last executing test programs: 1m51.996384078s ago: executing program 32 (id=316): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff00, &(0x7f0000000680)=[{&(0x7f0000000300)=""/41}, {&(0x7f0000000580)=""/96}], 0x5d}, 0x2000) 1m51.946506611s ago: executing program 33 (id=330): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m50.889869692s ago: executing program 34 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c082) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x4048010) 1m49.860091012s ago: executing program 35 (id=383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4002000010000100feffffbf0001000000000000000000000000ffffac1414bb00000000000000000000ffffac1414bb000103944e260005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000040000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0000fd20000000000000004d0103006465"], 0x240}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1m48.786630094s ago: executing program 36 (id=394): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.979088665s ago: executing program 6 (id=708): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x55eac547, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x1b7b, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd70000035000002000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1m32.571677928s ago: executing program 5 (id=711): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1m32.524498272s ago: executing program 6 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) 1m32.496550023s ago: executing program 6 (id=714): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1m32.435866067s ago: executing program 6 (id=716): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) 1m32.349135522s ago: executing program 6 (id=720): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m32.326665063s ago: executing program 6 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1m31.705622439s ago: executing program 5 (id=729): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4040, &(0x7f0000001340)={0xa, 0x4e22, 0xe3, @mcast1, 0xc}, 0x1c) 1m31.666542212s ago: executing program 5 (id=730): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0) 1m31.590514686s ago: executing program 5 (id=731): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) socketpair(0x2, 0x6, 0x31, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) 1m31.480606592s ago: executing program 5 (id=732): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m31.459215073s ago: executing program 5 (id=733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x8007, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0200000000000000000014000000010000000000000000000000000000000000000000db4800000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000fc00000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f0400000000000000000000000a00000000000000000000004c001400636d6163286165732900"], 0x13c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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") socket(0x23, 