last executing test programs: 6.214155043s ago: executing program 1 (id=393): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000002f56e0d9a8041cb4500000a0000000400038004000280"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="00000000000200001c001280090001007866726d000000000c000280080002000200000008000300", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0xd, 0x0, 0x4000000}, 0x20004000) 6.173946566s ago: executing program 1 (id=396): msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x3, 0x4041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3d96, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$l2tp(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x2a020480) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r4, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) getgroups(0x3, &(0x7f0000000140)=[0xee00, 0xee01, 0xee01]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) r9 = syz_clone3(&(0x7f0000000540)={0x40000000, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380), {0x28}, &(0x7f0000000680)=""/203, 0xcb, &(0x7f00000003c0)=""/119, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r5}}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x2, 0x0, r6, 0x0, r7, 0xc2, 0x87}, 0x0, 0x0, 0x20000000000, 0x5, 0x2, 0xfffffffffffffffc, 0x76cd02eb, 0xfff, 0x4, 0x3, r8, r9}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 4.6631294s ago: executing program 3 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000600)=@ieee802154, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/58, 0x3a}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/250, 0xfa}], 0x3, &(0x7f0000000840)=""/94, 0x5e}, 0x2}], 0x1, 0x10100, &(0x7f00000008c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x1a0) write$bt_hci(r5, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) 3.540353878s ago: executing program 3 (id=422): syz_emit_ethernet(0x32, &(0x7f0000019300)={@random="dbd0294daddf", @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @multicast1, @loopback}, {{0x4e23, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x4, 0x6, "e3290a", 0x86, "ef4977"}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000780)=@known='security.selinux\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x'], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 3.376066827s ago: executing program 0 (id=426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') ptrace$poke(0x21, r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x80001891, &(0x7f0000000140)={0x0, 0x4356, 0x400, 0x3, 0x8069}, &(0x7f00000001c0), &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) readv(r5, &(0x7f0000000ec0)=[{&(0x7f0000000600)=""/32, 0x20}, {0x0}], 0x2) 3.315129996s ago: executing program 3 (id=428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000140)="619ff1e3c70400ad0800009fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000}, 0x50) (fail_nth: 1) 3.310011115s ago: executing program 4 (id=429): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000040)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioprio_set$uid(0x3, 0xee01, 0x6000) r4 = msgget$private(0x0, 0x210) msgsnd(r4, &(0x7f00000009c0)={0x2}, 0x8, 0x0) msgsnd(r4, &(0x7f0000000040)={0x2}, 0x8, 0x800) msgrcv(r4, 0x0, 0x0, 0x2, 0x2000) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}}}, &(0x7f00000000c0)=0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000140)="619ff1e3c70400ad0800009fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000}, 0x50) 3.221616718s ago: executing program 1 (id=430): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00'}) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x84000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d5a6ef3912ffc9b77afbf73ee0572d3ff2d9a4f095765f46b73db181e33b6329f092aedeb0658090e3ba2548b5ed6255f818b1f64dec466a6320db81304d281dac7087f9db0000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="11"], 0x14) 3.064168169s ago: executing program 3 (id=431): socket(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/60, 0x3c) clock_settime(0xfacf157edf639126, &(0x7f0000003c80)={0x77359400}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x50100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x5004, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x40, 0x3, 0x34a}, 0x0, &(0x7f0000000240)) inotify_init() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b39326d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8043f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) 2.956970018s ago: executing program 1 (id=432): socket(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/60, 0x3c) clock_settime(0xfacf157edf639126, &(0x7f0000003c80)={0x77359400}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x50100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x5004, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x40, 0x3, 0x34a}, 0x0, &(0x7f0000000240)) inotify_init() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b39326d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8043f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 2.404796234s ago: executing program 4 (id=434): r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x80000000, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040), &(0x7f0000000080)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001140), 0x60000, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x7ff, 0x4) getxattr(&(0x7f0000000140)='\x00', &(0x7f00000001c0)=@random={'os2.', '~{&\x03\x00'}, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 2.404426584s ago: executing program 4 (id=435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x36, 0x0, 0x0, 0xfffffffc}, 0x28) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x1}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.338561921s ago: executing program 0 (id=436): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x34a8) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa2aaaaaaa00ff0600ffff08004500003000000000004b9078ac1e01019078cf116b3f45501e595741b1649900080066000d06d095aae103375e167baf2b75bc82"], 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x300, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfe, {0x2, 0x18, 0x24, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x2, '\x00', r6, r0, 0x3, 0x1}, 0x50) 1.811191812s ago: executing program 0 (id=437): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x1, @val=@netfilter={0xa, 0x1, 0x353a}}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000096f58f94b2ae7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000003c090000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000000000000103000000000000070000000000000000000000000000000000000000000000000000002b00000002000000000000000000000000000000000000000035000000000000000000000000000000000000ffffffff000000000000000000000000000000003200000000000000ff010000000000000000000000000001000000000100"/436], 0x1fc}}, 0x14000) r4 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x80001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x9d, 0xc7, &(0x7f0000000200)="1cb16ff52d71a48b2e7e48b28e212dce4e72e46242cc53bad77978aad24a0bed9214e35c6bae20914e4b7622373811a20025be0e67b3956f4cd525e23a273f9017558e9bc6e437d54864055262647458971cf2704ccff51fa9b9d08410d6ea44e7a278c3e149bfefaeedd753bffdba0bf2c546e5732bb2eaf4eb851705d2392736d630518b73eb0494abc4eb6227d9ba285d3dc4da97d8809a26663036", &(0x7f00000002c0)=""/199, 0x5, 0x0, 0x8e, 0x0, &(0x7f00000003c0)="e5656e8dcc1dbaa4808fface1f7f176ba6aa9355176bc8a44ac6455b887f7b27ca6c8e6ae7bfc5b76068c7cec2cc18bac2df792c18a071d2ba8b62371e6fd0b1f52775a9b054ba23a40a66f78ac5f8b6f282a9a471d195b47c236447fdc7dd1286faef9722c0b046f1a7e2151796510c0629988d5d15720904701ef5b7ce1ff3142eadd29c3acfc5100222827c9b", &(0x7f00000000c0), 0x4, 0x0, 0x8000}, 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=@newae={0x184, 0x1e, 0x1, 0x70bd25, 0x25dfdbfd, {{@in6=@mcast1, 0x4d2, 0xa, 0xff}, @in=@local, 0x10}, [@replay_esn_val={0x34, 0x17, {0x6, 0x70bd2d, 0x70bd2d, 0x70bd28, 0x70bd29, 0x7fffffff, [0x2, 0x8, 0x8, 0x5, 0x8, 0x400]}}, @offload={0xc, 0x1c, {r7, 0x2}}, @sa={0xe4, 0x6, {{@in6=@local, @in=@empty, 0x4e20, 0x6, 0x4e21, 0x3, 0xa, 0xa0, 0x0, 0x33, 0x0, r10}, {@in=@multicast2, 0x4d5, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x5, 0x6, 0xf, 0xff, 0x37, 0x8, 0x5, 0x1}, {0x6, 0x8c, 0x3, 0x3e96dab3}, {0xec4, 0x400, 0x6}, 0x70bd2b, 0x0, 0xa, 0x2, 0x2, 0x1a1}}, @sec_ctx={0x10, 0x8, {0xc, 0x8, 0x0, 0x3, 0x4, "18bd3d90"}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2c, 0x7}}]}, 0x184}}, 0x840) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37f", 0x3f, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 1.644635851s ago: executing program 0 (id=439): msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x3, 0x4041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3d96, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$l2tp(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x2a020480) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r4, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) getgroups(0x3, &(0x7f0000000140)=[0xee00, 0xee01, 0xee01]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000180)=0x0) r9 = syz_clone3(&(0x7f0000000540)={0x40000000, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380), {0x28}, &(0x7f0000000680)=""/203, 0xcb, &(0x7f00000003c0)=""/119, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r5}}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x2, 0x0, r6, 0x0, r7, 0xc2, 0x87}, 0x0, 0x0, 0x20000000000, 0x5, 0x2, 0xfffffffffffffffc, 0x76cd02eb, 0xfff, 0x4, 0x3, r8, r9}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 1.474487058s ago: executing program 4 (id=442): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffe, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x84000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d5a6ef3912ffc9b77afbf73ee0572d3ff2d9a4f095765f46b73db181e33b6329f092aedeb0658090e3ba2548b5ed6255f818b1f64dec466a6320db81304d281dac7087f9db0000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="11"], 0x14) 1.405392025s ago: executing program 4 (id=443): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2102}) setuid(0xee00) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f00000002c0)=""/127, 0x7f}], 0x3}, 0x40010003) creat(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x8fb0, 0x4}, {0x5, 0xfffffffc}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x2, 0x68}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x139441, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0x34a8) unshare(0x2c020400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x264031, 0xffffffffffffffff, 0xec776000) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2711, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000004c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r9}}, 0x20) 1.329541151s ago: executing program 4 (id=445): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) cachestat(r3, &(0x7f00000002c0)={0x400, 0x2400000000000000}, 0xfffffffffffffffc, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) syz_clone(0x59150880, &(0x7f0000000440)="f63a8e3a675ad432c6a77c2cc7a6430f4a2803acafd25749a159d7e4bdda3ad72aaa795952edc8e6d3707d154a1b92cf535fa4e86bf99c2fef11d8f2e0c41c82c19518d2da5d5dd6af3f984134af2d21af834bd9eeb6c3a54fe0ce6868e98c497ed40a041809279265afe61350d19ad4cc20e9c0bea8b6777cd29e0a943dd0103f039b69733e0f3ccf490b845e01b2efb36ad37b9b9782ba1ce5e90568018a1a2801a3a314360f1417403fada4cbd7f68c0598c438ee8bdb973b101f2a70759e06a22722f5bd8b1bc4140cf80342e59f3e259d2f732226c457296568059ea49918b16ccc261cd77863f0", 0xea, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000540)="d67ff558b766d21b78d433c7db3dd46142f95c3e35c794fb1122423878c2dff22ba3d665a5f7bc22b3b3967fb1664b8eca5484444ff408b0e941a7444775ca27a1615f1f2974acf985da0b11b0c3b638afbf5094699e66ddd4f6fc312d2d39ebc6e07368714b742e58ee0993047b2f14d41fff256068c95a781d592791000affe6aef9444a61971d22df3325406a0e4425401f3bb4c9bffb88d37c705fb3e5cdb2fdb50b1b2406a7ad2e07abf27093d704d2e3ea0abde6a4bb664bf90a035c25e15c759e7a97b000017576a42a") setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r1, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) 745.46227ms ago: executing program 0 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x7, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') ptrace$poke(0x21, r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) readv(r5, &(0x7f0000000ec0)=[{&(0x7f0000000600)=""/32, 0x20}, {0x0}], 0x2) 509.480526ms ago: executing program 2 (id=447): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x34a8) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa2aaaaaaa00ff0600ffff08004500003000000000004b9078ac1e01019078cf116b3f45501e595741b1649900080066000d06d095aae103375e167baf2b75bc82"], 