ 58.316969][ T3868] FAT-fs (loop0): Filesystem has been set read-only [ 58.328071][ T3870] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 58.360387][ T3868] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 58.442589][ T3898] FAULT_INJECTION: forcing a failure. [ 58.442589][ T3898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.500193][ T3898] CPU: 0 UID: 0 PID: 3898 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.500244][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.500256][ T3898] Call Trace: [ 58.500261][ T3898] [ 58.500267][ T3898] __dump_stack+0x1d/0x30 [ 58.500289][ T3898] dump_stack_lvl+0x95/0xd0 [ 58.500308][ T3898] dump_stack+0x15/0x1b [ 58.500325][ T3898] should_fail_ex+0x25e/0x270 [ 58.500352][ T3898] should_fail+0xb/0x20 [ 58.500446][ T3898] should_fail_usercopy+0x1a/0x20 [ 58.500474][ T3898] _copy_from_iter+0xcc/0xe70 [ 58.500549][ T3898] ? __alloc_skb+0x511/0x6f0 [ 58.500575][ T3898] ? __alloc_skb+0x205/0x6f0 [ 58.500653][ T3898] netlink_sendmsg+0x4a4/0x6f0 [ 58.500690][ T3898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.500762][ T3898] ____sys_sendmsg+0x532/0x580 [ 58.500782][ T3898] ___sys_sendmsg+0x195/0x1e0 [ 58.500829][ T3898] __x64_sys_sendmsg+0xd4/0x160 [ 58.500850][ T3898] x64_sys_call+0x194c/0x3020 [ 58.500877][ T3898] do_syscall_64+0x136/0x3c0 [ 58.500946][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.501019][ T3898] RIP: 0033:0x7f5ee03be0d9 [ 58.501033][ T3898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.501049][ T3898] RSP: 002b:00007f5edee17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.501066][ T3898] RAX: ffffffffffffffda RBX: 00007f5ee0645fa0 RCX: 00007f5ee03be0d9 [ 58.501078][ T3898] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000007 [ 58.501128][ T3898] RBP: 00007f5edee17090 R08: 0000000000000000 R09: 0000000000000000 [ 58.501139][ T3898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.501150][ T3898] R13: 00007f5ee0646038 R14: 00007f5ee0645fa0 R15: 00007ffec91dc918 [ 58.501166][ T3898] [ 58.686280][ T3900] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 58.765538][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 58.956568][ T3911] netlink: 292 bytes leftover after parsing attributes in process `syz.1.124'. [ 58.971344][ T3900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.016422][ T3911] loop1: detected capacity change from 0 to 256 [ 59.107421][ T3911] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.127449][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 59.127461][ T28] audit: type=1326 audit(1786493454.308:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 59.253875][ T3922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.287220][ T3922] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 59.315089][ T28] audit: type=1326 audit(1786493454.308:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 59.345722][ T3922] audit: backlog limit exceeded [ 59.444176][ T28] audit: type=1326 audit(1786493454.358:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 59.570066][ T28] audit: type=1326 audit(1786493454.358:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 59.705951][ T28] audit: type=1326 audit(1786493454.358:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 59.836084][ T28] audit: type=1326 audit(1786493454.358:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 59.950683][ T3940] netlink: 292 bytes leftover after parsing attributes in process `syz.3.132'. [ 59.972602][ T28] audit: type=1326 audit(1786493454.358:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.0.125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70c56e0d9 code=0x7ffc0000 [ 60.010254][ T3911] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 60.026103][ T3941] loop3: detected capacity change from 0 to 256 [ 60.046771][ T3911] FAT-fs (loop1): Filesystem has been set read-only [ 60.064405][ T3941] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.093414][ T3911] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 60.154702][ T3920] loop0: detected capacity change from 0 to 512 [ 60.210840][ T3920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.275146][ T3920] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.294087][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.300522][ C0] EXT4-fs (loop0): initial error at time 1786493455: ext4_mb_generate_buddy:1317 [ 60.309646][ C0] EXT4-fs (loop0): last error at time 1786493455: ext4_mb_generate_buddy:1317 [ 60.353954][ T3920] EXT4-fs (loop0): 1 truncate cleaned up [ 60.372799][ T3920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.547895][ T3950] syz.1.135 (3950) used greatest stack depth: 9992 bytes left [ 60.641052][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.671064][ T3941] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 60.702330][ T3941] FAT-fs (loop3): Filesystem has been set read-only [ 60.715697][ T3941] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 62.948914][ T3968] netlink: 32 bytes leftover after parsing attributes in process `syz.3.142'. [ 63.635696][ T3968] netlink: 56 bytes leftover after parsing attributes in process `syz.3.142'. [ 63.956128][ T3563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.043019][ T3976] bridge_slave_0: left allmulticast mode [ 64.048894][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.210487][ T3976] bridge_slave_1: left allmulticast mode [ 64.216651][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.373163][ T3976] bond0: (slave bond_slave_0): Releasing backup interface [ 64.451887][ T3976] bond0: (slave bond_slave_1): Releasing backup interface [ 64.486853][ T3976] team0: Port device team_slave_0 removed [ 64.513616][ T3976] team0: Port device team_slave_1 removed [ 64.519743][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.539031][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.558480][ T3993] tmpfs: Bad value for 'size' [ 64.563236][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 64.563253][ T28] audit: type=1400 audit(1786493459.738:945): avc: denied { mounton } for pid=3992 comm="syz.1.148" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 64.622715][ T3976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.667241][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.708561][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.739902][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.766027][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.800843][ T3999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.839234][ T3563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.864438][ T3999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.933790][ T3563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.954785][ T4006] netlink: 292 bytes leftover after parsing attributes in process `syz.2.151'. [ 64.991614][ T3563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.018060][ T4006] loop2: detected capacity change from 0 to 256 [ 65.060629][ T28] audit: type=1400 audit(1786493460.238:946): avc: denied { read } for pid=4009 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.081557][ T4006] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.166305][ T28] audit: type=1400 audit(1786493460.328:947): avc: denied { read } for pid=3021 comm="dhcpcd" name="n25" dev="tmpfs" ino=1658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.228536][ T3563] bridge_slave_1: left allmulticast mode [ 65.250570][ T3563] bridge_slave_1: left promiscuous mode [ 65.270835][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.287009][ T28] audit: type=1400 audit(1786493460.328:948): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.326266][ T3563] bridge_slave_0: left allmulticast mode [ 65.349084][ T3563] bridge_slave_0: left promiscuous mode [ 65.369680][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.397945][ T28] audit: type=1400 audit(1786493460.328:949): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1658 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.571675][ T28] audit: type=1400 audit(1786493460.658:950): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.723993][ T28] audit: type=1400 audit(1786493460.778:951): avc: denied { bind } for pid=4020 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.769977][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.842415][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.868261][ T28] audit: type=1400 audit(1786493460.818:952): avc: denied { write } for pid=4014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.897817][ T4006] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 65.924180][ T3563] bond0 (unregistering): Released all slaves [ 65.936612][ T4006] FAT-fs (loop2): Filesystem has been set read-only [ 65.968494][ T4006] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 65.985786][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 66.010151][ T28] audit: type=1400 audit(1786493460.818:953): avc: denied { create } for pid=4014 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.056133][ T3563] hsr_slave_0: left promiscuous mode [ 66.084504][ T3563] hsr_slave_1: left promiscuous mode [ 66.110073][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.150102][ T28] audit: type=1400 audit(1786493460.818:954): avc: denied { write } for pid=4014 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.183946][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.337544][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.355565][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.508529][ T3563] veth1_macvtap: left promiscuous mode [ 66.521893][ T3563] veth0_macvtap: left promiscuous mode [ 66.545576][ T3563] veth1_vlan: left promiscuous mode [ 66.566264][ T3563] veth0_vlan: left promiscuous mode [ 66.796075][ T3563] team0 (unregistering): Port device team_slave_1 removed [ 66.845664][ T3563] team0 (unregistering): Port device team_slave_0 removed [ 66.976070][ T4050] netlink: 'syz.2.158': attribute type 9 has an invalid length. [ 67.236665][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.285722][ T3977] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.330453][ T3977] bridge_slave_0: entered allmulticast mode [ 67.370849][ T3977] bridge_slave_0: entered promiscuous mode [ 67.394275][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.394304][ T3977] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.394384][ T3977] bridge_slave_1: entered allmulticast mode [ 67.394896][ T3977] bridge_slave_1: entered promiscuous mode [ 67.467587][ T3977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.468733][ T3977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.535869][ T3977] team0: Port device team_slave_0 added [ 67.545996][ T3977] team0: Port device team_slave_1 added [ 67.587978][ T3977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.588033][ T3977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.588057][ T3977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.594599][ T3977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.594633][ T3977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.594657][ T3977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.691931][ T3977] hsr_slave_0: entered promiscuous mode [ 67.692376][ T3977] hsr_slave_1: entered promiscuous mode [ 67.697727][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.049439][ T3977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.105813][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.106318][ T3977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.194399][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.268146][ T3977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.269782][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.270473][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.271198][ T3977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.272925][ T3977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.396718][ T3977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.411013][ T3977] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.417999][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.418026][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.428822][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.428850][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.881486][ T4135] loop1: detected capacity change from 0 to 128 [ 68.932496][ T4135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 68.932522][ T4135] System zones: 1-3, 19-19, 35-36 [ 68.938483][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.944166][ T4135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.954529][ T4135] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.009545][ T3977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.015114][ T4142] loop2: detected capacity change from 0 to 512 [ 69.021714][ T4142] EXT4-fs: inline encryption not supported [ 69.036979][ T4142] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.165: bad orphan inode 15 [ 69.037000][ T4142] loop2: lost filesystem error report for type 5 error -117 [ 69.037114][ T4142] ext4_test_bit(bit=14, block=5) = 0 [ 69.037531][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.041844][ T4142] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.081410][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.093051][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.220666][ T4157] netlink: 292 bytes leftover after parsing attributes in process `syz.1.167'. [ 69.232791][ T4157] loop1: detected capacity change from 0 to 256 [ 69.235013][ T4157] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.538244][ T3977] veth0_vlan: entered promiscuous mode [ 69.552166][ T3977] veth1_vlan: entered promiscuous mode [ 69.568537][ T3977] veth0_macvtap: entered promiscuous mode [ 69.573362][ T3977] veth1_macvtap: entered promiscuous mode [ 69.589989][ T3977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.596203][ T3977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.634478][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.634541][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.634568][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.634674][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.809634][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 69.809647][ T28] audit: type=1400 audit(1786493464.988:972): avc: denied { create } for pid=4176 comm="syz.5.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.821544][ T28] audit: type=1400 audit(1786493464.998:973): avc: denied { bind } for pid=4176 comm="syz.5.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.821578][ T28] audit: type=1400 audit(1786493464.998:974): avc: denied { write } for pid=4176 comm="syz.5.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.041749][ T4183] netlink: 104 bytes leftover after parsing attributes in process `syz.2.173'. [ 71.111335][ T28] audit: type=1400 audit(1786493466.298:975): avc: denied { relabelfrom } for pid=4194 comm="syz.5.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.111383][ T28] audit: type=1400 audit(1786493466.298:976): avc: denied { relabelto } for pid=4194 comm="syz.5.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 71.152932][ T28] audit: type=1326 audit(1786493466.328:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.5.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4429be0d9 code=0x7ffc0000 [ 71.152961][ T28] audit: type=1326 audit(1786493466.328:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.5.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4429be0d9 code=0x7ffc0000 [ 71.153028][ T28] audit: type=1326 audit(1786493466.328:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.5.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4429be0d9 code=0x7ffc0000 [ 71.154591][ T28] audit: type=1326 audit(1786493466.328:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.5.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4429be0d9 code=0x7ffc0000 [ 71.154698][ T28] audit: type=1326 audit(1786493466.328:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.5.176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4429be0d9 code=0x7ffc0000 [ 71.250456][ T4200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.250642][ T4200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.251419][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 71.285611][ T4200] team0: Port device team_slave_0 removed [ 71.986070][ T4153] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 72.036359][ T4153] FAT-fs (loop1): Filesystem has been set read-only [ 72.077349][ T4153] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 72.239509][ T4212] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 73.713588][ T4229] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 73.726218][ T4233] SELinux: security policydb version 15 (MLS) not backwards compatible [ 73.778677][ T4233] SELinux: failed to load policy [ 73.790817][ T4238] syzkaller0: entered promiscuous mode [ 73.810938][ T4238] syzkaller0: entered allmulticast mode [ 73.840839][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 74.137525][ T4294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.193'. [ 74.311999][ T4294] loop3: detected capacity change from 0 to 512 [ 74.384317][ T4294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.459264][ T4294] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.193: bad orphan inode 131083 [ 74.491456][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 74.504659][ T4317] loop2: detected capacity change from 0 to 1024 [ 74.516307][ T4321] FAULT_INJECTION: forcing a failure. [ 74.516307][ T4321] name failslab, interval 1, probability 0, space 0, times 0 [ 74.536456][ T4294] loop3: lost filesystem error report for type 5 error -117 [ 74.540552][ T4294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.561887][ T4317] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.584416][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 74.603164][ T4321] CPU: 0 UID: 0 PID: 4321 Comm: syz.5.198 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.603255][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.603267][ T4321] Call Trace: [ 74.603273][ T4321] [ 74.603281][ T4321] __dump_stack+0x1d/0x30 [ 74.603304][ T4321] dump_stack_lvl+0x95/0xd0 [ 74.603361][ T4321] dump_stack+0x15/0x1b [ 74.603379][ T4321] should_fail_ex+0x25e/0x270 [ 74.603442][ T4321] ? __get_vm_area_node+0x106/0x1d0 [ 74.603464][ T4321] should_failslab+0x8c/0xb0 [ 74.603485][ T4321] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 74.603509][ T4321] ? __get_vm_area_node+0x106/0x1d0 [ 74.603598][ T4321] __get_vm_area_node+0x106/0x1d0 [ 74.603621][ T4321] __vmalloc_node_range_noprof+0x266/0x11e0 [ 74.603666][ T4321] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 74.603749][ T4321] ? avc_has_perm_noaudit+0xa3/0x120 [ 74.603820][ T4321] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 74.603905][ T4321] __vmalloc_noprof+0xa4/0xf0 [ 74.603936][ T4321] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 74.603964][ T4321] bpf_prog_alloc_no_stats+0x47/0x390 [ 74.603990][ T4321] ? bpf_prog_alloc+0x2a/0x150 [ 74.604055][ T4321] bpf_prog_alloc+0x3c/0x150 [ 74.604081][ T4321] bpf_prog_load+0x54b/0x1100 [ 74.604110][ T4321] ? avc_has_perm_noaudit+0xa3/0x120 [ 74.604142][ T4321] ? vfs_write+0x7b0/0x990 [ 74.604159][ T4321] __sys_bpf+0xbae/0xc30 [ 74.604222][ T4321] ? vfs_write+0x7b0/0x990 [ 74.604240][ T4321] ? vfs_write+0x7b0/0x990 [ 74.604313][ T4321] __x64_sys_bpf+0x69/0x80 [ 74.604339][ T4321] x64_sys_call+0x10cb/0x3020 [ 74.604440][ T4321] do_syscall_64+0x136/0x3c0 [ 74.604469][ T4321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.604489][ T4321] RIP: 0033:0x7ff4429be0d9 [ 74.604563][ T4321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.604589][ T4321] RSP: 002b:00007ff441417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.604607][ T4321] RAX: ffffffffffffffda RBX: 00007ff442c45fa0 RCX: 00007ff4429be0d9 [ 74.604620][ T4321] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 74.604631][ T4321] RBP: 00007ff441417090 R08: 0000000000000000 R09: 0000000000000000 [ 74.604643][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.604710][ T4321] R13: 00007ff442c46038 R14: 00007ff442c45fa0 R15: 00007fffd66e2208 [ 74.604734][ T4321] [ 74.874492][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 74.874583][ T28] audit: type=1400 audit(1786493470.038:1203): avc: denied { write } for pid=4253 comm="syz.3.193" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.923976][ T4294] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 74.935634][ T28] audit: type=1400 audit(1786493470.098:1204): avc: denied { mounton } for pid=4253 comm="syz.3.193" path="/42/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.014228][ T28] audit: type=1400 audit(1786493470.098:1205): avc: denied { write } for pid=4253 comm="syz.3.193" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.043160][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 75.060616][ T28] audit: type=1400 audit(1786493470.098:1206): avc: denied { write } for pid=4253 comm="syz.3.193" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.084852][ T4329] macsec1: entered promiscuous mode [ 75.110199][ T4317] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.197: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.130781][ T4331] netlink: 'syz.1.200': attribute type 12 has an invalid length. [ 75.146165][ T4331] netlink: 'syz.1.200': attribute type 29 has an invalid length. [ 75.154322][ T28] audit: type=1400 audit(1786493470.098:1207): avc: denied { ioctl } for pid=4253 comm="syz.3.193" path="/42/bus/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.178852][ T4317] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.179814][ T4317] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 75.188918][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.188934][ C0] EXT4-fs (loop2): initial error at time 1786493470: ext4_map_blocks:791: inode 3: block 2 [ 75.188962][ C0] EXT4-fs (loop2): last error at time 1786493470: ext4_map_blocks:791: inode 3: block 2 [ 75.229720][ T4331] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 75.243465][ T4334] netlink: 'syz.1.200': attribute type 7 has an invalid length. [ 75.264352][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.274128][ T4331] netlink: 252 bytes leftover after parsing attributes in process `syz.1.200'. [ 75.283334][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 75.293175][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.306525][ T4317] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.197: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.340845][ T4317] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.341003][ T4317] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 75.385015][ T4338] bond3: (slave bond_slave_1): Device is not bonding slave [ 75.398374][ T28] audit: type=1400 audit(1786493470.578:1208): avc: denied { write } for pid=4340 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.419940][ T4317] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.197: Failed to acquire dquot type 0 [ 75.433656][ T4338] bond3: option active_slave: invalid value (bond_slave_1) [ 75.447438][ T4338] bond3 (unregistering): Released all slaves [ 75.454045][ T4321] syz.5.198: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 75.470951][ T4317] loop2: lost filesystem error report for type 5 error -117 [ 75.471107][ T4317] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 75.512756][ T4343] mmap: syz.1.203 (4343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.527514][ T4321] CPU: 0 UID: 0 PID: 4321 Comm: syz.5.198 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.527609][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.527651][ T4321] Call Trace: [ 75.527656][ T4321] [ 75.527663][ T4321] __dump_stack+0x1d/0x30 [ 75.527753][ T4321] dump_stack_lvl+0x95/0xd0 [ 75.527772][ T4321] dump_stack+0x15/0x1b [ 75.527796][ T4321] warn_alloc+0x145/0x1c0 [ 75.527823][ T4321] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 75.527862][ T4321] ? avc_has_perm_noaudit+0xa3/0x120 [ 75.527889][ T4321] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 75.528017][ T4321] __vmalloc_noprof+0xa4/0xf0 [ 75.528040][ T4321] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 