0x4, 0x206) eventfd(0xbf9) chroot(0x0) 1m30.713698257s ago: executing program 7 (id=739): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1m30.681657389s ago: executing program 7 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) 1m30.643044921s ago: executing program 7 (id=741): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0) 1m30.542609527s ago: executing program 7 (id=742): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 1m29.890606805s ago: executing program 7 (id=743): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m29.838891728s ago: executing program 7 (id=744): r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x4bc, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x9}, 0x6, 0x7, 0x5, 0x39d, 0x2, 'syz1\x00', "f47ecf2dfaee93b78056183d273afecb8850664b469fe945fb82509abe3319ee", "a07acc1f80d19825f916b3c36369a3f4c9c6f0bddce8ca7cfbd5562818d167ca", [{0x3, 0x3, {0x1, 0x5}}, {0x6, 0x9, {0x1, 0x9}}, {0x5, 0x10, {0x3, 0xffff}}, {0x9, 0x1585, {0x3, 0x6bb4}}, {0xfffd, 0x7, {0x0, 0x1}}, {0x2, 0x6, {0x3, 0x5}}, {0xf001, 0x1, {0x2}}, {0x5987, 0x1, {0x3, 0x6}}, {0x6, 0xffff, {0x1, 0x8001}}, {0x9, 0xf, {0x0, 0xffff}}, {0xd6f9, 0x8, {0x76c7bd9855b36a8e, 0x80000000}}, {0x5, 0x3, {0x1, 0x6}}, {0x8, 0x8, {0x3, 0x4}}, {0x2, 0x1, {0x1, 0xff}}, {0x8, 0xfea, {0x3, 0xf}}, {0x1, 0x2, {0x0, 0xff9}}, {0x7, 0x5, {0x0, 0x4}}, {0xfff7, 0x8, {0x0, 0x2}}, {0x3, 0x5, {0x0, 0x82d}}, {0xfffe, 0xfffa, {0x3, 0x2}}, {0x1, 0x5, {0x3, 0xe3f2}}, {0x1, 0x43, {0x0, 0x8001}}, {0xd, 0x3, {0x0, 0x7}}, {0x6, 0x5, {0x3, 0x8}}, {0x4, 0x3ff, {0x2, 0xfff}}, {0xab3e, 0x7512, {0x1, 0xb}}, {0x5, 0x80, {0x3, 0x8}}, {0x6, 0x1, {0x2, 0x2}}, {0x5, 0x1, {0x1}}, {0x0, 0x7c30, {0x3, 0x4893}}, {0x0, 0x6, {0x0, 0x3}}, {0x0, 0x40, {0x3, 0x86}}, {0x9, 0x0, {0x3, 0x5}}, {0x0, 0x1ff, {0x0, 0x7}}, {0xfff7, 0xc7, {0x1}}, {0x8, 0xc, {0x0, 0x80000001}}, {0x3, 0x1, {0x3, 0x9}}, {0x4, 0x9, {0x2, 0x3}}, {0x10, 0x5, {0x1, 0x3a}}, {0x2, 0xd, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x0, 0x3, 0xf4e9, 0x8b0, 0x18, 'syz0\x00', "67374a0f280411df713475e7358c2edbd5a2a8f2fcad8ca2ebb76c7aa5a4c221", "8e2b1c4cf107e6f3b058c5aeeb3728f909023c3fd79254f0da0a038c8af22dbd", [{0x3, 0x8001, {0x2, 0x401}}, {0x401, 0x9, {0x3, 0x4}}, {0x5, 0xffff, {0x0, 0x9}}, {0xe421, 0x40, {0x3, 0x2}}, {0x3, 0xf, {0x2, 0x9ff}}, {0xad, 0x6, {0x0, 0x3}}, {0x1, 0x3, {0x3, 0xfffffff1}}, {0x85c2, 0x6, {0x2, 0x8}}, {0x0, 0x0, {0x2, 0x3}}, {0x400, 0x4, {0x3, 0x9000000}}, {0x0, 0x1, {0x1, 0x6}}, {0x4, 0x2, {0x2, 0x32}}, {0x1ff, 0x8, {0x3, 0x2}}, {0x7, 0x1, {0x1, 0x6}}, {0x1, 0x4, {0x3}}, {0x8b9e, 0x9, {0x3, 0x9}}, {0x4, 0x0, {0x2, 0xfff}}, {0x2, 0x8, {0x3, 0x2}}, {0x8d, 0x40, {0x1, 0x7}}, {0x9a0, 0x6, {0x3, 0xf38}}, {0x2, 0xc5c, {0x0, 0x3000000}}, {0x9, 0x3, {0x3}}, {0x9, 0x100, {0x2, 0x6}}, {0x5, 0x401, {0x2, 0x4}}, {0x7, 0x81, {0x2, 0x2}}, {0xa2, 0x9ce, {0x1, 0xff}}, {0xb7c8, 0x7f, {0x2, 0x3ff}}, {0x3ff, 0x400, {0x2, 0x9}}, {0x9, 0x7, {0x0, 0x47}}, {0x7, 0x200, {0x3, 0x100}}, {0x3, 0x5, {0x2, 0x80000000}}, {0x4, 0x7, {0x3, 0xb3ce}}, {0xfffd, 0x74, {0x0, 