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x300, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfe, {0x2, 0x18, 0x24, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x2, '\x00', r6, r0, 0x3, 0x1}, 0x50) 483.669191ms ago: executing program 2 (id=448): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000"], 0xb8}}, 0x20004000) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20008011) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 463.119097ms ago: executing program 0 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socket$key(0xf, 0x3, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x1a0) write$bt_hci(r6, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r6, r3, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) 443.384933ms ago: executing program 2 (id=450): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) syz_emit_ethernet(0x1ee, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x26, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 389.879843ms ago: executing program 2 (id=451): syz_emit_ethernet(0x32, &(0x7f0000019300)={@random="dbd0294daddf", @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @multicast1, @loopback}, {{0x4e23, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x4, 0x6, "e3290a", 0x86, "ef4977"}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000780)=@known='security.selinux\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) dup2(r3, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(r4, r4) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x'], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 389.536183ms ago: executing program 2 (id=452): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r2, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (fail_nth: 1) 156.664419ms ago: executing program 2 (id=453): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) r1 = eventfd(0xc2) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="dff766646e6f3dff2a9c1c6e5f4761c53a7a10bc8be94f841fb0d2d95074b3908d352ead1c88ffc4934e9f7010977b5ed22e615e156aef4b9055eb94187db5c110c5fa2ecc5a536fe8f6f340f8158680ba124b0ac8", @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000000)={0x2b, 0x7, '\x00', [@pad1, @enc_lim, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x8, [0x9, 0x0, 0x7, 0x401, 0x8]}}]}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x4080, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\x8ex\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x1) r6 = socket(0x2b, 0x80801, 0x1) bind$inet(r6, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r3, 0x1000000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="100000000914ed37"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080) recvmsg$can_bcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000baff000000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff020000000000000000000000000001050009000400000008000400"], 0x6c}}, 0x40014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 107.9045ms ago: executing program 1 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 63.800742ms ago: executing program 3 (id=455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x27, 0x14, 0x0, &(0x7f0000000240)="1901000000000000040000000800d783fa282c77", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 8.601481ms ago: executing program 1 (id=456): msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xa, 0xfc, 0x0, 0x3, 0x4041, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x3d96, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$l2tp(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x2a020480) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r3, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) getgroups(0x3, &(0x7f0000000140)=[0xee00, 0xee01, 0xee01]) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) r8 = syz_clone3(&(0x7f0000000540)={0x40000000, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380), {0x28}, &(0x7f0000000680)=""/203, 0xcb, &(0x7f00000003c0)=""/119, &(0x7f0000000500)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r4}}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x2, 0x0, r5, 0x0, r6, 0xc2, 0x87}, 0x0, 0x0, 0x20000000000, 0x5, 0x2, 0xfffffffffffffffc, 0x76cd02eb, 0xfff, 0x4, 0x3, r7, r8}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 0s ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x858c, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 31.810018][ T28] audit: type=1400 audit(1772035001.956:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.833183][ T28] audit: type=1400 audit(1772035001.976:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.834010][ T3299] cgroup: Unknown subsys name 'net' [ 31.862751][ T28] audit: type=1400 audit(1772035002.006:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.016905][ T3299] cgroup: Unknown subsys name 'cpuset' [ 32.023351][ T3299] cgroup: Unknown subsys name 'rlimit' [ 32.132362][ T28] audit: type=1400 audit(1772035002.276:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.157074][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.171185][ T28] audit: type=1400 audit(1772035002.276:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.191708][ T28] audit: type=1400 audit(1772035002.276:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.212397][ T28] audit: type=1400 audit(1772035002.276:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.233082][ T28] audit: type=1400 audit(1772035002.276:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.255432][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.258386][ T28] audit: type=1400 audit(1772035002.276:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.290721][ T28] audit: type=1400 audit(1772035002.306:71): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.385244][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 33.457551][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 33.514226][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 33.523890][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.531249][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.538703][ T3316] bridge_slave_0: entered allmulticast mode [ 33.545142][ T3316] bridge_slave_0: entered promiscuous mode [ 33.553647][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.560785][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.568017][ T3316] bridge_slave_1: entered allmulticast mode [ 33.574372][ T3316] bridge_slave_1: entered promiscuous mode [ 33.593286][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 33.607932][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 33.634366][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.659397][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.682873][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.690085][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.697754][ T3312] bridge_slave_0: entered allmulticast mode [ 33.704041][ T3312] bridge_slave_0: entered promiscuous mode [ 33.720495][ T3316] team0: Port device team_slave_0 added [ 33.735483][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.742742][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.749967][ T3312] bridge_slave_1: entered allmulticast mode [ 33.756404][ T3312] bridge_slave_1: entered promiscuous mode [ 33.765367][ T3316] team0: Port device team_slave_1 added [ 33.793112][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.801420][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.827709][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.843070][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.850381][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.857662][ T3311] bridge_slave_0: entered allmulticast mode [ 33.864003][ T3311] bridge_slave_0: entered promiscuous mode [ 33.876087][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.883888][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.891078][ T3311] bridge_slave_1: entered allmulticast mode [ 33.897535][ T3311] bridge_slave_1: entered promiscuous mode [ 33.907367][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.914881][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.941823][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.958729][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.973474][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.989948][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.997107][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.004464][ T3319] bridge_slave_0: entered allmulticast mode [ 34.011111][ T3319] bridge_slave_0: entered promiscuous mode [ 34.022020][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.029316][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.037011][ T3319] bridge_slave_1: entered allmulticast mode [ 34.044476][ T3319] bridge_slave_1: entered promiscuous mode [ 34.070876][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.082591][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.093190][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.106302][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.113478][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.120667][ T3325] bridge_slave_0: entered allmulticast mode [ 34.127371][ T3325] bridge_slave_0: entered promiscuous mode [ 34.134731][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.149200][ T3312] team0: Port device team_slave_0 added [ 34.159279][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.166457][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.173700][ T3325] bridge_slave_1: entered allmulticast mode [ 34.180184][ T3325] bridge_slave_1: entered promiscuous mode [ 34.200432][ T3312] team0: Port device team_slave_1 added [ 34.212111][ T3316] hsr_slave_0: entered promiscuous mode [ 34.218526][ T3316] hsr_slave_1: entered promiscuous mode [ 34.225346][ T3311] team0: Port device team_slave_0 added [ 34.242450][ T3319] team0: Port device team_slave_0 added [ 34.258344][ T3311] team0: Port device team_slave_1 added [ 34.264753][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.272539][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.299733][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.311892][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.322277][ T3319] team0: Port device team_slave_1 added [ 34.329151][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.343102][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.350386][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.376810][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.405659][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.414218][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.442242][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.476421][ T3325] team0: Port device team_slave_0 added [ 34.482235][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.489201][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.515371][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.536663][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.543714][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.569934][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.582253][ T3325] team0: Port device team_slave_1 added [ 34.601678][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.609674][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.638900][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.659722][ T3312] hsr_slave_0: entered promiscuous mode [ 34.665831][ T3312] hsr_slave_1: entered promiscuous mode [ 34.671722][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 34.677734][ T3312] Cannot create hsr debugfs directory [ 34.693540][ T3311] hsr_slave_0: entered promiscuous mode [ 34.699737][ T3311] hsr_slave_1: entered promiscuous mode [ 34.705569][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 34.711415][ T3311] Cannot create hsr debugfs directory [ 34.730703][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.738066][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.764358][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.791507][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.798681][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.824966][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.837693][ T3319] hsr_slave_0: entered promiscuous mode [ 34.843628][ T3319] hsr_slave_1: entered promiscuous mode [ 34.849719][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 34.855642][ T3319] Cannot create hsr debugfs directory [ 34.893367][ T3325] hsr_slave_0: entered promiscuous mode [ 34.899478][ T3325] hsr_slave_1: entered promiscuous mode [ 34.905364][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 34.911165][ T3325] Cannot create hsr debugfs directory [ 