last executing test programs: 9m50.297982218s ago: executing program 0 (id=3171): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 9m50.120732037s ago: executing program 0 (id=3173): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 9m50.010793163s ago: executing program 0 (id=3175): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) r3 = syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_open_procfs(r3, &(0x7f0000000440)='net/tcp6\x00') syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0x322}, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000580)=[{0x9f, &(0x7f0000000100)=0x9f, 0x2}], 0x1, 0x0, &(0x7f0000000740)={0x77359400}, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00001910201fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="16000000000000000000000007"], 0x18}}], 0x1, 0x4054) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000100)=0x48) 9m48.581581558s ago: executing program 0 (id=3186): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r2, 0x0, r1, 0x0, 0x863, 0x0) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0xc, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x4, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@data_journal}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 9m48.124542152s ago: executing program 0 (id=3187): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r5 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x9, 0x5, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, @perf_bp={&(0x7f0000000180), 0x4}, 0x13, 0x9, 0x7a, 0x8, 0xffff, 0x9, 0x1, 0x0, 0xf56}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r6, &(0x7f0000001000)=""/61, 0x3d) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYRESDEC=r7, @ANYRES32=r7, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m47.876579694s ago: executing program 0 (id=3189): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = epoll_create(0xfff) fstat(r1, &(0x7f0000000240)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) close(r2) 9m47.846544736s ago: executing program 32 (id=3189): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = epoll_create(0xfff) fstat(r1, &(0x7f0000000240)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) close(r2) 7m5.715266686s ago: executing program 3 (id=3949): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b16000000000000000002000008090001007379797a3200000000146b779d02ec85a1c8000000000000000000000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x854}, 0x4040080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) clock_getres(0xeaffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r3, 0x5}) copy_file_range(r2, &(0x7f0000000140)=0x4, r4, &(0x7f0000000180)=0x3fc4, 0x66, 0x0) 7m3.925258309s ago: executing program 3 (id=3958): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1935710000000000000000003b00740095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) get_robust_list(r6, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000090601020000000000000000010000030900020073797a31000000000500010012fcd2d904000780"], 0x2c}, 0x1, 0x1000000, 0x0, 0x4}, 0x4) 7m3.597781866s ago: executing program 3 (id=3962): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) 7m3.480976893s ago: executing program 3 (id=3964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@block_validity}, {}, {@bsdgroups}, {@norecovery}, {@inlinecrypt}, {@noinit_itable}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x220249e, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x9a602, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0xfffffff7}]}, &(0x7f0000000140)=0x67) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x3}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000002c0)=0xc) syz_open_procfs(r5, &(0x7f0000000300)='attr/exec\x00') r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f00000003c0)={@private1}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100003d7bb48cc8f836aed5809040000", @ANYRES32=r8, @ANYBLOB="0008000007500500340012800b00010062726964676500002400028005001900020000000c0023000100", @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x24020400) r10 = getpgrp(0xffffffffffffffff) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r10, r11, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) 7m3.237925505s ago: executing program 3 (id=3967): setresuid(0xee01, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b68"], 0xfdef) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) io_setup(0x2, 0x0) r2 = eventfd(0xfffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES8, @ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m2.398603529s ago: executing program 3 (id=3970): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x9, 0x5, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, @perf_bp={0x0, 0x4}, 0x13, 0x9, 0x7a, 0x8, 0xffff, 0x9, 0x1, 0x0, 0xf56}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r5, &(0x7f0000001000)=""/61, 0x3d) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m2.397612389s ago: executing program 33 (id=3970): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x9, 0x5, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, @perf_bp={0x0, 0x4}, 0x13, 0x9, 0x7a, 0x8, 0xffff, 0x9, 0x1, 0x0, 0xf56}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r5, &(0x7f0000001000)=""/61, 0x3d) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.059827783s ago: executing program 5 (id=5838): perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r0) 5.987828747s ago: executing program 5 (id=5840): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x328, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x80, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000003, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x70bd27, 0x3500, 0x2}, [@algo_crypt={0x6a, 0x2, {{'pcbc-aes-aesni\x00'}, 0x110, "dba561c5da55409002002dd81951638432adc2b330862592aac15cef2adcba13b2ac"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, @in=@loopback, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@empty, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@private0, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3c, 0x3, 0x0, 0x3503, 0x0, 0xa}, {@in6=@private2, @in=@empty, @in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x32, 0x4, 0x0, 0x3507, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x52d, &(0x7f00000003c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.736812793s ago: executing program 5 (id=5845): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) 4.232544769s ago: executing program 5 (id=5848): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x61}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000840)=""/138, 0x8a}], 0x2) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x4000000) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$selinux_load(r6, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f00000011c0)=0x9, 0x8, 0x0) r7 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.20520566s ago: executing program 1 (id=5849): socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x2, 0x0, 0x0, 0xa, 0x402c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x6}, 0x409, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40488d3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast1, @local, 0x0, "4ed94deeff995921206268ee5770b1fde0b5d3831d5ca82bce49e133248012f2", 0x0, 0x438, 0x2, 0x8}, 0x3c) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10001, 0x3}, 0x40, 0x1fd, 0x81, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x9, 0x0, 0x0, 0x2, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd10, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000001"], 0xa8}}, 0x4008082) 3.542478695s ago: executing program 6 (id=5854): fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x250820, &(0x7f0000000240)={[{@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@nfs_nostale_ro}, {@dots}, {@dots}]}, 0xff, 0x189, &(0x7f0000000580)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x14) statfs(0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$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") bind(r2, &(0x7f0000000500)=@in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0x3501}, 0x80) 3.229771271s ago: executing program 1 (id=5855): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_setup(0x52f0, &(0x7f0000000480)={0x0, 0x2008000, 0x800}, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x1, 0x2, 0x8ac0, 0xfffffffa}, {0x6, 0x0, 0x2, 0x5, 0xc}, 0xfffffffa, 0x2, 0x9be}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) close(0x4) 3.165624425s ago: executing program 6 (id=5856): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x328, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x80, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000003, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x70bd27, 0x3500, 0x2}, [@algo_crypt={0x6a, 0x2, {{'pcbc-aes-aesni\x00'}, 0x110, "dba561c5da55409002002dd81951638432adc2b330862592aac15cef2adcba13b2ac"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, @in=@loopback, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@empty, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@private0, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3c, 0x3, 0x0, 0x3503, 0x0, 0xa}, {@in6=@private2, @in=@empty, @in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x32, 0x4, 0x0, 0x3507, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x7, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x52d, &(0x7f00000003c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.023775992s ago: executing program 1 (id=5857): perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000061000002000528008000100677470001400028005000500000000000800030009000000"], 0x40}}, 0x40080c0) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x5c1f, 0x4) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000012) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c46200403007e0400000000001002003e00ebffffff6203002214fae13035f63d00000000008503000000000000fdffffff060038000100feff03000300030000000f000000071800000000000011000000000000000000000000000800e50000000000040001000000000000000200000000000000"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0xffffff4f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.810242983s ago: executing program 6 (id=5858): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) 2.67233278s ago: executing program 6 (id=5860): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x328, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x80, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000003, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x70bd27, 0x3500, 0x2}, [@algo_crypt={0x6a, 0x2, {{'pcbc-aes-aesni\x00'}, 0x110, "dba561c5da55409002002dd81951638432adc2b330862592aac15cef2adcba13b2ac"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, @in=@loopback, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@empty, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@private0, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3c, 0x3, 0x0, 0x3503, 0x0, 0xa}, {@in6=@private2, @in=@empty, @in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x32, 0x4, 0x0, 0x3507, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x7, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x52d, &(0x7f00000003c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 2.358759257s ago: executing program 6 (id=5861): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x38) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth0_to_batadv\x00', 0x3}, 0x18) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x400000, 0x0, 0x0, 0x10d0bed, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2042, 0x100}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000340), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000011c0)=[{0x54}, {0x6}]}) 1.91905699s ago: executing program 1 (id=5862): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_setup(0x52f0, &(0x7f0000000480)={0x0, 0x2008000, 0x800}, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 1.799749086s ago: executing program 5 (id=5863): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.575650478s ago: executing program 1 (id=5866): socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x2, 0x0, 0x0, 0xa, 0x402c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x6}, 0x409, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40488d3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast1, @local, 0x0, "4ed94deeff995921206268ee5770b1fde0b5d3831d5ca82bce49e133248012f2", 0x0, 0x438, 0x2, 0x8}, 0x3c) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10001, 0x3}, 0x40, 0x1fd, 0x81, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x9, 0x0, 0x0, 0x2, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd10, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000001"], 0xa8}}, 0x4008082) 1.554613979s ago: executing program 4 (id=5867): fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$eJzs3ctvXGdfB/DvmdiJ41YhbUMJUdtMUqV12+CMHZoo6oIm9jhx8QXZjtQIUFM1CYpiUdSC1FYsUgmxoqJCCAnYoC5ZVSoLukHZwZIVCyTof4AqFhAWaF7NmXEytucSu46dN+/nMzo5t99zm3PmPJnxzHnCz7NGo1FO21y/+ve7WVmePJemf/jm26+a05d3sz/78nbxj8lIkmoy9P/luTI8Nb20OD8gozvJ9ST3kiLJgbTmPRxct3Y9xZ/n2Yfr91L8bY52STayxcYxUINfaHt9/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBNparpWmygyN7tw9f1qb+UQ4H32r2X3fTnqd/H9oGKLpGhOGRlZG+r76JGHu19s/nMyL7XWXmqN/D2SL5558fA7LwxV1tL3qdCu+PTzL+58uLp685OHm4a7Bg6129VcPrBr1Xt0+7eX7HJ9YXZ5cXb+4uV6dXZ5sXrh3LnamSszy9WZ2dSXry2v1OerU0v1iyuLS9WxqTeqExcunK3Wx68tXl24PD0+V1/beP7XJmu1c9X3xn+rfnFpeXHhzHvjy1NXZufmZhculzHN3c2Y880T8TdnV6or9Yvz1eqt26s3zw6qZDNoouueYn3Q5KCcJmuTkxMTk5MT596+8Pb5Wm1o04baBtkUsfcnLXvnH3b02g0/UaXd/2cus1nI1byfatfHVKazlMXM99jfttb/nzpT71tuZ/+/1ssffbj7WMr+/5XW2iu9+v8edRn8aDRaOW83/drj03yeL3InH2Y1q7mZT35yjpse/7f1NMPdtlZ/ems3Py6nnoXMZjmLmc18LpZbqu0t1VzIuZxLLR/kSmaynGpmMpu51LOca1nOSurlGTWVpdRzMStZzFKqGctU3kg1E7mQCzmbauoZz7Us5moWcjnTuVjmciu3y+f9bJ86PgiaeJSgyT5Bk7VkB/v/xpP4P0Eetx2/hsN2Ndr9//6eAY21pbGpXasVAAAAsJN+9V9y6Mjz//wfyXBeLj+Xn5mdq9f2uloAAADADiq/rvdSczbcXHo5hff/AAAA8LQpyt/YFUlGc7y11Pol1L74EAAAAACeEuXf/19pzkabS8dTPLgTyvW9rhsAAACwMwbfY39gRHF67fa/1Rut+Y12RPs+v6Mzs3P18anFuXcm8lp5l4HylwabctuXFMPlzw/ezIlW1InR1nx0fY4jzaiJ8Xcm8mZOthsy9mpz9upYl8jJVuTrrcjX+0SebUYCwNPuZJ/+uF///z+Nlmb//2ZOtyJOHxvan2ToWJeetaZnBYAnxeAxdgZGFL/+8P3/cDvbdf3/87n1v62vFIzno3yc1dzI6fLXBuU3Dtbl+jtftz8zePA1hFqKAZ8GrMX+6/lKTg/4PGC0Y6CX0wM+EWjF5neTs4//QADALjrZox/eSv9/uuP9fza//38wtNBNPykEgCfCgxHsH+PCXrcRAFhPLw0AAAAAAAAAAAAAAAAAAAAAAAAAAAA7b0fv9j+yzeT/2R7X7/EOQ7Bp4WD7Odh+Pn+RZPfqXOxwWZUdyKeRZLeO1+4t5HCy7We162m8P8net2vgwlD7JXHnw9W9uiIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwm4pkX7ftleRAklqSM7tfq8fn7l5XYPf9RudKcT/381kO7V11AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeTu37/1fSmj/T2pShSnIqyfUkv73XddxJ9/e6Ajvk4DbTddz/v3nM0ygy1DrsKYanppcW55uHvxz7ofLDN99+1Zw6kh941HLKwMqGwSXaJWyM/btn15aeK1ONTt/89M4ffvwH1elLqWR/Lq3MzE3PX15692GSF4vvkmpa05q1+v7xqX/6ukvLv2u2tLuN5c6UT8705nJ/pVvq/uX2c3v15mSzpJX6+yt/9Pu3P+vY9XxOJK+OJWPrS/q95tSjpBMZ7lda8WPxp8Wh/FWul8e/+WwUjaJ5iH6pbP/BW7dXb45/9PHqjR51OpzjSW4kI/3r9GXH7uPl9aSr8qyrDDdLrZVBzX+ODGhjXx05TvRow3PlKTPabsP+nm3oVO3dhlLH817ptr9Vo7M9avRCXutypBsHkt41eq3/ke6u+LH49+JK/i1/0jH+R6V5/E+l96tzfRZlZMeZ0jOy0oosWz7ZueODjZH/9dePVPuuw9SwVX+27sVb6bj+t4/VDl2PGkXf61FHiVt7XWwoccNZ0ed1UfZIRzakaF99eqVp1/NIK6pHPX85byVDx/pdFTf11m8NuKI8SP9u993bff3/TTGW/85d4/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPviLZ1217JTmV5PDaejVpbCHbA712VEaLrVZxR9198M9TobLVBMX93M9nOfR4qgMAAAAAAADAbrs0/cM3337VnIqD7U3tv+9Xk6Ekh4u/PJjppcX5ARkNJ9eT3Gsuj3TZ3+fP/c10efbh+r3m2tGttgQAeFQ/CwAA//9Q62fs") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x250820, &(0x7f0000000240)={[{@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@nfs_nostale_ro}, {@dots}, {@dots}]}, 0xff, 0x189, &(0x7f0000000580)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x14) statfs(0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$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") bind(r2, &(0x7f0000000500)=@in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0x3501}, 0x80) 1.411075337s ago: executing program 2 (id=5869): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x328, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x80, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000003, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x70bd27, 0x3500, 0x2}, [@algo_crypt={0x6a, 0x2, {{'pcbc-aes-aesni\x00'}, 0x110, "dba561c5da55409002002dd81951638432adc2b330862592aac15cef2adcba13b2ac"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, @in=@loopback, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@empty, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@private0, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3c, 