0x8}}, {0x8, 0x4, {0x1, 0x3}}, {0x1, 0x8c5, {0x1, 0x8}}, {0x9, 0x5, {0x1, 0x7}}, {0x7ff, 0xb30, {0x3, 0x3}}, {0xff, 0x7, {0x1, 0xa00000}}, {0x0, 0x5a, {0x1, 0x9}}, {0xc58b, 0x91, {0x0, 0x101}}]}}}]}, 0x4bc}}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x41) sendmsg$can_bcm(r1, 0x0, 0x0) 1m27.962647167s ago: executing program 37 (id=429): mkdir(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x58) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x8}, 0x8002, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000020000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x3, 0x0, 0x1, 0x4}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="656b7a5915cfcc60ce1425bc24c7e3bdcc1aec77edb200748d8b1e2062fbd005e807b82d4c03cadfc2171abb642021d79e3dcc418b1fe4fd0293624852dccf7c6436be077c6a350bf3970f16727c1ebfaa34955802d9d3447d23b3939f10d4d5a125f3efd8896afe9c4e558e130878b84897603356d27f66ef883e008c6a9e7e64db12ce", 0x84}], 0x1}, 0x8000) 1m21.920132769s ago: executing program 38 (id=627): ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e766230000000000", 0x2d}], 0x1}, 0x8090) 1m17.022459514s ago: executing program 39 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1m16.290367637s ago: executing program 40 (id=733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x8007, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0200000000000000000014000000010000000000000000000000000000000000000000db4800000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000fc00000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f0400000000000000000000000a00000000000000000000004c001400636d6163286165732900"], 0x13c}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$eJzs3E1sG8UeAPD/Ok76Xr+S19f3oKVAoCAqPpI2LdADB0BC4lAkJDiUo0nSqtRtUBMkWkU0oKpckGgl7giJCxJnDpw4IeCExIUD3FGlCvVC4WS09tqsHbt1EqdO6t9Pcj2zO8nMf3dnd3anmwAG1nj6TxKxPSJ+iYjRiCi0Fhivfd28sTj9543F6SQqldd+T9Ifiz9uLE7XiybZ97Zapph+FS4l8XybeufPXzhdKpdnz2X5yYUzb0/On7/w1KkzpZOzJ2fPTh09euTwoWefmXq6J3H+J23r3vfm9u15+Y2rr0wfv/rm918muUbn4+iN4VjKbZNWj/a2sr7bkUsnxaZVM6PNRQt3pkV0Y0tEtaMOR8RIjMbQpZ2NdaPx0gd9bRywriqVSmWq8+qlCnAXS6LfLQD6o36hT+9/6587NPTYEK6/ULsBSuO+mX1qa4qNG9XhlvvbXlqMiONLf32afmJdnkMAADT7Jh3/PNlu/FeI/+fK7czmhsayuZRdEfHfiNgdEf+LqJa9JyLuXWH94y355eOfwrVVBdaldPz3XDa31Tz+a0xTjA1luR3V+IeTE6fKswezbXIghrek+UNtf3sS1Umg+OnjTvWP58Z/6Setvz4WzNpxrbil+WdmSgulNQeeuf5+xN5iu/izCbxsDmtPROxdZR2nHv9iX/OSoUbq9vHfQnGVDcqpfBbxWG3/L0VL/HXJrecnJ/8V5dmDk/WjYrkffrz8aqf61xR/D6T7f2vb478R/1iSn6+dX/YrRm5Xx+VfP+x4T7Pa438keb2p8ndLCwvnDkWMJMeWL8894E7z9aMvLZ/Gf2B/+/6/K/7ZEvdFRHoQ3x8RD0TEg1nbH4qIhyNif76BLTOc3734yFurj399pfEfW9H+X3li6PS3X3eqv7v9f6SaOpAt6eb8120D17LtAAAAYLMoRMT2SAoTjXShMDFR+z/8u2NroTw3v/DEibl3zs7U3hEYi+FC/UnXaJaP7PnnWO756FR11jziYpY/nD03/mTo39X8xPRceabfwcOA29ah/6d+G+p364B114N5NGCT0v9hcK2+/ztzwGZ3m17sDzbAXcxVHAZXu/5/sQ/tAO48138YXI3+f6WLwrnXvVpf3gQ2H9d/GFz6PwyktbzXvyES8XnErcskG6WpK0p8lF9SP0FvhIaVTtQOmyhsjA3VlIhIonOZQuSWlNqViSsbIYoOiWLXf9XifOViqVz++au1VNrnExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B0AAP//7mLcmg==") socket(0x23, 0x4, 