35.067624][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.076407][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.084900][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.096798][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.116126][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.131091][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.140050][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.149476][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.174799][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.185410][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.199375][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.208250][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.242484][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.252931][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.262768][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.272556][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.301320][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.333472][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.350883][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.359841][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.369062][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.379326][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.402790][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.409873][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.422046][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.435619][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.442697][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.464225][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.482468][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.493542][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.507968][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.515130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.525046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.532209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.546801][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.559214][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.566342][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.577422][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.584772][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.595388][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.613208][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.652534][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.659841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.674876][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.695451][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.711707][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.720295][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.727375][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.744103][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.764581][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.775147][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.789714][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.796802][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.805910][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.813018][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.869348][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.916888][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.946638][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.994877][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.039910][ T3316] veth0_vlan: entered promiscuous mode [ 36.059027][ T3316] veth1_vlan: entered promiscuous mode [ 36.077712][ T3311] veth0_vlan: entered promiscuous mode [ 36.097967][ T3311] veth1_vlan: entered promiscuous mode [ 36.114276][ T3312] veth0_vlan: entered promiscuous mode [ 36.138207][ T3316] veth0_macvtap: entered promiscuous mode [ 36.150886][ T3312] veth1_vlan: entered promiscuous mode [ 36.162973][ T3316] veth1_macvtap: entered promiscuous mode [ 36.184957][ T3311] veth0_macvtap: entered promiscuous mode [ 36.195494][ T3311] veth1_macvtap: entered promiscuous mode [ 36.207220][ T3312] veth0_macvtap: entered promiscuous mode [ 36.214800][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.230786][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.239107][ T3312] veth1_macvtap: entered promiscuous mode [ 36.251493][ T3319] veth0_vlan: entered promiscuous mode [ 36.259192][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.272931][ T3319] veth1_vlan: entered promiscuous mode [ 36.281188][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.297180][ T359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.306039][ T359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.316997][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.332282][ T359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341793][ T359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.360262][ T359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.369240][ T359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.381037][ T3325] veth0_vlan: entered promiscuous mode [ 36.390104][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.398351][ T359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.407409][ T359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.420896][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.435110][ T3325] veth1_vlan: entered promiscuous mode [ 36.444912][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.454761][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.471405][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.487609][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.498323][ T3319] veth0_macvtap: entered promiscuous mode [ 36.528331][ T3319] veth1_macvtap: entered promiscuous mode [ 36.537953][ T3325] veth0_macvtap: entered promiscuous mode [ 36.570349][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.578878][ T3325] veth1_macvtap: entered promiscuous mode [ 36.602404][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.623537][ C0] hrtimer: interrupt took 46823 ns [ 36.629859][ T359] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.647013][ T359] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.685599][ T359] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.700978][ T359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.740903][ T3482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.749259][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.762365][ T3482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.794826][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.827902][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 36.827916][ T28] audit: type=1400 audit(1772035006.966:111): avc: denied { read write } for pid=3481 comm="syz.1.2" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.896101][ T28] audit: type=1400 audit(1772035007.016:112): avc: denied { allowed } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 36.933911][ T28] audit: type=1400 audit(1772035007.016:113): avc: denied { create } for pid=3481 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.956757][ T28] audit: type=1400 audit(1772035007.016:114): avc: denied { open } for pid=3481 comm="syz.1.2" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.961994][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.073137][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.084017][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.173341][ T3486] loop3: detected capacity change from 0 to 512 [ 37.245191][ T28] audit: type=1400 audit(1772035007.286:115): avc: denied { create } for pid=3491 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.262548][ T3486] EXT4-fs: Ignoring removed nobh option [ 37.274011][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.289039][ T3486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.305763][ T3486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.324577][ T3492] Zero length message leads to an empty skb [ 37.333755][ T28] audit: type=1400 audit(1772035007.306:116): avc: denied { read write } for pid=3485 comm="syz.3.4" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.357983][ T28] audit: type=1400 audit(1772035007.306:117): avc: denied { open } for pid=3485 comm="syz.3.4" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.382048][ T3492] raw_sendmsg: syz.2.3 forgot to set AF_INET. Fix it! [ 37.382399][ T28] audit: type=1400 audit(1772035007.306:118): avc: denied { ioctl } for pid=3485 comm="syz.3.4" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.414099][ T28] audit: type=1400 audit(1772035007.466:119): avc: denied { write } for pid=3491 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.434688][ T28] audit: type=1400 audit(1772035007.506:120): avc: denied { setopt } for pid=3491 comm="syz.2.3" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.537586][ T3486] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.552682][ T3486] EXT4-fs (loop3): 1 truncate cleaned up [ 37.572943][ T3486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.955349][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.994453][ T3501] can: request_module (can-proto-0) failed. [ 38.008977][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.037944][ T3486] syz.3.4 (3486) used greatest stack depth: 10056 bytes left [ 38.054905][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.262539][ T3517] ieee802154 phy0 wpan0: encryption failed: -90 [ 38.305239][ T3519] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 38.337848][ T3519] SELinux: failed to load policy [ 38.421579][ T3520] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 38.453630][ T3519] loop3: detected capacity change from 0 to 512 [ 38.563158][ T3519] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 38.578808][ T3519] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.603934][ T3519] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.633758][ T3519] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 38.651502][ T3519] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.9: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.682409][ T3519] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 38.686212][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 38.703051][ C1] EXT4-fs (loop3): last error at time 1772035008: ext4_ext_check_inode:521: inode 13 [ 38.713696][ T3519] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.9: couldn't read orphan inode 13 (err -117) [ 38.726070][ T3519] loop3: lost filesystem error report for type 5 error -117 [ 38.726815][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.814028][ T3519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.857453][ T3528] ieee802154 phy0 wpan0: encryption failed: -90 [ 39.140945][ T3535] ieee802154 phy0 wpan0: encryption failed: -90 [ 39.703740][ T3545] ieee802154 phy0 wpan0: encryption failed: -90 [ 39.758918][ T3543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.158182][ T3547] netlink: 'syz.4.15': attribute type 4 has an invalid length. [ 40.547638][ T3556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.574368][ T3556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.622437][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 40.651128][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 40.669854][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 40.823570][ T3568] ieee802154 phy0 wpan0: encryption failed: -90 [ 40.865225][ T3571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 41.077546][ T3575] usb usb8: usbfs: process 3575 (syz.3.24) did not claim interface 0 before use [ 41.147508][ T3579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.182397][ T3576] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 41.191245][ T3579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.205393][ T3576] loop0: detected capacity change from 0 to 128 [ 41.288675][ T3581] loop1: detected capacity change from 0 to 512 [ 41.295764][ T3581] ======================================================= [ 41.295764][ T3581] WARNING: The mand mount option has been deprecated and [ 41.295764][ T3581] and is ignored by this kernel. Remove the mand [ 41.295764][ T3581] option from the mount to silence this warning. [ 41.295764][ T3581] ======================================================= [ 41.841680][ T28] kauditd_printk_skb: 1324 callbacks suppressed [ 41.841695][ T28] audit: type=1400 audit(1772035011.986:1445): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.925598][ T28] audit: type=1400 audit(1772035012.066:1446): avc: denied { name_bind } for pid=3589 comm="syz.0.28" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.942979][ T3587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.972548][ T28] audit: type=1400 audit(1772035012.066:1447): avc: denied { node_bind } for pid=3589 comm="syz.0.28" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.009087][ T3587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.119044][ T28] audit: type=1400 audit(1772035012.266:1448): avc: denied { setopt } for pid=3584 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.196653][ T28] audit: type=1400 audit(1772035012.306:1449): avc: denied { map } for pid=3584 comm="syz.2.29" path="socket:[5423]" dev="sockfs" ino=5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.221431][ T28] audit: type=1400 audit(1772035012.306:1450): avc: denied { read } for pid=3584 comm="syz.2.29" path="socket:[5423]" dev="sockfs" ino=5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.489877][ T28] audit: type=1400 audit(1772035012.636:1451): avc: denied { ioctl } for pid=3596 comm="syz.0.31" path="socket:[4933]" dev="sockfs" ino=4933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.535804][ T3602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.548062][ T28] audit: type=1400 audit(1772035012.696:1452): avc: denied { mounton } for pid=3596 comm="syz.0.31" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.579444][ T3602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.612769][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 43.187812][ T28] audit: type=1326 audit(1772035013.336:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3606 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 43.213113][ T28] audit: type=1326 audit(1772035013.336:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3606 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 43.348065][ T3608] ieee802154 phy0 wpan0: encryption failed: -90 [ 43.404103][ T3610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.415524][ T3610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.808356][ T3622] loop4: detected capacity change from 0 to 1024 [ 43.815055][ T3622] EXT4-fs: Ignoring removed oldalloc option [ 43.821024][ T3622] EXT4-fs: Ignoring removed bh option [ 43.857139][ T3622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.860312][ T3629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 43.897928][ T3629] netlink: 'syz.3.40': attribute type 18 has an invalid length. [ 43.946727][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 44.046281][ T3499] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.177661][ T3633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.207582][ T3633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.523500][ T3622] syz.4.38 (3622) used greatest stack depth: 9848 bytes left [ 44.607159][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.727793][ T3656] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.757613][ T3656] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 45.200611][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.218912][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.189163][ T3672] syz.3.51 (3672) used greatest stack depth: 9656 bytes left [ 46.625285][ T3683] ieee802154 phy0 wpan0: encryption failed: -90 [ 46.637901][ T3684] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.831504][ T3692] ieee802154 phy0 wpan0: encryption failed: -90 [ 46.832290][ T3689] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 46.856890][ T28] kauditd_printk_skb: 681 callbacks suppressed [ 46.856902][ T28] audit: type=1326 audit(1772035017.006:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 46.916456][ T28] audit: type=1326 audit(1772035017.006:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 46.957880][ T28] audit: type=1326 audit(1772035017.006:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 46.991970][ T28] audit: type=1326 audit(1772035017.006:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.016198][ T3499] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.022443][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 47.028671][ T28] audit: type=1326 audit(1772035017.006:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.055248][ T28] audit: type=1326 audit(1772035017.006:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.079140][ T28] audit: type=1326 audit(1772035017.016:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.103555][ T28] audit: type=1326 audit(1772035017.016:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.146234][ T28] audit: type=1326 audit(1772035017.016:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.176202][ T28] audit: type=1326 audit(1772035017.016:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 47.220073][ T3699] loop4: detected capacity change from 0 to 512 [ 47.239517][ T3699] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 47.266414][ T3699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.59: bg 0: block 255: padding at end of block bitmap is not set [ 47.286380][ T3695] ieee802154 phy0 wpan0: encryption failed: -90 [ 47.307498][ T3699] loop4: lost filesystem error report for type 5 error -117 [ 47.307726][ T3699] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 47.325001][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.325024][ C1] EXT4-fs (loop4): initial error at time 1772035017: ext4_validate_block_bitmap:441 [ 47.325051][ C1] EXT4-fs (loop4): last error at time 1772035017: ext4_validate_block_bitmap:441 [ 47.380149][ T3699] loop4: lost filesystem error report for type 5 error -117 [ 47.380317][ T3699] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.59: invalid indirect mapped block 1 (level 1) [ 47.401756][ T3699] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.402016][ T3699] EXT4-fs (loop4): 1 truncate cleaned up [ 47.418359][ T3699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.503058][ T3713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.516266][ T3713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.027565][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.068381][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.191638][ T3699] syz.4.59 (3699) used greatest stack depth: 8968 bytes left [ 48.210566][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.241497][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 48.269928][ T3736] netlink: 'syz.4.68': attribute type 18 has an invalid length. [ 48.286836][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 48.992767][ T3747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.177323][ T3752] ieee802154 phy0 wpan0: encryption failed: -90 [ 50.718249][ T3783] loop3: detected capacity change from 0 to 512 [ 50.727739][ T3783] EXT4-fs (loop3): 1 truncate cleaned up [ 50.734052][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.772165][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 50.782134][ T3786] netlink: 'syz.2.82': attribute type 18 has an invalid length. [ 50.791236][ T3786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 50.879490][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.207578][ T3800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.238747][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.280523][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.556247][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 51.562342][ T3499] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.878809][ T28] kauditd_printk_skb: 597 callbacks suppressed [ 51.878889][ T28] audit: type=1326 audit(1772035022.026:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 51.931697][ T28] audit: type=1326 audit(1772035022.066:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 51.970671][ T28] audit: type=1326 audit(1772035022.066:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 51.994751][ T28] audit: type=1326 audit(1772035022.066:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1de51cece code=0x7ffc0000 [ 52.018351][ T28] audit: type=1326 audit(1772035022.066:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1de51cece code=0x7ffc0000 [ 52.041886][ T28] audit: type=1326 audit(1772035022.066:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 52.065587][ T28] audit: type=1326 audit(1772035022.066:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 52.103879][ T28] audit: type=1326 audit(1772035022.066:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 52.161262][ T28] audit: type=1326 audit(1772035022.066:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 52.185999][ T28] audit: type=1326 audit(1772035022.066:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 52.234641][ T3809] ieee802154 phy0 wpan0: encryption failed: -90 [ 52.593350][ T3821] ieee802154 phy0 wpan0: encryption failed: -90 [ 52.652500][ T3823] loop1: detected capacity change from 0 to 512 [ 52.670481][ T3820] ieee802154 phy0 wpan0: encryption failed: -90 [ 52.872353][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.889340][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.981636][ T3830] usb usb8: usbfs: process 3830 (syz.2.95) did not claim interface 0 before use [ 52.988960][ T3833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.007060][ T3833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.068214][ T3831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.087589][ T3831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.095989][ T3838] netlink: 68 bytes leftover after parsing attributes in process `syz.2.98'. [ 53.636430][ T3499] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 54.544885][ T3846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.630851][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 54.669732][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 54.679440][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 55.107592][ T3865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.188222][ T3865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.218123][ T3859] ieee802154 phy0 wpan0: encryption failed: -90 [ 55.289571][ T3855] ieee802154 phy0 wpan0: encryption failed: -90 [ 55.539110][ T3871] usb usb8: usbfs: process 3871 (syz.4.108) did not claim interface 0 before use [ 55.611553][ T3878] netlink: 68 bytes leftover after parsing attributes in process `syz.2.110'. [ 56.044570][ T3887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.285499][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 56.294702][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 56.303803][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 56.435400][ T3898] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 56.598960][ T3899] ieee802154 phy0 wpan0: encryption failed: -90 [ 56.905034][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 57.208532][ T28] kauditd_printk_skb: 1313 callbacks suppressed [ 57.208548][ T28] audit: type=1400 audit(1772035027.356:4066): avc: denied { write } for pid=3912 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.239624][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.250690][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.259241][ T28] audit: type=1400 audit(1772035027.356:4067): avc: denied { read } for pid=3912 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.280223][ T28] audit: type=1400 audit(1772035027.386:4068): avc: denied { map_create } for pid=3912 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.316240][ T28] audit: type=1400 audit(1772035027.386:4069): avc: denied { prog_run } for pid=3912 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.336447][ T28] audit: type=1400 audit(1772035027.386:4070): avc: denied { read write } for pid=3912 comm="syz.4.119" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.362458][ T28] audit: type=1400 audit(1772035027.386:4071): avc: denied { open } for pid=3912 comm="syz.4.119" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.388229][ T28] audit: type=1400 audit(1772035027.386:4072): avc: denied { ioctl } for pid=3912 comm="syz.4.119" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.414659][ T28] audit: type=1400 audit(1772035027.426:4073): avc: denied { read write } for pid=3912 comm="syz.4.119" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.439024][ T28] audit: type=1400 audit(1772035027.426:4074): avc: denied { open } for pid=3912 comm="syz.4.119" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.463506][ T28] audit: type=1400 audit(1772035027.426:4075): avc: denied { ioctl } for pid=3912 comm="syz.4.119" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.797403][ T3921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.811735][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.824807][ T3921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.836086][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.953576][ T3929] netlink: 68 bytes leftover after parsing attributes in process `syz.4.125'. [ 58.202263][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 58.266043][ T3936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.292836][ T3941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.305587][ T3936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.308687][ T3941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.998090][ T3946] loop4: detected capacity change from 0 to 1024 [ 59.004949][ T3946] EXT4-fs: Ignoring removed oldalloc option [ 59.011046][ T3946] EXT4-fs: Ignoring removed bh option [ 59.043287][ T3946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.343503][ T3952] loop2: detected capacity change from 0 to 1024 [ 59.350554][ T3952] EXT4-fs: Ignoring removed oldalloc option [ 59.356626][ T3952] EXT4-fs: Ignoring removed bh option [ 59.373464][ T3952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.774269][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.153848][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.554178][ T3979] loop3: detected capacity change from 0 to 128 [ 60.646492][ T3982] __nla_validate_parse: 2 callbacks suppressed [ 60.647394][ T3982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.143'. [ 60.735078][ T23] IPVS: starting estimator thread 0... [ 60.848179][ T3983] IPVS: using max 3792 ests per chain, 189600 per kthread [ 60.892653][ T3986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.144'. [ 60.973820][ T3998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3998 comm=syz.4.144 [ 60.988626][ T4000] loop3: detected capacity change from 0 to 128 [ 61.021707][ T4000] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.041478][ T4000] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.153573][ T4007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 61.169273][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.346706][ T4016] loop4: detected capacity change from 0 to 1024 [ 61.353555][ T4016] EXT4-fs: Ignoring removed oldalloc option [ 61.359736][ T4016] EXT4-fs: Ignoring removed bh option [ 61.380378][ T4016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.470727][ T4027] Illegal XDP return value 4294967294 on prog (id 54) dev N/A, expect packet loss! [ 62.226903][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.313129][ T4051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.168'. [ 62.335505][ T4053] FAULT_INJECTION: forcing a failure. [ 62.335505][ T4053] name failslab, interval 1, probability 0, space 0, times 1 [ 62.339089][ T28] kauditd_printk_skb: 271 callbacks suppressed [ 62.339104][ T28] audit: type=1400 audit(1772035032.476:4347): avc: denied { mount } for pid=4054 comm="syz.4.170" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.360340][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 62.377510][ T28] audit: type=1400 audit(1772035032.506:4348): avc: denied { search } for pid=4054 comm="syz.4.170" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.408982][ T28] audit: type=1400 audit(1772035032.506:4349): avc: denied { search } for pid=4054 comm="syz.4.170" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.431189][ T28] audit: type=1400 audit(1772035032.506:4350): avc: denied { search } for pid=4054 comm="syz.4.170" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.456331][ T4053] CPU: 0 UID: 0 PID: 4053 Comm: syz.2.169 Not tainted syzkaller #0 PREEMPT(full) [ 62.456462][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.456478][ T4053] Call Trace: [ 62.456486][ T4053] [ 62.456494][ T4053] __dump_stack+0x1d/0x30 [ 62.456523][ T4053] dump_stack_lvl+0x95/0xd0 [ 62.456547][ T4053] dump_stack+0x15/0x1b [ 62.456574][ T4053] should_fail_ex+0x263/0x280 [ 62.456597][ T4053] should_failslab+0x8c/0xb0 [ 62.456614][ T4053] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 62.456685][ T4053] ? __alloc_skb+0x2d6/0x690 [ 62.456705][ T4053] __alloc_skb+0x2d6/0x690 [ 62.456723][ T4053] ? __alloc_skb+0x200/0x690 [ 62.456741][ T4053] netlink_alloc_large_skb+0xbf/0xf0 [ 62.456819][ T4053] netlink_sendmsg+0x40c/0x6f0 [ 62.456848][ T4053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.456946][ T4053] ____sys_sendmsg+0x5af/0x600 [ 62.456998][ T4053] ___sys_sendmsg+0x195/0x1e0 [ 62.457034][ T4053] __x64_sys_sendmsg+0xd4/0x160 [ 62.457112][ T4053] x64_sys_call+0x194c/0x3020 [ 62.457140][ T4053] do_syscall_64+0x12c/0x370 [ 62.457173][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.457203][ T4053] RIP: 0033:0x7f9d4890c629 [ 62.457221][ T4053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.457239][ T4053] RSP: 002b:00007f9d4735f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.457261][ T4053] RAX: ffffffffffffffda RBX: 00007f9d48b85fa0 RCX: 00007f9d4890c629 [ 62.457275][ T4053] RDX: 0200000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 62.457300][ T4053] RBP: 00007f9d4735f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.457312][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.457323][ T4053] R13: 00007f9d48b86038 R14: 00007f9d48b85fa0 R15: 00007ffe713e9768 [ 62.457393][ T4053] [ 62.457773][ T4055] openvswitch: netlink: Flow key attr not present in new flow. [ 62.659532][ T4061] loop0: detected capacity change from 0 to 1024 [ 62.666572][ T4061] EXT4-fs: Ignoring removed orlov option [ 62.672554][ T4061] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.700020][ T4061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.755886][ T28] audit: type=1326 audit(1772035032.896:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973a65c629 code=0x7ffc0000 [ 62.860411][ T28] audit: type=1326 audit(1772035032.896:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973a65c629 code=0x7ffc0000 [ 62.884551][ T28] audit: type=1326 audit(1772035032.896:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973a65c629 code=0x7ffc0000 [ 62.908735][ T28] audit: type=1326 audit(1772035032.896:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973a65c629 code=0x7ffc0000 [ 62.934127][ T28] audit: type=1326 audit(1772035032.896:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f973a65c629 code=0x7ffc0000 [ 62.965475][ T28] audit: type=1326 audit(1772035032.896:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.4.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973a65c629 code=0x7ffc0000 [ 62.998301][ T4073] loop2: detected capacity change from 0 to 1024 [ 63.005392][ T4073] EXT4-fs: Ignoring removed oldalloc option [ 63.011571][ T4073] EXT4-fs: Ignoring removed bh option [ 63.028560][ T4073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.091025][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.278317][ T4074] ieee802154 phy0 wpan0: encryption failed: -90 [ 63.779734][ T4093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.813788][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.222101][ T4105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.267356][ T4105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.359191][ T4109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.371553][ T4112] can: request_module (can-proto-0) failed. [ 64.418648][ T4109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.634250][ T4111] loop0: detected capacity change from 0 to 1764 [ 64.759727][ T4111] xt_l2tp: v2 tid > 0xffff: 37482740 [ 64.865051][ T4115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.189'. [ 65.073409][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 65.083433][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 65.093276][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 65.148573][ T4123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 65.206359][ T4129] loop2: detected capacity change from 0 to 128 [ 65.237964][ T4129] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.257083][ T4129] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.355682][ T4138] ip6gre1: entered promiscuous mode [ 65.355744][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.362714][ T4138] ip6gre1: entered allmulticast mode [ 65.513701][ T4146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.932323][ T4152] loop0: detected capacity change from 0 to 256 [ 65.957510][ T4152] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.258505][ T4138] syz.1.199 (4138) used greatest stack depth: 8480 bytes left [ 66.267334][ T4166] __nla_validate_parse: 2 callbacks suppressed [ 66.267351][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 66.288261][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 66.302739][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 66.325181][ T4170] loop1: detected capacity change from 0 to 512 [ 66.336620][ T4170] EXT4-fs: Ignoring removed nobh option [ 66.383202][ T4170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.431419][ T4170] EXT4-fs (loop1): 1 truncate cleaned up [ 66.441343][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.528327][ T4178] SELinux: failed to load policy [ 66.540909][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 66.549772][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 66.558689][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 66.708438][ T4183] loop0: detected capacity change from 0 to 128 [ 66.753507][ T3407] IPVS: starting estimator thread 0... [ 66.876783][ T4186] IPVS: using max 2160 ests per chain, 108000 per kthread [ 67.253519][ T4178] loop2: detected capacity change from 0 to 512 [ 67.399222][ T4178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 67.439922][ T4178] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.456095][ T4178] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 67.477888][ T4193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.487842][ T4178] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 67.503059][ T4178] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.211: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.522585][ T4178] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.525682][ T4178] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.211: couldn't read orphan inode 13 (err -117) [ 67.535253][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 67.535321][ C0] EXT4-fs (loop2): last error at time 1772035037: ext4_ext_check_inode:521: inode 13 [ 67.566446][ T4178] loop2: lost filesystem error report for type 5 error -117 [ 67.589534][ T4178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.608724][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 67.608742][ T28] audit: type=1326 audit(1772035037.726:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 67.618036][ T4178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.619113][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.661949][ T4197] loop3: detected capacity change from 0 to 2048 [ 67.668896][ T28] audit: type=1326 audit(1772035037.726:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 67.695733][ T28] audit: type=1326 audit(1772035037.726:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1de55c392 code=0x7ffc0000 [ 67.776992][ T28] audit: type=1326 audit(1772035037.736:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1de51cece code=0x7ffc0000 [ 67.801356][ T4197] loop3: p3 p4 < > [ 67.805317][ T4197] loop3: p3 start 11362048 is beyond EOD, truncated [ 67.820440][ T28] audit: type=1326 audit(1772035037.736:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa1de55c457 code=0x7ffc0000 [ 67.845091][ T28] audit: type=1326 audit(1772035037.806:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1de51cece code=0x7ffc0000 [ 67.932387][ T28] audit: type=1326 audit(1772035037.806:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1de55c2bb code=0x7ffc0000 [ 67.981295][ T28] audit: type=1326 audit(1772035037.836:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1de51cece code=0x7ffc0000 [ 68.010060][ T28] audit: type=1326 audit(1772035037.836:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1de55c2bb code=0x7ffc0000 [ 68.034674][ T28] audit: type=1326 audit(1772035037.836:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1de55c2bb code=0x7ffc0000 [ 68.095715][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 68.327265][ T4219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.364113][ T4219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.472834][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 68.491527][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 68.510495][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 69.063814][ T4235] loop1: detected capacity change from 0 to 8192 [ 69.156592][ T4240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.577217][ T4245] sctp: [Deprecated]: syz.3.232 (pid 4245) Use of int in max_burst socket option deprecated. [ 69.577217][ T4245] Use struct sctp_assoc_value instead [ 69.780550][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 69.871912][ T4261] loop0: detected capacity change from 0 to 256 [ 69.969074][ T4252] loop2: detected capacity change from 0 to 512 [ 70.100149][ T4275] loop1: detected capacity change from 0 to 128 [ 70.132846][ T4277] loop0: detected capacity change from 0 to 512 [ 70.151572][ T4275] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.168991][ T4275] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.188578][ T4275] FAULT_INJECTION: forcing a failure. [ 70.188578][ T4275] name failslab, interval 1, probability 0, space 0, times 0 [ 70.269307][ T4275] CPU: 1 UID: 0 PID: 4275 Comm: syz.1.242 Not tainted syzkaller #0 PREEMPT(full) [ 70.269418][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.269430][ T4275] Call Trace: [ 70.269436][ T4275] [ 70.269486][ T4275] __dump_stack+0x1d/0x30 [ 70.269510][ T4275] dump_stack_lvl+0x95/0xd0 [ 70.269529][ T4275] dump_stack+0x15/0x1b [ 70.269547][ T4275] should_fail_ex+0x263/0x280 [ 70.269569][ T4275] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 70.269611][ T4275] should_failslab+0x8c/0xb0 [ 70.269627][ T4275] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 70.269692][ T4275] ? ext4_alloc_inode+0x38/0x320 [ 70.269771][ T4275] ? ext4_search_dir+0x1cb/0x250 [ 70.269783][ T4275] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 70.269795][ T4275] ext4_alloc_inode+0x38/0x320 [ 70.269848][ T4275] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 70.269911][ T4275] alloc_inode+0x40/0x170 [ 70.269923][ T4275] new_inode+0x1d/0xe0 [ 70.269973][ T4275] __ext4_new_inode+0x15e/0x2340 [ 70.269987][ T4275] ? __dquot_initialize+0x146/0x7c0 [ 70.270002][ T4275] ? _raw_spin_unlock+0x9/0x30 [ 70.270098][ T4275] ext4_create+0x16e/0x2f0 [ 70.270113][ T4275] ? __pfx_ext4_create+0x10/0x10 [ 70.270125][ T4275] path_openat+0xd75/0x2050 [ 70.270171][ T4275] do_file_open+0x16c/0x290 [ 70.270270][ T4275] do_sys_openat2+0x94/0x130 [ 70.270285][ T4275] __x64_sys_creat+0x65/0x90 [ 70.270319][ T4275] x64_sys_call+0x2ea0/0x3020 [ 70.270333][ T4275] do_syscall_64+0x12c/0x370 [ 70.270355][ T4275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.270368][ T4275] RIP: 0033:0x7f6a7010c629 [ 70.270419][ T4275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.270429][ T4275] RSP: 002b:00007f6a6eb67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 70.270488][ T4275] RAX: ffffffffffffffda RBX: 00007f6a70385fa0 RCX: 00007f6a7010c629 [ 70.270517][ T4275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 70.270525][ T4275] RBP: 00007f6a6eb67090 R08: 0000000000000000 R09: 0000000000000000 [ 70.270532][ T4275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.270539][ T4275] R13: 00007f6a70386038 R14: 00007f6a70385fa0 R15: 00007fffc0ba9a98 [ 70.270550][ T4275] [ 70.312618][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.328397][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.328525][ T4277] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.353284][ T4294] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 70.935155][ T4308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.947732][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.580581][ T4338] loop4: detected capacity change from 0 to 512 [ 71.669670][ T4346] ieee802154 phy0 wpan0: encryption failed: -90 [ 71.795527][ T4356] loop0: detected capacity change from 0 to 128 [ 71.826464][ T4356] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 71.948887][ T4362] __nla_validate_parse: 5 callbacks suppressed [ 71.948908][ T4362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.269'. [ 71.963694][ T4359] netlink: 'syz.2.267': attribute type 16 has an invalid length. [ 72.001448][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.016231][ T4359] netlink: 'syz.2.267': attribute type 17 has an invalid length. [ 72.157085][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.188382][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.208809][ T4372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4372 comm=syz.4.273 [ 72.500109][ T4359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.621130][ T4380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.994365][ T4384] loop4: detected capacity change from 0 to 512 [ 73.114618][ T4384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.146633][ T4384] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 73.166170][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 73.172748][ C1] EXT4-fs (loop4): initial error at time 1772035043: ext4_mb_generate_buddy:1315 [ 73.181918][ C1] EXT4-fs (loop4): last error at time 1772035043: ext4_mb_generate_buddy:1315 [ 73.199534][ T4384] EXT4-fs (loop4): 1 truncate cleaned up [ 73.212583][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.365859][ T28] kauditd_printk_skb: 321 callbacks suppressed [ 73.365875][ T28] audit: type=1400 audit(1772035043.506:4897): avc: denied { ioctl } for pid=4394 comm="syz.1.280" path="socket:[9262]" dev="sockfs" ino=9262 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.427642][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.437239][ T28] audit: type=1400 audit(1772035043.556:4898): avc: denied { sys_module } for pid=4394 comm="syz.1.280" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.716646][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 74.036529][ T3499] Bluetooth: hci0: command 0x1003 tx timeout [ 74.043300][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.215907][ T4409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39192 sclass=netlink_route_socket pid=4409 comm=syz.2.285 [ 74.228865][ T28] audit: type=1326 audit(1772035044.356:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 74.252449][ T28] audit: type=1326 audit(1772035044.376:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 74.290837][ T4409] loop2: detected capacity change from 0 to 128 [ 74.297909][ T4409] msdos: Bad value for 'gid' [ 74.302571][ T4409] msdos: Bad value for 'gid' [ 74.340391][ T28] audit: type=1326 audit(1772035044.416:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 74.378036][ T4416] loop0: detected capacity change from 0 to 256 [ 74.423063][ T4416] vfat: Bad value for 'allow_utime' [ 74.454390][ T28] audit: type=1326 audit(1772035044.416:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 74.488586][ T4416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.518331][ T4416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.542381][ T28] audit: type=1326 audit(1772035044.426:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1de51cece code=0x7ffc0000 [ 74.570051][ T4410] loop3: detected capacity change from 0 to 512 [ 74.598978][ T28] audit: type=1326 audit(1772035044.426:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 74.604345][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.623328][ T28] audit: type=1326 audit(1772035044.426:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x7ffc0000 [ 74.666524][ T28] audit: type=1326 audit(1772035044.436:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1de4fda19 code=0x7ffc0000 [ 74.708623][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.106425][ T4432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.144263][ T4434] loop2: detected capacity change from 0 to 512 [ 75.296379][ T4449] loop2: detected capacity change from 0 to 512 [ 75.350917][ T4449] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.389108][ T4449] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.299: Failed to acquire dquot type 1 [ 75.393797][ T4447] bridge_slave_0: left allmulticast mode [ 75.413904][ T4447] bridge_slave_0: left promiscuous mode [ 75.420436][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.447227][ T4449] loop2: lost filesystem error report for type 5 error -5 [ 75.448360][ T4449] EXT4-fs (loop2): 1 truncate cleaned up [ 75.456174][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.456193][ C0] EXT4-fs (loop2): last error at time 1772035045: ext4_acquire_dquot:7001 [ 75.460256][ T4447] bridge_slave_1: left allmulticast mode [ 75.460279][ T4447] bridge_slave_1: left promiscuous mode [ 75.460405][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.461199][ T4449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.481268][ T4447] bond0: (slave bond_slave_0): Releasing backup interface [ 75.484506][ T4447] bond0: (slave bond_slave_1): Releasing backup interface [ 75.489852][ T4447] team0: Port device team_slave_0 removed [ 75.493723][ T4447] team0: Port device team_slave_1 removed [ 75.494939][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.494954][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.496583][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.496599][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.499510][ T4447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.518970][ T4468] bond1: entered allmulticast mode [ 75.519081][ T4468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.604507][ T4478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 75.624558][ T4469] team0: Mode changed to "loadbalance" [ 75.636949][ T4471] loop1: detected capacity change from 0 to 128 [ 75.737987][ T4466] loop4: detected capacity change from 0 to 128 [ 75.749760][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.798890][ T4477] loop0: detected capacity change from 0 to 512 [ 75.913316][ T4490] loop3: detected capacity change from 0 to 512 [ 75.995294][ T4490] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.310: invalid indirect mapped block 4294967295 (level 1) [ 76.058896][ T4490] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.059053][ T4490] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.310: invalid indirect mapped block 4294967295 (level 1) [ 76.068305][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 76.068345][ C0] EXT4-fs (loop3): initial error at time 1772035046: ext4_free_branches:1023: inode 11 [ 76.068384][ C0] EXT4-fs (loop3): last error at time 1772035046: ext4_free_branches:1023: inode 11 [ 76.115657][ T4490] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.207023][ T4490] EXT4-fs (loop3): 2 truncates cleaned up [ 76.399955][ T4512] process 'syz.4.316' launched '/dev/fd/4' with NULL argv: empty string added [ 76.434438][ T4506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.549886][ T4490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.625801][ T4519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 76.664016][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.694662][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.716396][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.732838][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.746302][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.764177][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.786356][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.816359][ T4523] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 76.864589][ T4529] loop4: detected capacity change from 0 to 1024 [ 76.871443][ T4529] EXT4-fs: Ignoring removed oldalloc option [ 76.877420][ T4529] EXT4-fs: Ignoring removed bh option [ 76.919375][ T4529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.992912][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.078731][ T4532] loop1: detected capacity change from 0 to 512 [ 77.108494][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.517171][ T4555] loop1: detected capacity change from 0 to 1024 [ 77.597580][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.598235][ T4555] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 77.893799][ T4570] capability: warning: `syz.3.335' uses 32-bit capabilities (legacy support in use) [ 78.089011][ T4572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.455250][ T28] kauditd_printk_skb: 269 callbacks suppressed [ 78.455264][ T28] audit: type=1326 audit(1772035048.596:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4577 comm="syz.3.