last executing test programs: 2.454998253s ago: executing program 1 (id=440): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) timerfd_create(0x1, 0x800) syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x7, 0x0, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x82, 0x0, 0x4}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r4, 0x407, 0x6) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x25, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10004, 0x0, 0x5, 0x4, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x4ca6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmmsg$inet(r3, &(0x7f0000001840)=[{{&(0x7f00000000c0)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f0000000640)}}, {{&(0x7f0000000840)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="8b", 0x1}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x6e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001740)}}], 0x3, 0x200040d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r5, 0x0, 0xffffffff80000001}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) msgget$private(0x0, 0x790) r6 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@errors_continue}, {@jqfmt_vfsv0}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") 1.957263932s ago: executing program 3 (id=449): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$P9_RREAD(r1, 0x0, 0xdd) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4010, &(0x7f0000000300)={[{@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@acl}, {@stripe={'stripe', 0x3d, 0x9}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@test_dummy_encryption}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5fd, &(0x7f00000009c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r2, 0x9) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x4000) 1.795463966s ago: executing program 4 (id=452): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone3(&(0x7f0000000800)={0x40000000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x2}, &(0x7f0000000700)=""/93, 0x5d, &(0x7f0000000500)=""/57, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) 1.641344529s ago: executing program 1 (id=453): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@noload}]}, 0x2, 0x46f, &(0x7f00000191c0)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x14c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x60) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.619233359s ago: executing program 3 (id=454): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0xc, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0xbc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000700)="1a017fad47a701fda084e9078044498d35cb9b0dd9a55b1be8bdc8615f35b69e3030748c998c22bf73d8fe343e27d5daf59e9ab55eff629a17d4301c619f835119eb58e08471f7390a409184c779a20a882fd244a612fd5989290cbd3ba57bd10e1aeabd6eb9d1bde5ab38448b68f0ef97e8959e41e7a630ce969cfd018bef168ee0f981498a22b7c15875d2cfc126198aa3d95bbeaa9adf2237987e0b0d443b075faaa02f92b49ea745fb34202e7348ec8419464dfa38785e78bfea97", 0xbd}, 0x68) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010080f8ffffffb702000008000000b7030000abdc00008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x14200, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.618040859s ago: executing program 4 (id=455): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.606183779s ago: executing program 2 (id=456): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 1.54384841s ago: executing program 4 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1', 0x3a, [0x43, 0x46]}, 0x2f) 1.441750582s ago: executing program 2 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 1.441266962s ago: executing program 4 (id=459): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="0000000000000000b703000004e00000850000001b000000b700000000fa008034"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0xfffffecb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ftruncate(r3, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008406, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 1.424559383s ago: executing program 3 (id=460): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x28) r1 = mq_open(&(0x7f0000000040)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0xa}) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000540)={0x40000000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000080)={r4}, &(0x7f0000000100)=0x8) mq_timedreceive(r1, &(0x7f00000003c0)=""/169, 0xfd, 0x200000000a9b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.369932913s ago: executing program 2 (id=461): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ff8}]}) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES32=r6], 0xb8}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000}) r7 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000200ffff0300000082b0cfc43379"], 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}}, 0x0) accept4$unix(r5, &(0x7f00000005c0)=@abs, &(0x7f0000000040)=0x6e, 0x80000) 1.328995244s ago: executing program 0 (id=462): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYBLOB="0000000000000000b703000004e00000850000001b000000b700000000fa008034"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0xfffffecb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ftruncate(r2, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008406, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x23}}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x403}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") 1.257550276s ago: executing program 2 (id=463): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2d, 0x0, 0x20, 0x7ffc0002}]}) 1.104345949s ago: executing program 3 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1.000943681s ago: executing program 3 (id=465): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000600)={0xa0000013}) 828.308414ms ago: executing program 0 (id=466): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_clone3(&(0x7f0000000800)={0x40000000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x2}, &(0x7f0000000700)=""/93, 0x5d, &(0x7f0000000500)=""/57, &(0x7f00000007c0)=[0x0], 0x1}, 0x58) 807.276614ms ago: executing program 1 (id=467): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 697.562006ms ago: executing program 2 (id=468): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x42, 0x6, 0x8, 0x20000, 0x1}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/udplite\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) socket(0x6, 0x803, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) read$usbfs(r1, &(0x7f0000000000)=""/13, 0xd) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0xffffffff, '\x00', 0x0, r1, 0x80}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r10}, 0x18) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) 681.420757ms ago: executing program 1 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1', 0x3a, [0x43, 0x46]}, 0x2f) 638.191468ms ago: executing program 0 (id=470): r0 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)='/,O#,)\x02\x00', 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x7fff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000080), &(0x7f0000000140)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 571.017779ms ago: executing program 1 (id=471): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000004, 0x10012, r6, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_create(0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, 0x0, 0x0) timerfd_settime(r5, 0x2, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r9 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000feffffff00000000", @ANYRES32=r9, @ANYBLOB="990500"/20, @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="0500006e0c0000000500"/28], 0x50) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8001, 0xffffffffffffffff, &(0x7f0000000040)="faf12d494b35f0a24671b17c9877c6d372c42457348d72ee3d4f02898bae26570730912cf555cdab2e66b3887bcbd365b7549a76680b36bac444bfe41a72eb6ab51a904ab617f2484e6cd1fafe7c33468ca2535cb3477738fb36903356e41d3c6bbaf3", 0x63, 0x9, 0x0, 0x0, r9}]) 557.547949ms ago: executing program 1 (id=472): setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) r5 = semget$private(0x0, 0x4, 0x538) semop(r5, &(0x7f0000000040)=[{0x0, 0xd798, 0x1000}, {0x0, 0x400}, {0x4, 0xba43}, {0x0, 0xee, 0x1800}, {0x4, 0x4, 0x1000}, {0x1, 0x3e7a, 0x800}], 0x6) 543.950789ms ago: executing program 2 (id=473): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x6}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ftruncate(r3, 0x2000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2008406, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 543.359799ms ago: executing program 4 (id=474): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x28) r1 = mq_open(&(0x7f0000000040)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0xa}) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000540)={0x40000000}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) mq_timedreceive(r1, &(0x7f00000003c0)=""/169, 0xfd, 0x200000000a9b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 489.47597ms ago: executing program 0 (id=475): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0xc, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0xbc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000700)="1a017fad47a701fda084e9078044498d35cb9b0dd9a55b1be8bdc8615f35b69e3030748c998c22bf73d8fe343e27d5daf59e9ab55eff629a17d4301c619f835119eb58e08471f7390a409184c779a20a882fd244a612fd5989290cbd3ba57bd10e1aeabd6eb9d1bde5ab38448b68f0ef97e8959e41e7a630ce969cfd018bef168ee0f981498a22b7c15875d2cfc126198aa3d95bbeaa9adf2237987e0b0d443b075faaa02f92b49ea745fb34202e7348ec8419464dfa38785e78bfea97", 0xbd}, 0x68) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010080f8ffffffb702000008000000b7030000abdc00008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x14200, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 352.004253ms ago: executing program 0 (id=476): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)="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", 0x188, 0xc0}, 0x81) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d00), 0x40000, 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8000000000, 0xffffffffffffffff, 0x0) 87.038608ms ago: executing program 0 (id=477): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@noload}]}, 0x2, 0x46f, &(0x7f00000191c0)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 81.994018ms ago: executing program 3 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) 0s ago: executing program 4 (id=479): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.743289][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 14.743308][ T29] audit: type=1400 audit(1757943775.814:57): avc: denied { transition } for pid=3172 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.747581][ T29] audit: type=1400 audit(1757943775.814:58): avc: denied { noatsecure } for pid=3172 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.750414][ T29] audit: type=1400 audit(1757943775.824:59): avc: denied { write } for pid=3172 comm="sh" path="pipe:[2462]" dev="pipefs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.753818][ T29] audit: type=1400 audit(1757943775.824:60): avc: denied { rlimitinh } for pid=3172 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.756645][ T29] audit: type=1400 audit(1757943775.824:61): avc: denied { siginh } for pid=3172 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 22.404002][ T29] audit: type=1400 audit(1757943783.484:62): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.404805][ T3261] cgroup: Unknown subsys name 'net' [ 22.426962][ T29] audit: type=1400 audit(1757943783.484:63): avc: denied { mount } for pid=3261 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.454141][ T29] audit: type=1400 audit(1757943783.514:64): avc: denied { unmount } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.634254][ T3261] cgroup: Unknown subsys name 'cpuset' [ 22.640545][ T3261] cgroup: Unknown subsys name 'rlimit' [ 22.769788][ T29] audit: type=1400 audit(1757943783.844:65): avc: denied { setattr } for pid=3261 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.793163][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.793418][ T29] audit: type=1400 audit(1757943783.844:66): avc: denied { create } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.822691][ T29] audit: type=1400 audit(1757943783.844:67): avc: denied { write } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.842849][ T3261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.843234][ T29] audit: type=1400 audit(1757943783.844:68): avc: denied { read } for pid=3261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.872527][ T29] audit: type=1400 audit(1757943783.854:69): avc: denied { mounton } for pid=3261 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.897717][ T29] audit: type=1400 audit(1757943783.854:70): avc: denied { mount } for pid=3261 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.921263][ T29] audit: type=1400 audit(1757943783.884:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.964587][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.055916][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 24.088985][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 24.102191][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.109325][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.116575][ T3310] bridge_slave_0: entered allmulticast mode [ 24.122892][ T3310] bridge_slave_0: entered promiscuous mode [ 24.132452][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.139666][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.146962][ T3310] bridge_slave_1: entered allmulticast mode [ 24.153309][ T3310] bridge_slave_1: entered promiscuous mode [ 24.159771][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.216003][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.237876][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.247853][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.270231][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.277416][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.284615][ T3301] bridge_slave_0: entered allmulticast mode [ 24.290976][ T3301] bridge_slave_0: entered promiscuous mode [ 24.302044][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.309135][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.316400][ T3307] bridge_slave_0: entered allmulticast mode [ 24.322903][ T3307] bridge_slave_0: entered promiscuous mode [ 24.336307][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.343507][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.350681][ T3301] bridge_slave_1: entered allmulticast mode [ 24.357216][ T3301] bridge_slave_1: entered promiscuous mode [ 24.367993][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.375105][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.382185][ T3307] bridge_slave_1: entered allmulticast mode [ 24.388752][ T3307] bridge_slave_1: entered promiscuous mode [ 24.409491][ T3310] team0: Port device team_slave_0 added [ 24.431772][ T3310] team0: Port device team_slave_1 added [ 24.448816][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455934][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.463119][ T3302] bridge_slave_0: entered allmulticast mode [ 24.469565][ T3302] bridge_slave_0: entered promiscuous mode [ 24.477217][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.486320][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.493402][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.500562][ T3302] bridge_slave_1: entered allmulticast mode [ 24.507011][ T3302] bridge_slave_1: entered promiscuous mode [ 24.518785][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.528265][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.535432][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.561469][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.577086][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.591558][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.601116][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.608114][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.634940][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.673969][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.688994][ T3307] team0: Port device team_slave_0 added [ 24.694805][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.701861][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.709132][ T3311] bridge_slave_0: entered allmulticast mode [ 24.715504][ T3311] bridge_slave_0: entered promiscuous mode [ 24.722576][ T3301] team0: Port device team_slave_0 added [ 24.729334][ T3301] team0: Port device team_slave_1 added [ 24.736108][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.751269][ T3307] team0: Port device team_slave_1 added [ 24.761377][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.768534][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.775721][ T3311] bridge_slave_1: entered allmulticast mode [ 24.782192][ T3311] bridge_slave_1: entered promiscuous mode [ 24.826611][ T3310] hsr_slave_0: entered promiscuous mode [ 24.832699][ T3310] hsr_slave_1: entered promiscuous mode [ 24.839081][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.846078][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.872024][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.884057][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.893827][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.900790][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.926876][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.937872][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.944927][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.970877][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.982242][ T3302] team0: Port device team_slave_0 added [ 24.989070][ T3302] team0: Port device team_slave_1 added [ 24.995549][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.018996][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.026067][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.052116][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.072503][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.079571][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.105574][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.118892][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.125932][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.151924][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.190913][ T3311] team0: Port device team_slave_0 added [ 25.212982][ T3301] hsr_slave_0: entered promiscuous mode [ 25.219001][ T3301] hsr_slave_1: entered promiscuous mode [ 25.225064][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 25.231266][ T3301] Cannot create hsr debugfs directory [ 25.237346][ T3311] team0: Port device team_slave_1 added [ 25.247338][ T3307] hsr_slave_0: entered promiscuous mode [ 25.253329][ T3307] hsr_slave_1: entered promiscuous mode [ 25.259348][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 25.265136][ T3307] Cannot create hsr debugfs directory [ 25.291723][ T3302] hsr_slave_0: entered promiscuous mode [ 25.297868][ T3302] hsr_slave_1: entered promiscuous mode [ 25.303742][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 25.309564][ T3302] Cannot create hsr debugfs directory [ 25.322413][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.329444][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.355367][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.374476][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.381452][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.407388][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.500792][ T3311] hsr_slave_0: entered promiscuous mode [ 25.506950][ T3311] hsr_slave_1: entered promiscuous mode [ 25.513095][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 25.518858][ T3311] Cannot create hsr debugfs directory [ 25.601302][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.614496][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.623484][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.639018][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.673250][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.687505][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.695958][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.715822][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.725086][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.734198][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.745443][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.754258][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.797651][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.813209][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.820924][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.829942][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.839092][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.847693][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.863790][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.870897][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.889310][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.896393][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.916698][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.926528][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.946118][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.957002][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.031970][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.048976][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.064678][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.074132][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.095579][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.106419][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.114726][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.124307][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.131384][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.141121][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.148176][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.160036][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.169610][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.176826][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.186270][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.193325][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.204704][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.211774][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.220639][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.227701][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.265324][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.289822][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.296988][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.319260][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.330208][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.342988][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.350090][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.411427][ T3310] veth0_vlan: entered promiscuous mode [ 26.437247][ T3310] veth1_vlan: entered promiscuous mode [ 26.463115][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.481839][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.494498][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.509491][ T3310] veth0_macvtap: entered promiscuous mode [ 26.526611][ T3310] veth1_macvtap: entered promiscuous mode [ 26.555387][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.578587][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.602411][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.636950][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.667067][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.692623][ T3307] veth0_vlan: entered promiscuous mode [ 26.720186][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.730310][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.740043][ T3302] veth0_vlan: entered promiscuous mode [ 26.752946][ T3301] veth0_vlan: entered promiscuous mode [ 26.761066][ T3307] veth1_vlan: entered promiscuous mode [ 26.768799][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.785705][ T3301] veth1_vlan: entered promiscuous mode [ 26.814713][ T3302] veth1_vlan: entered promiscuous mode [ 26.828067][ T3301] veth0_macvtap: entered promiscuous mode [ 26.838542][ T3307] veth0_macvtap: entered promiscuous mode [ 26.862600][ T3301] veth1_macvtap: entered promiscuous mode [ 26.870258][ T3307] veth1_macvtap: entered promiscuous mode [ 26.877560][ T3302] veth0_macvtap: entered promiscuous mode [ 26.891047][ T3302] veth1_macvtap: entered promiscuous mode [ 26.901704][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.903680][ T3467] loop4: detected capacity change from 0 to 8192 [ 26.913271][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.925527][ T3311] veth0_vlan: entered promiscuous mode [ 26.928894][ T3467] ======================================================= [ 26.928894][ T3467] WARNING: The mand mount option has been deprecated and [ 26.928894][ T3467] and is ignored by this kernel. Remove the mand [ 26.928894][ T3467] option from the mount to silence this warning. [ 26.928894][ T3467] ======================================================= [ 26.955787][ T3311] veth1_vlan: entered promiscuous mode [ 26.974263][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.984973][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.999278][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.008665][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.025860][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.055571][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.072984][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.097450][ T3311] veth0_macvtap: entered promiscuous mode [ 27.104890][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.115143][ T3311] veth1_macvtap: entered promiscuous mode [ 27.137127][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.150149][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.183687][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.200485][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.213411][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.226240][ T3478] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 27.235488][ T3483] loop3: detected capacity change from 0 to 512 [ 27.238401][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.251410][ T3478] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 27.265575][ T3479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.295052][ T3479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.306677][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.321784][ T3483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.349139][ T3478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 27.359213][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.368534][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.378097][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.387390][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.396418][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397721][ T3483] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.433483][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 27.433500][ T29] audit: type=1400 audit(1757943788.504:170): avc: denied { add_name } for pid=3481 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.434356][ T3478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 27.470822][ T3483] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4: corrupted inode contents [ 27.487421][ T29] audit: type=1400 audit(1757943788.504:171): avc: denied { create } for pid=3481 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.489617][ T3483] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.4: mark_inode_dirty error [ 27.507519][ T29] audit: type=1400 audit(1757943788.554:172): avc: denied { read write } for pid=3480 comm="syz.2.3" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.535963][ T3489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 27.542686][ T29] audit: type=1400 audit(1757943788.554:173): avc: denied { open } for pid=3480 comm="syz.2.3" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.575363][ T29] audit: type=1400 audit(1757943788.554:174): avc: denied { ioctl } for pid=3480 comm="syz.2.3" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.599978][ T29] audit: type=1400 audit(1757943788.564:175): avc: denied { allowed } for pid=3481 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 27.620652][ T29] audit: type=1400 audit(1757943788.564:176): avc: denied { create } for pid=3481 comm="syz.3.4" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.641910][ T29] audit: type=1400 audit(1757943788.564:177): avc: denied { map } for pid=3481 comm="syz.3.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.666067][ T29] audit: type=1400 audit(1757943788.564:178): avc: denied { read write } for pid=3481 comm="syz.3.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.692906][ T3478] syz.1.2 (3478) used greatest stack depth: 10712 bytes left [ 27.707287][ T3489] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 27.743737][ T3483] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.4: corrupted inode contents [ 27.746888][ T3489] veth0_vlan: entered allmulticast mode [ 27.762688][ T3483] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4: mark_inode_dirty error [ 27.784832][ T29] audit: type=1400 audit(1757943788.854:179): avc: denied { bind } for pid=3492 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.821008][ T3489] veth0_vlan: left promiscuous mode [ 27.855910][ T3489] veth0_vlan: entered promiscuous mode [ 27.863493][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.885098][ T3489] team0: Device veth0_vlan failed to register rx_handler [ 28.018643][ T3489] syz.0.1 (3489) used greatest stack depth: 10112 bytes left [ 28.157668][ T3506] loop4: detected capacity change from 0 to 256 [ 28.195511][ T3506] FAT-fs (loop4): codepage cp874 not found [ 28.582251][ T3518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.649131][ T3521] program syz.3.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 28.665457][ T3518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.732662][ T3521] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 28.769408][ T3523] siw: device registration error -23 [ 28.780878][ T3525] siw: device registration error -23 [ 29.312079][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.319693][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.327356][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.334905][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.342529][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.350426][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.357860][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.365368][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.372869][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.380427][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.575261][ T3397] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 29.670020][ T3536] fido_id[3536]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.852989][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 29.888865][ T3549] netlink: 'syz.2.21': attribute type 10 has an invalid length. [ 29.940723][ T3549] veth0_vlan: entered allmulticast mode [ 30.008780][ T3549] veth0_vlan: left promiscuous mode [ 30.041701][ T3549] veth0_vlan: entered promiscuous mode [ 30.069757][ T3549] team0: Device veth0_vlan failed to register rx_handler [ 30.251600][ T3549] syz.2.21 (3549) used greatest stack depth: 10072 bytes left [ 30.291883][ T3559] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 30.299672][ T3559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24'. [ 30.348980][ T3556] loop1: detected capacity change from 0 to 8192 [ 30.481329][ T3565] fido_id[3565]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.636262][ T3573] loop3: detected capacity change from 0 to 1764 [ 30.763353][ T3578] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 30.782955][ T3577] siw: device registration error -23 [ 30.815803][ T3578] veth0_vlan: left promiscuous mode [ 30.858315][ T3578] veth0_vlan: entered promiscuous mode [ 30.912853][ T3578] team0: Device veth0_vlan failed to register rx_handler [ 30.996400][ T3581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.076617][ T3571] lo speed is unknown, defaulting to 1000 [ 31.082410][ T3571] lo speed is unknown, defaulting to 1000 [ 31.089764][ T3571] lo speed is unknown, defaulting to 1000 [ 31.100033][ T3571] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 31.132938][ T3571] lo speed is unknown, defaulting to 1000 [ 31.140570][ T3587] Zero length message leads to an empty skb [ 31.147757][ T3571] lo speed is unknown, defaulting to 1000 [ 31.165501][ T3571] lo speed is unknown, defaulting to 1000 [ 31.175635][ T3571] lo speed is unknown, defaulting to 1000 [ 31.182013][ T3571] lo speed is unknown, defaulting to 1000 [ 31.786096][ T3597] loop1: detected capacity change from 0 to 256 [ 32.154163][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 32.164659][ T3598] netlink: 312 bytes leftover after parsing attributes in process `syz.4.32'. [ 32.173705][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 32.306979][ T3596] loop0: detected capacity change from 0 to 256 [ 33.524958][ T3604] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 33.532798][ T3604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.34'. [ 33.585299][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 33.585395][ T29] audit: type=1326 audit(1757944050.670:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.685705][ T29] audit: type=1326 audit(1757944050.700:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.708936][ T29] audit: type=1326 audit(1757944050.700:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.732094][ T29] audit: type=1326 audit(1757944050.700:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.755331][ T29] audit: type=1326 audit(1757944050.700:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.778658][ T29] audit: type=1326 audit(1757944050.700:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.802068][ T29] audit: type=1326 audit(1757944050.700:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.825526][ T29] audit: type=1326 audit(1757944050.710:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.848675][ T29] audit: type=1326 audit(1757944050.710:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.872138][ T29] audit: type=1326 audit(1757944050.710:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3605 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 33.926768][ T3606] loop2: detected capacity change from 0 to 8192 [ 34.145635][ T3596] FAT-fs (loop0): codepage cp874 not found [ 34.173988][ T3597] FAT-fs (loop1): codepage cp874 not found [ 34.324815][ T3592] siw: device registration error -23 [ 34.413107][ T3627] bridge0: entered promiscuous mode [ 34.778014][ T3630] netlink: 'syz.0.37': attribute type 10 has an invalid length. [ 34.828230][ T3630] veth0_vlan: left promiscuous mode [ 34.833996][ T3630] veth0_vlan: entered promiscuous mode [ 34.841220][ T3630] team0: Device veth0_vlan failed to register rx_handler [ 34.882120][ T3632] siw: device registration error -23 [ 35.026926][ T3635] loop3: detected capacity change from 0 to 8192 [ 35.038611][ T3639] loop0: detected capacity change from 0 to 8192 [ 35.172858][ T3643] loop2: detected capacity change from 0 to 8192 [ 35.439310][ T3655] siw: device registration error -23 [ 35.654764][ T3662] loop4: detected capacity change from 0 to 256 [ 35.798791][ T3662] FAT-fs (loop4): codepage cp874 not found [ 36.353380][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 36.602353][ T3674] siw: device registration error -23 [ 36.695872][ T3676] siw: device registration error -23 [ 36.806690][ T3678] siw: device registration error -23 [ 37.406814][ T3641] usb usb1: usbfs: process 3641 (syz.1.42) did not claim interface 0 before use [ 37.438776][ T3687] netlink: 'syz.0.56': attribute type 10 has an invalid length. [ 37.485369][ T3687] veth0_vlan: left promiscuous mode [ 37.503716][ T3687] veth0_vlan: entered promiscuous mode [ 37.523677][ T3687] team0: Device veth0_vlan failed to register rx_handler [ 37.541802][ T3689] loop2: detected capacity change from 0 to 8192 [ 37.680915][ T3680] usb usb1: usbfs: process 3680 (syz.3.53) did not claim interface 0 before use [ 37.714830][ T3695] siw: device registration error -23 [ 37.995156][ T3709] program syz.0.