0x206) eventfd(0xbf9) chroot(0x0) 1m14.583889146s ago: executing program 41 (id=744): r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x4bc, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x9}, 0x6, 0x7, 0x5, 0x39d, 0x2, 'syz1\x00', "f47ecf2dfaee93b78056183d273afecb8850664b469fe945fb82509abe3319ee", "a07acc1f80d19825f916b3c36369a3f4c9c6f0bddce8ca7cfbd5562818d167ca", [{0x3, 0x3, {0x1, 0x5}}, {0x6, 0x9, {0x1, 0x9}}, {0x5, 0x10, {0x3, 0xffff}}, {0x9, 0x1585, {0x3, 0x6bb4}}, {0xfffd, 0x7, {0x0, 0x1}}, {0x2, 0x6, {0x3, 0x5}}, {0xf001, 0x1, {0x2}}, {0x5987, 0x1, {0x3, 0x6}}, {0x6, 0xffff, {0x1, 0x8001}}, {0x9, 0xf, {0x0, 0xffff}}, {0xd6f9, 0x8, {0x76c7bd9855b36a8e, 0x80000000}}, {0x5, 0x3, {0x1, 0x6}}, {0x8, 0x8, {0x3, 0x4}}, {0x2, 0x1, {0x1, 0xff}}, {0x8, 0xfea, {0x3, 0xf}}, {0x1, 0x2, {0x0, 0xff9}}, {0x7, 0x5, {0x0, 0x4}}, {0xfff7, 0x8, {0x0, 0x2}}, {0x3, 0x5, {0x0, 0x82d}}, {0xfffe, 0xfffa, {0x3, 0x2}}, {0x1, 0x5, {0x3, 0xe3f2}}, {0x1, 0x43, {0x0, 0x8001}}, {0xd, 0x3, {0x0, 0x7}}, {0x6, 0x5, {0x3, 0x8}}, {0x4, 0x3ff, {0x2, 0xfff}}, {0xab3e, 0x7512, {0x1, 0xb}}, {0x5, 0x80, {0x3, 0x8}}, {0x6, 0x1, {0x2, 0x2}}, {0x5, 0x1, {0x1}}, {0x0, 0x7c30, {0x3, 0x4893}}, {0x0, 0x6, {0x0, 0x3}}, {0x0, 0x40, {0x3, 0x86}}, {0x9, 0x0, {0x3, 0x5}}, {0x0, 0x1ff, {0x0, 0x7}}, {0xfff7, 0xc7, {0x1}}, {0x8, 0xc, {0x0, 0x80000001}}, {0x3, 0x1, {0x3, 0x9}}, {0x4, 0x9, {0x2, 0x3}}, {0x10, 0x5, {0x1, 0x3a}}, {0x2, 0xd, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x0, 0x3, 0xf4e9, 0x8b0, 0x18, 'syz0\x00', "67374a0f280411df713475e7358c2edbd5a2a8f2fcad8ca2ebb76c7aa5a4c221", "8e2b1c4cf107e6f3b058c5aeeb3728f909023c3fd79254f0da0a038c8af22dbd", [{0x3, 0x8001, {0x2, 0x401}}, {0x401, 0x9, {0x3, 0x4}}, {0x5, 0xffff, {0x0, 0x9}}, {0xe421, 0x40, {0x3, 0x2}}, {0x3, 0xf, {0x2, 0x9ff}}, {0xad, 0x6, {0x0, 0x3}}, {0x1, 0x3, {0x3, 0xfffffff1}}, {0x85c2, 0x6, {0x2, 0x8}}, {0x0, 0x0, {0x2, 0x3}}, {0x400, 0x4, {0x3, 0x9000000}}, {0x0, 0x1, {0x1, 0x6}}, {0x4, 0x2, {0x2, 0x32}}, {0x1ff, 0x8, {0x3, 0x2}}, {0x7, 0x1, {0x1, 0x6}}, {0x1, 0x4, {0x3}}, {0x8b9e, 0x9, {0x3, 0x9}}, {0x4, 0x0, {0x2, 0xfff}}, {0x2, 0x8, {0x3, 0x2}}, {0x8d, 0x40, {0x1, 0x7}}, {0x9a0, 0x6, {0x3, 0xf38}}, {0x2, 0xc5c, {0x0, 0x3000000}}, {0x9, 0x3, {0x3}}, {0x9, 0x100, {0x2, 0x6}}, {0x5, 0x401, {0x2, 0x4}}, {0x7, 0x81, {0x2, 0x2}}, {0xa2, 0x9ce, {0x1, 0xff}}, {0xb7c8, 0x7f, {0x2, 0x3ff}}, {0x3ff, 0x400, {0x2, 0x9}}, {0x9, 0x7, {0x0, 0x47}}, {0x7, 0x200, {0x3, 0x100}}, {0x3, 0x5, {0x2, 0x80000000}}, {0x4, 0x7, {0x3, 0xb3ce}}, {0xfffd, 0x74, {0x0, 0x8}}, {0x8, 0x4, {0x1, 0x3}}, {0x1, 0x8c5, {0x1, 0x8}}, {0x9, 0x5, {0x1, 0x7}}, {0x7ff, 0xb30, {0x3, 0x3}}, {0xff, 0x7, {0x1, 0xa00000}}, {0x0, 0x5a, {0x1, 0x9}}, {0xc58b, 0x91, {0x0, 0x101}}]}}}]}, 0x4bc}}, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x41) sendmsg$can_bcm(r1, 0x0, 0x0) 50.66284879s ago: executing program 4 (id=1301): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x47a, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/104) r0 = socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) 49.700588185s