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1de55c629 code=0x0 [ 78.550550][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.565830][ T4581] netlink: 264 bytes leftover after parsing attributes in process `syz.3.338'. [ 78.635549][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.792870][ T28] audit: type=1400 audit(1772035048.936:5175): avc: denied { write } for pid=4585 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.997767][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 79.003885][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.028276][ T4589] loop4: detected capacity change from 0 to 1024 [ 79.035031][ T4589] EXT4-fs: Ignoring removed oldalloc option [ 79.041008][ T4589] EXT4-fs: Ignoring removed bh option [ 79.065602][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.152331][ T28] audit: type=1400 audit(1772035049.286:5176): avc: denied { mount } for pid=4596 comm="syz.2.343" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 79.236936][ T3499] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 79.689939][ T4604] ieee802154 phy0 wpan0: encryption failed: -90 [ 79.711241][ T4589] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.341: Allocating blocks 1-17 which overlap fs metadata [ 79.778546][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.833216][ T4606] FAULT_INJECTION: forcing a failure. [ 79.833216][ T4606] name failslab, interval 1, probability 0, space 0, times 0 [ 79.874203][ T4608] ISOFS: unable to read i-node block [ 79.880979][ T4606] CPU: 0 UID: 0 PID: 4606 Comm: syz.4.346 Not tainted syzkaller #0 PREEMPT(full) [ 79.881007][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.881061][ T4606] Call Trace: [ 79.881068][ T4606] [ 79.881076][ T4606] __dump_stack+0x1d/0x30 [ 79.881100][ T4606] dump_stack_lvl+0x95/0xd0 [ 79.881124][ T4606] dump_stack+0x15/0x1b [ 79.881227][ T4606] should_fail_ex+0x263/0x280 [ 79.881320][ T4606] should_failslab+0x8c/0xb0 [ 79.881368][ T4606] kmem_cache_alloc_noprof+0x66/0x400 [ 79.881388][ T4606] ? key_alloc+0x283/0x950 [ 79.881415][ T4606] key_alloc+0x283/0x950 [ 79.881445][ T4606] request_key_and_link+0x4f3/0xe40 [ 79.881507][ T4606] ? __pfx_key_default_cmp+0x10/0x10 [ 79.881537][ T4606] ? __pfx_keyring_search_iterator+0x10/0x10 [ 79.881570][ T4606] __se_sys_request_key+0x1e9/0x2a0 [ 79.881628][ T4606] ? fput+0x8f/0xc0 [ 79.881655][ T4606] __x64_sys_request_key+0x55/0x70 [ 79.881678][ T4606] x64_sys_call+0x28de/0x3020 [ 79.881704][ T4606] do_syscall_64+0x12c/0x370 [ 79.881781][ T4606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.881802][ T4606] RIP: 0033:0x7f973a65c629 [ 79.881817][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.881835][ T4606] RSP: 002b:00007f97390b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 79.881856][ T4606] RAX: ffffffffffffffda RBX: 00007f973a8d5fa0 RCX: 00007f973a65c629 [ 79.881869][ T4606] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 79.881919][ T4606] RBP: 00007f97390b7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.881958][ T4606] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002 [ 79.882052][ T4606] R13: 00007f973a8d6038 R14: 00007f973a8d5fa0 R15: 00007ffc81499748 [ 79.882073][ T4606] [ 79.906565][ T4608] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.074481][ T4611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.074487][ T4612] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4612 comm=syz.4.349 [ 80.117645][ T4611] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.348: invalid indirect mapped block 256 (level 2) [ 80.169954][ T4611] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.170269][ T4611] EXT4-fs (loop2): 2 truncates cleaned up [ 80.179442][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.179464][ C0] EXT4-fs (loop2): initial error at time 1772035050: ext4_free_branches:1023: inode 11 [ 80.179488][ C0] EXT4-fs (loop2): last error at time 1772035050: ext4_free_branches:1023: inode 11 [ 80.250798][ T4611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.329602][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.476973][ T4620] rdma_op ffff88811a794180 conn xmit_rdma 0000000000000000 [ 80.547518][ T4623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.596641][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.606102][ T28] audit: type=1400 audit(1772035050.616:5177): avc: denied { mount } for pid=4619 comm="syz.4.352" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.652826][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.694557][ T4620] set_capacity_and_notify: 2 callbacks suppressed [ 80.694573][ T4620] loop4: detected capacity change from 0 to 2048 [ 80.749108][ T28] audit: type=1400 audit(1772035050.616:5178): avc: denied { bind } for pid=4619 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.896475][ T3303] loop4: p3 < > p4 < > [ 80.901812][ T3303] loop4: partition table partially beyond EOD, truncated [ 80.914484][ T28] audit: type=1326 audit(1772035051.056:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 80.916423][ T3303] loop4: p3 start 4284289 is beyond EOD, truncated [ 80.960166][ T4620] loop4: p3 < > p4 < > [ 80.970747][ T4620] loop4: partition table partially beyond EOD, truncated [ 80.978442][ T4620] loop4: p3 start 4284289 is beyond EOD, truncated [ 80.979911][ T28] audit: type=1326 audit(1772035051.086:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 81.030793][ T28] audit: type=1326 audit(1772035051.096:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 81.032468][ T4631] loop0: detected capacity change from 0 to 512 [ 81.063164][ T28] audit: type=1326 audit(1772035051.096:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 81.156729][ T28] audit: type=1326 audit(1772035051.096:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4628 comm="syz.0.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 81.250946][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 81.311616][ T4633] loop3: detected capacity change from 0 to 1024 [ 81.318520][ T4633] EXT4-fs: Ignoring removed oldalloc option [ 81.324508][ T4633] EXT4-fs: Ignoring removed bh option [ 81.337869][ T4633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.474487][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 81.532523][ T4642] loop0: detected capacity change from 0 to 256 [ 81.590226][ T4642] vfat: Unknown parameter '00000000000000000003ÿÿÿÿ' [ 81.667014][ T4649] loop1: detected capacity change from 0 to 4096 [ 81.704806][ T4649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.875378][ T4653] ieee802154 phy0 wpan0: encryption failed: -90 [ 82.010412][ T4663] loop4: detected capacity change from 0 to 512 [ 82.045283][ T4663] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.118366][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.127607][ T4663] EXT4-fs (loop4): 1 truncate cleaned up [ 82.133739][ T4663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.234770][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.486853][ T4679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.513761][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.570622][ T4681] loop2: detected capacity change from 0 to 512 [ 82.903784][ T4665] loop0: detected capacity change from 0 to 2048 [ 82.977063][ T4665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.071993][ T4693] loop3: detected capacity change from 0 to 1024 [ 83.082652][ T4693] EXT4-fs: Ignoring removed nobh option [ 83.082673][ T4693] EXT4-fs: inline encryption not supported [ 83.099456][ T4693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.159225][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.219552][ T4703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'. [ 83.419328][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.499769][ T4718] ieee802154 phy0 wpan0: encryption failed: -90 [ 83.547121][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 83.547135][ T28] audit: type=1326 audit(1772035053.686:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.551889][ T4723] tipc: Started in network mode [ 83.576737][ T28] audit: type=1326 audit(1772035053.686:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.576838][ T28] audit: type=1326 audit(1772035053.686:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.576860][ T28] audit: type=1326 audit(1772035053.686:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 83.605765][ T4723] tipc: Node identity befaa754a26e, cluster identity 4711 [ 83.659177][ T28] audit: type=1326 audit(1772035053.686:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.682761][ T28] audit: type=1326 audit(1772035053.686:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.706659][ T4723] tipc: Enabled bearer , priority 0 [ 83.734034][ T28] audit: type=1326 audit(1772035053.686:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40f5f0da19 code=0x7ffc0000 [ 83.769974][ T4721] loop0: detected capacity change from 0 to 512 [ 83.781715][ T28] audit: type=1326 audit(1772035053.686:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.807787][ T4725] syzkaller0: entered promiscuous mode [ 83.813412][ T4725] syzkaller0: entered allmulticast mode [ 83.820032][ T4725] tipc: Resetting bearer [ 83.825920][ T28] audit: type=1326 audit(1772035053.686:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.858920][ T28] audit: type=1326 audit(1772035053.686:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 83.883747][ T4722] tipc: Resetting bearer [ 83.892938][ T4728] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 83.898004][ T4722] tipc: Disabling bearer [ 84.011008][ T4737] validate_nla: 46 callbacks suppressed [ 84.011023][ T4737] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 84.171830][ T4754] ieee802154 phy0 wpan0: encryption failed: -90 [ 84.178598][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.205369][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.652429][ T4775] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.694757][ T4775] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.822302][ T3639] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.974856][ T4785] tipc: Started in network mode [ 85.003538][ T4785] tipc: Node identity ee609abdc4d1, cluster identity 4711 [ 85.046346][ T4785] tipc: Enabled bearer , priority 0 [ 85.076297][ T3499] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.076368][ T3591] Bluetooth: hci0: command 0x1003 tx timeout [ 85.143425][ T4789] ieee802154 phy0 wpan0: encryption failed: -90 [ 85.192161][ T4781] syzkaller1: entered promiscuous mode [ 85.205850][ T4781] syzkaller1: entered allmulticast mode [ 85.268805][ T4783] syzkaller0: entered promiscuous mode [ 85.280865][ T4783] syzkaller0: entered allmulticast mode [ 85.292676][ T4783] tipc: Resetting bearer [ 85.379234][ T4782] tipc: Resetting bearer [ 85.476947][ T4782] tipc: Disabling bearer [ 85.801016][ T4807] set_capacity_and_notify: 3 callbacks suppressed [ 85.801033][ T4807] loop3: detected capacity change from 0 to 1024 [ 85.814203][ T4807] EXT4-fs: Ignoring removed oldalloc option [ 85.820195][ T4807] EXT4-fs: Ignoring removed bh option [ 85.828853][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.370406][ T4827] FAULT_INJECTION: forcing a failure. [ 86.370406][ T4827] name failslab, interval 1, probability 0, space 0, times 0 [ 86.512751][ T4827] CPU: 1 UID: 0 PID: 4827 Comm: syz.4.421 Not tainted syzkaller #0 PREEMPT(full) [ 86.512781][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.512852][ T4827] Call Trace: [ 86.512859][ T4827] [ 86.512867][ T4827] __dump_stack+0x1d/0x30 [ 86.512936][ T4827] dump_stack_lvl+0x95/0xd0 [ 86.512957][ T4827] dump_stack+0x15/0x1b [ 86.512989][ T4827] should_fail_ex+0x263/0x280 [ 86.513012][ T4827] should_failslab+0x8c/0xb0 [ 86.513037][ T4827] kmem_cache_alloc_noprof+0x66/0x400 [ 86.513060][ T4827] ? delayed_getname+0x30/0x150 [ 86.513083][ T4827] delayed_getname+0x30/0x150 [ 86.513196][ T4827] io_openat_prep+0x12e/0x2a0 [ 86.513269][ T4827] io_submit_sqes+0x75a/0x1270 [ 86.513305][ T4827] __se_sys_io_uring_enter+0x1c9/0xf50 [ 86.513382][ T4827] ? __fget_files+0x184/0x1c0 [ 86.513403][ T4827] ? mutex_unlock+0x4e/0x90 [ 86.513472][ T4827] ? fput+0x8f/0xc0 [ 86.513493][ T4827] __x64_sys_io_uring_enter+0x78/0x90 [ 86.513642][ T4827] x64_sys_call+0x1e16/0x3020 [ 86.513747][ T4827] do_syscall_64+0x12c/0x370 [ 86.513802][ T4827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.513877][ T4827] RIP: 0033:0x7f973a65c629 [ 86.513894][ T4827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.513942][ T4827] RSP: 002b:00007f97390b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 86.513962][ T4827] RAX: ffffffffffffffda RBX: 00007f973a8d5fa0 RCX: 00007f973a65c629 [ 86.514052][ T4827] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 86.514064][ T4827] RBP: 00007f97390b7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.514078][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.514089][ T4827] R13: 00007f973a8d6038 R14: 00007f973a8d5fa0 R15: 00007ffc81499748 [ 86.514107][ T4827] [ 86.757259][ T4825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.826609][ T4824] loop2: detected capacity change from 0 to 8192 [ 86.829551][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.906630][ T2998] loop2: p1 < > p2 p4 < p5 > [ 86.911480][ T2998] loop2: partition table partially beyond EOD, truncated [ 86.920838][ T2998] loop2: p1 start 134217728 is beyond EOD, truncated [ 86.928167][ T2998] loop2: p2 size 591360 extends beyond EOD, truncated [ 86.947913][ T2998] loop2: p5 size 591360 extends beyond EOD, truncated [ 86.981053][ T2998] loop2: p1 < > p2 p4 < p5 > [ 86.985760][ T2998] loop2: partition table partially beyond EOD, truncated [ 86.996517][ T2998] loop2: p1 start 134217728 is beyond EOD, truncated [ 87.006465][ T2998] loop2: p2 size 591360 extends beyond EOD, truncated [ 87.014636][ T2998] loop2: p5 size 591360 extends beyond EOD, truncated [ 87.028154][ T4824] loop2: p1 < > p2 p4 < p5 > [ 87.033166][ T4824] loop2: partition