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.036502][ T3709] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 38.056829][ T3711] siw: device registration error -23 [ 38.124000][ T3715] netlink: 'syz.3.66': attribute type 10 has an invalid length. [ 38.161436][ T3715] veth0_vlan: entered allmulticast mode [ 38.167565][ T3707] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 38.186706][ T3716] usb usb1: usbfs: process 3716 (syz.4.60) did not claim interface 0 before use [ 38.200394][ T3715] veth0_vlan: left promiscuous mode [ 38.210750][ T3715] veth0_vlan: entered promiscuous mode [ 38.237491][ T3715] team0: Device veth0_vlan failed to register rx_handler [ 38.321196][ T3715] syz.3.66 (3715) used greatest stack depth: 9976 bytes left [ 38.567522][ T3727] loop3: detected capacity change from 0 to 8192 [ 38.594502][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 38.594520][ T29] audit: type=1326 audit(1757945847.676:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f43d61ed80a code=0x7ffc0000 [ 38.889908][ T3752] loop0: detected capacity change from 0 to 1764 [ 38.922451][ T3753] FAULT_INJECTION: forcing a failure. [ 38.922451][ T3753] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.935709][ T3753] CPU: 0 UID: 0 PID: 3753 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.935743][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 38.935783][ T3753] Call Trace: [ 38.935791][ T3753] [ 38.935798][ T3753] __dump_stack+0x1d/0x30 [ 38.935818][ T3753] dump_stack_lvl+0xe8/0x140 [ 38.935840][ T3753] dump_stack+0x15/0x1b [ 38.935858][ T3753] should_fail_ex+0x265/0x280 [ 38.935961][ T3753] should_fail+0xb/0x20 [ 38.935985][ T3753] should_fail_usercopy+0x1a/0x20 [ 38.936014][ T3753] strncpy_from_user+0x25/0x230 [ 38.936046][ T3753] keyctl_restrict_keyring+0x80/0x1b0 [ 38.936149][ T3753] __se_sys_keyctl+0x1ed/0xb80 [ 38.936178][ T3753] ? __rcu_read_unlock+0x4f/0x70 [ 38.936199][ T3753] ? __fget_files+0x184/0x1c0 [ 38.936223][ T3753] ? fput+0x8f/0xc0 [ 38.936304][ T3753] __x64_sys_keyctl+0x67/0x80 [ 38.936327][ T3753] x64_sys_call+0x2f6d/0x2ff0 [ 38.936351][ T3753] do_syscall_64+0xd2/0x200 [ 38.936450][ T3753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.936472][ T3753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.936499][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.936586][ T3753] RIP: 0033:0x7f60d66feba9 [ 38.936605][ T3753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.936625][ T3753] RSP: 002b:00007f60d511d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 38.936649][ T3753] RAX: ffffffffffffffda RBX: 00007f60d6946180 RCX: 00007f60d66feba9 [ 38.936710][ T3753] RDX: 0000200000000040 RSI: 000000001516c145 RDI: 000000000000001d [ 38.936722][ T3753] RBP: 00007f60d511d090 R08: 0000000000000000 R09: 0000000000000000 [ 38.936746][ T3753] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.936760][ T3753] R13: 00007f60d6946218 R14: 00007f60d6946180 R15: 00007ffea9ee3178 [ 38.936780][ T3753] [ 39.158086][ T29] audit: type=1326 audit(1757945847.676:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f43d61ed80a code=0x7ffc0000 [ 39.181739][ T29] audit: type=1326 audit(1757945847.676:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f43d61ed417 code=0x7ffc0000 [ 39.205247][ T29] audit: type=1326 audit(1757945847.676:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f43d61f034a code=0x7ffc0000 [ 39.228668][ T29] audit: type=1400 audit(1757945847.676:1138): avc: denied { mounton } for pid=3726 comm="syz.3.70" path="/15/file1" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.251786][ T29] audit: type=1400 audit(1757945847.676:1139): avc: denied { read open } for pid=3731 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.277441][ T29] audit: type=1400 audit(1757945847.676:1140): avc: denied { getattr } for pid=3731 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.302949][ T29] audit: type=1400 audit(1757945847.716:1141): avc: denied { execmem } for pid=3736 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.322107][ T29] audit: type=1400 audit(1757945847.736:1142): avc: denied { read } for pid=3737 comm="syz.2.71" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.343299][ T29] audit: type=1400 audit(1757945847.736:1143): avc: denied { open } for pid=3737 comm="syz.2.71" path="net:[4026532822]" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.359322][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 39.491190][ T3751] siw: device registration error -23 [ 39.536065][ T3761] netlink: 312 bytes leftover after parsing attributes in process `syz.1.74'. [ 39.545229][ T3761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 39.655692][ T3766] siw: device registration error -23 [ 39.716020][ T3778] siw: device registration error -23 [ 39.839935][ T3786] netlink: 580 bytes leftover after parsing attributes in process `syz.0.79'. [ 40.007534][ T3793] loop0: detected capacity change from 0 to 256 [ 40.107216][ T3792] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 40.244730][ T3787] loop1: detected capacity change from 0 to 8192 [ 40.400864][ T3800] siw: device registration error -23 [ 40.463318][ T3798] loop4: detected capacity change from 0 to 8192 [ 40.467955][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 40.788043][ T3818] FAULT_INJECTION: forcing a failure. [ 40.788043][ T3818] name failslab, interval 1, probability 0, space 0, times 1 [ 40.800891][ T3818] CPU: 0 UID: 0 PID: 3818 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.800924][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 40.800937][ T3818] Call Trace: [ 40.800946][ T3818] [ 40.800955][ T3818] __dump_stack+0x1d/0x30 [ 40.800992][ T3818] dump_stack_lvl+0xe8/0x140 [ 40.801010][ T3818] dump_stack+0x15/0x1b [ 40.801026][ T3818] should_fail_ex+0x265/0x280 [ 40.801051][ T3818] ? igmp6_group_dropped+0x224/0x5b0 [ 40.801113][ T3818] should_failslab+0x8c/0xb0 [ 40.801143][ T3818] __kmalloc_cache_noprof+0x4c/0x320 [ 40.801184][ T3818] ? _raw_spin_unlock_bh+0x36/0x40 [ 40.801213][ T3818] igmp6_group_dropped+0x224/0x5b0 [ 40.801257][ T3818] ? dev_map_hash_lookup_elem+0x6e/0xd0 [ 40.801292][ T3818] __ipv6_dev_mc_dec+0x187/0x380 [ 40.801396][ T3818] addrconf_leave_solict+0xac/0xd0 [ 40.801434][ T3818] __ipv6_dev_ac_dec+0x23a/0x310 [ 40.801461][ T3818] ipv6_dev_ac_dec+0x7d/0x110 [ 40.801497][ T3818] __ipv6_sock_ac_close+0x161/0x220 [ 40.801518][ T3818] ipv6_sock_ac_close+0x7a/0x90 [ 40.801540][ T3818] inet6_release+0x36/0x60 [ 40.801605][ T3818] sock_close+0x6b/0x150 [ 40.801635][ T3818] ? __pfx_sock_close+0x10/0x10 [ 40.801731][ T3818] __fput+0x298/0x650 [ 40.801768][ T3818] fput_close_sync+0x6e/0x120 [ 40.801852][ T3818] __x64_sys_close+0x56/0xf0 [ 40.801982][ T3818] x64_sys_call+0x2738/0x2ff0 [ 40.802002][ T3818] do_syscall_64+0xd2/0x200 [ 40.802114][ T3818] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.802144][ T3818] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.802172][ T3818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.802197][ T3818] RIP: 0033:0x7f5e0134eba9 [ 40.802215][ T3818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.802298][ T3818] RSP: 002b:00007f5dffdb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 40.802323][ T3818] RAX: ffffffffffffffda RBX: 00007f5e01595fa0 RCX: 00007f5e0134eba9 [ 40.802336][ T3818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 40.802347][ T3818] RBP: 00007f5dffdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.802359][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.802372][ T3818] R13: 00007f5e01596038 R14: 00007f5e01595fa0 R15: 00007ffe1a602248 [ 40.802388][ T3818] [ 41.457498][ T3829] bridge0: entered promiscuous mode [ 41.862600][ T3811] usb usb1: usbfs: process 3811 (syz.3.85) did not claim interface 0 before use [ 42.000205][ T3840] siw: device registration error -23 [ 42.138961][ T3850] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 42.146650][ T3850] netlink: 224 bytes leftover after parsing attributes in process `syz.3.94'. [ 42.264942][ T3383] hid_parser_main: 42 callbacks suppressed [ 42.264968][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.278443][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.285999][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.293414][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.300885][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.308316][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.315838][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.323259][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.330716][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.338229][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.395416][ T3870] siw: device registration error -23 [ 42.409788][ T3383] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.478002][ T3884] fido_id[3884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.850974][ T3909] loop3: detected capacity change from 0 to 256 [ 43.542251][ T3909] FAT-fs (loop3): codepage cp949 not found [ 43.755996][ T3914] siw: device registration error -23 [ 43.853327][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 43.853344][ T29] audit: type=1326 audit(1757945852.926:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 43.926921][ T29] audit: type=1326 audit(1757945852.966:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 43.951011][ T29] audit: type=1326 audit(1757945852.966:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 43.974782][ T29] audit: type=1326 audit(1757945852.966:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 43.998652][ T29] audit: type=1326 audit(1757945852.966:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 44.021954][ T29] audit: type=1326 audit(1757945852.966:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 44.045781][ T29] audit: type=1326 audit(1757945852.966:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 44.070039][ T29] audit: type=1326 audit(1757945852.966:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 44.094432][ T29] audit: type=1326 audit(1757945852.966:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 44.117969][ T29] audit: type=1326 audit(1757945852.966:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 44.308553][ T3919] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 44.316283][ T3919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'. [ 44.798337][ T1035] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.801485][ T3946] siw: device registration error -23 [ 44.869783][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 44.915500][ T3951] fido_id[3951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.941279][ T3961] FAULT_INJECTION: forcing a failure. [ 44.941279][ T3961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.954653][ T3961] CPU: 1 UID: 0 PID: 3961 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.954683][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.954694][ T3961] Call Trace: [ 44.954702][ T3961] [ 44.954711][ T3961] __dump_stack+0x1d/0x30 [ 44.954733][ T3961] dump_stack_lvl+0xe8/0x140 [ 44.954830][ T3961] dump_stack+0x15/0x1b [ 44.954846][ T3961] should_fail_ex+0x265/0x280 [ 44.954869][ T3961] should_fail+0xb/0x20 [ 44.954888][ T3961] should_fail_usercopy+0x1a/0x20 [ 44.954914][ T3961] _copy_from_user+0x1c/0xb0 [ 44.954970][ T3961] ___sys_sendmsg+0xc1/0x1d0 [ 44.955010][ T3961] __x64_sys_sendmsg+0xd4/0x160 [ 44.955176][ T3961] x64_sys_call+0x191e/0x2ff0 [ 44.955199][ T3961] do_syscall_64+0xd2/0x200 [ 44.955237][ T3961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.955266][ T3961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.955319][ T3961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.955339][ T3961] RIP: 0033:0x7f175558eba9 [ 44.955354][ T3961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.955372][ T3961] RSP: 002b:00007f1753fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.955393][ T3961] RAX: ffffffffffffffda RBX: 00007f17557d6090 RCX: 00007f175558eba9 [ 44.955407][ T3961] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 44.955489][ T3961] RBP: 00007f1753fce090 R08: 0000000000000000 R09: 0000000000000000 [ 44.955500][ T3961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.955512][ T3961] R13: 00007f17557d6128 R14: 00007f17557d6090 R15: 00007ffd19762828 [ 44.955531][ T3961] [ 45.201107][ T3972] vlan2: entered allmulticast mode [ 45.215698][ T3974] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 45.223505][ T3974] netlink: 224 bytes leftover after parsing attributes in process `syz.2.118'. [ 45.420268][ T3979] siw: device registration error -23 [ 45.431600][ T3985] FAULT_INJECTION: forcing a failure. [ 45.431600][ T3985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.444820][ T3985] CPU: 0 UID: 0 PID: 3985 Comm: syz.4.122 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.444894][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.444904][ T3985] Call Trace: [ 45.444911][ T3985] [ 45.444919][ T3985] __dump_stack+0x1d/0x30 [ 45.444946][ T3985] dump_stack_lvl+0xe8/0x140 [ 45.444969][ T3985] dump_stack+0x15/0x1b [ 45.445067][ T3985] should_fail_ex+0x265/0x280 [ 45.445090][ T3985] should_fail+0xb/0x20 [ 45.445113][ T3985] should_fail_usercopy+0x1a/0x20 [ 45.445174][ T3985] _copy_from_user+0x1c/0xb0 [ 45.445202][ T3985] ___sys_sendmsg+0xc1/0x1d0 [ 45.445240][ T3985] __x64_sys_sendmsg+0xd4/0x160 [ 45.445347][ T3985] x64_sys_call+0x191e/0x2ff0 [ 45.445370][ T3985] do_syscall_64+0xd2/0x200 [ 45.445404][ T3985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.445497][ T3985] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.445530][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.445591][ T3985] RIP: 0033:0x7f5634a6eba9 [ 45.445636][ T3985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.445654][ T3985] RSP: 002b:00007f56334cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.445685][ T3985] RAX: ffffffffffffffda RBX: 00007f5634cb5fa0 RCX: 00007f5634a6eba9 [ 45.445698][ T3985] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 45.445778][ T3985] RBP: 00007f56334cf090 R08: 0000000000000000 R09: 0000000000000000 [ 45.445791][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.445805][ T3985] R13: 00007f5634cb6038 R14: 00007f5634cb5fa0 R15: 00007ffd6168eb18 [ 45.445830][ T3985] [ 45.680239][ T3986] loop3: detected capacity change from 0 to 256 [ 45.871117][ T3992] siw: device registration error -23 [ 45.907130][ T3986] FAT-fs (loop3): codepage cp949 not found [ 46.081693][ T3997] program syz.0.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.205371][ T4002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 46.219241][ T3997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 46.229576][ T4001] siw: device registration error -23 [ 46.270593][ T4004] FAULT_INJECTION: forcing a failure. [ 46.270593][ T4004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.283816][ T4004] CPU: 1 UID: 0 PID: 4004 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.283911][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 46.283922][ T4004] Call Trace: [ 46.283930][ T4004] [ 46.283940][ T4004] __dump_stack+0x1d/0x30 [ 46.283964][ T4004] dump_stack_lvl+0xe8/0x140 [ 46.284002][ T4004] dump_stack+0x15/0x1b [ 46.284023][ T4004] should_fail_ex+0x265/0x280 [ 46.284050][ T4004] should_fail+0xb/0x20 [ 46.284074][ T4004] should_fail_usercopy+0x1a/0x20 [ 46.284098][ T4004] _copy_from_user+0x1c/0xb0 [ 46.284172][ T4004] ___sys_sendmsg+0xc1/0x1d0 [ 46.284212][ T4004] __x64_sys_sendmsg+0xd4/0x160 [ 46.284320][ T4004] x64_sys_call+0x191e/0x2ff0 [ 46.284345][ T4004] do_syscall_64+0xd2/0x200 [ 46.284374][ T4004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.284397][ T4004] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.284491][ T4004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.284512][ T4004] RIP: 0033:0x7f60d66feba9 [ 46.284600][ T4004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.284617][ T4004] RSP: 002b:00007f60d515f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.284717][ T4004] RAX: ffffffffffffffda RBX: 00007f60d6945fa0 RCX: 00007f60d66feba9 [ 46.284733][ T4004] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 46.284748][ T4004] RBP: 00007f60d515f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.284761][ T4004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.284772][ T4004] R13: 00007f60d6946038 R14: 00007f60d6945fa0 R15: 00007ffea9ee3178 [ 46.284810][ T4004] [ 46.518023][ T4006] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 46.525772][ T4006] netlink: 224 bytes leftover after parsing attributes in process `syz.0.129'. [ 46.643701][ T4008] loop4: detected capacity change from 0 to 8192 [ 46.656017][ T4010] loop2: detected capacity change from 0 to 8192 [ 46.910890][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 47.014629][ T4024] netlink: 312 bytes leftover after parsing attributes in process `syz.1.135'. [ 47.024030][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 47.125805][ T4021] siw: device registration error -23 [ 47.144509][ T4027] netlink: 96 bytes leftover after parsing attributes in process `syz.3.136'. [ 47.159695][ T4029] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 47.171895][ T4029] veth0_vlan: left promiscuous mode [ 47.184259][ T4029] veth0_vlan: entered promiscuous mode [ 47.192223][ T4029] team0: Device veth0_vlan failed to register rx_handler [ 47.285683][ T4033] program syz.1.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.326894][ T4033] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 47.410557][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.433300][ T4038] netlink: 7 bytes leftover after parsing attributes in process `syz.3.141'. [ 47.448053][ T4035] siw: device registration error -23 [ 47.525961][ T4045] siw: device registration error -23 [ 47.664299][ T4051] siw: device registration error -23 [ 47.779384][ T4063] loop4: detected capacity change from 0 to 1764 [ 47.803298][ T4059] loop0: detected capacity change from 0 to 256 [ 47.874101][ T4060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.170280][ T4077] program syz.2.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.176446][ T4059] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 48.188712][ T4077] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 48.219231][ T4077] siw: device registration error -23 [ 48.356079][ T4086] loop0: detected capacity change from 0 to 8192 [ 48.427619][ T4088] loop2: detected capacity change from 0 to 8192 [ 48.551568][ T4094] loop1: detected capacity change from 0 to 8192 [ 48.607807][ T4107] loop3: detected capacity change from 0 to 1024 [ 48.656312][ T4107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.037150][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 49.037167][ T29] audit: type=1400 audit(1757946114.118:2016): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.073473][ T4103] Set syz1 is full, maxelem 65536 reached [ 49.094026][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.239811][ T4125] siw: device registration error -23 [ 49.386808][ T29] audit: type=1400 audit(1757946114.458:2017): avc: denied { block_suspend } for pid=4128 comm="syz.4.162" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.499191][ T4132] siw: device registration error -23 [ 49.508978][ T4140] loop2: detected capacity change from 0 to 1024 [ 49.525141][ T4140] EXT4-fs: Ignoring removed nobh option [ 49.572463][ T29] audit: type=1326 audit(1757946114.648:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.624688][ T29] audit: type=1326 audit(1757946114.678:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.650340][ T29] audit: type=1326 audit(1757946114.678:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.674033][ T29] audit: type=1326 audit(1757946114.678:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.698234][ T29] audit: type=1326 audit(1757946114.678:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.722257][ T29] audit: type=1326 audit(1757946114.678:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.745906][ T29] audit: type=1326 audit(1757946114.678:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.769608][ T29] audit: type=1326 audit(1757946114.678:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0134eba9 code=0x7ffc0000 [ 49.881947][ T4135] program syz.3.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.939555][ T4146] SELinux: Context system_u: is not valid (left unmapped). [ 49.954599][ T4147] siw: device registration error -23 [ 49.960220][ T4135] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 50.279553][ T4140] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.368577][ T4140] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.482282][ T4140] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.167: couldn't read orphan inode 11 (err -117) [ 50.507031][ T4149] loop3: detected capacity change from 0 to 8192 [ 50.537648][ T4140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.637818][ T4140] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.167: Invalid block bitmap block 0 in block_group 0 [ 50.694162][ T4165] siw: device registration error -23 [ 50.706335][ T4140] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.167: Failed to acquire dquot type 0 [ 50.818178][ T4167] loop1: detected capacity change from 0 to 8192 [ 50.887333][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.943499][ T4173] binfmt_misc: register: failed to install interpreter file ./file1 [ 50.970331][ T4170] siw: device registration error -23 [ 50.985600][ T4176] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 50.993355][ T4176] __nla_validate_parse: 8 callbacks suppressed [ 50.993372][ T4176] netlink: 224 bytes leftover after parsing attributes in process `syz.2.179'. [ 51.064635][ T4180] program syz.2.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.078712][ T4180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 51.110890][ T4180] siw: device registration error -23 [ 51.186135][ T4184] loop3: detected capacity change from 0 to 8192 [ 51.252025][ T4190] siw: device registration error -23 [ 51.438526][ T4201] loop0: detected capacity change from 0 to 256 [ 51.603374][ T4201] FAT-fs (loop0): codepage cp874 not found [ 52.741771][ T4210] loop4: detected capacity change from 0 to 8192 [ 52.817399][ T4212] loop2: detected capacity change from 0 to 8192 [ 53.151836][ T4219] program syz.0.