ago: executing program 4 (id=1323): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 49.642815129s ago: executing program 4 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 49.190328796s ago: executing program 4 (id=1326): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x79}, 0x10040) 49.141572928s ago: executing program 4 (id=1328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb1800000000000000290000000400000002ab"], 0x58}, 0x0) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_create_resource$binfmt(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='timerslack_ns\x00') fcntl$setstatus(r2, 0x4, 0x40800) syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x792, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="00012cbd7000ffdbdf250700000008000600030000004c0003c00800010000000002ff07000008000500ac1414bb060007005e2300000800010001000000e855d49911854bab060007004e2400000800010001000000180020801400060000000000000000000000ffffe0000001"], 0x80}, 0x1, 0x0, 0x0, 0x24008814}, 0x44) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 48.481389577s ago: executing program 0 (id=1344): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xffc0) 48.330025075s ago: executing program 0 (id=1347): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xee01) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/57, 0x328000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 48.230191311s ago: executing program 0 (id=1350): r0 = syz_io_uring_setup(0xb99, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1001, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x5c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) r5 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x26c, &(0x7f0000000ac0)="$eJzs3T+IHFUABvBvZne9bLJI1EYQ/4CI6MERO8EmNgoBCUFEUCEiYqMkQkywu7WysdBaJZVNEDujpaQJNopgFfWK2AgaLAwWURjZndt4bvbO0z1nZef3g7l5c/PmvTfMfG/uitkN0FoHkxxO0kmymqSXpNha4Z56Obi5ebZ/8XhSVU/+XIzr1du1yXEHkgyTPJzkQlnk5W5y5vyzl3+99Pj9b53u3ffB+Wf6jZ7kpiuXN564+v7RNz8+8tCZL7/+8WiRwxn85bz2XjHjd90iufW/6Ox/ouguegTsxrHXP/pmlPvbktw7zn8vZeqL9/apmy708uB72x37zk9f3dHkWIG9V1W90TNwWAGtUyYZpCjXktTlslxbq/+G/7azv3zl5KnXVl86efrEi4ueqYC5rVwvbTz26conB6by/0Onzj+wvAbJxlPHzn03Kl/tLHo0QCPurFej/K8+v/5A5B/apf4fQP6hpTz/ob3kH9pL/qG95B+WxfpuK/4+Kcg/LLHepDCcuVv+ob3kH9pL/mGJXauqaofdW/MPALRLtbLoN5CBRVn0/AMAAAAAAAAAAAAAAAAAANzobP/i8cnSVJ+fv5tceTRJd1b/nfH3ESf7xj/3/1KMql1X1IfN5bm752xgTh8u+O3rm79vqKNtLtQXdzXU/zbWTyTDN5Ic6nZvvP+Kzftvhv4Oje77s3jL3/Tfe+Gfjng+xdT2I0832/+0387tRSvTZ7V7Ry4ln43mn0Oz5p8yt4/Xs+efwdaPWP6XXr02ZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA05o8AAAD//y0Gc0o=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) getsockname$unix(r6, &(0x7f0000000340)=@abs, &(0x7f0000000080)=0x6e) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000840)={0x7, {{0xa, 0x4e23, 0x0, @empty, 0x2}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x0, @local, 0x5}}, {{0xa, 0x4e22, 0x5, @mcast1, 0x5}}, {{0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}}]}, 