0x3, 0x0, 0x3503, 0x0, 0xa}, {@in6=@private2, @in=@empty, @in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x32, 0x4, 0x0, 0x3507, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x7, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x52d, &(0x7f00000003c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.210962237s ago: executing program 2 (id=5870): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) 1.200252128s ago: executing program 4 (id=5871): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d30800"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.199186257s ago: executing program 1 (id=5872): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x38) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth0_to_batadv\x00', 0x3}, 0x18) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2042, 0x100}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000340), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000011c0)=[{0x54}, {0x6}]}) 1.115269602s ago: executing program 2 (id=5873): perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000061000002000528008000100677470001400028005000500000000000800030009000000"], 0x40}}, 0x40080c0) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x5c1f, 0x4) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000012) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c46200403007e0400000000001002003e00ebffffff6203002214fae13035f63d00000000008503000000000000fdffffff060038000100feff03000300030000000f000000071800000000000011000000000000000000000000000800e50000000000040001000000000000000200000000000000"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0xffffff4f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 798.667848ms ago: executing program 5 (id=5874): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x58a, &(0x7f0000001ac0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(0x0, &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x65, 0x101282) syz_open_dev$tty1(0xc, 0x4, 0x4) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x2, 0x779b, 0x3) io_uring_setup(0x20004634, 0x0) 356.537382ms ago: executing program 6 (id=5875): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2148c5, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1, 0x2cf, &(0x7f0000000580)="$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") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) lsm_list_modules(0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf56c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x1, @perf_bp={0x0, 0x4}, 0x19196, 0x26e1, 0x9, 0x7, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000001180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) socket(0x1, 0x80006, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x9, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0xfff, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000240)=0xcb0, 0x4) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x8000}}, 0x10) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000001c850000001f000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x653988b496406357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="c18601aa1d1ad5fe150396000000", 0x0, 0x778e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x164, &(0x7f0000000240)="$eJzs2zHL00AYB/Antu9r1aWzOARcnIo6OSpSQQwoSgedFKpLKwW7RKfiJ3H1wwnSqYNwopFWS0upkkba32/JA3+Ou2e4HBfIy2tvR8PJ9M3kyTw6WRbtu5HHIotuXIhWVGYBAByTRUrxNaWULs7i0qdIKTW9IgCgbs5/ADg9O8//Ow0tDACojfs/AJyeZ89fPLpXFP2ned6J+DIrB+Wgelb5g4dF/2b+U3c1al6Wg9Yyv1Xl+Z/5WVz+ld/emJ/HjetV/iO7/7hYy6/EsP72AQAA4CT08qWN9/teb1teVb99H1i7v7fjavtgbQAAe5i+/zB6NR6/fnf44iwamFRxfMW3lNJfDP/4udoC/0kXO4rz2GtUFhH/NmnTbyagbqtN3/RKAAAAAAAAAAAAAACAber9danVdHsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw0fcAAAD//yFrTH4=") 324.653323ms ago: executing program 4 (id=5876): perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r0) 204.93177ms ago: executing program 4 (id=5877): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 168.176361ms ago: executing program 2 (id=5878): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 167.578741ms ago: executing program 4 (id=5879): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_setup(0x52f0, &(0x7f0000000480)={0x0, 0x2008000, 0x800}, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x1, 0x2, 0x8ac0, 0xfffffffa}, {0x6, 0x0, 0x2, 0x5, 0xc}, 0xfffffffa, 0x2, 0x9be}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) close(0x4) 46.838428ms ago: executing program 2 (id=5880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48800) 29.999148ms ago: executing program 4 (id=5881): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0x328, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x80, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000003, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x70bd27, 0x3500, 0x2}, [@algo_crypt={0x6a, 0x2, {{'pcbc-aes-aesni\x00'}, 0x110, "dba561c5da55409002002dd81951638432adc2b330862592aac15cef2adcba13b2ac"}}, @migrate={0x1cc, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, @in=@loopback, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@empty, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@private0, @in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3c, 0x3, 0x0, 0x3503, 0x0, 0xa}, {@in6=@private2, @in=@empty, @in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x32, 0x4, 0x0, 0x3507, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x7, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x52d, &(0x7f00000003c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=5882): fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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") execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x250820, &(0x7f0000000240)={[{@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@nfs_nostale_ro}, {@dots}, {@dots}]}, 0xff, 0x189, &(0x7f0000000580)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioprio_get$pid(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x14) statfs(0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000380), 0x1, 0x7b4, &(0x7f0000000f80)="$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") bind(r3, &(0x7f0000000500)=@in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0x3501}, 0x80) kernel console output (not intermixed with test programs): mode: writeback. [ 873.606575][T27537] loop2: detected capacity change from 0 to 1024 [ 873.665072][T27537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.719369][T27512] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 873.734352][T27532] loop5: detected capacity change from 0 to 128 [ 873.818035][T27512] FAT-fs (loop1): Filesystem has been set read-only [ 873.873675][ T28] audit: type=1326 audit(2000000810.396:17833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27499 comm="syz.1.5331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2026b3c819 code=0x0 [ 874.487512][T27516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5337'. [ 874.825840][T27552] netlink: 'syz.4.5342': attribute type 29 has an invalid length. [ 874.907999][T27515] delete_channel: no stack [ 875.140106][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.281107][T27568] loop6: detected capacity change from 0 to 1764 [ 875.407130][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.465984][T27557] loop5: detected capacity change from 0 to 512 [ 875.527882][T27582] loop4: detected capacity change from 0 to 1024 [ 875.541861][T27582] EXT4-fs: Ignoring removed bh option [ 875.587127][T27582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.616457][T27595] FAULT_INJECTION: forcing a failure. [ 875.616457][T27595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.630117][T27595] CPU: 0 UID: 0 PID: 27595 Comm: syz.2.5349 Tainted: G W syzkaller #0 PREEMPT(full) [ 875.630154][T27595] Tainted: [W]=WARN [ 875.630161][T27595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 875.630174][T27595] Call Trace: [ 875.630182][T27595] [ 875.630192][T27595] __dump_stack+0x1d/0x30 [ 875.630344][T27595] dump_stack_lvl+0x95/0xd0 [ 875.630422][T27595] dump_stack+0x15/0x1b [ 875.630450][T27595] should_fail_ex+0x263/0x280 [ 875.630515][T27595] should_fail+0xb/0x20 [ 875.630613][T27595] should_fail_usercopy+0x1a/0x20 [ 875.630651][T27595] _copy_from_user+0x1c/0xb0 [ 875.630685][T27595] kstrtouint_from_user+0x69/0xf0 [ 875.630756][T27595] ? 0xffffffff81000000 [ 875.630772][T27595] ? selinux_file_permission+0x1e1/0x320 [ 875.630867][T27595] proc_fail_nth_write+0x50/0x160 [ 875.630963][T27595] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 875.630999][T27595] vfs_write+0x269/0x9f0 [ 875.631037][T27595] ? __rcu_read_unlock+0x4e/0x70 [ 875.631078][T27595] ? __fget_files+0x184/0x1c0 [ 875.631165][T27595] ? mutex_lock+0x57/0x90 [ 875.631248][T27595] ksys_write+0xdc/0x1a0 [ 875.631281][T27595] __x64_sys_write+0x40/0x50 [ 875.631345][T27595] x64_sys_call+0x27e1/0x3020 [ 875.631455][T27595] do_syscall_64+0x12c/0x3b0 [ 875.631516][T27595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.631682][T27595] RIP: 0033:0x7fbd5fd7d04e [ 875.631703][T27595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 875.631722][T27595] RSP: 002b:00007fbd5e816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 875.631745][T27595] RAX: ffffffffffffffda RBX: 00007fbd5e8176c0 RCX: 00007fbd5fd7d04e [ 875.631760][T27595] RDX: 0000000000000001 RSI: 00007fbd5e8170a0 RDI: 0000000000000004 [ 875.631855][T27595] RBP: 00007fbd5e817090 R08: 0000000000000000 R09: 0000000000000000 [ 875.631871][T27595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.631884][T27595] R13: 00007fbd60036038 R14: 00007fbd60035fa0 R15: 00007ffe1c3f7a68 [ 875.631931][T27595] [ 875.685971][T27557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.742311][T27601] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 875.745293][T27557] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 875.892612][ T28] audit: type=1400 audit(2000000812.417:17834): avc: denied { ioctl } for pid=27587 comm="syz.6.5348" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 875.947924][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.979720][T27612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5353'. [ 875.994285][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.054753][T27620] loop6: detected capacity change from 0 to 164 [ 876.065724][T27630] loop1: detected capacity change from 0 to 136 [ 876.074531][T27630] Attempt to read inode for relocated directory [ 876.096487][T27620] FAULT_INJECTION: forcing a failure. [ 876.096487][T27620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.124227][T27620] CPU: 0 UID: 0 PID: 27620 Comm: syz.6.5355 Tainted: G W syzkaller #0 PREEMPT(full) [ 876.124533][T27620] Tainted: [W]=WARN [ 876.124542][T27620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 876.124555][T27620] Call Trace: [ 876.124564][T27620] [ 876.124575][T27620] __dump_stack+0x1d/0x30 [ 876.124690][T27620] dump_stack_lvl+0x95/0xd0 [ 876.124715][T27620] dump_stack+0x15/0x1b [ 876.124787][T27620] should_fail_ex+0x263/0x280 [ 876.124823][T27620] should_fail+0xb/0x20 [ 876.124920][T27620] should_fail_usercopy+0x1a/0x20 [ 876.124959][T27620] _copy_from_user+0x1c/0xb0 [ 876.125035][T27620] move_addr_to_kernel+0x7e/0x120 [ 876.125069][T27620] io_bind_prep+0x115/0x130 [ 876.125103][T27620] io_submit_sqes+0x736/0x1170 [ 876.125185][T27620] __se_sys_io_uring_enter+0x255/0xfb0 [ 876.125214][T27620] ? mutex_lock+0x57/0x90 [ 876.125296][T27620] ? mutex_unlock+0x4e/0x90 [ 876.125332][T27620] ? fput+0x8f/0xc0 [ 876.125363][T27620] __x64_sys_io_uring_enter+0x78/0x90 [ 876.125463][T27620] x64_sys_call+0x1e16/0x3020 [ 876.125493][T27620] do_syscall_64+0x12c/0x3b0 [ 876.125611][T27620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.125635][T27620] RIP: 0033:0x7f1f6036c819 [ 876.125654][T27620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.125673][T27620] RSP: 002b:00007f1f5edc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 876.125721][T27620] RAX: ffffffffffffffda RBX: 00007f1f605e5fa0 RCX: 00007f1f6036c819 [ 876.125740][T27620] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 876.125758][T27620] RBP: 00007f1f5edc7090 R08: 0000000000000000 R09: 0000000000000000 [ 876.125775][T27620] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 876.125792][T27620] R13: 00007f1f605e6038 R14: 00007f1f605e5fa0 R15: 00007ffe563ee6c8 [ 876.125825][T27620] [ 876.354317][T27638] loop1: detected capacity change from 0 to 1764 [ 876.366569][T27640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=27640 comm=syz.5.5354 [ 877.457970][T27640] loop5: detected capacity change from 0 to 4096 [ 877.517802][T27669] loop6: detected capacity change from 0 to 128 [ 877.568909][T27640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.608301][T27669] syz.6.5365: attempt to access beyond end of device [ 877.608301][T27669] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 877.623236][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 877.673217][T27669] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 877.696959][T27682] loop2: detected capacity change from 0 to 512 [ 877.715829][T27669] syz.6.5365: attempt to access beyond end of device [ 877.715829][T27669] loop6: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 877.752549][T27682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.790433][T27669] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 877.806663][T27682] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 877.827965][T27669] syz.6.5365: attempt to access beyond end of device [ 877.827965][T27669] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 877.883851][T27669] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 877.918039][T27669] syz.6.5365: attempt to access beyond end of device [ 877.918039][T27669] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 877.944549][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.975260][T27669] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 878.004738][T27669] syz.6.5365: attempt to access beyond end of device [ 878.004738][T27669] loop6: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 878.045762][T27695] loop1: detected capacity change from 0 to 256 [ 878.061348][T27669] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 878.082154][T27669] syz.6.5365: attempt to access beyond end of device [ 878.082154][T27669] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 878.132740][T27669] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 878.153616][T27640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5354'. [ 878.167859][T27695] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 878.189843][T27635] delete_channel: no stack [ 878.240233][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.268085][T27695] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 878.291431][T27695] FAT-fs (loop1): Filesystem has been set read-only [ 878.419428][T27728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.467905][T27735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.481296][T27728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.511570][T27735] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 878.523224][ T28] audit: type=1326 audit(2000000815.038:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27688 comm="syz.1.5367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2026b3c819 code=0x0 [ 878.574200][T27731] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 878.635443][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.762909][T27731] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 878.766640][T27721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.803557][T27731] FAT-fs (loop2): Filesystem has been set read-only [ 878.828469][T27721] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 878.862525][ T28] audit: type=1326 audit(2000000815.399:17836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27706 comm="syz.2.5368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5fdbc819 code=0x0 [ 878.989415][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.251572][T27764] EXT4-fs (loop6): cluster size (1024) smaller than block size (4096) [ 879.264909][T27783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.310778][T27783] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 879.467671][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.643638][T27792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.685211][T27792] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 