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.162807][ T4219] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 53.207605][ T4219] siw: device registration error -23 [ 53.270250][ T4225] netlink: 52 bytes leftover after parsing attributes in process `syz.0.199'. [ 53.286460][ T4223] lo speed is unknown, defaulting to 1000 [ 53.326506][ T4227] siw: device registration error -23 [ 53.361907][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 53.370961][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 53.443096][ T4236] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 53.517733][ T4239] capability: warning: `syz.3.203' uses deprecated v2 capabilities in a way that may be insecure [ 53.585074][ T4245] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 53.602384][ T4246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4246 comm=syz.2.202 [ 53.672384][ T4248] loop4: detected capacity change from 0 to 256 [ 53.739985][ T4245] veth0_vlan: left promiscuous mode [ 53.816977][ T4245] veth0_vlan: entered promiscuous mode [ 53.850316][ T4248] FAT-fs (loop4): codepage cp874 not found [ 54.292407][ T4258] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 54.568580][ T4245] team0: Device veth0_vlan failed to register rx_handler [ 54.584480][ T4258] veth0_vlan: left promiscuous mode [ 54.590122][ T4258] veth0_vlan: entered promiscuous mode [ 54.615744][ T4258] team0: Device veth0_vlan failed to register rx_handler [ 54.688299][ T29] kauditd_printk_skb: 673 callbacks suppressed [ 54.688315][ T29] audit: type=1326 audit(1757946631.770:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.718069][ T29] audit: type=1326 audit(1757946631.770:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.857976][ T29] audit: type=1326 audit(1757946631.850:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.882066][ T29] audit: type=1326 audit(1757946631.850:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.906405][ T29] audit: type=1326 audit(1757946631.850:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.929784][ T29] audit: type=1326 audit(1757946631.860:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.953313][ T29] audit: type=1326 audit(1757946631.870:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 54.976844][ T29] audit: type=1326 audit(1757946631.870:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 55.000352][ T29] audit: type=1326 audit(1757946631.870:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 55.023755][ T29] audit: type=1326 audit(1757946631.870:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 55.282167][ T4270] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 55.290159][ T4270] netlink: 224 bytes leftover after parsing attributes in process `syz.4.214'. [ 55.302222][ T4264] netlink: 580 bytes leftover after parsing attributes in process `syz.0.211'. [ 55.311754][ T4256] usb usb1: usbfs: process 4256 (syz.1.208) did not claim interface 0 before use [ 55.329259][ T4264] loop0: detected capacity change from 0 to 256 [ 55.348964][ T4273] loop4: detected capacity change from 0 to 512 [ 55.357954][ T4273] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.371518][ T4273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.384881][ T4273] EXT4-fs (loop4): 1 truncate cleaned up [ 55.392948][ T3383] hid_parser_main: 42 callbacks suppressed [ 55.392969][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.401067][ T4273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.406441][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.426109][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.432952][ T4273] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.215: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 55.433582][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.459070][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.462665][ T4264] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 55.466664][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.482084][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.489915][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.497583][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.505032][ T3383] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 55.514629][ T3383] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 55.578268][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.586922][ T4280] fido_id[4280]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.618407][ T3383] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 55.643499][ T4290] loop3: detected capacity change from 0 to 256 [ 55.666634][ T4290] /dev/loop3: Can't open blockdev [ 55.685130][ T4298] netlink: 'syz.0.224': attribute type 10 has an invalid length. [ 55.695401][ T4298] veth0_vlan: left promiscuous mode [ 55.702258][ T4298] veth0_vlan: entered promiscuous mode [ 55.730450][ T4298] team0: Device veth0_vlan failed to register rx_handler [ 55.758678][ T4300] fido_id[4300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.783944][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 55.815226][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 55.835218][ T4303] netlink: 312 bytes leftover after parsing attributes in process `syz.3.225'. [ 55.844554][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 55.856513][ T4314] siw: device registration error -23 [ 55.860465][ T4313] siw: device registration error -23 [ 55.928227][ T4321] veth0: entered promiscuous mode [ 55.932076][ T4319] loop3: detected capacity change from 0 to 512 [ 55.960388][ T4319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.992448][ T4319] EXT4-fs (loop3): 1 truncate cleaned up [ 56.011234][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.042090][ T4319] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.230: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 56.089641][ T4330] bridge0: port 3(batadv1) entered blocking state [ 56.096224][ T4330] bridge0: port 3(batadv1) entered disabled state [ 56.106390][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.118201][ T4330] batadv1: entered allmulticast mode [ 56.134262][ T4335] FAULT_INJECTION: forcing a failure. [ 56.134262][ T4335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.141091][ T4330] batadv1: entered promiscuous mode [ 56.147484][ T4335] CPU: 1 UID: 0 PID: 4335 Comm: syz.3.237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.147515][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.147527][ T4335] Call Trace: [ 56.147534][ T4335] [ 56.147542][ T4335] __dump_stack+0x1d/0x30 [ 56.147573][ T4335] dump_stack_lvl+0xe8/0x140 [ 56.147625][ T4335] dump_stack+0x15/0x1b [ 56.147705][ T4335] should_fail_ex+0x265/0x280 [ 56.147789][ T4335] should_fail+0xb/0x20 [ 56.147884][ T4335] should_fail_usercopy+0x1a/0x20 [ 56.147909][ T4335] strncpy_from_user+0x25/0x230 [ 56.147941][ T4335] ? kmem_cache_alloc_noprof+0x186/0x310 [ 56.148024][ T4335] ? getname_flags+0x80/0x3b0 [ 56.148142][ T4335] getname_flags+0xae/0x3b0 [ 56.148169][ T4335] do_sys_openat2+0x60/0x110 [ 56.148201][ T4335] __x64_sys_openat+0xf2/0x120 [ 56.148234][ T4335] x64_sys_call+0x2e9c/0x2ff0 [ 56.148328][ T4335] do_syscall_64+0xd2/0x200 [ 56.148359][ T4335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.148383][ T4335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.148412][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.148515][ T4335] RIP: 0033:0x7f43d61ed510 [ 56.148530][ T4335] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 56.148592][ T4335] RSP: 002b:00007f43d4c4cef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 56.148613][ T4335] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f43d61ed510 [ 56.148627][ T4335] RDX: 0000000000000002 RSI: 00007f43d6271af4 RDI: 00000000ffffff9c [ 56.148639][ T4335] RBP: 00007f43d6271af4 R08: 0000000000000000 R09: 0000000000000000 [ 56.148652][ T4335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 56.148739][ T4335] R13: 0000000000000667 R14: 0000200000000680 R15: 00007ffe3a7544e8 [ 56.148780][ T4335] [ 56.384038][ T4343] FAULT_INJECTION: forcing a failure. [ 56.384038][ T4343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.397569][ T4343] CPU: 1 UID: 0 PID: 4343 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.397663][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.397676][ T4343] Call Trace: [ 56.397684][ T4343] [ 56.397712][ T4343] __dump_stack+0x1d/0x30 [ 56.397737][ T4343] dump_stack_lvl+0xe8/0x140 [ 56.397760][ T4343] dump_stack+0x15/0x1b [ 56.397779][ T4343] should_fail_ex+0x265/0x280 [ 56.397801][ T4343] should_fail+0xb/0x20 [ 56.397821][ T4343] should_fail_usercopy+0x1a/0x20 [ 56.397874][ T4343] _copy_to_user+0x20/0xa0 [ 56.397955][ T4343] simple_read_from_buffer+0xb5/0x130 [ 56.397980][ T4343] proc_fail_nth_read+0x10e/0x150 [ 56.398008][ T4343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.398038][ T4343] vfs_read+0x1a8/0x770 [ 56.398060][ T4343] ? __rcu_read_unlock+0x4f/0x70 [ 56.398085][ T4343] ? __fget_files+0x184/0x1c0 [ 56.398116][ T4343] ksys_read+0xda/0x1a0 [ 56.398153][ T4343] __x64_sys_read+0x40/0x50 [ 56.398178][ T4343] x64_sys_call+0x27bc/0x2ff0 [ 56.398202][ T4343] do_syscall_64+0xd2/0x200 [ 56.398235][ T4343] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.398292][ T4343] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.398367][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.398440][ T4343] RIP: 0033:0x7f5e0134d5bc [ 56.398459][ T4343] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.398558][ T4343] RSP: 002b:00007f5dffdb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.398582][ T4343] RAX: ffffffffffffffda RBX: 00007f5e01595fa0 RCX: 00007f5e0134d5bc [ 56.398596][ T4343] RDX: 000000000000000f RSI: 00007f5dffdb70a0 RDI: 0000000000000005 [ 56.398615][ T4343] RBP: 00007f5dffdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.398626][ T4343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.398638][ T4343] R13: 00007f5e01596038 R14: 00007f5e01595fa0 R15: 00007ffe1a602248 [ 56.398654][ T4343] [ 56.605905][ T3911] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 56.615154][ T3911] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 56.634707][ T4307] veth0: left promiscuous mode [ 56.654559][ T4372] __nla_validate_parse: 2 callbacks suppressed [ 56.654583][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 56.669862][ T4372] netlink: 312 bytes leftover after parsing attributes in process `syz.1.240'. [ 56.679306][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 56.706773][ T4383] siw: device registration error -23 [ 56.740558][ T4384] loop4: detected capacity change from 0 to 256 [ 57.012285][ T4389] loop0: detected capacity change from 0 to 1764 [ 57.742693][ T4384] FAT-fs (loop4): codepage cp874 not found [ 57.789359][ T4396] program syz.1.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.936467][ T4396] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 58.100366][ T4405] siw: device registration error -23 [ 58.209698][ T4430] x_tables: ip_tables: DSCP.0 target: invalid size 8 (kernel) != (user) 64 [ 58.258159][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 58.277098][ T4436] erspan1: entered promiscuous mode [ 58.321282][ T4428] netlink: 312 bytes leftover after parsing attributes in process `syz.2.253'. [ 58.331163][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 58.358061][ T4436] netlink: 'syz.0.255': attribute type 21 has an invalid length. [ 58.369634][ T4439] siw: device registration error -23 [ 58.388845][ T4436] netlink: 156 bytes leftover after parsing attributes in process `syz.0.255'. [ 58.398015][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 58.587844][ T4463] siw: device registration error -23 [ 58.929981][ T4494] siw: device registration error -23 [ 59.009192][ T4496] lo speed is unknown, defaulting to 1000 [ 59.021344][ T4503] loop1: detected capacity change from 0 to 256 [ 60.467211][ T4523] loop3: detected capacity change from 0 to 256 [ 61.032959][ T4525] netlink: 580 bytes leftover after parsing attributes in process `syz.4.280'. [ 61.101812][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 61.101829][ T29] audit: type=1326 audit(1757947150.178:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.197423][ T4530] loop4: detected capacity change from 0 to 256 [ 61.208908][ T4503] FAT-fs (loop1): codepage cp874 not found [ 61.263436][ T36] hid_parser_main: 42 callbacks suppressed [ 61.263473][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.276883][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.284301][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.291701][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.299173][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.306665][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.314157][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.321568][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.329047][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.336594][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 