table partially beyond EOD, truncated [ 87.040645][ T4824] loop2: p1 start 134217728 is beyond EOD, truncated [ 87.050599][ T4849] FAULT_INJECTION: forcing a failure. [ 87.050599][ T4849] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.082249][ T4824] loop2: p2 size 591360 extends beyond EOD, truncated [ 87.094766][ T4824] loop2: p5 size 591360 extends beyond EOD, truncated [ 87.096194][ T4849] CPU: 1 UID: 0 PID: 4849 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(full) [ 87.096220][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.096232][ T4849] Call Trace: [ 87.096239][ T4849] [ 87.096247][ T4849] __dump_stack+0x1d/0x30 [ 87.096341][ T4849] dump_stack_lvl+0x95/0xd0 [ 87.096403][ T4849] dump_stack+0x15/0x1b [ 87.096423][ T4849] should_fail_ex+0x263/0x280 [ 87.096450][ T4849] should_fail+0xb/0x20 [ 87.096469][ T4849] should_fail_usercopy+0x1a/0x20 [ 87.096544][ T4849] _copy_from_user+0x1c/0xb0 [ 87.096586][ T4849] __sys_bpf+0x183/0x7e0 [ 87.096610][ T4849] __x64_sys_bpf+0x41/0x50 [ 87.096782][ T4849] x64_sys_call+0x10cb/0x3020 [ 87.096820][ T4849] do_syscall_64+0x12c/0x370 [ 87.096855][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.096937][ T4849] RIP: 0033:0x7fa1de55c629 [ 87.096954][ T4849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.096971][ T4849] RSP: 002b:00007fa1dcfaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.096991][ T4849] RAX: ffffffffffffffda RBX: 00007fa1de7d5fa0 RCX: 00007fa1de55c629 [ 87.097062][ T4849] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 87.097075][ T4849] RBP: 00007fa1dcfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.097087][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.097100][ T4849] R13: 00007fa1de7d6038 R14: 00007fa1de7d5fa0 R15: 00007ffcf8ef48f8 [ 87.097127][ T4849] [ 87.350663][ T4844] loop0: detected capacity change from 0 to 512 [ 87.409556][ T2998] loop2: p1 < > p2 p4 < p5 > [ 87.414262][ T2998] loop2: partition table partially beyond EOD, truncated [ 87.421440][ T2998] loop2: p1 start 134217728 is beyond EOD, truncated [ 87.432695][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.436423][ T2998] loop2: p2 size 591360 extends beyond EOD, truncated [ 87.477986][ T2998] loop2: p5 size 591360 extends beyond EOD, truncated [ 87.538308][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 87.539933][ T50] Bluetooth: hci1: Frame reassembly failed (-84) [ 87.541261][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 87.554465][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 87.665815][ T4869] loop2: detected capacity change from 0 to 1024 [ 87.666331][ T4869] EXT4-fs: Ignoring removed oldalloc option [ 87.666360][ T4869] EXT4-fs: Ignoring removed bh option [ 87.688399][ T4869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.727727][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 87.734941][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 87.752465][ T4870] udevd[4870]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 87.759571][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 87.761359][ T4870] udevd[4870]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 87.762918][ T4864] udevd[4864]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 87.773035][ T4870] udevd[4870]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 88.297510][ T4884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.562008][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.575595][ T4888] netlink: 324 bytes leftover after parsing attributes in process `syz.0.437'. [ 88.576510][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 88.577326][ T28] kauditd_printk_skb: 240 callbacks suppressed [ 88.577393][ T28] audit: type=1400 audit(1772035058.726:5500): avc: denied { ioctl } for pid=4887 comm="syz.0.437" path="socket:[10177]" dev="sockfs" ino=10177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.578175][ T28] audit: type=1400 audit(1772035058.726:5501): avc: denied { read } for pid=4887 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.705439][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.716657][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.847551][ T4904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.870488][ T4904] ucma_write: process 244 (syz.4.443) changed security contexts after opening file descriptor, this is not allowed. [ 88.920570][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 88.920622][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 88.984295][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 88.984318][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 88.988150][ T4910] netlink: 'syz.4.445': attribute type 4 has an invalid length. [ 88.991793][ T4910] netlink: 'syz.4.445': attribute type 4 has an invalid length. [ 89.036556][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.036703][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.085164][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.088294][ T4910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.107287][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 89.132663][ T4912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.145666][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.145747][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.145782][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.145870][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.476207][ T3499] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.476211][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 89.518794][ T28] audit: type=1326 audit(1772035059.666:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 89.545843][ T28] audit: type=1326 audit(1772035059.686:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 89.556206][ T3591] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 89.584859][ T4914] loop0: detected capacity change from 0 to 512 [ 89.609298][ T28] audit: type=1326 audit(1772035059.686:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 89.633200][ T28] audit: type=1326 audit(1772035059.696:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40f5f2cece code=0x7ffc0000 [ 89.658164][ T28] audit: type=1326 audit(1772035059.726:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 89.681725][ T28] audit: type=1326 audit(1772035059.726:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40f5f0da19 code=0x7ffc0000 [ 89.705264][ T28] audit: type=1326 audit(1772035059.726:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 89.728861][ T28] audit: type=1326 audit(1772035059.726:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f40f5f6c629 code=0x7ffc0000 [ 89.904530][ T4927] FAULT_INJECTION: forcing a failure. [ 89.904530][ T4927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.918078][ T4927] CPU: 1 UID: 0 PID: 4927 Comm: syz.2.452 Not tainted syzkaller #0 PREEMPT(full) [ 89.918104][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.918123][ T4927] Call Trace: [ 89.918129][ T4927] [ 89.918136][ T4927] __dump_stack+0x1d/0x30 [ 89.918161][ T4927] dump_stack_lvl+0x95/0xd0 [ 89.918247][ T4927] dump_stack+0x15/0x1b [ 89.918265][ T4927] should_fail_ex+0x263/0x280 [ 89.918288][ T4927] should_fail+0xb/0x20 [ 89.918303][ T4927] should_fail_usercopy+0x1a/0x20 [ 89.918359][ T4927] _copy_from_user+0x1c/0xb0 [ 89.918385][ T4927] ___sys_sendmsg+0xc1/0x1e0 [ 89.918505][ T4927] __x64_sys_sendmsg+0xd4/0x160 [ 89.918536][ T4927] x64_sys_call+0x194c/0x3020 [ 89.918644][ T4927] do_syscall_64+0x12c/0x370 [ 89.918787][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.918841][ T4927] RIP: 0033:0x7f9d4890c629 [ 89.918858][ T4927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.918876][ T4927] RSP: 002b:00007f9d4735f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.918934][ T4927] RAX: ffffffffffffffda RBX: 00007f9d48b85fa0 RCX: 00007f9d4890c629 [ 89.918947][ T4927] RDX: 0000000000040000 RSI: 0000200000000700 RDI: 0000000000000004 [ 89.918975][ T4927] RBP: 00007f9d4735f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.919007][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.919018][ T4927] R13: 00007f9d48b86038 R14: 00007f9d48b85fa0 R15: 00007ffe713e9768 [ 89.919036][ T4927] [ 90.099793][ T4925] loop0: detected capacity change from 0 to 1024 [ 90.106648][ T4925] EXT4-fs: Ignoring removed oldalloc option [ 90.112603][ T4925] EXT4-fs: Ignoring removed bh option [ 90.155359][ T4925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.253729][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.263545][ T4932] 9p: Bad value for 'rfdno' [ 90.277727][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.288446][ T4932] mmap: syz.2.453 (4932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.305053][ T4943] loop3: detected capacity change from 0 to 512 [ 90.325691][ T4943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.362884][ T4943] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.457: invalid indirect mapped block 4294967295 (level 0) [ 90.433650][ T4936] ================================================================== [ 90.437996][ T4943] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 90.441765][ T4936] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 90.448443][ T4943] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.457: invalid indirect mapped block 4294967295 (level 1) [ 90.450985][ T4936] [ 90.450994][ T4936] write to 0xffff888107a2cfac of 4 bytes by task 4925 on cpu 0: [ 90.476216][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 90.482566][ T4936] xas_set_mark+0x12b/0x140 [ 90.489005][ C0] EXT4-fs (loop3): initial error at time 1772035060: ext4_free_branches:1023: inode 16 [ 90.493493][ T4936] __folio_start_writeback+0x17b/0x370 [ 90.493524][ C0] [ 90.493532][ C0] EXT4-fs (loop3): last error at time 1772035060: ext4_free_branches:1023 [ 90.503125][ T4936] ext4_bio_write_folio+0x5ad/0x9f0 [ 90.508594][ C0] : inode 16 [ 90.510891][ T4936] mpage_process_page_bufs+0x4a1/0x620 [ 90.519382][ C0] [ 90.524542][ T4936] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 90.541269][ T4936] ext4_do_writepages+0x70f/0x2840 [ 90.546386][ T4936] ext4_writepages+0x18f/0x320 [ 90.551140][ T4936] do_writepages+0x1c6/0x310 [ 90.555729][ T4936] file_write_and_wait_range+0x178/0x2f0 [ 90.561367][ T4936] generic_buffers_fsync_noflush+0x45/0x130 [ 90.567256][ T4936] ext4_sync_file+0x1aa/0x6b0 [ 90.571951][ T4936] vfs_fsync_range+0xc5/0xe0 [ 90.576537][ T4936] ext4_buffered_write_iter+0x34f/0x3c0 [ 90.582086][ T4936] ext4_file_write_iter+0x380/0xfa0 [ 90.587283][ T4936] iter_file_splice_write+0x6c4/0xa80 [ 90.592649][ T4936] direct_splice_actor+0x156/0x2a0 [ 90.597750][ T4936] splice_direct_to_actor+0x311/0x670 [ 90.603110][ T4936] do_splice_direct+0x119/0x1a0 [ 90.607954][ T4936] do_sendfile+0x382/0x650 [ 90.612369][ T4936] __x64_sys_sendfile64+0x105/0x150 [ 90.617559][ T4936] x64_sys_call+0x2dc4/0x3020 [ 90.622234][ T4936] do_syscall_64+0x12c/0x370 [ 90.626825][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.632709][ T4936] [ 90.635019][ T4936] read to 0xffff888107a2cfac of 4 bytes by task 4936 on cpu 1: [ 90.642562][ T4936] __writeback_single_inode+0x26b/0x860 [ 90.648117][ T4936] writeback_single_inode+0x16d/0x3f0 [ 90.653511][ T4936] sync_inode_metadata+0x6e/0xa0 [ 90.658452][ T4936] generic_buffers_fsync_noflush+0xee/0x130 [ 90.664340][ T4936] ext4_sync_file+0x1aa/0x6b0 [ 90.669008][ T4936] vfs_fsync_range+0xc5/0xe0 [ 90.673589][ T4936] ext4_buffered_write_iter+0x34f/0x3c0 [ 90.679141][ T4936] ext4_file_write_iter+0x380/0xfa0 [ 90.684340][ T4936] iter_file_splice_write+0x6c4/0xa80 [ 90.689791][ T4936] direct_splice_actor+0x156/0x2a0 [ 90.694890][ T4936] splice_direct_to_actor+0x311/0x670 [ 90.700259][ T4936] do_splice_direct+0x119/0x1a0 [ 90.705113][ T4936] do_sendfile+0x382/0x650 [ 90.709529][ T4936] __x64_sys_sendfile64+0x105/0x150 [ 90.714722][ T4936] x64_sys_call+0x2dc4/0x3020 [ 90.719406][ T4936] do_syscall_64+0x12c/0x370 [ 90.724010][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.729900][ T4936] [ 90.732210][ T4936] value changed: 0x0a000021 -> 0x04000021 [ 90.737917][ T4936] [ 90.740230][ T4936] Reported by Kernel Concurrency Sanitizer on: [ 90.746371][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: syz.0.449 Not tainted syzkaller #0 PREEMPT(full) [ 90.755568][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.765609][ T4936] ================================================================== [ 90.778026][ T4943] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 90.800283][ T4943] EXT4-fs (loop3): 1 orphan inode deleted [ 90.864414][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.865566][ T4943] EXT4-fs (loop3): 1 truncate cleaned up [ 90.879532][ T4943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.936452][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.