879.774737][ T28] audit: type=1400 audit(2000000816.309:17837): avc: denied { ioctl } for pid=27810 comm="syz.2.5380" path="socket:[78869]" dev="sockfs" ino=78869 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 879.794045][T27754] syz.4.5374: attempt to access beyond end of device [ 879.794045][T27754] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 879.834596][T27821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=27821 comm=syz.2.5381 [ 879.888420][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.890159][T27754] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 879.913536][T27754] syz.4.5374: attempt to access beyond end of device [ 879.913536][T27754] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 879.971303][T27754] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 879.984669][T27824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.998639][T27754] syz.4.5374: attempt to access beyond end of device [ 879.998639][T27754] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 880.076542][T27836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.081339][T27754] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 880.105823][T27836] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.119249][T27754] syz.4.5374: attempt to access beyond end of device [ 880.119249][T27754] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 880.139462][T27754] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 880.156564][ T28] audit: type=1400 audit(2000000816.689:17838): avc: denied { read } for pid=27835 comm="syz.6.5382" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 880.188833][ T28] audit: type=1400 audit(2000000816.689:17839): avc: denied { open } for pid=27835 comm="syz.6.5382" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 880.241740][T27824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5381'. [ 880.245967][T27836] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 255 (only 1 groups) [ 880.368328][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.444551][T27820] delete_channel: no stack [ 882.046429][T27859] set_capacity_and_notify: 10 callbacks suppressed [ 882.046451][T27859] loop4: detected capacity change from 0 to 256 [ 882.166049][T27866] FAULT_INJECTION: forcing a failure. [ 882.166049][T27866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.199917][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.229654][T27866] CPU: 1 UID: 0 PID: 27866 Comm: syz.6.5388 Tainted: G W syzkaller #0 PREEMPT(full) [ 882.229748][T27866] Tainted: [W]=WARN [ 882.229758][T27866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 882.229772][T27866] Call Trace: [ 882.229779][T27866] [ 882.229788][T27866] __dump_stack+0x1d/0x30 [ 882.229823][T27866] dump_stack_lvl+0x95/0xd0 [ 882.229876][T27866] dump_stack+0x15/0x1b [ 882.229928][T27866] should_fail_ex+0x263/0x280 [ 882.229965][T27866] should_fail+0xb/0x20 [ 882.230041][T27866] should_fail_usercopy+0x1a/0x20 [ 882.230072][T27866] _copy_from_user+0x1c/0xb0 [ 882.230108][T27866] input_event_from_user+0x5e/0x190 [ 882.230133][T27866] ? input_inject_event+0xe3/0x100 [ 882.230202][T27866] evdev_write+0x1b0/0x2b0 [ 882.230237][T27866] ? __pfx_evdev_write+0x10/0x10 [ 882.230329][T27866] vfs_write+0x269/0x9f0 [ 882.230375][T27866] ? __rcu_read_unlock+0x4e/0x70 [ 882.230453][T27866] ? __fget_files+0x184/0x1c0 [ 882.230520][T27866] ksys_write+0xdc/0x1a0 [ 882.230554][T27866] __x64_sys_write+0x40/0x50 [ 882.230589][T27866] x64_sys_call+0x27e1/0x3020 [ 882.230648][T27866] do_syscall_64+0x12c/0x3b0 [ 882.230753][T27866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.230780][T27866] RIP: 0033:0x7f1f6036c819 [ 882.230801][T27866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.230822][T27866] RSP: 002b:00007f1f5edc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 882.230848][T27866] RAX: ffffffffffffffda RBX: 00007f1f605e5fa0 RCX: 00007f1f6036c819 [ 882.230890][T27866] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 882.230955][T27866] RBP: 00007f1f5edc7090 R08: 0000000000000000 R09: 0000000000000000 [ 882.230972][T27866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.230988][T27866] R13: 00007f1f605e6038 R14: 00007f1f605e5fa0 R15: 00007ffe563ee6c8 [ 882.231012][T27866] [ 882.509155][T27859] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 882.716449][T27859] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 882.728333][T27859] FAT-fs (loop4): Filesystem has been set read-only [ 882.820423][T27885] loop6: detected capacity change from 0 to 512 [ 882.829759][T27885] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 883.083302][T27884] loop1: detected capacity change from 0 to 512 [ 883.158063][ T28] audit: type=1326 audit(2000000819.691:17840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27848 comm="syz.4.5386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ce163c819 code=0x0 [ 883.258556][T27873] loop2: detected capacity change from 0 to 4096 [ 883.293366][T27873] EXT4-fs: Ignoring removed bh option [ 883.348464][T27884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.366941][T27873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.385629][T27884] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 883.498721][T27905] netlink: 'syz.6.5393': attribute type 25 has an invalid length. [ 883.532691][T27905] netlink: 'syz.6.5393': attribute type 3 has an invalid length. [ 883.546372][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.560544][T27905] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5393'. [ 883.561170][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.811640][T27927] syzkaller0: entered promiscuous mode [ 883.827216][T27927] syzkaller0: entered allmulticast mode [ 883.835282][T27932] loop2: detected capacity change from 0 to 128 [ 883.913228][T27923] xfrm0 speed is unknown, defaulting to 1000 [ 884.020166][T27946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=27946 comm=syz.1.5399 [ 884.105613][T27954] loop4: detected capacity change from 0 to 1764 [ 884.170705][T27966] loop1: detected capacity change from 0 to 4096 [ 884.197156][T27966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.438723][T27946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5399'. [ 884.455979][T27944] delete_channel: no stack [ 884.491159][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.585586][T27989] blktrace: Concurrent blktraces are not allowed on loop3 [ 884.704118][T27991] loop6: detected capacity change from 0 to 512 [ 884.735290][T28000] xfrm0 speed is unknown, defaulting to 1000 [ 884.753430][T27991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.772032][T27991] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 884.885754][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.906541][T28021] loop2: detected capacity change from 0 to 512 [ 884.945763][T28021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.017944][T28021] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.091850][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.123102][T28022] xfrm0 speed is unknown, defaulting to 1000 [ 885.176086][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5408'. [ 885.261296][T28065] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 885.298571][T28065] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 885.415719][T28107] macvlan3: entered promiscuous mode [ 885.428971][T28107] macvlan3: entered allmulticast mode [ 885.442144][T28107] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 885.592225][T28109] loop6: detected capacity change from 0 to 256 [ 886.081484][T28109] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 886.370895][T28109] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 886.442109][ T28] audit: type=1326 audit(2000000822.972:17841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28068 comm="syz.6.5410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x0 [ 886.465848][T28109] FAT-fs (loop6): Filesystem has been set read-only [ 886.883285][T28156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=28156 comm=syz.1.5413 [ 887.157549][T28167] set_capacity_and_notify: 2 callbacks suppressed [ 887.157569][T28167] loop5: detected capacity change from 0 to 1764 [ 887.192400][T28160] bio_check_eod: 2 callbacks suppressed [ 887.192422][T28160] syz.2.5414: attempt to access beyond end of device [ 887.192422][T28160] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 887.319019][T28160] buffer_io_error: 2 callbacks suppressed [ 887.319038][T28160] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 887.379556][T28160] syz.2.5414: attempt to access beyond end of device [ 887.379556][T28160] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 887.438033][T28160] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 887.462848][T28171] loop4: detected capacity change from 0 to 128 [ 887.469794][T28156] loop1: detected capacity change from 0 to 4096 [ 887.479947][T28160] syz.2.5414: attempt to access beyond end of device [ 887.479947][T28160] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 887.494122][T28160] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 887.503545][T28160] syz.2.5414: attempt to access beyond end of device [ 887.503545][T28160] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 887.592077][T28160] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 887.609628][T28156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.629141][T28182] blktrace: Concurrent blktraces are not allowed on loop11 [ 887.669979][T28158] syz.2.5414: attempt to access beyond end of device [ 887.669979][T28158] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 887.711733][T28158] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 887.733600][T28158] syz.2.5414: attempt to access beyond end of device [ 887.733600][T28158] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 887.775576][T28158] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 887.799617][T28158] syz.2.5414: attempt to access beyond end of device [ 887.799617][T28158] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 887.838736][T28158] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 887.927492][T28196] loop5: detected capacity change from 0 to 1024 [ 887.949624][T28196] EXT4-fs: Ignoring removed bh option [ 888.002144][T28196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.111768][T28214] xfrm0 speed is unknown, defaulting to 1000 [ 888.112478][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.354170][T28156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5413'. [ 890.355527][T28234] loop5: detected capacity change from 0 to 512 [ 890.370170][T28234] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 891.736830][T28260] loop4: detected capacity change from 0 to 512 [ 891.745036][T28260] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 891.860100][T28156] delete_channel: no stack [ 892.226683][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.250076][T28268] netlink: 'syz.5.5426': attribute type 25 has an invalid length. [ 892.281755][T28268] netlink: 'syz.5.5426': attribute type 3 has an invalid length. [ 892.303712][T28274] loop4: detected capacity change from 0 to 256 [ 892.318091][T28268] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5426'. [ 892.327910][T28279] loop6: detected capacity change from 0 to 128 [ 892.353883][T28274] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 892.373382][T28279] vfat: Unknown parameter '' [ 892.402888][T28274] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 892.446057][T28286] loop1: detected capacity change from 0 to 1764 [ 892.461214][ T28] audit: type=1326 audit(2000000828.995:17842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28273 comm="syz.4.5429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ce163c819 code=0x0 [ 892.489499][T28274] FAT-fs (loop4): Filesystem has been set read-only [ 892.532405][ T28] audit: type=1400 audit(2000000829.055:17843): avc: denied { wake_alarm } for pid=28277 comm="syz.6.5430" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 892.754809][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5430'. [ 892.836930][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5430'. [ 892.846270][T28316] loop2: detected capacity change from 0 to 512 [ 892.865021][T28316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.937218][T28326] loop5: detected capacity change from 0 to 512 [ 892.944774][T28326] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 893.106388][T28316] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 893.276060][T28297] loop6: detected capacity change from 0 to 128 [ 893.305262][T28337] loop1: detected capacity change from 0 to 128 [ 893.421552][ T28] audit: type=1400 audit(2000000829.656:17844): avc: denied { read } for pid=28277 comm="syz.6.5430" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 893.451894][ T28] audit: type=1400 audit(2000000829.906:17845): avc: denied { open } for pid=28277 comm="syz.6.5430" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 893.524839][T28337] syz.1.5435: attempt to access beyond end of device [ 893.524839][T28337] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 893.548206][T28315] loop4: detected capacity change from 0 to 512 [ 893.563132][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.583344][T28337] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 893.593993][T28337] syz.1.5435: attempt to access beyond end of device [ 893.593993][T28337] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 893.625958][T28337] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 893.659541][T28353] 9p: Bad value for 'rfdno' [ 893.705370][T28345] loop5: detected capacity change from 0 to 128 [ 893.745821][T28337] syz.1.5435: attempt to access beyond end of device [ 893.745821][T28337] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 893.778145][T28337] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 893.807905][T28337] syz.1.5435: attempt to access beyond end of device [ 893.807905][T28337] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 893.828396][T28337] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 893.839755][T28337] syz.1.5435: attempt to access beyond end of device [ 893.839755][T28337] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 893.869406][T28337] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 893.872170][T28364] loop6: detected capacity change from 0 to 164 [ 893.885619][T28337] syz.1.5435: attempt to access beyond end of device [ 893.885619][T28337] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 893.998843][T28315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.020095][T28315] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 894.055558][T28366] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 894.158251][T28364] Unable to read rock-ridge attributes [ 894.174181][T28337] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 894.350065][T28364] Unable to read rock-ridge attributes [ 894.412028][T28364] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 894.569486][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.761334][T28389] xfrm0 speed is unknown, defaulting to 1000 [ 894.773085][T28345] syz.5.5437: attempt to access beyond end of device [ 894.773085][T28345] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 895.796256][T28345] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 896.310630][T28392] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 896.423635][T28345] syz.5.5437: attempt to access beyond end of device [ 896.423635][T28345] loop5: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 896.469564][T28392] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 896.499535][T28392] FAT-fs (loop1): Filesystem has been set read-only [ 896.613794][T28345] Buffer I/O error on dev loop5, logical block 70, lost async page write [ 896.626639][ T28] audit: type=1326 audit(2000000833.127:17846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28391 comm="syz.1.5444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2026b3c819 code=0x0 [ 896.790943][T28345] syz.5.5437: attempt to access beyond end of device [ 896.790943][T28345] loop5: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 896.817791][T28345] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 896.965510][T28345] syz.5.5437: attempt to access beyond end of device [ 896.965510][T28345] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 896.983493][T28345] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 