61.487530][ T4523] FAT-fs (loop3): codepage cp874 not found [ 61.579025][ T4525] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 61.659905][ T29] audit: type=1326 audit(1757947150.218:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.683423][ T29] audit: type=1326 audit(1757947150.238:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.707567][ T29] audit: type=1326 audit(1757947150.238:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.731289][ T29] audit: type=1326 audit(1757947150.238:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.756945][ T29] audit: type=1326 audit(1757947150.248:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.780752][ T29] audit: type=1326 audit(1757947150.248:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.804705][ T29] audit: type=1326 audit(1757947150.248:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.828219][ T29] audit: type=1326 audit(1757947150.258:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 61.851825][ T29] audit: type=1326 audit(1757947150.258:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5634a6ebe3 code=0x7ffc0000 [ 61.977674][ T36] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.041951][ T4540] fido_id[4540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.165060][ T36] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.248585][ T4551] fido_id[4551]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.290345][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 62.324163][ T4553] netlink: 312 bytes leftover after parsing attributes in process `syz.2.289'. [ 62.333448][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 62.477759][ T4564] loop2: detected capacity change from 0 to 512 [ 62.481512][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 62.487357][ T4566] siw: device registration error -23 [ 62.493043][ T4561] netlink: 312 bytes leftover after parsing attributes in process `syz.0.292'. [ 62.504019][ T4564] EXT4-fs: Ignoring removed oldalloc option [ 62.507525][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 62.549587][ T4561] siw: device registration error -23 [ 62.649756][ T4564] EXT4-fs (loop2): 1 truncate cleaned up [ 62.655958][ T4564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.778510][ T4578] bridge0: entered promiscuous mode [ 62.986051][ T4581] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 62.993819][ T4581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.299'. [ 63.232848][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.280544][ T4588] lo speed is unknown, defaulting to 1000 [ 63.370038][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 63.395653][ T4592] netlink: 312 bytes leftover after parsing attributes in process `syz.4.304'. [ 63.404743][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 63.423919][ T4592] siw: device registration error -23 [ 63.456735][ T36] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.587099][ T4597] fido_id[4597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.677078][ T4618] loop0: detected capacity change from 0 to 512 [ 63.714042][ T4621] program syz.3.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.746030][ T4621] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 63.759665][ T4623] lo speed is unknown, defaulting to 1000 [ 63.768188][ T4621] siw: device registration error -23 [ 63.789056][ T4627] siw: device registration error -23 [ 63.820214][ T4618] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 64.024485][ T36] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 64.103309][ T4645] loop4: detected capacity change from 0 to 256 [ 64.300165][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 64.402378][ T4642] fido_id[4642]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.540225][ T4665] fido_id[4665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.621796][ T3397] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 64.723823][ T4679] loop0: detected capacity change from 0 to 1024 [ 64.737414][ T4677] fido_id[4677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.768557][ T4668] loop1: detected capacity change from 0 to 8192 [ 64.785674][ T4679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.854286][ T4689] binfmt_misc: register: failed to install interpreter file ./file1 [ 64.888279][ T4691] binfmt_misc: register: failed to install interpreter file ./file1 [ 65.045878][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.059676][ T4700] siw: device registration error -23 [ 65.170382][ T4709] netlink: 'syz.3.349': attribute type 13 has an invalid length. [ 65.236665][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.243993][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.455435][ T4709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.528617][ T4709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.984219][ T4716] bridge0: entered promiscuous mode [ 65.993853][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.014261][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.034912][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.091414][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.149085][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 66.149104][ T29] audit: type=1326 audit(1757947411.225:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 66.196369][ T29] audit: type=1326 audit(1757947411.225:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 66.219942][ T29] audit: type=1326 audit(1757947411.235:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 66.231922][ T4729] binfmt_misc: register: failed to install interpreter file ./file1 [ 66.244079][ T29] audit: type=1326 audit(1757947411.235:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 66.275744][ T29] audit: type=1326 audit(1757947411.235:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 66.299179][ T29] audit: type=1326 audit(1757947411.235:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 66.322973][ T29] audit: type=1326 audit(1757947411.235:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4723 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634a6eba9 code=0x7ffc0000 [ 66.346774][ T29] audit: type=1326 audit(1757947411.235:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 66.370230][ T29] audit: type=1326 audit(1757947411.235:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 66.393586][ T29] audit: type=1326 audit(1757947411.235:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4726 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d66feba9 code=0x7ffc0000 [ 66.434007][ T4735] x_tables: ip_tables: DSCP.0 target: invalid size 8 (kernel) != (user) 64 [ 66.552213][ T4749] siw: device registration error -23 [ 66.565385][ T4755] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 66.579799][ T4755] veth0_vlan: entered allmulticast mode [ 66.594782][ T4757] loop0: detected capacity change from 0 to 1024 [ 66.627042][ T4762] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 66.658643][ T4755] veth0_vlan: left promiscuous mode [ 66.669253][ T4755] veth0_vlan: entered promiscuous mode [ 66.685573][ T4755] team0: Device veth0_vlan failed to register rx_handler [ 66.812402][ T4757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.856772][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.351449][ T4792] loop2: detected capacity change from 0 to 1024 [ 67.366765][ T4792] EXT4-fs: Ignoring removed nobh option [ 67.376418][ T4792] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.390210][ T4794] loop0: detected capacity change from 0 to 1024 [ 67.397711][ T4794] EXT4-fs: Ignoring removed nobh option [ 67.413037][ T4792] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.368: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 67.414517][ T4794] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.491648][ T4796] loop4: detected capacity change from 0 to 8192 [ 67.517959][ T4792] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.368: couldn't read orphan inode 11 (err -117) [ 67.531404][ T4794] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 67.551056][ T4794] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.370: couldn't read orphan inode 11 (err -117) [ 67.552232][ T4792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.587679][ T4794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.629634][ T4806] __nla_validate_parse: 15 callbacks suppressed [ 67.629698][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 67.630024][ T4792] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.368: Invalid block bitmap block 0 in block_group 0 [ 67.636068][ T4806] netlink: 312 bytes leftover after parsing attributes in process `syz.1.372'. [ 67.668020][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 67.695009][ T4810] siw: device registration error -23 [ 67.713792][ T4792] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.368: Failed to acquire dquot type 0 [ 67.716061][ T4794] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.370: Invalid block bitmap block 0 in block_group 0 [ 67.742117][ T4794] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.370: Failed to acquire dquot type 0 [ 67.778380][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.819484][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.114459][ T4826] loop0: detected capacity change from 0 to 1764 [ 69.219794][ T4859] loop4: detected capacity change from 0 to 1764 [ 69.448801][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 69.472980][ T4871] netlink: 312 bytes leftover after parsing attributes in process `syz.1.387'. [ 69.482280][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 69.545117][ T4866] siw: device registration error -23 [ 69.631445][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 69.912350][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 70.458666][ T4887] loop2: detected capacity change from 0 to 256 [ 70.634440][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 70.771680][ T4887] FAT-fs (loop2): codepage cp949 not found [ 71.129808][ T4894] lo speed is unknown, defaulting to 1000 [ 71.166236][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 71.166266][ T29] audit: type=1326 audit(1757947928.248:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.239201][ T4896] siw: device registration error -23 [ 71.355465][ T29] audit: type=1326 audit(1757947928.278:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.379635][ T29] audit: type=1326 audit(1757947928.298:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.403384][ T29] audit: type=1326 audit(1757947928.298:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.426972][ T29] audit: type=1326 audit(1757947928.298:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.450346][ T29] audit: type=1326 audit(1757947928.308:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.474390][ T29] audit: type=1326 audit(1757947928.308:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.498171][ T29] audit: type=1326 audit(1757947928.308:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.521865][ T29] audit: type=1326 audit(1757947928.308:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.545335][ T29] audit: type=1326 audit(1757947928.308:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f175558eba9 code=0x7ffc0000 [ 71.693434][ T4917] siw: device registration error -23 [ 71.881371][ T4934] loop4: detected capacity change from 0 to 256 [ 72.251518][ T4934] FAT-fs (loop4): codepage cp874 not found [ 72.444001][ T1035] hid_parser_main: 146 callbacks suppressed [ 72.444021][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.457763][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.465216][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.472614][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.480078][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.487639][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.495061][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.502478][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.510196][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 