75.528067][ T4321] bpf_prog_alloc_no_stats+0x47/0x390 [ 75.528094][ T4321] ? bpf_prog_alloc+0x2a/0x150 [ 75.528196][ T4321] bpf_prog_alloc+0x3c/0x150 [ 75.528256][ T4321] bpf_prog_load+0x54b/0x1100 [ 75.528341][ T4321] ? avc_has_perm_noaudit+0xa3/0x120 [ 75.528370][ T4321] ? vfs_write+0x7b0/0x990 [ 75.528388][ T4321] __sys_bpf+0xbae/0xc30 [ 75.528417][ T4321] ? vfs_write+0x7b0/0x990 [ 75.528464][ T4321] ? vfs_write+0x7b0/0x990 [ 75.528487][ T4321] __x64_sys_bpf+0x69/0x80 [ 75.528514][ T4321] x64_sys_call+0x10cb/0x3020 [ 75.528539][ T4321] do_syscall_64+0x136/0x3c0 [ 75.528641][ T4321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.528692][ T4321] RIP: 0033:0x7ff4429be0d9 [ 75.528706][ T4321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.528760][ T4321] RSP: 002b:00007ff441417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.528805][ T4321] RAX: ffffffffffffffda RBX: 00007ff442c45fa0 RCX: 00007ff4429be0d9 [ 75.528818][ T4321] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 75.528829][ T4321] RBP: 00007ff441417090 R08: 0000000000000000 R09: 0000000000000000 [ 75.528841][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.528852][ T4321] R13: 00007ff442c46038 R14: 00007ff442c45fa0 R15: 00007fffd66e2208 [ 75.528870][ T4321] [ 75.528934][ T4317] loop2: lost filesystem error report for type 5 error -117 [ 75.740200][ T4321] Mem-Info: [ 75.760126][ T4321] active_anon:7478 inactive_anon:6 isolated_anon:0 [ 75.760126][ T4321] active_file:0 inactive_file:23079 isolated_file:0 [ 75.760126][ T4321] unevictable:0 dirty:85 writeback:0 [ 75.760126][ T4321] slab_reclaimable:3175 slab_unreclaimable:15787 [ 75.760126][ T4321] mapped:30421 shmem:310 pagetables:3252 [ 75.760126][ T4321] sec_pagetables:0 bounce:0 [ 75.760126][ T4321] kernel_misc_reclaimable:0 [ 75.760126][ T4321] free:1877418 free_pcp:12411 free_cma:0 [ 75.849851][ T4321] Node 0 active_anon:29792kB inactive_anon:24kB active_file:0kB inactive_file:92316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117424kB dirty:340kB writeback:0kB shmem:1240kB kernel_stack:3856kB pagetables:13068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 75.957404][ T4321] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.988453][ T4347] loop1: detected capacity change from 0 to 1024 [ 75.999989][ T28] audit: type=1400 audit(1786493471.128:1209): avc: denied { setopt } for pid=4350 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.029945][ T4347] EXT4-fs: Ignoring removed bh option [ 76.084364][ T4347] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 76.226682][ T28] audit: type=1400 audit(1786493471.248:1210): avc: denied { listen } for pid=4350 comm="syz.3.206" lport=60297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.248521][ T4359] FAULT_INJECTION: forcing a failure. [ 76.248521][ T4359] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.261897][ T4359] CPU: 0 UID: 0 PID: 4359 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.261922][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.261934][ T4359] Call Trace: [ 76.261940][ T4359] [ 76.261965][ T4359] __dump_stack+0x1d/0x30 [ 76.262056][ T4359] dump_stack_lvl+0x95/0xd0 [ 76.262075][ T4359] dump_stack+0x15/0x1b [ 76.262093][ T4359] should_fail_ex+0x25e/0x270 [ 76.262121][ T4359] should_fail_alloc_page+0xf2/0x100 [ 76.262211][ T4359] __alloc_frozen_pages_noprof+0x108/0x350 [ 76.262240][ T4359] alloc_pages_mpol+0xa9/0x1d0 [ 76.262277][ T4359] alloc_pages_noprof+0x8f/0x140 [ 76.262305][ T4359] alloc_skb_with_frags+0x1c9/0x3d0 [ 76.262384][ T4359] ? should_fail_ex+0xd9/0x270 [ 76.262411][ T4359] sock_alloc_send_pskb+0x44d/0x500 [ 76.262471][ T4359] ? __rcu_read_unlock+0x4e/0x70 [ 76.262496][ T4359] packet_sendmsg+0x216a/0x3140 [ 76.262526][ T4359] ? __rcu_read_unlock+0x4e/0x70 [ 76.262630][ T4359] ? selinux_socket_sendmsg+0x101/0x410 [ 76.262662][ T4359] ? __pfx_packet_sendmsg+0x10/0x10 [ 76.262685][ T4359] ____sys_sendmsg+0x532/0x580 [ 76.262739][ T4359] ___sys_sendmsg+0x195/0x1e0 [ 76.262769][ T4359] __x64_sys_sendmsg+0xd4/0x160 [ 76.262790][ T4359] x64_sys_call+0x194c/0x3020 [ 76.262851][ T4359] do_syscall_64+0x136/0x3c0 [ 76.262941][ T4359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.262961][ T4359] RIP: 0033:0x7ff70c56e0d9 [ 76.262976][ T4359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.263027][ T4359] RSP: 002b:00007ff70afc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.263045][ T4359] RAX: ffffffffffffffda RBX: 00007ff70c7f5fa0 RCX: 00007ff70c56e0d9 [ 76.263057][ T4359] RDX: 0000000000040011 RSI: 0000200000000100 RDI: 0000000000000004 [ 76.263078][ T4359] RBP: 00007ff70afc7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.263153][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.263164][ T4359] R13: 00007ff70c7f6038 R14: 00007ff70c7f5fa0 R15: 00007ffc0eef4e78 [ 76.263234][ T4359] [ 76.263295][ T4321] lowmem_reserve[]: [ 76.513479][ T4317] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.197: mark_inode_dirty error [ 76.543032][ T4317] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.546769][ T4317] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 76.577785][ T4347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.615076][ T4317] EXT4-fs (loop2): 1 orphan inode deleted [ 76.621524][ T4347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.639816][ T4317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.653416][ T4291] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.696206][ T4291] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:20: Failed to release dquot type 0 [ 76.730501][ T4370] netlink: 'syz.0.212': attribute type 29 has an invalid length. [ 76.840712][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.854864][ T3559] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.899188][ T3559] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.899311][ T3559] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 76.961249][ T4380] loop3: detected capacity change from 0 to 128 [ 76.982144][ T4321] 0 2878 7857 7857 [ 77.012505][ T4321] Node 0 DMA32 free:2947508kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947612kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:104kB free_cma:0kB [ 77.050803][ T3559] loop2: lost filesystem error report for type 5 error -117 [ 77.061139][ T3305] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.090225][ T4384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 77.103094][ T4386] loop1: detected capacity change from 0 to 256 [ 77.120880][ T4386] vfat: Unknown parameter 'gi1/ôéîã3”' [ 77.156488][ T3305] loop2: lost filesystem error report for type 5 error -117 [ 77.156587][ T3305] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 77.209815][ T4321] lowmem_reserve[]: 0 0 4978 4978 [ 77.232596][ T4321] Node 0 Normal free:4549784kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31940kB inactive_anon:24kB active_file:0kB inactive_file:92364kB unevictable:0kB writepending:352kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:42232kB local_pcp:42232kB free_cma:0kB [ 77.267155][ T4394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4394 comm=syz.0.222 [ 77.286873][ T3305] loop2: lost filesystem error report for type 5 error -117 [ 77.294265][ T3305] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 77.339190][ T3305] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.382645][ T4321] lowmem_reserve[]: [ 77.395737][ T4396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'. [ 77.414964][ T4398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 77.429976][ T4321] 0 0 0 0 [ 77.436363][ T4321] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.450883][ T4398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 77.479822][ T4398] loop2: detected capacity change from 0 to 512 [ 77.489423][ T4321] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 2*256kB (M) 2*512kB (M) 4*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2947508kB [ 77.526576][ T4398] EXT4-fs: dax option not supported [ 77.582521][ T4321] Node 0 Normal: 1027*4kB (UME) 680*8kB (UME) 514*16kB (UM) 353*32kB (M) 184*64kB (UM) 90*128kB (UM) 12*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 1095*4096kB (UM) = 4549772kB [ 77.640451][ T4321] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 77.660986][ T4321] 24063 total pagecache pages [ 77.671030][ T4321] 13 pages in swap cache [ 77.688014][ T4321] Free swap = 124944kB [ 77.701530][ T4321] Total swap = 124996kB [ 77.714692][ T4321] 2097051 pages RAM [ 77.729583][ T4321] 0 pages HighMem/MovableOnly [ 77.745531][ T4321] 81749 pages reserved [ 77.908880][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 77.989355][ T4416] can: request_module (can-proto-0) failed. [ 78.095689][ T4424] loop3: detected capacity change from 0 to 512 [ 78.118425][ T4424] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.232: Directory hole found for htree index block 0 [ 78.192706][ T4424] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 78.192823][ T4424] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 78.201928][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 78.201943][ C0] EXT4-fs (loop3): initial error at time 1786493473: dx_probe:791: inode 2 [ 78.201967][ C0] EXT4-fs (loop3): last error at time 1786493473: dx_probe:791: inode 2 [ 78.330983][ T4424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.414257][ T4434] xt_policy: output policy not valid in PREROUTING and INPUT [ 78.903622][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.956060][ T4464] loop0: detected capacity change from 0 to 512 [ 78.967558][ T4464] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.244: invalid indirect mapped block 11 (level 0) [ 78.980924][ T4464] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.981297][ T4464] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.244: attempt to clear invalid blocks 1024 len 1 [ 78.990501][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 78.990516][ C0] EXT4-fs (loop0): initial error at time 1786493474: ext4_free_branches:1023: inode 13 [ 78.990539][ C0] EXT4-fs (loop0): last error at time 1786493474: ext4_free_branches:1023: inode 13 [ 79.029104][ T4464] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.029498][ T4464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 79.053181][ T4464] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.244: invalid indirect mapped block 1819239214 (level 0) [ 79.067114][ T4464] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.068983][ T4464] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.244: invalid indirect mapped block 33554432 (level 2) [ 79.091832][ T4464] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.092251][ T4464] EXT4-fs (loop0): 1 truncate cleaned up [ 79.107366][ T4464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.266153][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.340842][ T4482] FAULT_INJECTION: forcing a failure. [ 79.340842][ T4482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.386196][ T4488] loop0: detected capacity change from 0 to 128 [ 79.448948][ T4488] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.466847][ T4494] FAULT_INJECTION: forcing a failure. [ 79.466847][ T4494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.480318][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.480342][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.480354][ T4482] Call Trace: [ 79.480360][ T4482] [ 79.480368][ T4482] __dump_stack+0x1d/0x30 [ 79.480438][ T4482] dump_stack_lvl+0x95/0xd0 [ 79.480488][ T4482] dump_stack+0x15/0x1b [ 79.480506][ T4482] should_fail_ex+0x25e/0x270 [ 79.480536][ T4482] should_fail+0xb/0x20 [ 79.480562][ T4482] should_fail_usercopy+0x1a/0x20 [ 79.480638][ T4482] _copy_from_iter+0xcc/0xe70 [ 79.480672][ T4482] ? __alloc_skb+0x511/0x6f0 [ 79.480702][ T4482] ? __alloc_skb+0x205/0x6f0 [ 79.480732][ T4482] netlink_sendmsg+0x4a4/0x6f0 [ 79.480822][ T4482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.480849][ T4482] ____sys_sendmsg+0x532/0x580 [ 79.480870][ T4482] ___sys_sendmsg+0x195/0x1e0 [ 79.480925][ T4482] __x64_sys_sendmsg+0xd4/0x160 [ 79.480946][ T4482] x64_sys_call+0x194c/0x3020 [ 79.480970][ T4482] do_syscall_64+0x136/0x3c0 [ 79.481043][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.481063][ T4482] RIP: 0033:0x7f5ee03be0d9 [ 79.481077][ T4482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.481094][ T4482] RSP: 002b:00007f5edee17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.481194][ T4482] RAX: ffffffffffffffda RBX: 00007f5ee0645fa0 RCX: 00007f5ee03be0d9 [ 79.481207][ T4482] RDX: 0000000020048040 RSI: 0000200000000280 RDI: 0000000000000003 [ 79.481219][ T4482] RBP: 00007f5edee17090 R08: 0000000000000000 R09: 0000000000000000 [ 79.481276][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.481288][ T4482] R13: 00007f5ee0646038 R14: 00007f5ee0645fa0 R15: 00007ffec91dc918 [ 79.481382][ T4482] [ 79.680339][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.680386][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.680398][ T4494] Call Trace: [ 79.680404][ T4494] [ 79.680410][ T4494] __dump_stack+0x1d/0x30 [ 79.680446][ T4494] dump_stack_lvl+0x95/0xd0 [ 79.680465][ T4494] dump_stack+0x15/0x1b [ 79.680527][ T4494] should_fail_ex+0x25e/0x270 [ 79.680554][ T4494] should_fail+0xb/0x20 [ 79.680578][ T4494] should_fail_usercopy+0x1a/0x20 [ 79.680633][ T4494] copy_fpstate_to_sigframe+0x61a/0x7b0 [ 79.680657][ T4494] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 79.680723][ T4494] ? x86_task_fpu+0x36/0x60 [ 79.680741][ T4494] get_sigframe+0x34f/0x470 [ 79.680764][ T4494] ? _raw_spin_unlock_irq+0x9/0x30 [ 79.680820][ T4494] x64_setup_rt_frame+0xa7/0x4e0 [ 79.680846][ T4494] arch_do_signal_or_restart+0x27c/0x480 [ 79.680880][ T4494] exit_to_user_mode_loop+0x15d/0x8c0 [ 79.680938][ T4494] ? ksys_read+0x161/0x1a0 [ 79.680975][ T4494] do_syscall_64+0x23c/0x3c0 [ 79.681003][ T4494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.681022][ T4494] RIP: 0033:0x7f724a9fe0d7 [ 79.681036][ T4494] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 79.681114][ T4494] RSP: 002b:00007f7249457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.681133][ T4494] RAX: 0000000000000000 RBX: 00007f724ac85fa0 RCX: 00007f724a9fe0d9 [ 79.681145][ T4494] RDX: 0000000000000029 RSI: 0000200000000080 RDI: 0000000000000004 [ 79.681156][ T4494] RBP: 00007f7249457090 R08: 0000000000000000 R09: 0000000000000000 [ 79.681167][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.681178][ T4494] R13: 00007f724ac86038 R14: 00007f724ac85fa0 R15: 00007fff332733b8 [ 79.681282][ T4494] [ 79.895546][ T4488] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.917092][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 79.917145][ T28] audit: type=1400 audit(1786493475.088:1236): avc: denied { write } for pid=4483 comm="syz.0.251" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.950387][ T4500] tipc: Started in network mode [ 79.957628][ T4500] tipc: Node identity 4, cluster identity 4711 [ 79.965378][ T4500] tipc: Node number set to 4 [ 79.971396][ T28] audit: type=1400 audit(1786493475.128:1237): avc: denied { bind } for pid=4499 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.999606][ T28] audit: type=1400 audit(1786493475.128:1238): avc: denied { setopt } for pid=4499 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.023744][ T28] audit: type=1400 audit(1786493475.198:1239): avc: denied { getopt } for pid=4499 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.118036][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.154085][ T28] audit: type=1400 audit(1786493475.328:1240): avc: denied { write } for pid=4478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.244630][ T4509] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (3) [ 80.329011][ T28] audit: type=1400 audit(1786493475.388:1241): avc: denied { read write } for pid=4508 comm="syz.0.259" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 80.365972][ T3582] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 80.407467][ T4527] udevd[4527]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 80.473472][ T4533] FAULT_INJECTION: forcing a failure. [ 80.473472][ T4533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.515973][ T4531] loop3: detected capacity change from 0 to 2048 [ 80.534909][ T28] audit: type=1400 audit(1786493475.388:1242): avc: denied { open } for pid=4508 comm="syz.0.259" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 80.579430][ T4533] CPU: 0 UID: 0 PID: 4533 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.579488][ T4533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.579499][ T4533] Call Trace: [ 80.579568][ T4533] [ 80.579575][ T4533] __dump_stack+0x1d/0x30 [ 80.579598][ T4533] dump_stack_lvl+0x95/0xd0 [ 80.579663][ T4533] dump_stack+0x15/0x1b [ 80.579680][ T4533] should_fail_ex+0x25e/0x270 [ 80.579707][ T4533] should_fail+0xb/0x20 [ 80.579808][ T4533] should_fail_usercopy+0x1a/0x20 [ 80.579837][ T4533] _copy_from_user+0x1c/0xb0 [ 80.579856][ T4533] ___sys_sendmsg+0xc1/0x1e0 [ 80.579873][ T4533] ? terminate_walk+0x1d5/0x200 [ 80.579975][ T4533] __sys_sendmmsg+0x185/0x320 [ 80.580002][ T4533] __x64_sys_sendmmsg+0x57/0x70 [ 80.580074][ T4533] x64_sys_call+0x27aa/0x3020 [ 80.580096][ T4533] do_syscall_64+0x136/0x3c0 [ 80.580125][ T4533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.580145][ T4533] RIP: 0033:0x7f5ee03be0d9 [ 80.580234][ T4533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.580283][ T4533] RSP: 002b:00007f5edee17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.580370][ T4533] RAX: ffffffffffffffda RBX: 00007f5ee0645fa0 RCX: 00007f5ee03be0d9 [ 80.580383][ T4533] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 80.580414][ T4533] RBP: 00007f5edee17090 R08: 0000000000000000 R09: 0000000000000000 [ 80.580425][ T4533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.580436][ T4533] R13: 00007f5ee0646038 R14: 00007f5ee0645fa0 R15: 00007ffec91dc918 [ 80.580454][ T4533] [ 80.581120][ T4531] ext4: Unknown parameter 'nouser_xattr' [ 80.781507][ T4538] __nla_validate_parse: 3 callbacks suppressed [ 80.781527][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.269'. [ 80.804805][ T28] audit: type=1400 audit(1786493475.558:1243): avc: denied { write } for pid=4518 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.878286][ T4546] netlink: 68 bytes leftover after parsing attributes in process `syz.1.272'. [ 80.901687][ T28] audit: type=1400 audit(1786493475.638:1244): avc: denied { write } for pid=4528 comm="syz.5.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.983055][ T4549] loop5: detected capacity change from 0 to 4096 [ 80.989767][ T28] audit: type=1400 audit(1786493476.108:1245): avc: denied { write } for pid=4543 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.077832][ T4549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.276322][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.350510][ T4574] FAULT_INJECTION: forcing a failure. [ 81.350510][ T4574] name failslab, interval 1, probability 0, space 0, times 0 [ 81.365122][ T4563] loop1: detected capacity change from 0 to 2048 [ 81.403854][ T4563] EXT4-fs: test_dummy_encryption option not supported [ 81.440938][ T4574] CPU: 0 UID: 0 PID: 4574 Comm: syz.5.278 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.441019][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.441030][ T4574] Call Trace: [ 81.441037][ T4574] [ 81.441044][ T4574] __dump_stack+0x1d/0x30 [ 81.441120][ T4574] dump_stack_lvl+0x95/0xd0 [ 81.441140][ T4574] dump_stack+0x15/0x1b [ 81.441157][ T4574] should_fail_ex+0x25e/0x270 [ 81.441184][ T4574] ? __se_sys_memfd_create+0x1df/0x3b0 [ 81.441307][ T4574] should_failslab+0x8c/0xb0 [ 81.441345][ T4574] __kmalloc_cache_noprof+0x7b/0x3d0 [ 81.441368][ T4574] ? __se_sys_memfd_create+0x1df/0x3b0 [ 81.441400][ T4574] ? fput+0x8f/0xc0 [ 81.441424][ T4574] __se_sys_memfd_create+0x1df/0x3b0 [ 81.441535][ T4574] __x64_sys_memfd_create+0x31/0x40 [ 81.441567][ T4574] x64_sys_call+0x1f22/0x3020 [ 81.441589][ T4574] do_syscall_64+0x136/0x3c0 [ 81.441662][ T4574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.441724][ T4574] RIP: 0033:0x7ff4429be0d9 [ 81.441738][ T4574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.441755][ T4574] RSP: 002b:00007ff441416e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 81.441798][ T4574] RAX: ffffffffffffffda RBX: 000000000000047a RCX: 00007ff4429be0d9 [ 81.441810][ T4574] RDX: 00007ff441416ee0 RSI: 0000000000000000 RDI: 00007ff442a55204 [ 81.441822][ T4574] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 81.441856][ T4574] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000003c0 [ 81.441867][ T4574] R13: 00007ff441416ee0 R14: 00007ff441416ea0 R15: 0000200000000300 [ 81.441885][ T4574] [ 81.647207][ T4563] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 81.666916][ T4578] netlink: 104 bytes leftover after parsing attributes in process `syz.3.279'. [ 81.772965][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 84.599176][ T4602] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 84.654955][ T4609] loop1: detected capacity change from 0 to 512 [ 84.662108][ T4609] EXT4-fs: Ignoring removed orlov option [ 84.695571][ T4609] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.287: iget: bad extra_isize 90 (inode size 256) [ 84.711427][ T4609] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.711608][ T4609] EXT4-fs (loop1): Remounting filesystem read-only [ 84.720813][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 84.720849][ C0] EXT4-fs (loop1): initial error at time 1786493479: ext4_xattr_inode_iget:441: inode 11 [ 84.720885][ C0] EXT4-fs (loop1): last error at time 1786493479: ext4_xattr_inode_iget:441: inode 11 [ 84.754778][ T4627] xt_ecn: cannot match TCP bits for non-tcp packets [ 84.773554][ T4609] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 84.787145][ T4609] EXT4-fs (loop1): 1 orphan inode deleted [ 84.808229][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.945635][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 84.945654][ T28] audit: type=1400 audit(1786493480.128:1267): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.073580][ T4650] loop0: detected capacity change from 0 to 1024 [ 85.110884][ T4655] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 85.139504][ T4655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.198058][ T28] audit: type=1400 audit(1786493480.378:1268): avc: denied { ioctl } for pid=4659 comm="syz.0.296" path="socket:[8685]" dev="sockfs" ino=8685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.223617][ T4660] xt_policy: output policy not valid in PREROUTING and INPUT [ 85.300904][ T4662] netlink: 292 bytes leftover after parsing attributes in process `syz.0.297'. [ 85.324409][ T4662] loop0: detected capacity change from 0 to 256 [ 85.350891][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.369625][ T4662] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.453010][ T4668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.300'. [ 85.513618][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 85.600995][ T4684] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (3) [ 85.685508][ T3392] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 85.702733][ T4688] udevd[4688]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 85.761287][ T4692] loop1: detected capacity change from 0 to 128 [ 85.788427][ T28] audit: type=1400 audit(1786493480.968:1269): avc: denied { watch } for pid=4691 comm="syz.1.305" path="/86/file0/control" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 85.895828][ T28] audit: type=1400 audit(1786493481.078:1270): avc: denied { read write } for pid=4699 comm="syz.5.309" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.934156][ T4700] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.951798][ T28] audit: type=1400 audit(1786493481.078:1271): avc: denied { open } for pid=4699 comm="syz.5.309" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.990636][ T4696] loop2: detected capacity change from 0 to 128 [ 86.096535][ T28] audit: type=1400 audit(1786493481.278:1272): avc: denied { read } for pid=4707 comm="syz.1.310" path="socket:[3945]" dev="sockfs" ino=3945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.147511][ T28] audit: type=1400 audit(1786493481.328:1273): avc: denied { name_bind } for pid=4712 comm="syz.2.312" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 86.173539][ T4662] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 86.181887][ T4662] FAT-fs (loop0): Filesystem has been set read-only [ 86.189027][ T4662] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 86.370076][ T28] audit: type=1400 audit(1786493481.548:1274): avc: denied { map } for pid=4721 comm="syz.0.