897.042930][T28414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.069844][T28414] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 897.196405][T28451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.309807][T28475] set_capacity_and_notify: 5 callbacks suppressed [ 897.309827][T28475] loop6: detected capacity change from 0 to 128 [ 897.326502][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.414089][T28470] loop5: detected capacity change from 0 to 1024 [ 897.599766][T28470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.621197][T28493] loop6: detected capacity change from 0 to 1764 [ 898.024566][T28497] loop1: detected capacity change from 0 to 512 [ 898.388581][T28497] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 898.577499][T28505] loop6: detected capacity change from 0 to 1024 [ 898.608685][T28505] EXT4-fs: Ignoring removed bh option [ 898.675528][T28505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.854826][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.982454][T28512] loop6: detected capacity change from 0 to 256 [ 899.097807][T28512] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 899.155732][T28512] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 899.177198][T28512] FAT-fs (loop6): Filesystem has been set read-only [ 899.238351][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.280795][ T28] audit: type=1326 audit(2000000835.819:17847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28511 comm="syz.6.5457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x0 [ 899.371036][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.707885][T28542] netlink: 'syz.4.5461': attribute type 29 has an invalid length. [ 901.865947][T28549] loop2: detected capacity change from 0 to 128 [ 902.109385][T28555] xfrm0 speed is unknown, defaulting to 1000 [ 902.274821][T28568] loop4: detected capacity change from 0 to 512 [ 902.307364][T28568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.323234][T28572] bio_check_eod: 9 callbacks suppressed [ 902.323254][T28572] syz.2.5462: attempt to access beyond end of device [ 902.323254][T28572] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 902.346713][T28568] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 902.449765][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.541470][T28598] loop4: detected capacity change from 0 to 1764 [ 903.918381][T28623] loop5: detected capacity change from 0 to 1024 [ 904.183653][T28622] loop4: detected capacity change from 0 to 512 [ 904.816850][T28623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.946319][T28622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.966590][T28622] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.134283][T28637] loop2: detected capacity change from 0 to 256 [ 905.237528][T28637] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 905.263416][T28641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5469'. [ 905.317103][T28637] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 905.331281][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.351509][T28637] FAT-fs (loop2): Filesystem has been set read-only [ 905.389342][T28646] loop4: detected capacity change from 0 to 1764 [ 905.403690][ T28] audit: type=1326 audit(2000000841.942:17848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.2.5470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5fdbc819 code=0x0 [ 905.567900][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.390989][T28667] loop4: detected capacity change from 0 to 512 [ 907.434948][T28667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 907.475149][T28667] EXT4-fs (loop4): 1 orphan inode deleted [ 907.495990][T28667] EXT4-fs (loop4): 1 truncate cleaned up [ 907.521693][T28667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.629846][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.691024][T28678] loop2: detected capacity change from 0 to 512 [ 907.733060][T28678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.760037][T28678] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.785820][T28689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5476'. [ 907.819986][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.951548][T28703] xfrm0 speed is unknown, defaulting to 1000 [ 908.097298][T28701] loop2: detected capacity change from 0 to 128 [ 908.530217][T28733] syz.2.5480: attempt to access beyond end of device [ 908.530217][T28733] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 908.576347][T28733] buffer_io_error: 9 callbacks suppressed [ 908.576366][T28733] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 908.603085][T28733] syz.2.5480: attempt to access beyond end of device [ 908.603085][T28733] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 908.653188][T28733] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 908.710303][T28733] syz.2.5480: attempt to access beyond end of device [ 908.710303][T28733] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 908.711028][T28737] loop1: detected capacity change from 0 to 1024 [ 908.743810][T28744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=28744 comm=syz.5.5484 [ 909.715446][T28733] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 909.745686][T28733] syz.2.5480: attempt to access beyond end of device [ 909.745686][T28733] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 909.777173][T28733] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 910.037294][T28733] syz.2.5480: attempt to access beyond end of device [ 910.037294][T28733] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 910.081695][T28733] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 910.128675][T28733] syz.2.5480: attempt to access beyond end of device [ 910.128675][T28733] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 910.185246][T28733] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 910.203497][T28744] loop5: detected capacity change from 0 to 4096 [ 910.218502][T28737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.277548][T28744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.454284][T28759] loop2: detected capacity change from 0 to 128 [ 910.794420][T28759] syz.2.5485: attempt to access beyond end of device [ 910.794420][T28759] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 910.811336][T28766] FAULT_INJECTION: forcing a failure. [ 910.811336][T28766] name failslab, interval 1, probability 0, space 0, times 0 [ 910.824520][T28766] CPU: 0 UID: 0 PID: 28766 Comm: syz.6.5486 Tainted: G W syzkaller #0 PREEMPT(full) [ 910.824579][T28766] Tainted: [W]=WARN [ 910.824587][T28766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 910.824599][T28766] Call Trace: [ 910.824606][T28766] [ 910.824687][T28766] __dump_stack+0x1d/0x30 [ 910.824723][T28766] dump_stack_lvl+0x95/0xd0 [ 910.824769][T28766] dump_stack+0x15/0x1b [ 910.824793][T28766] should_fail_ex+0x263/0x280 [ 910.824882][T28766] should_failslab+0x8c/0xb0 [ 910.824907][T28766] kmem_cache_alloc_noprof+0x66/0x3f0 [ 910.824945][T28766] ? do_getname+0x2e/0x1c0 [ 910.825016][T28766] do_getname+0x2e/0x1c0 [ 910.825038][T28766] getname_flags+0x1d/0x30 [ 910.825059][T28766] do_sys_openat2+0x60/0x130 [ 910.825099][T28766] __x64_sys_openat+0xf2/0x120 [ 910.825177][T28766] x64_sys_call+0x1e39/0x3020 [ 910.825210][T28766] do_syscall_64+0x12c/0x3b0 [ 910.825249][T28766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.825299][T28766] RIP: 0033:0x7f1f6036c819 [ 910.825319][T28766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.825342][T28766] RSP: 002b:00007f1f5ed85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 910.825370][T28766] RAX: ffffffffffffffda RBX: 00007f1f605e6180 RCX: 00007f1f6036c819 [ 910.825387][T28766] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 910.825425][T28766] RBP: 00007f1f5ed85090 R08: 0000000000000000 R09: 0000000000000000 [ 910.825441][T28766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.825458][T28766] R13: 00007f1f605e6218 R14: 00007f1f605e6180 R15: 00007ffe563ee6c8 [ 910.825587][T28766] [ 911.155205][T28759] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 911.163791][T28759] syz.2.5485: attempt to access beyond end of device [ 911.163791][T28759] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 911.184694][T28759] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 911.205308][T28759] syz.2.5485: attempt to access beyond end of device [ 911.205308][T28759] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 911.248378][T28759] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 911.274930][T28759] syz.2.5485: attempt to access beyond end of device [ 911.274930][T28759] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 911.306127][T28759] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 911.350352][T28744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5484'. [ 911.383636][T28743] delete_channel: no stack [ 911.420757][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.600495][T28770] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 911.629837][T28770] syzkaller0: entered promiscuous mode [ 911.647666][T28770] syzkaller0: entered allmulticast mode [ 911.848181][T28780] loop2: detected capacity change from 0 to 256 [ 911.921307][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5491'. [ 912.125514][T28780] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 912.311245][T28780] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 912.388624][ T28] audit: type=1326 audit(2000000848.925:17849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28771 comm="syz.2.5488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5fdbc819 code=0x0 [ 912.393683][T28780] FAT-fs (loop2): Filesystem has been set read-only [ 912.746824][T28670] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 912.784663][T28812] loop5: detected capacity change from 0 to 1764 [ 912.815198][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.839812][T28817] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 912.894512][T28817] syzkaller0: entered promiscuous mode [ 912.948809][T28817] syzkaller0: entered allmulticast mode [ 913.177357][T28828] loop1: detected capacity change from 0 to 512 [ 913.205569][T28847] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 913.257224][T28847] syzkaller0: entered promiscuous mode [ 913.267934][T28853] loop5: detected capacity change from 0 to 512 [ 913.297108][T28847] syzkaller0: entered allmulticast mode [ 913.363791][T28853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.383804][T28853] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 913.400517][T28828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.417623][T28828] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 913.468439][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.485676][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.616396][T28879] syzkaller0: entered promiscuous mode [ 913.630861][T28879] syzkaller0: entered allmulticast mode [ 913.719245][T28889] loop6: detected capacity change from 0 to 128 [ 913.749045][T28899] loop5: detected capacity change from 0 to 4096 [ 913.783813][T28899] EXT4-fs: Ignoring removed bh option [ 913.817606][T28899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.843895][T28901] loop2: detected capacity change from 0 to 512 [ 913.942742][T28917] loop1: detected capacity change from 0 to 4096 [ 913.962103][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.965212][T28917] EXT4-fs: Ignoring removed bh option [ 914.043783][T28917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.076665][T28936] loop5: detected capacity change from 0 to 1764 [ 914.115719][T28901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.128944][T28940] loop4: detected capacity change from 0 to 128 [ 914.164881][T28901] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 914.268204][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.268741][T28940] bio_check_eod: 3 callbacks suppressed [ 914.269016][T28940] syz.4.5511: attempt to access beyond end of device [ 914.269016][T28940] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 914.318851][T13308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.333466][T28940] buffer_io_error: 3 callbacks suppressed [ 914.333485][T28940] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 914.379133][T28956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5512'. [ 914.408544][T28956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5512'. [ 914.428306][T28956] netlink: 1468 bytes leftover after parsing attributes in process `syz.1.5512'. [ 914.532964][T28940] syz.4.5511: attempt to access beyond end of device [ 914.532964][T28940] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 915.371451][T28973] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 915.386170][T28940] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 915.416378][T28973] syzkaller0: entered promiscuous mode [ 915.448994][T28973] syzkaller0: entered allmulticast mode [ 915.491931][T28940] syz.4.5511: attempt to access beyond end of device [ 915.491931][T28940] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 915.620508][T28988] syz.6.5506: attempt to access beyond end of device [ 915.620508][T28988] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 915.637764][T28940] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 915.689522][T28987] loop1: detected capacity change from 0 to 256 [ 915.827939][T28988] syz.6.5506: attempt to access beyond end of device [ 915.827939][T28988] loop6: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 915.846693][T28940] syz.4.5511: attempt to access beyond end of device [ 915.846693][T28940] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 916.021645][T28940] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 916.043100][T28987] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 916.097344][T28940] syz.4.5511: attempt to access beyond end of device [ 916.097344][T28940] loop4: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 916.283021][T28987] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 916.334774][T28940] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 916.370092][T28987] FAT-fs (loop1): Filesystem has been set read-only [ 916.412396][ T28] audit: type=1326 audit(2000000852.907:17850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28981 comm="syz.1.5518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2026b3c819 code=0x0 [ 916.485610][T28940] syz.4.5511: attempt to access beyond end of device [ 916.485610][T28940] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 916.567013][T28940] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 916.600866][T29012] netlink: 'syz.6.5521': attribute type 25 has an invalid length. [ 916.630359][T29012] netlink: 'syz.6.5521': attribute type 3 has an invalid length. [ 916.659887][T29012] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5521'. [ 917.317226][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5527'. [ 921.405546][ T28] audit: type=1400 audit(2000000857.960:17851): avc: denied { read } for pid=29069 comm="syz.2.5533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 921.613450][ T28] audit: type=1400 audit(2000000858.150:17852): avc: denied { setopt } for pid=29069 comm="syz.2.5533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 922.422917][T29074] set_capacity_and_notify: 3 callbacks suppressed [ 922.422939][T29074] loop6: detected capacity change from 0 to 128 [ 922.584859][ T28] audit: type=1400 audit(2000000858.150:17853): avc: denied { watch } for pid=29069 comm="syz.2.5533" path="/490" dev="tmpfs" ino=2672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 922.607492][ T28] audit: type=1400 audit(2000000858.170:17854): avc: denied { ioctl } for pid=29069 comm="syz.2.5533" path="socket:[79734]" dev="sockfs" ino=79734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 923.196626][T13308] cgroup: fork rejected by pids controller in /syz2 [ 923.474800][T29091] loop5: detected capacity change from 0 to 512 [ 923.500530][T29098] loop6: detected capacity change from 0 to 1764 [ 923.645924][T13014] bridge_slave_1: left allmulticast mode [ 923.679026][T13014] bridge_slave_1: left promiscuous mode [ 923.704481][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.740381][T13014] bridge_slave_0: left allmulticast mode [ 923.770687][T13014] bridge_slave_0: left promiscuous mode [ 923.782550][T13014] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.851200][T29131] netlink: 'syz.4.5541': attribute type 25 has an invalid length. [ 