72.517722][ T1035] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 73.074480][ T3411] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 73.127759][ T1035] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 73.182907][ T4958] fido_id[4958]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.204677][ T4962] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 73.218463][ T4961] mmap: syz.2.412 (4961) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.265259][ T4962] veth0_vlan: left promiscuous mode [ 73.692982][ T4962] veth0_vlan: entered promiscuous mode [ 73.740072][ T4962] team0: Device veth0_vlan failed to register rx_handler [ 73.803152][ T4969] fido_id[4969]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.507147][ T4983] siw: device registration error -23 [ 74.640589][ T4987] lo speed is unknown, defaulting to 1000 [ 74.733924][ T4998] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 74.753186][ T4997] program syz.1.425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.764080][ T4998] veth0_vlan: left promiscuous mode [ 74.773033][ T4997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 74.775600][ T4994] siw: device registration error -23 [ 74.792798][ T4992] loop2: detected capacity change from 0 to 8192 [ 74.796035][ T4998] veth0_vlan: entered promiscuous mode [ 74.808876][ T4998] team0: Device veth0_vlan failed to register rx_handler [ 74.854201][ T5003] netlink: 'syz.0.427': attribute type 13 has an invalid length. [ 74.959993][ T5013] siw: device registration error -23 [ 75.021367][ T5019] loop3: detected capacity change from 0 to 764 [ 75.021830][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.034910][ T5003] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.048432][ T5019] Symlink component flag not implemented [ 75.068179][ T5019] Symlink component flag not implemented (129) [ 75.083194][ T5019] rock: directory entry would overflow storage [ 75.089557][ T5019] rock: sig=0x4f50, size=4, remaining=3 [ 75.095388][ T5019] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.470667][ T5003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.511413][ T5003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.759139][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.793979][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.817275][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.841479][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.890185][ T5031] lo speed is unknown, defaulting to 1000 [ 75.903881][ T5034] loop4: detected capacity change from 0 to 764 [ 75.941170][ T5036] program syz.2.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.961466][ T5036] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 75.999148][ T5040] siw: device registration error -23 [ 76.051266][ T5043] siw: device registration error -23 [ 76.114129][ T5047] loop2: detected capacity change from 0 to 1024 [ 76.119761][ T5048] siw: device registration error -23 [ 76.141033][ T5047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.175963][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 76.175979][ T29] audit: type=1400 audit(1757948445.259:4901): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.232828][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 76.242646][ T29] audit: type=1400 audit(1757948445.289:4902): avc: denied { create } for pid=5037 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.262933][ T29] audit: type=1400 audit(1757948445.289:4903): avc: denied { bind } for pid=5037 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.282538][ T29] audit: type=1400 audit(1757948445.289:4904): avc: denied { write } for pid=5037 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.302204][ T29] audit: type=1400 audit(1757948445.289:4905): avc: denied { mount } for pid=5046 comm="syz.2.444" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.324395][ T29] audit: type=1400 audit(1757948445.299:4906): avc: denied { read } for pid=5046 comm="syz.2.444" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.347829][ T29] audit: type=1400 audit(1757948445.299:4907): avc: denied { open } for pid=5046 comm="syz.2.444" path="/74/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.370126][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 76.371540][ T29] audit: type=1400 audit(1757948445.299:4908): avc: denied { ioctl } for pid=5046 comm="syz.2.444" path="/74/file1/file1" dev="loop2" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.404824][ T29] audit: type=1400 audit(1757948445.299:4909): avc: denied { setattr } for pid=5046 comm="syz.2.444" name="" dev="pipefs" ino=1540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.427263][ T29] audit: type=1326 audit(1757948445.309:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5058 comm="syz.3.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d61eeba9 code=0x7ffc0000 [ 76.482758][ T5067] loop3: detected capacity change from 0 to 128 [ 76.492316][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.542543][ T5067] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.567636][ T5038] loop1: detected capacity change from 0 to 1024 [ 76.572390][ T5071] loop2: detected capacity change from 0 to 1024 [ 76.574274][ T5067] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.613186][ T5038] EXT4-fs: Ignoring removed nobh option [ 76.641574][ T5071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.670270][ T5038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.718627][ T5075] lo speed is unknown, defaulting to 1000 [ 76.757599][ T5065] usb usb1: usbfs: process 5065 (syz.0.447) did not claim interface 0 before use [ 76.784798][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.801422][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.816128][ T5082] siw: device registration error -23 [ 76.839015][ T5084] loop1: detected capacity change from 0 to 512 [ 76.842706][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.847510][ T5084] EXT4-fs: Ignoring removed oldalloc option [ 76.866399][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 76.873796][ T5086] program syz.3.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.897731][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.926138][ T5086] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 76.956737][ T5091] siw: device registration error -23 [ 77.026272][ T5099] loop3: detected capacity change from 0 to 1024 [ 77.045595][ T5099] EXT4-fs: Ignoring removed nobh option [ 77.102821][ T5099] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.128091][ T5096] loop4: detected capacity change from 0 to 8192 [ 77.136802][ T5099] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.460: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 77.187009][ T5099] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.460: couldn't read orphan inode 11 (err -117) [ 77.213207][ T5099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.251190][ T5099] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.460: Invalid block bitmap block 0 in block_group 0 [ 77.269388][ T5099] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.460: Failed to acquire dquot type 0 [ 77.325572][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.623335][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.647630][ T5141] lo speed is unknown, defaulting to 1000 [ 77.860656][ T5151] netlink: 'syz.0.470': attribute type 13 has an invalid length. [ 77.951475][ T5161] loop4: detected capacity change from 0 to 1024 [ 77.954198][ T5163] program syz.0.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.968816][ T5161] EXT4-fs: Ignoring removed nobh option [ 77.982209][ T5163] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.993893][ T5159] loop2: detected capacity change from 0 to 8192 [ 78.001002][ T5161] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.019225][ T5163] siw: device registration error -23 [ 78.047483][ T5161] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 78.085740][ T9] hid_parser_main: 42 callbacks suppressed [ 78.085761][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.099554][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.107517][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.115131][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.123384][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.131032][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.138983][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.146718][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.151153][ T5161] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.474: couldn't read orphan inode 11 (err -117) [ 78.154330][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.174617][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 78.225986][ T5161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.240725][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 78.272002][ T5171] fido_id[5171]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.326467][ T5161] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.474: Invalid block bitmap block 0 in block_group 0 [ 78.373762][ T5161] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.474: Failed to acquire dquot type 0 [ 78.429593][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.441670][ T5159] ================================================================== [ 78.449978][ T5159] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 78.457403][ T5159] [ 78.459853][ T5159] write to 0xffff88810894e66a of 2 bytes by task 5165 on cpu 1: [ 78.467498][ T5159] fat16_ent_put+0x28/0x60 [ 78.471951][ T5159] fat_alloc_clusters+0x4ce/0xa80 [ 78.477012][ T5159] fat_get_block+0x258/0x5e0 [ 78.481721][ T5159] __block_write_begin_int+0x3fd/0xf90 [ 78.487192][ T5159] cont_write_begin+0x5fc/0x970 [ 78.492078][ T5159] fat_write_begin+0x4f/0xe0 [ 78.496698][ T5159] generic_perform_write+0x181/0x490 [ 78.502169][ T5159] __generic_file_write_iter+0x9e/0x120 [ 78.507738][ T5159] generic_file_write_iter+0x8d/0x2f0 [ 78.513214][ T5159] do_iter_readv_writev+0x499/0x540 [ 78.518519][ T5159] vfs_writev+0x2df/0x8b0 [ 78.522864][ T5159] __se_sys_pwritev2+0xfc/0x1c0 [ 78.527721][ T5159] __x64_sys_pwritev2+0x67/0x80 [ 78.532581][ T5159] x64_sys_call+0x2c55/0x2ff0 [ 78.537263][ T5159] do_syscall_64+0xd2/0x200 [ 78.541779][ T5159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.547864][ T5159] [ 78.550202][ T5159] read to 0xffff88810894e600 of 512 bytes by task 5159 on cpu 0: [ 78.557941][ T5159] fat_mirror_bhs+0x1df/0x320 [ 78.562631][ T5159] fat_alloc_clusters+0x98b/0xa80 [ 78.567669][ T5159] fat_get_block+0x258/0x5e0 [ 78.572261][ T5159] __block_write_begin_int+0x3fd/0xf90 [ 78.577734][ T5159] cont_write_begin+0x5fc/0x970 [ 78.582678][ T5159] fat_write_begin+0x4f/0xe0 [ 78.587273][ T5159] cont_write_begin+0x1ad/0x970 [ 78.592144][ T5159] fat_write_begin+0x4f/0xe0 [ 78.597177][ T5159] generic_cont_expand_simple+0xb0/0x150 [ 78.602909][ T5159] fat_cont_expand+0x3e/0x170 [ 78.607593][ T5159] fat_setattr+0x2a5/0x8a0 [ 78.612099][ T5159] notify_change+0x809/0x890 [ 78.616744][ T5159] do_ftruncate+0x34b/0x450 [ 78.621278][ T5159] __x64_sys_ftruncate+0x68/0xc0 [ 78.626240][ T5159] x64_sys_call+0x2d52/0x2ff0 [ 78.630926][ T5159] do_syscall_64+0xd2/0x200 [ 78.635531][ T5159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.641704][ T5159] [ 78.644027][ T5159] Reported by Kernel Concurrency Sanitizer on: [ 78.650353][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: syz.2.473 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.660083][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.670259][ T5159] ================================================================== [ 78.718280][ T5157] usb usb1: usbfs: process 5157 (syz.1.472) did not claim interface 0 before use [ 78.769103][ T5180] siw: device registration error -23