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.394764][ T28] audit: type=1400 audit(1786493481.548:1275): avc: denied { read write } for pid=4721 comm="syz.0.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.428769][ T4726] ip6t_srh: unknown srh match flags 5802 [ 86.441341][ T4726] loop0: detected capacity change from 0 to 128 [ 86.450485][ T28] audit: type=1400 audit(1786493481.548:1276): avc: denied { execute } for pid=4721 comm="syz.0.314" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.456469][ T4725] IPVS: Error connecting to the multicast addr [ 86.564434][ T4732] FAULT_INJECTION: forcing a failure. [ 86.564434][ T4732] name failslab, interval 1, probability 0, space 0, times 0 [ 86.577270][ T4732] CPU: 1 UID: 0 PID: 4732 Comm: syz.0.319 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.577321][ T4732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.577357][ T4732] Call Trace: [ 86.577366][ T4732] [ 86.577376][ T4732] __dump_stack+0x1d/0x30 [ 86.577421][ T4732] dump_stack_lvl+0x95/0xd0 [ 86.577451][ T4732] dump_stack+0x15/0x1b [ 86.577479][ T4732] should_fail_ex+0x25e/0x270 [ 86.577567][ T4732] should_failslab+0x8c/0xb0 [ 86.577604][ T4732] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 86.577631][ T4732] ? sidtab_sid2str_get+0xa0/0x130 [ 86.577680][ T4732] ? sidtab_sid2str_get+0xa0/0x130 [ 86.577737][ T4732] kmemdup_noprof+0x2b/0x70 [ 86.577786][ T4732] sidtab_sid2str_get+0xa0/0x130 [ 86.577883][ T4732] security_sid_to_context_core+0x1eb/0x2e0 [ 86.577936][ T4732] security_sid_to_context+0x27/0x40 [ 86.577987][ T4732] avc_audit_post_callback+0x9d/0x520 [ 86.578033][ T4732] ? audit_log_lsm_data+0xb41/0xbb0 [ 86.578065][ T4732] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 86.578089][ T4732] common_lsm_audit+0x1ba/0x230 [ 86.578255][ T4732] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 86.578344][ T4732] ? avc_denied+0xe4/0x100 [ 86.578365][ T4732] slow_avc_audit+0x14c/0x190 [ 86.578390][ T4732] avc_has_perm+0x144/0x190 [ 86.578415][ T4732] selinux_socket_sendmsg+0x2a8/0x410 [ 86.578538][ T4732] security_socket_sendmsg+0x44/0x80 [ 86.578565][ T4732] ____sys_sendmsg+0x330/0x580 [ 86.578649][ T4732] ___sys_sendmsg+0x195/0x1e0 [ 86.578680][ T4732] __x64_sys_sendmsg+0xd4/0x160 [ 86.578703][ T4732] x64_sys_call+0x194c/0x3020 [ 86.578727][ T4732] do_syscall_64+0x136/0x3c0 [ 86.578814][ T4732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.578836][ T4732] RIP: 0033:0x7ff70c56e0d9 [ 86.578851][ T4732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.578875][ T4732] RSP: 002b:00007ff70afc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.578894][ T4732] RAX: ffffffffffffffda RBX: 00007ff70c7f5fa0 RCX: 00007ff70c56e0d9 [ 86.578919][ T4732] RDX: 0000000000000080 RSI: 0000200000000640 RDI: 0000000000000003 [ 86.578931][ T4732] RBP: 00007ff70afc7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.579000][ T4732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.579065][ T4732] R13: 00007ff70c7f6038 R14: 00007ff70c7f5fa0 R15: 00007ffc0eef4e78 [ 86.579089][ T4732] [ 86.708702][ T4735] sctp: [Deprecated]: syz.2.320 (pid 4735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.708702][ T4735] Use struct sctp_sack_info instead [ 86.823977][ T4738] bond2: option ad_select: invalid value (34) [ 86.858003][ T4738] bond2 (unregistering): Released all slaves [ 86.912555][ T4736] bond2: option ad_select: invalid value (34) [ 86.934907][ T4736] bond2 (unregistering): Released all slaves [ 86.946800][ T4747] netlink: 292 bytes leftover after parsing attributes in process `syz.1.324'. [ 87.007474][ T4747] loop1: detected capacity change from 0 to 256 [ 87.031862][ T4747] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.178758][ T4759] loop2: detected capacity change from 0 to 512 [ 87.191224][ T4759] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.327: Directory hole found for htree index block 0 [ 87.234093][ T4759] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 87.234186][ T4759] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 87.251500][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 87.251518][ C0] EXT4-fs (loop2): initial error at time 1786493482: dx_probe:791: inode 2 [ 87.251559][ C0] EXT4-fs (loop2): last error at time 1786493482: dx_probe:791: inode 2 [ 87.306068][ T4759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.383290][ T4767] loop3: detected capacity change from 0 to 128 [ 87.411539][ T4767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 87.435372][ T4767] System zones: 1-3, 19-19, 35-36 [ 87.440950][ T4767] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 87.453978][ T4767] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.526654][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.547877][ T4773] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.559285][ T4771] loop5: detected capacity change from 0 to 128 [ 87.670226][ T4282] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.693161][ T4775] Cannot find del_set index 4 as target [ 87.702183][ T4788] netlink: 292 bytes leftover after parsing attributes in process `syz.5.338'. [ 87.772130][ T4791] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.940448][ T4793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.339'. [ 88.919131][ T4811] netlink: 'syz.0.345': attribute type 5 has an invalid length. [ 88.977826][ T4816] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.009443][ T4816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.026091][ T4816] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.070863][ T4816] EXT4-fs error (device loop3): __ext4_remount:6844: comm syz.3.347: Abort forced by user [ 89.102913][ T4816] EXT4-fs (loop3): Remounting filesystem read-only [ 89.120466][ T4816] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 89.160402][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.228143][ T4820] netlink: 14 bytes leftover after parsing attributes in process `syz.0.348'. [ 89.238470][ T4823] EXT4-fs: Mount option(s) incompatible with ext2 [ 89.256467][ T4820] openvswitch: netlink: Message has 6 unknown bytes. [ 89.277748][ T4826] /dev/loop0: Can't open blockdev [ 89.331278][ T4828] netlink: 292 bytes leftover after parsing attributes in process `syz.3.350'. [ 89.468039][ T4828] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.728393][ T4832] set_capacity_and_notify: 5 callbacks suppressed [ 89.728438][ T4832] loop0: detected capacity change from 0 to 512 [ 89.734656][ T3954] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.747797][ T4786] Bluetooth: hci0: command 0x1003 tx timeout [ 89.749846][ T4832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.798500][ T4832] EXT4-fs (loop0): inodes count not valid: 32 vs 63 [ 90.184613][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.252849][ T4845] bpf: Bad value for 'uid' [ 90.257509][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 90.257524][ T28] audit: type=1400 audit(1786493485.428:1415): avc: denied { getopt } for pid=4844 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.302864][ T28] audit: type=1400 audit(1786493485.428:1416): avc: denied { mounton } for pid=4844 comm="syz.0.356" path="/68/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.384275][ T28] audit: type=1400 audit(1786493485.558:1417): avc: denied { setopt } for pid=4849 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.464615][ T28] audit: type=1400 audit(1786493485.558:1418): avc: denied { getopt } for pid=4849 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.505877][ T28] audit: type=1400 audit(1786493485.558:1419): avc: denied { create } for pid=4849 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 90.536608][ T4284] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.603617][ T4859] loop0: detected capacity change from 0 to 2048 [ 90.659080][ T4859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.681380][ T28] audit: type=1400 audit(1786493485.858:1420): avc: denied { write } for pid=4862 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.717218][ T28] audit: type=1400 audit(1786493485.878:1421): avc: denied { getopt } for pid=4862 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.736756][ T28] audit: type=1400 audit(1786493485.878:1422): avc: denied { accept } for pid=4862 comm="syz.3.362" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.757168][ T28] audit: type=1400 audit(1786493485.878:1423): avc: denied { ioctl } for pid=4862 comm="syz.3.362" path="socket:[9322]" dev="sockfs" ino=9322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.782126][ T28] audit: type=1400 audit(1786493485.888:1424): avc: denied { write } for pid=4858 comm="syz.0.361" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.810943][ T4859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.927737][ T4855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.977495][ T4855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.038766][ T4875] loop0: detected capacity change from 0 to 512 [ 91.156822][ T4875] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.365: Directory hole found for htree index block 0 [ 91.171745][ T4875] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 91.171875][ T4875] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 91.180946][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 91.180966][ C1] EXT4-fs (loop0): initial error at time 1786493486: dx_probe:791: inode 2 [ 91.181017][ C1] EXT4-fs (loop0): last error at time 1786493486: dx_probe:791: inode 2 [ 91.213775][ T4875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.339493][ T4871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 91.400616][ T4881] sit1: entered promiscuous mode [ 91.414643][ T4881] bond1: entered promiscuous mode [ 91.419783][ T4881] geneve2: entered promiscuous mode [ 91.426663][ T4881] vlan2: entered promiscuous mode [ 91.451983][ T4881] bond2: entered promiscuous mode [ 91.462442][ T4881] vlan3: entered promiscuous mode [ 91.475583][ T4881] veth2: entered promiscuous mode [ 91.480801][ T4881] pimreg: entered promiscuous mode [ 91.504033][ T4291] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.515606][ T4291] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.527928][ T4291] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.538467][ T4291] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.549144][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 91.561492][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 91.574067][ T4301] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.582965][ T4301] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.607976][ T4301] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.625538][ T4301] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.772751][ T4854] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 91.848317][ T4899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 91.922072][ T4902] logitech-hidpp-device 0005:046D:B012.0003: received hid++ report of bad size (3) [ 91.932741][ T4899] loop2: detected capacity change from 0 to 512 [ 91.947891][ T4899] EXT4-fs: Ignoring removed bh option [ 91.965746][ T3385] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 91.969426][ T4899] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.980414][ T4904] udevd[4904]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 92.009852][ T4899] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 92.034397][ T4899] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 92.043041][ T4907] loop1: detected capacity change from 0 to 128 [ 92.047066][ T4899] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 92.069252][ T4907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.072365][ T4899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.104218][ T4907] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.120222][ T4907] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.375: bg 0: bad block bitmap checksum [ 92.148177][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.179230][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.218277][ T4913] lo: entered promiscuous mode [ 92.251451][ T4913] tunl0: entered promiscuous mode [ 92.276307][ T4913] gre0: entered promiscuous mode [ 92.299552][ T4913] gretap0: entered promiscuous mode [ 92.319311][ T4913] erspan0: entered promiscuous mode [ 92.335098][ T4913] ip_vti0: entered promiscuous mode [ 92.351647][ T4913] ip6_vti0: entered promiscuous mode [ 92.359006][ T4913] sit0: entered promiscuous mode [ 92.367282][ T4913] ip6tnl0: entered promiscuous mode [ 92.380026][ T4913] ip6gre0: entered promiscuous mode [ 92.398913][ T4913] syz_tun: entered promiscuous mode [ 92.413067][ T4913] ip6gretap0: entered promiscuous mode [ 92.420140][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.427741][ T4913] bridge0: entered promiscuous mode [ 92.436003][ T4913] vcan0: entered promiscuous mode [ 92.453643][ T4913] bond0: entered promiscuous mode [ 92.459455][ T4913] bond_slave_0: entered promiscuous mode [ 92.465505][ T4913] bond_slave_1: entered promiscuous mode [ 92.473952][ T4913] team0: entered promiscuous mode [ 92.480203][ T4913] team_slave_0: entered promiscuous mode [ 92.486444][ T4913] team_slave_1: entered promiscuous mode [ 92.493650][ T4913] dummy0: entered promiscuous mode [ 92.584117][ T4913] nlmon0: entered promiscuous mode [ 92.612176][ T4913] batadv0: entered promiscuous mode [ 92.636806][ T4913] vxcan0: entered promiscuous mode [ 92.646212][ T4913] vxcan1: entered promiscuous mode [ 92.652232][ T4913] veth0: entered promiscuous mode [ 92.658918][ T4913] veth1: entered promiscuous mode [ 92.666631][ T4913] wg0: entered promiscuous mode [ 92.679948][ T4935] netlink: 40 bytes leftover after parsing attributes in process `syz.5.378'. [ 92.689082][ T4913] wg1: entered promiscuous mode [ 92.696644][ T4913] wg2: entered promiscuous mode [ 92.702733][ T4913] veth0_to_bridge: entered promiscuous mode [ 92.712657][ T4913] veth1_to_bridge: entered promiscuous mode [ 92.725271][ T4913] veth0_to_bond: entered promiscuous mode [ 92.739013][ T4913] veth1_to_bond: entered promiscuous mode [ 92.756522][ T4913] veth0_to_team: entered promiscuous mode [ 92.773778][ T4913] veth1_to_team: entered promiscuous mode [ 92.789819][ T4913] veth0_to_batadv: entered promiscuous mode [ 92.804633][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.819668][ T4913] batadv_slave_0: entered promiscuous mode [ 92.835026][ T4913] veth1_to_batadv: entered promiscuous mode [ 92.849361][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.866387][ T4913] batadv_slave_1: entered promiscuous mode [ 92.879277][ T4913] xfrm0: entered promiscuous mode [ 92.892208][ T4913] veth0_to_hsr: entered promiscuous mode [ 92.907220][ T4913] veth1_to_hsr: entered promiscuous mode [ 92.923395][ T4913] hsr0: entered promiscuous mode [ 92.935638][ T4913] veth1_virt_wifi: entered promiscuous mode [ 92.951746][ T4913] veth0_virt_wifi: entered promiscuous mode [ 92.970886][ T4913] vlan0: entered promiscuous mode [ 92.984857][ T4913] vlan1: entered promiscuous mode [ 92.998515][ T4913] macvlan0: entered promiscuous mode [ 93.011865][ T4913] macvlan1: entered promiscuous mode [ 93.023158][ T4913] ipvlan0: entered promiscuous mode [ 93.031770][ T4913] ipvlan1: entered promiscuous mode [ 93.048243][ T4913] macvtap0: entered promiscuous mode [ 93.060395][ T4913] macsec0: entered promiscuous mode [ 93.074968][ T4913] geneve0: entered promiscuous mode [ 93.088767][ T4913] geneve1: entered promiscuous mode [ 93.102495][ T4913] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 93.112276][ T4913] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 93.121791][ T4913] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 93.153238][ T4913] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 93.164660][ T4913] bridge1: entered promiscuous mode [ 93.178226][ T4913] ip6tnl1: entered promiscuous mode [ 93.190308][ T4913] macvlan2: entered promiscuous mode [ 93.197410][ T4913] vlan2: entered promiscuous mode [ 93.222720][ T4301] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.246838][ T4301] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.287352][ T4301] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.296469][ T4301] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.414400][ T4625] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 93.635789][ T4958] logitech-hidpp-device 0005:046D:B012.0004: received hid++ report of bad size (3) [ 93.696615][ T4916] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 93.713723][ T4959] udevd[4959]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 94.006024][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.050888][ T4963] loop1: detected capacity change from 0 to 512 [ 94.139190][ T4963] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 94.475252][ T4978] : entered promiscuous mode [ 94.494453][ T4301] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.520381][ T4301] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.535231][ T4981] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 94.544255][ T4301] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.563085][ T4981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.572771][ T4974] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 94.669147][ T4981] bond3: (slave veth4): Enslaving as an active interface with a down link [ 94.693509][ T4982] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.718142][ T4982] bond3: (slave batadv1): making interface the new active one [ 94.748973][ T4982] batadv1: entered promiscuous mode [ 94.756827][ T4989] loop1: detected capacity change from 0 to 512 [ 94.766032][ T4982] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 94.804696][ T4282] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.825437][ T4991] loop5: detected capacity change from 0 to 512 [ 94.862177][ T3299] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000603) [ 94.870870][ T3299] FAT-fs (loop1): Filesystem has been set read-only [ 94.872343][ T4991] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.395: inode has both inline data and extents flags [ 94.893238][ T4996] loop3: detected capacity change from 0 to 512 [ 94.900203][ T4991] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.900350][ T4991] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.395: couldn't read orphan inode 15 (err -117) [ 94.909684][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 94.909698][ C0] EXT4-fs (loop5): initial error at time 1786493490: ext4_orphan_get:1399: inode 15 [ 94.909730][ C0] EXT4-fs (loop5): last error at time 1786493490: ext4_orphan_get:1399: inode 15 [ 94.955399][ T4996] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.016049][ T4991] loop5: lost filesystem error report for type 5 error -117 [ 95.019227][ T4991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.027215][ T4996] EXT4-fs (loop3): 1 truncate cleaned up [ 95.054868][ T4996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.073228][ T4918] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 95.097337][ T5004] udevd[5004]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 95.159346][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.223892][ T5018] loop1: detected capacity change from 0 to 512 [ 95.234820][ T5018] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.399: Directory hole found for htree index block 0 [ 95.249186][ T4991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.259485][ T5015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5015 comm=syz.2.403 [ 95.273072][ T5018] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 95.274024][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 95.280190][ T5020] lo: entered promiscuous mode [ 95.283107][ C1] EXT4-fs (loop1): initial error at time 1786493490: dx_probe:791: inode 2 [ 95.299940][ T5018] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 95.302958][ C1] EXT4-fs (loop1): last error at time 1786493490: dx_probe:791: inode 2 [ 95.323214][ T5020] tunl0: entered promiscuous mode [ 95.330271][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.353066][ T5020] gre0: entered promiscuous mode [ 95.376326][ T5020] gretap0: entered promiscuous mode [ 95.390145][ T5020] erspan0: entered promiscuous mode [ 95.403091][ T5020] ip_vti0: entered promiscuous mode [ 95.420429][ T5028] Invalid option length (0) for dns_resolver key [ 95.436676][ T5020] ip6_vti0: entered promiscuous mode [ 95.445923][ T5020] sit0: entered promiscuous mode [ 95.453892][ T5020] ip6tnl0: entered promiscuous mode [ 95.460854][ T5020] ip6gre0: entered promiscuous mode [ 95.473595][ T5020] syz_tun: entered promiscuous mode [ 95.481337][ T5020] ip6gretap0: entered promiscuous mode [ 95.489043][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.496248][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.506853][ T5020] bridge0: entered promiscuous mode [ 95.522308][ T5020] vcan0: entered promiscuous mode [ 95.533202][ T5020] bond0: entered promiscuous mode [ 95.538702][ T5020] bond_slave_0: entered promiscuous mode [ 95.544841][ T5020] bond_slave_1: entered promiscuous mode [ 95.552553][ T5020] team0: entered promiscuous mode [ 95.561135][ T5020] team_slave_0: entered promiscuous mode [ 95.570776][ T5020] team_slave_1: entered promiscuous mode [ 95.603620][ T5020] dummy0: entered promiscuous mode [ 95.642859][ T5020] nlmon0: entered promiscuous mode [ 95.659723][ T5020] batadv0: entered promiscuous mode [ 95.667319][ T5020] vxcan0: entered promiscuous mode [ 95.675009][ T5020] vxcan1: entered promiscuous mode [ 95.681380][ T5020] veth0: entered promiscuous mode [ 95.688113][ T5020] veth1: entered promiscuous mode [ 95.696152][ T5020] wg0: entered promiscuous mode [ 95.704297][ T5020] wg1: entered promiscuous mode [ 95.712137][ T5020] wg2: entered promiscuous mode [ 95.718662][ T5020] veth0_to_bridge: entered promiscuous mode [ 95.728653][ T5020] veth1_to_bridge: entered promiscuous mode [ 95.738156][ T5020] veth0_to_bond: entered promiscuous mode [ 95.748541][ T5020] veth1_to_bond: entered promiscuous mode [ 95.760299][ T5020] veth0_to_team: entered promiscuous mode [ 95.771291][ T5020] veth1_to_team: entered promiscuous mode [ 95.780044][ T5020] veth0_to_batadv: entered promiscuous mode [ 95.788805][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.796478][ T5020] batadv_slave_0: entered promiscuous mode [ 95.804794][ T5020] veth1_to_batadv: entered promiscuous mode [ 95.812106][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.820342][ T5020] batadv_slave_1: entered promiscuous mode [ 95.827832][ T5020] xfrm0: entered promiscuous mode [ 95.837522][ T5020] veth0_to_hsr: entered promiscuous mode [ 95.846016][ T5020] veth1_to_hsr: entered promiscuous mode [ 95.855210][ T5020] hsr0: entered promiscuous mode [ 95.861504][ T5020] veth1_virt_wifi: entered promiscuous mode [ 95.869300][ T5020] veth0_virt_wifi: entered promiscuous mode [ 95.880428][ T5020] vlan0: entered promiscuous mode [ 95.887382][ T5020] vlan1: entered promiscuous mode [ 95.894273][ T5020] macvlan0: entered promiscuous mode [ 95.901164][ T5020] macvlan1: entered promiscuous mode [ 95.907891][ T5020] ipvlan0: entered promiscuous mode [ 95.914622][ T5020] ipvlan1: entered promiscuous mode [ 95.923860][ T5020] macvtap0: entered promiscuous mode [ 95.930249][ T5020] macsec0: entered promiscuous mode [ 95.937776][ T5020] geneve0: entered promiscuous mode [ 95.946204][ T5020] geneve1: entered promiscuous mode [ 95.953904][ T5020] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.964504][ T5020] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 95.972712][ T5020] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 95.982728][ T5020] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 95.994052][ T4301] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.034198][ T4280] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.051341][ T5041] loop5: detected capacity change from 0 to 512 [ 96.063294][ T4280] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.082362][ T4280] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.098964][ T5041] EXT4-fs (loop5): inodes count not valid: 32 vs 23 [ 96.139313][ T5050] loop2: detected capacity change from 0 to 128 [ 96.195819][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 96.251716][ T5050] System zones: 1-3, 19-19, 35-36 [ 96.281916][ T5056] logitech-hidpp-device 0005:046D:B012.0006: received hid++ report of bad size (3) [ 96.295790][ T5050] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 96.319313][ T5050] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.364404][ T939] logitech-hidpp-device 0005:046D:B012.