923.862806][T29131] netlink: 'syz.4.5541': attribute type 3 has an invalid length. [ 923.871187][T29131] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5541'. [ 924.006974][T29091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.025216][T13014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.027324][T29091] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.050533][T13014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.075624][T13014] bond0 (unregistering): Released all slaves [ 924.076018][T29086] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5537'. [ 924.084293][T13014] bond1 (unregistering): Released all slaves [ 924.139410][T29135] xfrm0 speed is unknown, defaulting to 1000 [ 924.179435][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.403022][T29192] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5545'. [ 924.432857][T29187] netlink: 'syz.4.5545': attribute type 29 has an invalid length. [ 924.465024][T13014] hsr_slave_0: left promiscuous mode [ 924.483022][T13014] hsr_slave_1: left promiscuous mode [ 924.598298][T13014] team0 (unregistering): Port device team_slave_1 removed [ 924.615255][T13014] team0 (unregistering): Port device team_slave_0 removed [ 925.001602][T29203] loop6: detected capacity change from 0 to 1024 [ 925.008739][T29203] EXT4-fs: Ignoring removed bh option [ 925.030862][T29092] xfrm0 speed is unknown, defaulting to 1000 [ 925.032795][ T3040] 8021q: adding VLAN 0 to HW filter on device eth9 [ 925.047672][T29203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.098032][T29210] loop1: detected capacity change from 0 to 1024 [ 925.114014][T29210] EXT4-fs: Ignoring removed bh option [ 925.161563][T29210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.219059][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.230584][T29226] loop4: detected capacity change from 0 to 128 [ 925.287910][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.515875][T29264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5552'. [ 927.126643][T29268] netlink: 'syz.5.5552': attribute type 29 has an invalid length. [ 927.136642][ T3040] 8021q: adding VLAN 0 to HW filter on device eth10 [ 927.191409][T29301] vlan2: entered allmulticast mode [ 927.197468][T29301] team0: entered allmulticast mode [ 927.203714][T29301] team_slave_0: entered allmulticast mode [ 927.210735][T29313] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 927.219065][T29301] team_slave_1: entered allmulticast mode [ 927.244564][T29092] chnl_net:caif_netlink_parms(): no params data found [ 927.266283][T29313] xt_hashlimit: size too large, truncated to 1048576 [ 927.290879][ T28] audit: type=1400 audit(2000000863.833:17855): avc: denied { getopt } for pid=29310 comm="syz.5.5556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 927.341217][T29308] loop6: detected capacity change from 0 to 512 [ 927.401961][T29092] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.416706][T29092] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.426729][T29092] bridge_slave_0: entered allmulticast mode [ 927.447178][T29092] bridge_slave_0: entered promiscuous mode [ 927.455158][T29092] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.483425][T29092] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.491925][T29092] bridge_slave_1: entered allmulticast mode [ 927.499058][T29092] bridge_slave_1: entered promiscuous mode [ 927.563349][T29092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.599295][T29092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.651451][T29092] team0: Port device team_slave_0 added [ 927.670335][T29308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.673408][T29092] team0: Port device team_slave_1 added [ 927.694191][T29308] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.751958][T29092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.759691][T29092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.789528][T29092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.803079][T29092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.811355][T29092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.839537][T29092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.858019][ T3040] 8021q: adding VLAN 0 to HW filter on device eth11 [ 927.893625][T29438] loop1: detected capacity change from 0 to 512 [ 927.951864][T29438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.961878][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.976627][T29438] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 927.981931][T29092] hsr_slave_0: entered promiscuous mode [ 928.014902][T29489] loop4: detected capacity change from 0 to 512 [ 928.025798][T29092] hsr_slave_1: entered promiscuous mode [ 928.065418][T29489] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 928.106320][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.121844][T29499] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5561'. [ 928.174512][T29512] xfrm0 speed is unknown, defaulting to 1000 [ 928.240216][ T28] audit: type=1400 audit(2000000864.793:17856): avc: denied { validate_trans } for pid=29557 comm="syz.1.5564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 928.277510][ T28] audit: type=1400 audit(2000000864.823:17857): avc: denied { setopt } for pid=29557 comm="syz.1.5564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 928.419766][T29618] loop1: detected capacity change from 0 to 128 [ 928.476278][T29618] syz.1.5566: attempt to access beyond end of device [ 928.476278][T29618] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 928.506178][T29618] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 928.553637][T29618] syz.1.5566: attempt to access beyond end of device [ 928.553637][T29618] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 928.574646][T29575] loop6: detected capacity change from 0 to 128 [ 928.596058][T29618] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 928.656439][T29092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 928.687476][T29092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 928.697344][T29092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 928.838573][T29092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.857508][T29092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.874245][T29092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 929.156019][T29685] loop5: detected capacity change from 0 to 1024 [ 929.341453][T29685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.591674][T29693] loop4: detected capacity change from 0 to 1764 [ 929.606362][T29695] syz.6.5565: attempt to access beyond end of device [ 929.606362][T29695] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 930.450095][T29092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 930.476051][T29701] loop1: detected capacity change from 0 to 512 [ 930.490890][T29701] ext4: Unknown parameter 'func' [ 930.527545][T29092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.644797][T29722] loop1: detected capacity change from 0 to 1024 [ 930.693681][T29722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 930.751303][T29722] System zones: 0-1, 3-36 [ 930.773550][T29723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5572'. [ 930.783991][T29722] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5570: bad orphan inode 134217728 [ 930.797161][T29092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.833245][T29722] loop1: lost filesystem error report for type 5 error -117 [ 930.835823][T29092] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.845053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.857819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.864579][T29722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.883426][T29723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5572'. [ 930.907920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.907968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.915058][T29713] loop6: detected capacity change from 0 to 512 [ 930.958494][T29713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.958565][T29713] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.983066][T29713] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5571'. [ 931.237276][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.274673][ T28] audit: type=1400 audit(2000000867.755:17858): avc: denied { read } for pid=29700 comm="syz.1.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 931.300392][T29092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.498655][T29092] veth0_vlan: entered promiscuous mode [ 931.633117][T29092] veth1_vlan: entered promiscuous mode [ 931.667862][T29092] veth0_macvtap: entered promiscuous mode [ 931.876216][T29092] veth1_macvtap: entered promiscuous mode [ 931.891078][T29092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.450977][T29092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.459580][T29423] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 932.503111][T22847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.531467][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.545477][T22847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.585688][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.611623][T22847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.676973][T22847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.016163][T29801] loop1: detected capacity change from 0 to 512 [ 933.647130][T29801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.885137][T29801] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 934.328820][T29836] loop4: detected capacity change from 0 to 512 [ 934.379357][T29839] loop5: detected capacity change from 0 to 1764 [ 934.424704][T29836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.599666][T29836] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 934.633945][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.786103][T29863] loop2: detected capacity change from 0 to 1764 [ 934.801048][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.888539][T29876] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 935.470416][T29893] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5585'. [ 935.480399][T29893] netlink: 'syz.5.5585': attribute type 29 has an invalid length. [ 935.757333][T29905] loop1: detected capacity change from 0 to 1024 [ 935.907109][T29905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.073550][T29921] bond3: option fail_over_mac: invalid value (127) [ 936.163361][T29921] bond3 (unregistering): Released all slaves [ 936.389998][T29926] syzkaller0: entered promiscuous mode [ 936.428841][T29926] syzkaller0: entered allmulticast mode [ 937.722315][T30012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5593'. [ 937.739078][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.749868][T30012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5593'. [ 937.792122][T30025] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.5598'. [ 937.827007][ T28] audit: type=1400 audit(2000000874.388:17859): avc: denied { connect } for pid=30022 comm="syz.2.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 937.873260][ T28] audit: type=1400 audit(2000000874.438:17860): avc: denied { mounton } for pid=30037 comm="syz.5.5600" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 937.922053][T30033] loop1: detected capacity change from 0 to 128 [ 938.197410][T30055] loop6: detected capacity change from 0 to 512 [ 938.299120][T30064] Cannot find add_set index 0 as target [ 938.309384][T30062] syz.1.5597: attempt to access beyond end of device [ 938.309384][T30062] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 938.461447][T30055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.509460][T30055] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.622087][T30072] loop4: detected capacity change from 0 to 1024 [ 938.649695][T30072] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 938.702493][T30072] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.5606: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 938.862425][T30072] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 938.863845][T30072] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.5606: Bad quota inode: 3, type: 0 [ 938.872991][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 938.873014][ C1] EXT4-fs (loop4): initial error at time 2000000875: ext4_ext_check_inode:521: inode 3 [ 938.873049][ C1] EXT4-fs (loop4): last error at time 2000000875: ext4_ext_check_inode:521: inode 3 [ 939.058779][T30072] loop4: lost filesystem error report for type 5 error -117 [ 939.058976][T30072] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 939.144331][T30072] EXT4-fs (loop4): mount failed [ 939.234108][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.372668][T30083] loop1: detected capacity change from 0 to 1024 [ 939.429322][T30093] syzkaller0: entered promiscuous mode [ 939.455543][T30093] syzkaller0: entered allmulticast mode [ 939.808938][T30125] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5614'. [ 939.834395][T30126] netlink: 'syz.4.5617': attribute type 25 has an invalid length. [ 939.849706][T30125] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5614'. [ 939.862401][T30126] netlink: 'syz.4.5617': attribute type 3 has an invalid length. [ 939.880379][T30126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5617'. [ 939.981961][T30083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.082371][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5619'. [ 940.084810][T30140] netlink: 'syz.5.5619': attribute type 29 has an invalid length. [ 940.169552][T30141] loop4: detected capacity change from 0 to 512 [ 940.218443][T30141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.218670][T30141] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.284053][T30138] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5620'. [ 940.702150][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.801456][T30167] No such timeout policy "syz1" [ 941.836755][T30157] syzkaller0: entered promiscuous mode [ 941.967767][T30157] syzkaller0: entered allmulticast mode [ 942.192778][T30172] loop4: detected capacity change from 0 to 128 [ 942.858993][T30172] syz.4.5626: attempt to access beyond end of device [ 942.858993][T30172] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 942.885577][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.896264][T30174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5625'. [ 943.071376][ T28] audit: type=1400 audit(2000000879.641:17861): avc: denied { listen } for pid=30190 comm="syz.5.5629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 943.122977][T30200] loop2: detected capacity change from 0 to 1024 [ 943.139202][T30200] EXT4-fs: Ignoring removed bh option [ 943.207470][T30200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 943.226949][T30200] System zones: 0-1, 3-12 [ 943.241796][T30200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.316844][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.470298][T30210] loop4: detected capacity change from 0 to 512 [ 943.529817][T30216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5633'. [ 943.613996][T30216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5633'. [ 943.746313][T30210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.746440][T30210] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.779614][T30210] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5632'. [ 943.871448][T30229] xfrm0 speed is unknown, defaulting to 1000 [ 943.920481][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.947984][T30238] No such timeout policy "syz1" [ 944.042372][T30248] tmpfs: Bad value for 'mpol' [ 944.113462][T30245] syzkaller0: entered promiscuous mode [ 944.113486][T30245] syzkaller0: entered allmulticast mode [ 944.144870][T30256] loop4: detected capacity change from 0 to 512 [ 944.191176][T30256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.191255][T30256] ext4 filesystem being mounted at /538/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 944.216111][T30231] loop6: detected capacity change from 0 to 1024 [ 944.328796][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.306655][ T28] audit: type=1400 audit(2000000881.862:17862): avc: denied { create } for pid=30290 comm="syz.2.5643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 946.305711][T30295] loop2: detected capacity change from 0 to 1024 [ 946.317641][T30295] EXT4-fs: Ignoring removed bh option [ 946.338789][T30295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.499704][T30236] loop1: detected capacity change from 0 to 128 [ 947.301532][T30236] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 947.301576][T30236] EXT4-fs: failed to create workqueue [ 947.322694][T30236] EXT4-fs (loop1): mount failed [ 947.354558][T30231] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 947.479084][T30231] EXT4-fs: failed to create workqueue [ 948.073617][T30231] EXT4-fs (loop6): mount failed [ 948.232818][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.294877][ T28] audit: type=1400 audit(2000000884.853:17863): avc: denied { setopt } for pid=30335 comm="syz.6.5649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 948.365905][ T28] audit: type=1400 audit(2000000884.883:17864): avc: denied { write } for pid=30322 comm="syz.4.5646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 948.397585][T30320] xfrm0 speed is unknown, defaulting to 1000 [ 948.582279][T30347] loop2: detected capacity change from 0 to 512 [ 948.596951][T30365] syzkaller0: entered promiscuous mode [ 948.607782][T30365] syzkaller0: entered allmulticast mode [ 948.674471][T30347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.694045][T30347] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.762901][T30347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5648'. [ 948.910447][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.054433][T30406] loop5: detected capacity change from 0 to 512 [ 949.073131][T30406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 949.152134][T30406] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.5655: corrupted xattr entries [ 949.166155][T30406] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 949.167973][T30406] EXT4-fs (loop5): 1 truncate cleaned up [ 949.178015][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 949.178037][ C0] EXT4-fs (loop5): initial error at time 2000000885: xattr_find_entry:337: inode 15 [ 949.178083][ C0] EXT4-fs (loop5): last error at time 2000000885: xattr_find_entry:337: inode 15 [ 949.215708][T30406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.952273][T30431] loop4: detected capacity change from 0 to 1024 [ 950.087126][T30431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.116918][T30439] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5662'. [ 950.228592][T30442] loop6: detected capacity change from 0 to 128 [ 950.257852][T30442] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 950.303103][T30442] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 950.416493][T17282] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 950.779459][T30457] loop6: detected capacity change from 0 to 512 [ 950.820521][T30457] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 950.976203][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.243186][T30467] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 951.331688][T30470] syzkaller0: entered promiscuous mode [ 951.347067][T30470] syzkaller0: entered allmulticast mode [ 951.388422][T30475] netlink: 'syz.1.5667': attribute type 25 has an invalid length. [ 951.412179][T30475] netlink: 'syz.1.5667': attribute type 3 has an invalid length. [ 951.424641][T30475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5667'. [ 951.753316][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.845395][T30494] loop4: detected capacity change from 0 to 128 [ 951.890561][T30496] xt_hashlimit: size too large, truncated to 1048576 [ 951.915188][T30494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 951.925318][T30496] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 951.938928][T30494] FAT-fs (loop4): Filesystem has been set read-only [ 951.968099][T30496] loop5: detected capacity change from 0 to 512 [ 951.977822][T30494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 951.994550][T30494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 952.004029][T30496] EXT4-fs: Ignoring removed oldalloc option [ 952.047848][T30496] EXT4-fs (loop5): 1 truncate cleaned up [ 952.083292][T30496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.245045][T30496] pim6reg2: entered allmulticast mode [ 952.409577][T30513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5673'. [ 952.447107][ T28] audit: type=1400 audit(2000000889.015:17865): avc: denied { setopt } for pid=30512 comm="syz.2.5673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 953.432329][ T28] audit: type=1400 audit(2000000889.996:17866): avc: denied { accept } for pid=30514 comm="syz.6.5674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 953.804308][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.833052][T30534] netlink: 'syz.6.5678': attribute type 25 has an invalid length. [ 954.851267][T30530] loop4: detected capacity change from 0 to 512 [ 954.859675][T30534] netlink: 'syz.6.5678': attribute type 3 has an invalid length. [ 954.932494][T30534] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5678'. [ 955.453056][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5679'. [ 955.877870][T30530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.325122][T30558] hub 8-0:1.0: USB hub found [ 956.330144][T30558] hub 8-0:1.0: 8 ports detected [ 956.608381][T30530] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 956.666419][ T28] audit: type=1400 audit(2000000893.237:17867): avc: denied { accept } for pid=30569 comm="syz.6.5683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 956.793509][T30555] loop1: detected capacity change from 0 to 1024 [ 956.838634][T30577] loop2: detected capacity change from 0 to 512 [ 956.889794][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.949740][T30577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.981148][T30591] loop5: detected capacity change from 0 to 512 [ 956.987860][T30591] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 957.008676][T30577] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 957.056249][T30594] loop6: detected capacity change from 0 to 512 [ 957.132248][T30594] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 957.166478][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.399929][T30555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.195968][T30617] loop2: detected capacity change from 0 to 512 [ 958.232630][T30617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 958.351616][T30617] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.5687: corrupted in-inode xattr: bad e_name length [ 958.408477][T30617] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 958.408693][T30617] EXT4-fs (loop2): get orphan inode failed [ 958.418153][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 958.418175][ C0] EXT4-fs (loop2): initial error at time 2000000894: ext4_iget_extra_inode:5128: inode 15 [ 958.418213][ C0] EXT4-fs (loop2): last error at time 2000000894: ext4_iget_extra_inode:5128: inode 15 [ 958.592390][T30617] EXT4-fs (loop2): mount failed [ 958.745647][ T28] audit: type=1400 audit(2000000895.318:17868): avc: denied { accept } for pid=30615 comm="syz.2.5687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 958.800620][T30633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 958.859486][T30628] xfrm0 speed is unknown, defaulting to 1000 [ 958.953075][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.964094][T30640] netlink: 'syz.6.5690': attribute type 25 has an invalid length. [ 958.995402][T30640] netlink: 'syz.6.5690': attribute type 3 has an invalid length. [ 959.020925][T30640] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5690'. [ 959.204427][T30654] loop1: detected capacity change from 0 to 1024 [ 959.304104][T30673] loop6: detected capacity change from 0 to 1024 [ 959.342118][T30673] EXT4-fs: Ignoring removed bh option [ 960.003361][T30673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.224026][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.304221][ T28] audit: type=1326 audit(2000000896.879:17869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 960.430993][T30690] xfrm0 speed is unknown, defaulting to 1000 [ 960.449945][ T28] audit: type=1326 audit(2000000896.909:17870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 960.578703][ T28] audit: type=1326 audit(2000000896.909:17871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 960.613294][T30654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.677367][ T28] audit: type=1326 audit(2000000896.909:17872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 960.734985][T30692] loop6: detected capacity change from 0 to 512 [ 960.818527][T30715] loop5: detected capacity change from 0 to 512 [ 960.829665][ T28] audit: type=1326 audit(2000000896.909:17873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 960.912793][T30715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.938009][T30692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.977824][ T28] audit: type=1326 audit(2000000896.909:17874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 960.988652][T30715] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 961.005174][ T28] audit: type=1326 audit(2000000896.909:17875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 961.045050][ T28] audit: type=1326 audit(2000000896.909:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 961.069741][ T28] audit: type=1326 audit(2000000896.919:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.6.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 961.166169][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.192701][T30749] loop4: detected capacity change from 0 to 512 [ 961.212684][T30749] EXT4-fs: Ignoring removed mblk_io_submit option [ 961.479550][T30764] netlink: 'syz.4.5703': attribute type 25 has an invalid length. [ 961.487808][T30764] netlink: 'syz.4.5703': attribute type 3 has an invalid length. [ 961.495965][T30764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5703'. [ 961.570424][T30765] loop5: detected capacity change from 0 to 512 [ 961.606936][T30765] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 961.728078][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.730086][T30768] loop7: detected capacity change from 0 to 7 [ 961.795407][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 961.904355][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.129327][T30807] blktrace: Concurrent blktraces are not allowed on loop3 [ 962.140669][T30800] pim6reg1: entered promiscuous mode [ 962.156283][T30800] pim6reg1: entered allmulticast mode [ 962.165867][T30806] loop2: detected capacity change from 0 to 2048 [ 962.223222][T30806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.242840][T30806] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.496955][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.704968][T30838] netlink: 'syz.5.5714': attribute type 25 has an invalid length. [ 962.717356][T30836] loop2: detected capacity change from 0 to 512 [ 962.744572][T30836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.760913][T30838] netlink: 'syz.5.5714': attribute type 3 has an invalid length. [ 962.795540][T30838] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5714'. [ 962.812260][T30836] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 962.935660][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.992058][T30847] loop5: detected capacity change from 0 to 1024 [ 963.061889][T30860] loop2: detected capacity change from 0 to 128 [ 963.424756][T30847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.024997][T30875] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5719'. [ 964.058559][T30875] FAULT_INJECTION: forcing a failure. [ 964.058559][T30875] name failslab, interval 1, probability 0, space 0, times 0 [ 964.079016][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.099229][T30875] CPU: 1 UID: 0 PID: 30875 Comm: syz.2.5719 Tainted: G W syzkaller #0 PREEMPT(full) [ 964.099268][T30875] Tainted: [W]=WARN [ 964.099277][T30875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 964.099312][T30875] Call Trace: [ 964.099322][T30875] [ 964.099333][T30875] __dump_stack+0x1d/0x30 [ 964.099416][T30875] dump_stack_lvl+0x95/0xd0 [ 964.099444][T30875] dump_stack+0x15/0x1b [ 964.099473][T30875] should_fail_ex+0x263/0x280 [ 964.099508][T30875] ? __se_sys_mount+0xef/0x2e0 [ 964.099558][T30875] should_failslab+0x8c/0xb0 [ 964.099583][T30875] __kmalloc_cache_noprof+0x5f/0x400 [ 964.099612][T30875] ? memdup_user+0x99/0xd0 [ 964.099651][T30875] __se_sys_mount+0xef/0x2e0 [ 964.099754][T30875] ? fput+0x8f/0xc0 [ 964.099780][T30875] ? ksys_write+0x194/0x1a0 [ 964.099863][T30875] __x64_sys_mount+0x67/0x80 [ 964.099889][T30875] x64_sys_call+0x2d61/0x3020 [ 964.099964][T30875] do_syscall_64+0x12c/0x3b0 [ 964.099996][T30875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.100030][T30875] RIP: 0033:0x7f905503c819 [ 964.100050][T30875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.100074][T30875] RSP: 002b:00007f9053a97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 964.100096][T30875] RAX: ffffffffffffffda RBX: 00007f90552b5fa0 RCX: 00007f905503c819 [ 964.100183][T30875] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 964.100200][T30875] RBP: 00007f9053a97090 R08: 0000200000000700 R09: 0000000000000000 [ 964.100217][T30875] R10: 0000000000004440 R11: 0000000000000246 R12: 0000000000000001 [ 964.100233][T30875] R13: 00007f90552b6038 R14: 00007f90552b5fa0 R15: 00007ffc9b2171e8 [ 964.100253][T30875] [ 964.118349][ T3570] Bluetooth: hci0: command 0x1003 tx timeout [ 964.121117][T25999] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 964.445757][T30892] loop2: detected capacity change from 0 to 512 [ 964.452633][T30892] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 964.453300][T30895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5722'. [ 964.499831][T30905] netlink: 'syz.6.5725': attribute type 25 has an invalid length. [ 964.523936][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5722'. [ 964.529668][T30905] netlink: 'syz.6.5725': attribute type 3 has an invalid length. [ 964.542147][T30905] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5725'. [ 964.553796][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5722'. [ 964.750539][T30924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.918414][T30928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.729158][T30924] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 966.788932][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.799109][T30939] set_capacity_and_notify: 1 callbacks suppressed [ 966.799131][T30939] loop5: detected capacity change from 0 to 1024 [ 966.978005][T30939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.175661][T30953] Invalid logical block size (3585) [ 967.302604][T30958] FAULT_INJECTION: forcing a failure. [ 967.302604][T30958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.336674][T30958] CPU: 1 UID: 0 PID: 30958 Comm: syz.2.5734 Tainted: G W syzkaller #0 PREEMPT(full) [ 967.336720][T30958] Tainted: [W]=WARN [ 967.336728][T30958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.336758][T30958] Call Trace: [ 967.336767][T30958] [ 967.336777][T30958] __dump_stack+0x1d/0x30 [ 967.336812][T30958] dump_stack_lvl+0x95/0xd0 [ 967.336857][T30958] dump_stack+0x15/0x1b [ 967.336886][T30958] should_fail_ex+0x263/0x280 [ 967.336997][T30958] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 967.337026][T30958] should_fail+0xb/0x20 [ 967.337131][T30958] should_fail_usercopy+0x1a/0x20 [ 967.337241][T30958] _copy_from_user+0x1c/0xb0 [ 967.337282][T30958] seccomp_notify_ioctl+0x705/0xfc0 [ 967.337315][T30958] ? __pfx_seccomp_notify_ioctl+0x10/0x10 [ 967.337342][T30958] __se_sys_ioctl+0xce/0x140 [ 967.337444][T30958] __x64_sys_ioctl+0x43/0x50 [ 967.337473][T30958] x64_sys_call+0x1563/0x3020 [ 967.337502][T30958] do_syscall_64+0x12c/0x3b0 [ 967.337574][T30958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.337603][T30958] RIP: 0033:0x7f905503c819 [ 967.337686][T30958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.337706][T30958] RSP: 002b:00007f9053a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.337779][T30958] RAX: ffffffffffffffda RBX: 00007f90552b6090 RCX: 00007f905503c819 [ 967.337798][T30958] RDX: 0000200000000080 RSI: 0000000040182103 RDI: 0000000000000005 [ 967.337816][T30958] RBP: 00007f9053a76090 R08: 0000000000000000 R09: 0000000000000000 [ 967.337833][T30958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.337850][T30958] R13: 00007f90552b6128 R14: 00007f90552b6090 R15: 00007ffc9b2171e8 [ 967.337930][T30958] [ 967.700197][T30964] hub 8-0:1.0: USB hub found [ 967.710566][T30964] hub 8-0:1.0: 8 ports detected [ 