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 96.379564][ T5060] udevd[5060]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 96.420391][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 96.420405][ T28] audit: type=1400 audit(1786493491.598:1456): avc: denied { write } for pid=5042 comm="syz.2.408" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.535655][ T5068] loop5: detected capacity change from 0 to 256 [ 96.542314][ T5068] vfat: Unknown parameter '' [ 96.554962][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.596362][ T5073] bond3: entered promiscuous mode [ 96.609349][ T5073] veth3: entered promiscuous mode [ 96.649449][ T5077] loop5: detected capacity change from 0 to 512 [ 96.665348][ T5073] veth4: entered promiscuous mode [ 96.725410][ T28] audit: type=1400 audit(1786493491.908:1457): avc: denied { connect } for pid=5076 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.921883][ T5091] loop5: detected capacity change from 0 to 1764 [ 96.953133][ T5094] loop5: detected capacity change from 0 to 512 [ 96.962540][ T5094] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.425: inode has both inline data and extents flags [ 96.976267][ T5094] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.976398][ T5094] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.425: couldn't read orphan inode 15 (err -117) [ 96.985575][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 96.985602][ C0] EXT4-fs (loop5): initial error at time 1786493492: ext4_orphan_get:1399: inode 15 [ 96.985636][ C0] EXT4-fs (loop5): last error at time 1786493492: ext4_orphan_get:1399: inode 15 [ 97.022659][ T5094] loop5: lost filesystem error report for type 5 error -117 [ 97.023324][ T5094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.045080][ T28] audit: type=1400 audit(1786493492.228:1458): avc: denied { write } for pid=5093 comm="syz.5.425" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.100468][ T28] audit: type=1400 audit(1786493492.278:1459): avc: denied { map } for pid=5093 comm="syz.5.425" path="/53/file1/cpuset.effective_mems" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.140979][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.169024][ T5097] logitech-hidpp-device 0005:046D:B012.0007: received hid++ report of bad size (3) [ 97.185198][ T282] logitech-hidpp-device 0005:046D:B012.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 97.198755][ T5098] udevd[5098]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 97.356847][ T5106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 97.372354][ T5106] System zones: 1-3, 19-19, 35-36 [ 97.378659][ T5106] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 97.398063][ T5106] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.432989][ T28] audit: type=1400 audit(1786493492.608:1460): avc: denied { write } for pid=5105 comm="syz.5.430" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.435777][ T5111] sd 0:0:1:0: PR command failed: 1026 [ 97.461904][ T5111] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 97.469638][ T5111] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 97.498838][ T3977] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.921058][ T5118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.929771][ T5118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.158562][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.720163][ T282] logitech-hidpp-device 0005:046D:B012.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 98.731849][ T5137] udevd[5137]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 98.808977][ T28] audit: type=1326 audit(1786493493.988:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5138 comm="syz.5.439" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4429be0d9 code=0x0 [ 98.877840][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18200 sclass=netlink_route_socket pid=5144 comm=syz.5.440 [ 98.921832][ T5146] lo: entered promiscuous mode [ 98.928687][ T5146] tunl0: entered promiscuous mode [ 98.938652][ T5146] gre0: entered promiscuous mode [ 98.954367][ T5146] gretap0: entered promiscuous mode [ 98.971243][ T5146] erspan0: entered promiscuous mode [ 98.978691][ T5146] ip_vti0: entered promiscuous mode [ 98.985370][ T5146] ip6_vti0: entered promiscuous mode [ 98.994351][ T5146] sit0: entered promiscuous mode [ 99.002395][ T5146] ip6tnl0: entered promiscuous mode [ 99.010950][ T5146] ip6gre0: entered promiscuous mode [ 99.019310][ T5146] syz_tun: entered promiscuous mode [ 99.027682][ T5146] ip6gretap0: entered promiscuous mode [ 99.035391][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.042644][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.050211][ T5146] bridge0: entered promiscuous mode [ 99.058078][ T5146] vcan0: entered promiscuous mode [ 99.065733][ T5146] bond0: entered promiscuous mode [ 99.070835][ T5146] bond_slave_0: entered promiscuous mode [ 99.076820][ T5146] bond_slave_1: entered promiscuous mode [ 99.085447][ T5146] team0: entered promiscuous mode [ 99.090634][ T5146] team_slave_0: entered promiscuous mode [ 99.096555][ T5146] team_slave_1: entered promiscuous mode [ 99.104710][ T5146] dummy0: entered promiscuous mode [ 99.111579][ T5146] nlmon0: entered promiscuous mode [ 99.118121][ T5146] batadv0: entered promiscuous mode [ 99.126120][ T5146] vxcan0: entered promiscuous mode [ 99.132229][ T5146] vxcan1: entered promiscuous mode [ 99.139834][ T5146] veth0: entered promiscuous mode [ 99.146704][ T5146] veth1: entered promiscuous mode [ 99.156026][ T5146] wg0: entered promiscuous mode [ 99.164082][ T5146] wg1: entered promiscuous mode [ 99.170559][ T5146] wg2: entered promiscuous mode [ 99.176863][ T5146] veth0_to_bridge: entered promiscuous mode [ 99.187442][ T5146] veth1_to_bridge: entered promiscuous mode [ 99.197384][ T5146] veth0_to_bond: entered promiscuous mode [ 99.205496][ T5146] veth1_to_bond: entered promiscuous mode [ 99.213251][ T5146] veth0_to_team: entered promiscuous mode [ 99.223251][ T5146] veth1_to_team: entered promiscuous mode [ 99.233280][ T5146] veth0_to_batadv: entered promiscuous mode [ 99.240974][ T5146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.248591][ T5146] batadv_slave_0: entered promiscuous mode [ 99.256234][ T5146] veth1_to_batadv: entered promiscuous mode [ 99.263504][ T5146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.272592][ T5146] batadv_slave_1: entered promiscuous mode [ 99.279849][ T5146] xfrm0: entered promiscuous mode [ 99.286622][ T5146] veth0_to_hsr: entered promiscuous mode [ 99.295718][ T5146] veth1_to_hsr: entered promiscuous mode [ 99.304183][ T5146] hsr0: entered promiscuous mode [ 99.310397][ T5146] veth1_virt_wifi: entered promiscuous mode [ 99.319019][ T5146] veth0_virt_wifi: entered promiscuous mode [ 99.330631][ T5146] vlan0: entered promiscuous mode [ 99.337668][ T5146] vlan1: entered promiscuous mode [ 99.346079][ T5146] macvlan0: entered promiscuous mode [ 99.354119][ T5146] macvlan1: entered promiscuous mode [ 99.360541][ T5146] ipvlan0: entered promiscuous mode [ 99.366232][ T5146] ipvlan1: entered promiscuous mode [ 99.375102][ T5146] macvtap0: entered promiscuous mode [ 99.381718][ T5146] macsec0: entered promiscuous mode [ 99.389649][ T5146] geneve0: entered promiscuous mode [ 99.396026][ T5146] geneve1: entered promiscuous mode [ 99.403894][ T5146] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 99.413182][ T5146] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 99.421503][ T5146] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 99.431204][ T5146] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 99.439358][ T4280] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.474105][ T4301] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.483091][ T4301] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.492250][ T4301] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.646351][ T5079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.697283][ T5155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 99.708470][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 99.740710][ T5153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 99.774324][ T5153] System zones: 1-3, 19-19, 35-36 [ 99.811651][ T5153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 99.862419][ T5153] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.927253][ T28] audit: type=1400 audit(1786493495.108:1462): avc: denied { write } for pid=5149 comm="syz.1.443" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.959570][ T5031] logitech-hidpp-device 0005:046D:B012.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 99.972931][ T5174] udevd[5174]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 99.996122][ T5173] set_capacity_and_notify: 2 callbacks suppressed [ 99.996222][ T5173] loop3: detected capacity change from 0 to 1756 [ 100.021453][ T5173] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 100.033131][ T5176] loop5: detected capacity change from 0 to 512 [ 100.048046][ T5176] EXT4-fs: Ignoring removed nobh option [ 100.050906][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.070488][ T5176] EXT4-fs: Mount option(s) incompatible with ext2 [ 100.123370][ T28] audit: type=1400 audit(1786493495.298:1464): avc: denied { read } for pid=5178 comm="syz.1.451" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.154837][ T5181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64532 sclass=netlink_tcpdiag_socket pid=5181 comm=syz.2.452 [ 100.169385][ T28] audit: type=1400 audit(1786493495.298:1465): avc: denied { ioctl } for pid=5178 comm="syz.1.451" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.232220][ T28] audit: type=1400 audit(1786493495.288:1463): avc: denied { ioctl } for pid=5175 comm="syz.5.450" path="socket:[9903]" dev="sockfs" ino=9903 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.356269][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.459'. [ 100.357918][ T5189] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 100.412974][ T5199] logitech-hidpp-device 0005:046D:B012.000A: received hid++ report of bad size (3) [ 100.451681][ T4946] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 100.465716][ T5202] bridge0: port 3(syz_tun) entered blocking state [ 100.475971][ T5202] bridge0: port 3(syz_tun) entered disabled state [ 100.489748][ T5205] udevd[5205]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 100.517380][ T5202] syz_tun: entered allmulticast mode [ 100.556067][ T5210] loop2: detected capacity change from 0 to 512 [ 100.593333][ T5210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.626993][ T5210] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.658283][ T5210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.463'. [ 100.686179][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.771831][ T5229] syzkaller1: entered promiscuous mode [ 100.777493][ T5229] syzkaller1: entered allmulticast mode [ 100.820039][ T5233] loop2: detected capacity change from 0 to 128 [ 100.851707][ T5233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 100.870220][ T5236] loop5: detected capacity change from 0 to 512 [ 100.871272][ T5233] System zones: 1-3, 19-19, 35-36 [ 100.883558][ T5237] logitech-hidpp-device 0005:046D:B012.000B: received hid++ report of bad size (3) [ 100.891570][ T5233] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.911508][ T5236] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.471: Directory hole found for htree index block 0 [ 100.911526][ T5233] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.927220][ T5236] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 100.959739][ T4946] logitech-hidpp-device 0005:046D:B012.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 100.964033][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 100.985729][ C0] EXT4-fs (loop5): initial error at time 1786493496: dx_probe:791: inode 2 [ 100.994397][ C0] EXT4-fs (loop5): last error at time 1786493496: dx_probe:791: inode 2 [ 101.003066][ T5236] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 101.036654][ T5236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.050334][ T5240] udevd[5240]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 101.064321][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.335963][ T5166] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 101.363236][ T5260] loop2: detected capacity change from 0 to 164 [ 101.390388][ T5263] loop3: detected capacity change from 0 to 1024 [ 101.449242][ T5256] loop2: detected capacity change from 0 to 128 [ 101.460496][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.511147][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 101.511165][ T28] audit: type=1400 audit(1786493496.688:1476): avc: denied { mounton } for pid=5255 comm="syz.2.480" path="/proc/268/task" dev="proc" ino=10135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 101.622967][ T28] audit: type=1400 audit(1786493496.728:1477): avc: denied { write } for pid=5262 comm="syz.3.481" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.633841][ T5268] loop2: detected capacity change from 0 to 1024 [ 101.679441][ T5268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.717702][ T28] audit: type=1400 audit(1786493496.728:1478): avc: denied { read write } for pid=5262 comm="syz.3.481" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.763081][ T28] audit: type=1400 audit(1786493496.728:1479): avc: denied { open } for pid=5262 comm="syz.3.481" path="/99/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.791785][ T3977] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.815917][ T28] audit: type=1400 audit(1786493496.738:1480): avc: denied { map } for pid=5262 comm="syz.3.481" path="/99/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.838847][ T28] audit: type=1400 audit(1786493496.738:1481): avc: denied { execute } for pid=5262 comm="syz.3.481" path="/99/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.992382][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.002419][ T5277] loop1: detected capacity change from 0 to 512 [ 102.009748][ T5274] logitech-hidpp-device 0005:046D:B012.000C: received hid++ report of bad size (3) [ 102.063429][ T3581] logitech-hidpp-device 0005:046D:B012.000C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 102.078002][ T5283] udevd[5283]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 102.094403][ T5281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.115562][ T28] audit: type=1400 audit(1786493497.298:1482): avc: denied { write } for pid=5267 comm="syz.2.482" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.167447][ T28] audit: type=1400 audit(1786493497.348:1483): avc: denied { write } for pid=5280 comm="syz.3.486" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.197878][ T5281] FAULT_INJECTION: forcing a failure. [ 102.197878][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 102.211234][ T5281] CPU: 1 UID: 0 PID: 5281 Comm: syz.3.486 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.211308][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.211344][ T5281] Call Trace: [ 102.211352][ T5281] [ 102.211360][ T5281] __dump_stack+0x1d/0x30 [ 102.211388][ T5281] dump_stack_lvl+0x95/0xd0 [ 102.211412][ T5281] dump_stack+0x15/0x1b [ 102.211433][ T5281] should_fail_ex+0x25e/0x270 [ 102.211496][ T5281] ? __iomap_dio_rw+0x191/0x1410 [ 102.211616][ T5281] should_failslab+0x8c/0xb0 [ 102.211645][ T5281] __kmalloc_cache_noprof+0x7b/0x3d0 [ 102.211753][ T5281] ? __iomap_dio_rw+0x191/0x1410 [ 102.211850][ T5281] __iomap_dio_rw+0x191/0x1410 [ 102.211888][ T5281] ? should_failslab+0x8c/0xb0 [ 102.211911][ T5281] ? __rcu_read_unlock+0x4e/0x70 [ 102.212026][ T5281] ? avc_has_perm_noaudit+0xa3/0x120 [ 102.212061][ T5281] iomap_dio_rw+0x40/0x90 [ 102.212093][ T5281] ext4_file_write_iter+0xc2d/0xef0 [ 102.212155][ T5281] do_iter_readv_writev+0x4f6/0x5a0 [ 102.212318][ T5281] vfs_writev+0x2d1/0x8b0 [ 102.212353][ T5281] ? get_pid_task+0x92/0xc0 [ 102.212388][ T5281] __se_sys_pwritev2+0xfc/0x1c0 [ 102.212471][ T5281] __x64_sys_pwritev2+0x67/0x80 [ 102.212503][ T5281] x64_sys_call+0xe07/0x3020 [ 102.212537][ T5281] do_syscall_64+0x136/0x3c0 [ 102.212575][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.212670][ T5281] RIP: 0033:0x7f724a9fe0d9 [ 102.212689][ T5281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.212715][ T5281] RSP: 002b:00007f7249457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 102.212743][ T5281] RAX: ffffffffffffffda RBX: 00007f724ac85fa0 RCX: 00007f724a9fe0d9 [ 102.212840][ T5281] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 102.212859][ T5281] RBP: 00007f7249457090 R08: 0000000000000000 R09: 0000000000000003 [ 102.212878][ T5281] R10: 0000000000005a00 R11: 0000000000000246 R12: 0000000000000001 [ 102.212895][ T5281] R13: 00007f724ac86038 R14: 00007f724ac85fa0 R15: 00007fff332733b8 [ 102.212979][ T5281] [ 102.422614][ T5288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 102.436277][ T5288] System zones: 1-3, 19-19, 35-36 [ 102.442001][ T5288] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.456205][ T5288] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.495567][ T28] audit: type=1400 audit(1786493497.678:1484): avc: denied { write } for pid=5287 comm="syz.5.488" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.519229][ T5291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.538463][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.555330][ T3977] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.566029][ T5291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.614323][ T5291] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.641521][ T5295] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.490: bad orphan inode 32 [ 102.652787][ T5295] loop3: lost filesystem error report for type 5 error -117 [ 102.653066][ T5295] ext4_test_bit(bit=31, block=18) = 0 [ 102.664037][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 102.672399][ C1] EXT4-fs (loop3): initial error at time 1786493497: ext4_orphan_get:1425 [ 102.680951][ C1] EXT4-fs (loop3): last error at time 1786493497: ext4_orphan_get:1425 [ 102.719028][ T5299] netlink: 292 bytes leftover after parsing attributes in process `syz.5.491'. [ 102.739127][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.752143][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.799920][ T5295] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.848443][ T28] audit: type=1400 audit(1786493498.028:1485): avc: denied { write } for pid=5294 comm="syz.3.490" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.883853][ T5299] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.932489][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.967110][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.019649][ T5307] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.493: Directory hole found for htree index block 0 [ 103.043117][ T5308] bridge1: entered promiscuous mode [ 103.108773][ T5307] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 103.108906][ T5307] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 103.118064][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 103.118081][ C0] EXT4-fs (loop1): initial error at time 1786493498: dx_probe:791: inode 2 [ 103.118130][ C0] EXT4-fs (loop1): last error at time 1786493498: dx_probe:791: inode 2 [ 103.218370][ T5307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.375298][ T5319] logitech-hidpp-device 0005:046D:B012.000D: received hid++ report of bad size (3) [ 103.415593][ T3582] logitech-hidpp-device 0005:046D:B012.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 103.430081][ T5320] udevd[5320]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 103.499377][ T5326] netlink: 'syz.0.496': attribute type 21 has an invalid length. [ 103.512295][ T5326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.496'. [ 103.589404][ T5299] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 103.597420][ T5299] FAT-fs (loop5): Filesystem has been set read-only [ 103.632106][ T5334] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 103.643099][ T5299] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 103.679937][ T5334] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 103.690630][ T5334] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 103.704255][ T5334] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.715261][ T5334] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 103.724429][ T5334] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 103.733262][ T5334] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 103.797519][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.867441][ T5337] ================================================================== [ 103.875643][ T5337] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_interrupt [ 103.882873][ T5337] [ 103.885216][ T5337] write to 0xffff888103dd4048 of 8 bytes by interrupt on cpu 0: [ 103.892869][ T5337] ps2_interrupt+0x50d/0x550 [ 103.897512][ T5337] serio_interrupt+0x66/0xf0 [ 103.902139][ T5337] i8042_handle_data+0x388/0x680 [ 103.907098][ T5337] i8042_interrupt+0x15/0x90 [ 103.911714][ T5337] __handle_irq_event_percpu+0x8b/0x480 [ 103.917305][ T5337] handle_irq_event+0x64/0xf0 [ 103.922011][ T5337] handle_edge_irq+0x155/0x440 [ 103.926817][ T5337] __common_interrupt+0x60/0xb0 [ 103.931689][ T5337] common_interrupt+0x7e/0x90 [ 103.936407][ T5337] asm_common_interrupt+0x26/0x40 [ 103.941539][ T5337] __sanitizer_cov_trace_pc+0x30/0x70 [ 103.946972][ T5337] cnum64_intersect_with+0x20/0x1d0 [ 103.952205][ T5337] __update_reg_bounds+0x14f/0x430 [ 103.957364][ T5337] reg_bounds_sync+0x78/0x270 [ 103.962065][ T5337] adjust_scalar_min_max_vals+0x1393/0x1b30 [ 103.967972][ T5337] adjust_reg_min_max_vals+0x5b1/0x8f0 [ 103.973463][ T5337] do_check_insn+0x3e90/0xf4c0 [ 103.978246][ T5337] do_check_common+0x267c/0x2d30 [ 103.983260][ T5337] do_check_main+0x3c/0xd0 [ 103.987711][ T5337] bpf_check+0x2e97/0x3250 [ 103.992184][ T5337] bpf_prog_load+0xfaf/0x1100 [ 103.996897][ T5337] __sys_bpf+0xbae/0xc30 [ 104.001285][ T5337] __x64_sys_bpf+0x69/0x80 [ 104.005765][ T5337] x64_sys_call+0x10cb/0x3020 [ 104.010461][ T5337] do_syscall_64+0x136/0x3c0 [ 104.015075][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.020990][ T5337] [ 104.023337][ T5337] read to 0xffff888103dd4048 of 8 bytes by task 5337 on cpu 1: [ 104.030903][ T5337] ps2_do_sendbyte+0x17e/0x320 [ 104.035688][ T5337] __ps2_command+0x3b7/0xaa0 [ 104.040320][ T5337] ps2_command+0x52/0x90 [ 104.044599][ T5337] psmouse_set_resolution+0x7d/0xd0 [ 104.049834][ T5337] psmouse_attr_set_protocol+0x55f/0xb10 [ 104.055506][ T5337] psmouse_attr_set_helper+0x2aa/0x470 [ 104.060996][ T5337] dev_attr_store+0x4a/0x70 [ 104.065519][ T5337] sysfs_kf_write+0xfe/0x120 [ 104.070245][ T5337] kernfs_fop_write_iter+0x1d2/0x2e0 [ 104.075553][ T5337] vfs_write+0x57d/0x990 [ 104.079822][ T5337] ksys_write+0xdc/0x1a0 [ 104.084091][ T5337] __x64_sys_write+0x40/0x50 [ 104.088713][ T5337] x64_sys_call+0x27e1/0x3020 [ 104.093451][ T5337] do_syscall_64+0x136/0x3c0 [ 104.098074][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.103995][ T5337] [ 104.106331][ T5337] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 104.113455][ T5337] [ 104.115792][ T5337] Reported by Kernel Concurrency Sanitizer on: [ 104.121956][ T5337] CPU: 1 UID: 0 PID: 5337 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT(lazy) [ 104.131170][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.141243][ T5337] ================================================================== [ 104.169051][ T5337] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8