967.775210][T30971] netlink: 'syz.6.5738': attribute type 25 has an invalid length. [ 967.797948][T30971] netlink: 'syz.6.5738': attribute type 3 has an invalid length. [ 967.831262][T30971] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5738'. [ 967.849850][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.995441][T30987] hub 8-0:1.0: USB hub found [ 968.001034][T30987] hub 8-0:1.0: 8 ports detected [ 968.057217][T31000] loop6: detected capacity change from 0 to 512 [ 968.096883][T31003] loop2: detected capacity change from 0 to 128 [ 968.124944][T31000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.147994][T31004] netlink: 'syz.1.5743': attribute type 21 has an invalid length. [ 968.172395][T31003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 968.197675][T31004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5743'. [ 968.208522][T31000] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 968.227002][T31003] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 968.240593][T31004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=31004 comm=syz.1.5743 [ 968.269478][T29092] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.288604][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.343448][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 968.343467][ T28] audit: type=1326 audit(2000000904.913:17986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 968.417464][ T28] audit: type=1326 audit(2000000904.953:17987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 968.459042][T31027] hub 8-0:1.0: USB hub found [ 968.474270][T31027] hub 8-0:1.0: 8 ports detected [ 968.478559][ T28] audit: type=1326 audit(2000000904.953:17988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 968.506658][ T28] audit: type=1326 audit(2000000904.953:17989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 968.546083][ T28] audit: type=1326 audit(2000000904.953:17990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x7ffc0000 [ 968.601122][ T28] audit: type=1326 audit(2000000904.953:17991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f6036c582 code=0x7ffc0000 [ 968.672788][ T28] audit: type=1326 audit(2000000904.953:17992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1f6036c617 code=0x7ffc0000 [ 968.735738][ T28] audit: type=1326 audit(2000000904.953:17993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f60329511 code=0x7ffc0000 [ 968.771963][ T28] audit: type=1326 audit(2000000904.953:17994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1f6036d609 code=0x7ffc0000 [ 968.814704][ T28] audit: type=1326 audit(2000000904.953:17995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31028 comm="syz.6.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f6032957b code=0x7ffc0000 [ 969.018769][T31051] loop6: detected capacity change from 0 to 512 [ 969.029089][T31053] loop1: detected capacity change from 0 to 764 [ 969.049655][T31053] FAULT_INJECTION: forcing a failure. [ 969.049655][T31053] name failslab, interval 1, probability 0, space 0, times 0 [ 969.053581][T31043] loop5: detected capacity change from 0 to 1024 [ 969.064056][T31051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.064214][T31051] ext4 filesystem being mounted at /374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 969.077302][T31053] CPU: 0 UID: 0 PID: 31053 Comm: syz.1.5753 Tainted: G W syzkaller #0 PREEMPT(full) [ 969.077339][T31053] Tainted: [W]=WARN [ 969.077348][T31053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 969.077362][T31053] Call Trace: [ 969.077370][T31053] [ 969.077395][T31053] __dump_stack+0x1d/0x30 [ 969.077428][T31053] dump_stack_lvl+0x95/0xd0 [ 969.077508][T31053] dump_stack+0x15/0x1b [ 969.077534][T31053] should_fail_ex+0x263/0x280 [ 969.077565][T31053] ? cgroup_show_path+0x6a/0x2b0 [ 969.077600][T31053] should_failslab+0x8c/0xb0 [ 969.077650][T31053] __kmalloc_cache_noprof+0x5f/0x400 [ 969.077675][T31053] ? __pfx_cgroup_show_path+0x10/0x10 [ 969.077699][T31053] cgroup_show_path+0x6a/0x2b0 [ 969.077725][T31053] ? kernfs_sop_show_path+0xa4/0xf0 [ 969.077751][T31053] ? __pfx_cgroup_show_path+0x10/0x10 [ 969.077777][T31053] kernfs_sop_show_path+0xb6/0xf0 [ 969.077861][T31053] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 969.077888][T31053] show_path+0x5a/0x80 [ 969.077912][T31053] show_mountinfo+0xe5/0x690 [ 969.077946][T31053] m_show+0x3e/0x50 [ 969.078037][T31053] traverse+0x149/0x3a0 [ 969.078105][T31053] seq_lseek+0xb5/0x170 [ 969.078135][T31053] __x64_sys_lseek+0xe8/0x160 [ 969.078167][T31053] x64_sys_call+0x27ec/0x3020 [ 969.078207][T31053] do_syscall_64+0x12c/0x3b0 [ 969.078242][T31053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.078346][T31053] RIP: 0033:0x7f2026b3c819 [ 969.078364][T31053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.078422][T31053] RSP: 002b:00007f202558f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 969.078446][T31053] RAX: ffffffffffffffda RBX: 00007f2026db5fa0 RCX: 00007f2026b3c819 [ 969.078462][T31053] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000004 [ 969.078477][T31053] RBP: 00007f202558f090 R08: 0000000000000000 R09: 0000000000000000 [ 969.078492][T31053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.078635][T31053] R13: 00007f2026db6038 R14: 00007f2026db5fa0 R15: 00007ffd5bb18b28 [ 969.078657][T31053] [ 969.488392][T31067] netlink: 'syz.1.5754': attribute type 25 has an invalid length. [ 969.520213][T31067] netlink: 'syz.1.5754': attribute type 3 has an invalid length. [ 969.542721][T31067] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5754'. [ 969.660262][T31075] loop1: detected capacity change from 0 to 512 [ 969.688208][T31075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 969.725795][T31075] EXT4-fs: Ignoring removed oldalloc option [ 969.742049][T31075] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 969.757393][T31080] loop4: detected capacity change from 0 to 128 [ 969.879306][T31043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.950300][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.018098][T31086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5756'. [ 970.030443][T31086] 9p: Bad value for 'rfdno' [ 970.636426][T31101] loop1: detected capacity change from 0 to 512 [ 970.650690][T31101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.667195][T31101] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 970.725460][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.042574][T31122] FAULT_INJECTION: forcing a failure. [ 971.042574][T31122] name failslab, interval 1, probability 0, space 0, times 0 [ 971.084315][T31122] CPU: 0 UID: 0 PID: 31122 Comm: syz.4.5763 Tainted: G W syzkaller #0 PREEMPT(full) [ 971.084355][T31122] Tainted: [W]=WARN [ 971.084364][T31122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 971.084418][T31122] Call Trace: [ 971.084427][T31122] [ 971.084503][T31122] __dump_stack+0x1d/0x30 [ 971.084536][T31122] dump_stack_lvl+0x95/0xd0 [ 971.084564][T31122] dump_stack+0x15/0x1b [ 971.084611][T31122] should_fail_ex+0x263/0x280 [ 971.084646][T31122] ? __se_sys_memfd_create+0x1df/0x3b0 [ 971.084708][T31122] should_failslab+0x8c/0xb0 [ 971.084732][T31122] __kmalloc_cache_noprof+0x5f/0x400 [ 971.084822][T31122] ? fput+0x8f/0xc0 [ 971.084850][T31122] __se_sys_memfd_create+0x1df/0x3b0 [ 971.084885][T31122] __x64_sys_memfd_create+0x31/0x40 [ 971.084937][T31122] x64_sys_call+0x1f22/0x3020 [ 971.084970][T31122] do_syscall_64+0x12c/0x3b0 [ 971.085004][T31122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.085041][T31122] RIP: 0033:0x7f4ce163c819 [ 971.085061][T31122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.085156][T31122] RSP: 002b:00007f4ce0096e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 971.085179][T31122] RAX: ffffffffffffffda RBX: 000000000000057b RCX: 00007f4ce163c819 [ 971.085257][T31122] RDX: 00007f4ce0096ee0 RSI: 0000000000000000 RDI: 00007f4ce16d2e71 [ 971.085309][T31122] RBP: 0000200000000140 R08: 00000000ffffffff R09: 0000000000000000 [ 971.085326][T31122] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100 [ 971.085342][T31122] R13: 00007f4ce0096ee0 R14: 00007f4ce0096ea0 R15: 0000200000000700 [ 971.085366][T31122] [ 971.327884][T30683] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 971.531844][T31129] hub 8-0:1.0: USB hub found [ 971.544597][T31129] hub 8-0:1.0: 8 ports detected [ 971.620384][T31134] loop6: detected capacity change from 0 to 128 [ 971.685576][T31134] vfat: Unknown parameter '' [ 971.736207][T31146] program syz.1.5759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.811554][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.922335][T31160] loop5: detected capacity change from 0 to 1764 [ 972.975809][T31167] loop1: detected capacity change from 0 to 512 [ 972.982777][T31167] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 973.018523][T31182] loop6: detected capacity change from 0 to 512 [ 973.159252][T31182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.201539][T31182] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 973.375048][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.726371][T31206] loop5: detected capacity change from 0 to 1024 [ 973.851006][T31206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.269064][T31236] loop6: detected capacity change from 0 to 128 [ 974.389243][T31243] loop1: detected capacity change from 0 to 512 [ 974.425410][T31243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.438196][T31246] loop4: detected capacity change from 0 to 512 [ 974.444957][T31246] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 974.482488][T31243] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.603747][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.738223][T31267] loop1: detected capacity change from 0 to 512 [ 974.767671][T31267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.781217][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.796446][T31267] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.842294][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.853873][T31236] syz.6.5785: attempt to access beyond end of device [ 974.853873][T31236] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 974.891805][T31236] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 974.902704][T31236] syz.6.5785: attempt to access beyond end of device [ 974.902704][T31236] loop6: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 974.925038][T31285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=31285 comm=syz.2.5791 [ 974.939955][T31236] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 974.965750][T31236] syz.6.5785: attempt to access beyond end of device [ 974.965750][T31236] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 974.997332][T31236] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 975.057243][T31302] x_tables: ip_tables: ah match: only valid for protocol 51 [ 975.320885][T31314] loop1: detected capacity change from 0 to 512 [ 975.328891][T31314] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 976.034901][T31296] loop2: detected capacity change from 0 to 4096 [ 976.042049][T31236] syz.6.5785: attempt to access beyond end of device [ 976.042049][T31236] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 976.058170][T31236] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 976.067354][T31236] syz.6.5785: attempt to access beyond end of device [ 976.067354][T31236] loop6: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 976.464912][T31236] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 976.483307][T31296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.529867][T31236] syz.6.5785: attempt to access beyond end of device [ 976.529867][T31236] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 976.599470][T31236] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 976.896282][T31337] blktrace: Concurrent blktraces are not allowed on loop3 [ 976.937479][T31334] syzkaller0: entered promiscuous mode [ 976.963573][T31334] syzkaller0: entered allmulticast mode [ 976.972590][T31285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5791'. [ 977.010857][T31283] delete_channel: no stack [ 977.071565][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.714319][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5803'. [ 977.786388][T31362] netlink: 'syz.6.5803': attribute type 29 has an invalid length. [ 977.817526][T31361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.963117][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 977.963172][ T28] audit: type=1400 audit(2000000914.538:18079): avc: denied { setattr } for pid=31368 comm="syz.4.5805" name="L2CAP" dev="sockfs" ino=83785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 978.153879][T31361] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 978.216970][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.249220][T31354] set_capacity_and_notify: 2 callbacks suppressed [ 978.249286][T31354] loop5: detected capacity change from 0 to 512 [ 978.295318][T31354] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 979.381288][T31354] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 979.777501][T31354] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5804: bad orphan inode 4 [ 979.826953][T31354] loop5: lost filesystem error report for type 5 error -117 [ 979.840322][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 979.854363][ C1] EXT4-fs (loop5): initial error at time 2000000916: ext4_orphan_get:1423 [ 979.863002][ C1] EXT4-fs (loop5): last error at time 2000000916: ext4_orphan_get:1423 [ 979.897266][T31354] EXT4-fs (loop5): 1 orphan inode deleted [ 979.980680][T31354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.105944][T31415] loop2: detected capacity change from 0 to 512 [ 980.150874][T31415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.205190][T31415] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 980.231703][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.330348][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.549162][T31433] syzkaller0: entered promiscuous mode [ 980.577356][T31433] syzkaller0: entered allmulticast mode [ 981.235217][T31427] loop6: detected capacity change from 0 to 512 [ 981.320302][T31453] loop2: detected capacity change from 0 to 512 [ 981.377298][T31453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.450716][T31453] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 981.582367][T29092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.764786][T31427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.842369][T31427] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.016195][T31427] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5815'. [ 982.093677][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.472057][T31488] loop5: detected capacity change from 0 to 1764 [ 982.587213][T31503] loop6: detected capacity change from 0 to 512 [ 982.625306][T31503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.639110][T31503] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 982.733669][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.797315][T31511] syzkaller0: entered promiscuous mode [ 982.823809][T31511] syzkaller0: entered allmulticast mode [ 982.893469][T31541] blktrace: Concurrent blktraces are not allowed on loop11 [ 982.952147][T31542] loop6: detected capacity change from 0 to 512 [ 982.992950][T31542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.022997][T31542] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 983.094074][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.167503][T22839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.225634][T31547] loop1: detected capacity change from 0 to 512 [ 983.362936][T22839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.442951][T22839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.645100][T22839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.908703][T31547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.143372][T22839] bridge_slave_1: left allmulticast mode [ 984.179104][T22839] bridge_slave_1: left promiscuous mode [ 984.212024][T31547] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.229777][T22839] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.261736][T22839] bridge_slave_0: left allmulticast mode [ 984.289449][T22839] bridge_slave_0: left promiscuous mode [ 984.328213][T22839] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.602851][T22839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.651374][T22839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.680650][T22839] bond0 (unregistering): Released all slaves [ 984.731127][T31561] xfrm0 speed is unknown, defaulting to 1000 [ 984.948243][T22839] hsr_slave_0: left promiscuous mode [ 984.974109][T22839] hsr_slave_1: left promiscuous mode [ 984.985923][T22839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.011337][T22839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.033904][T22839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.061786][T22839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.085337][T22839] veth1_macvtap: left promiscuous mode [ 985.104079][T22839] veth0_macvtap: left promiscuous mode [ 985.120120][T22839] veth1_vlan: left promiscuous mode [ 985.137530][T22839] veth0_vlan: left promiscuous mode [ 985.235534][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.370690][T31630] loop1: detected capacity change from 0 to 1764 [ 985.450289][T22839] team0 (unregistering): Port device team_slave_1 removed [ 985.464087][T22839] team0 (unregistering): Port device team_slave_0 removed [ 985.476487][T31650] loop5: detected capacity change from 0 to 512 [ 985.506318][ T3040] 8021q: adding VLAN 0 to HW filter on device eth9 [ 985.578599][T31650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.662167][T31561] chnl_net:caif_netlink_parms(): no params data found [ 985.678893][T31650] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 986.602759][T31726] loop1: detected capacity change from 0 to 512 [ 986.622270][T13824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.825536][T31726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.847890][T31561] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.855397][T31561] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.863018][T31561] bridge_slave_0: entered allmulticast mode [ 986.872362][T31561] bridge_slave_0: entered promiscuous mode [ 986.879460][T31561] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.886732][T31561] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.943254][T31726] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 987.027897][T31561] bridge_slave_1: entered allmulticast mode [ 987.056038][T31561] bridge_slave_1: entered promiscuous mode [ 987.125203][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.164219][T31561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.220528][T31561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.331746][T31561] team0: Port device team_slave_0 added [ 987.363999][T31561] team0: Port device team_slave_1 added [ 987.446767][T31814] loop1: detected capacity change from 0 to 512 [ 987.455476][T31561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.476383][T31561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.578802][T31561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.590882][T31561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.598750][T31561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.629813][T31561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.647728][T31863] blktrace: Concurrent blktraces are not allowed on loop11 [ 987.661281][ T3040] 8021q: adding VLAN 0 to HW filter on device eth11 [ 987.731417][T31561] hsr_slave_0: entered promiscuous mode [ 987.752642][T31561] hsr_slave_1: entered promiscuous mode [ 987.774172][T31814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.804153][T31898] loop6: detected capacity change from 0 to 1764 [ 987.870619][T31814] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.950805][T31814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5849'. [ 988.028349][ T3040] 8021q: adding VLAN 0 to HW filter on device eth10 [ 988.099481][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.191277][T31993] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 988.278911][T32015] loop6: detected capacity change from 0 to 512 [ 988.324724][T32015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.352499][T32015] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 988.444597][T31561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 988.457563][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.465477][T31561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 988.475278][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.493676][T31561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 988.503622][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.514780][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.517550][T31561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 988.560110][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.571854][T32062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5858'. [ 988.595245][T32067] loop4: detected capacity change from 0 to 128 [ 988.611277][T32067] vfat: Unknown parameter '' [ 988.712055][T31561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.740545][T31561] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.749584][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5859'. [ 988.787810][T22839] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.790076][T32092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5859'. [ 988.795080][T22839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.826843][T22845] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.834045][T22845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.871312][T32094] loop6: detected capacity change from 0 to 512 [ 988.881762][T32094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.904962][T32094] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 988.967819][T17282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.001287][T31561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.051411][T32092] loop4: detected capacity change from 0 to 128 [ 989.232886][T32132] loop6: detected capacity change from 0 to 256 [ 989.243096][T31561] veth0_vlan: entered promiscuous mode [ 989.263134][T31561] veth1_vlan: entered promiscuous mode [ 989.308210][T31561] veth0_macvtap: entered promiscuous mode [ 989.341144][T31561] veth1_macvtap: entered promiscuous mode [ 989.384999][T31561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.391959][T32132] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 989.429211][T31561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.467661][T22847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.493127][T22845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.506415][T22845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.543741][T32132] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 989.548811][T32150] syzkaller0: entered promiscuous mode [ 989.578154][T32150] syzkaller0: entered allmulticast mode [ 989.591809][T32161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5864'. [ 989.603725][ T28] audit: type=1326 audit(2000000926.194:18080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32116 comm="syz.6.5861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f6036c819 code=0x0 [ 989.603831][T32132] FAT-fs (loop6): Filesystem has been set read-only [ 989.627076][T22845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.822917][T32184] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 989.986577][T32178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.005171][T32178] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.024331][T32178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5866'. [ 990.045710][T32200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.074424][T32200] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 990.114055][T31561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.127866][T14151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.157890][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5870'. [ 990.245732][T32225] netlink: 'syz.4.5871': attribute type 29 has an invalid length. [ 990.441887][T32230] set_capacity_and_notify: 3 callbacks suppressed [ 990.441908][T32230] loop1: detected capacity change from 0 to 256 [ 990.708776][T32230] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 990.783891][T32230] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 990.824206][T32230] FAT-fs (loop1): Filesystem has been set read-only [ 990.873974][ T28] audit: type=1326 audit(2000000927.455:18081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.1.5872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2026b3c819 code=0x0 [ 991.015877][T32242] loop6: detected capacity change from 0 to 128 [ 991.023204][T32244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5876'. [ 991.051817][T32242] vfat: Unknown parameter '' [ 991.184475][T32256] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 991.210277][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5875'. [ 991.240938][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5875'. [ 991.250398][T32233] loop5: detected capacity change from 0 to 1024 [ 991.378597][T32269] loop2: detected capacity change from 0 to 1764 [ 991.458058][T32281] loop4: detected capacity change from 0 to 512 [ 991.495449][T22847] ================================================================== [ 991.496129][T32233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.503615][T22847] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 991.503668][T22847] [ 991.503677][T22847] read to 0xffff888104d94e58 of 4 bytes by task 22845 on cpu 1: [ 991.503697][T22847] atime_needs_update+0x25f/0x3e0 [ 991.503727][T22847] touch_atime+0x4a/0x330 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 991.503756][T22847] shmem_file_read_iter+0x3f4/0x4b0 [ 991.503788][T22847] lo_rw_aio+0x67d/0x730 [ 991.503824][T22847] loop_process_work+0x56c/0xac0 [ 991.503859][T22847] loop_rootcg_workfn+0x22/0x30 [ 991.503894][T22847] process_scheduled_works+0x4f0/0x9c0 [ 991.503928][T22847] worker_thread+0x58a/0x780 [ 991.503962][T22847] kthread+0x22a/0x280 [ 991.503986][T22847] ret_from_fork+0x146/0x330 [ 991.504006][T22847] ret_from_fork_asm+0x1a/0x30 [ 991.504037][T22847] [ 991.504044][T22847] write to 0xffff888104d94e58 of 4 bytes by task 22847 on cpu 0: [ 991.504063][T22847] touch_atime+0x1d7/0x330 [ 991.504088][T22847] shmem_file_read_iter+0x3f4/0x4b0 [ 991.504120][T22847] lo_rw_aio+0x67d/0x730 [ 991.504154][T22847] loop_process_work+0x56c/0xac0 [ 991.504189][T22847] loop_workfn+0x31/0x40 [ 991.504223][T22847] process_scheduled_works+0x4f0/0x9c0 [ 991.504257][T22847] worker_thread+0x58a/0x780 [ 991.504290][T22847] kthread+0x22a/0x280 [ 991.504314][T22847] ret_from_fork+0x146/0x330 [ 991.504334][T22847] ret_from_fork_asm+0x1a/0x30 [ 991.504366][T22847] [ 991.504371][T22847] value changed: 0x047deb74 -> 0x0516957c [ 991.504385][T22847] [ 991.504390][T22847] Reported by Kernel Concurrency Sanitizer on: [ 991.504408][T22847] CPU: 0 UID: 0 PID: 22847 Comm: kworker/u8:15 Tainted: G W syzkaller #0 PREEMPT(full) [ 991.504443][T22847] Tainted: [W]=WARN [ 991.504452][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 991.504469][T22847] Workqueue: loop4 loop_workfn [ 991.504504][T22847] ================================================================== [ 991.551432][T32281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.674649][T32242] loop6: detected capacity change from 0 to 128 [ 991.681106][ T28] audit: type=1400 audit(2000000928.155:18082): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[1566]" dev="pipefs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 991.789181][T32281] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 991.802232][T32267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 991.907271][T20571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.080884][T32233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.277185][T22847] bridge_slave_1: left allmulticast mode [ 992.283029][T22847] bridge_slave_1: left promiscuous mode [ 992.288952][T22847] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.296648][T22847] bridge_slave_0: left allmulticast mode [ 992.302379][T22847] bridge_slave_0: left promiscuous mode [ 992.308609][T22847] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.367528][T22847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.376937][T22847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.386432][T22847] bond0 (unregistering): Released all slaves [ 992.393883][T22847] bond1 (unregistering): Released all slaves [ 992.403239][T22847] bond2 (unregistering): Released all slaves [ 992.411505][T22847] bond3 (unregistering): Released all slaves [ 992.476722][T22847] tipc: Left network mode [ 992.508504][T22847] hsr_slave_0: left promiscuous mode [ 992.514572][T22847] hsr_slave_1: left promiscuous mode [ 992.520582][T22847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.529840][T22847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.565760][T22847] team0 (unregistering): Port device team_slave_1 removed [ 992.575977][T22847] team0 (unregistering): Port device team_slave_0 removed [ 992.609116][ T3040] 8021q: adding VLAN 0 to HW filter on device eth9 [ 992.719115][ T3040] 8021q: adding VLAN 0 to HW filter on device eth10 [ 992.823075][ T3040] 8021q: adding VLAN 0 to HW filter on device eth11 [ 992.907966][T22847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.938336][ T3040] 8021q: adding VLAN 0 to HW filter on device eth12 [ 992.957926][T22847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.009054][T22847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.086702][T22847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.278946][ T3040] 8021q: adding VLAN 0 to HW filter on device eth13 [ 993.344071][T22847] bridge_slave_1: left allmulticast mode [ 993.349981][T22847] bridge_slave_1: left promiscuous mode [ 993.356065][T22847] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.364871][T22847] bridge_slave_0: left allmulticast mode [ 993.370692][T22847] bridge_slave_0: left promiscuous mode [ 993.377053][T22847] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.386651][T22847] bridge_slave_1: left allmulticast mode [ 993.392394][T22847] bridge_slave_1: left promiscuous mode [ 993.398326][T22847] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.406147][T22847] bridge_slave_0: left allmulticast mode [ 993.412450][T22847] bridge_slave_0: left promiscuous mode [ 993.418447][T22847] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.516525][T22847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.528052][T22847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.538649][T22847] bond0 (unregistering): Released all slaves [ 993.548906][T22847] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 993.616196][T22847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.625952][T22847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.635141][T22847] bond0 (unregistering): Released all slaves [ 993.643690][T22847] bond1 (unregistering): (slave veth3): Releasing active interface [ 993.652444][T22847] bond1 (unregistering): Released all slaves [ 993.661142][T22847] bond2 (unregistering): Released all slaves [ 993.670287][ T3040] 8021q: adding VLAN 0 to HW filter on device eth14 [ 993.750639][T22847] hsr_slave_0: left promiscuous mode [ 993.756625][T22847] hsr_slave_1: left promiscuous mode [ 993.762693][T22847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.770675][T22847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.780169][T22847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.788576][T22847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.798546][T22847] hsr_slave_0: left promiscuous mode [ 993.804940][T22847] hsr_slave_1: left promiscuous mode [ 993.810811][T22847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.818682][T22847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.828829][T22847] veth1_macvtap: left promiscuous mode [ 993.834513][T22847] veth0_macvtap: left promiscuous mode [ 993.840146][T22847] veth1_vlan: left promiscuous mode [ 993.845466][T22847] veth0_vlan: left promiscuous mode [ 993.913421][T22847] team0 (unregistering): Port device team_slave_1 removed [ 993.923040][T22847] team0 (unregistering): Port device team_slave_0 removed [ 993.984376][T22847] team0 (unregistering): Port device team_slave_1 removed [ 993.994523][T22847] team0 (unregistering): Port device team_slave_0 removed [ 994.027958][ T3040] 8021q: adding VLAN 0 to HW filter on device eth15 [ 994.139773][ T3040] 8021q: adding VLAN 0 to HW filter on device eth16 [ 994.260070][ T3040] 8021q: adding VLAN 0 to HW filter on device eth17 [ 994.370794][ T3040] 8021q: adding VLAN 0 to HW filter on device eth18 [ 994.477764][ T3040] 8021q: adding VLAN 0 to HW filter on device eth19 [ 994.593570][ T3040] 8021q: adding VLAN 0 to HW filter on device eth20