0x210) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r11, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723aa0ace48ea8eac0bc7865635f6d5f723afaffffffffffffff3a73302030"], 0x56) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) write$P9_RVERSION(r10, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0xfffffffb, 0x8, '9P2000.u'}, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) 48.144601367s ago: executing program 4 (id=1352): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974"], 0x38}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r3 = socket(0x10, 0x2, 0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xff}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000520099b100000000000000001c"], 0x14}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x1f}, 0x48) close(r5) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7703646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14006eeb1000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a7c33dfeb0014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r12 = dup(r10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r9, &(0x7f0000000c40)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf08412e900092f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="a43b2eaab400000000000000655814d57a16633fa8cbbd2085471641e9", 0x1d}], 0x3) 47.611433317s ago: executing program 0 (id=1361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000577000/0x3000)=nil, 0x6, &(0x7f0000000040), 0x0, 0xe4, 0x0, 0x15, 0x48, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) timer_create(0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@resgid}]}, 0x1, 0x527, &(0x7f0000000c00)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001000)=ANY=[], 0x58}}, 0x0) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x1c8) fcntl$setlease(r4, 0x400, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000016c0)={0x6, 0x6, 0x4, 0x5, 0x7, "3d7ab8219098386f6c2eb03ac916284d7123e1", 0x9, 0xe68}) r5 = dup(r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd78000000df251e00000008000000ffffffff"], 0x1c}}, 0x4000) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x130, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x22, 0x19, "e8d6ae003f2cf8e61d8d339efa18d3964521e38714a35cef39cfe035dfd5"}, @NFC_ATTR_SE_APDU={0xed, 0x19, "4d313f4216ad55665f9db5ec1497cf5c6e51037caca36677bf9cb4d00df8ff79367ee28f8a8d8f23e72cde83f7d8086fa7667f120970ac05e29beafb2fea5ca295f40d8096fe8b5dbd22f57036d14bcb0706ddb46785ad6ed28ac6280cef1a04a74976e578b8a4a1c93d0406dafd29c0981632bed61a684371adc6fcf3dda5e7fd5e067eae1c975b99db43f719594ad3c7c6b20341c4dede90b3b358d0c15148a3c13b1d75cafd13391d2352d645c0511e0e7bc6479a8ca480412f180a5243f97a01f3663f8abac462d028e7df4a0094356260a8b5170d950fc85abc68989ba0fd44db4599c7fa943d"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x850) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @mcast1, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001600)="88e0fb4bf178ddb297e6b6ba3c9d4632af6f0c20fa5fc915b8c9b9a6c709af0dedac0b5e179e25e8512dffe651ce0255b42c4638eca7000375fc68d5eb9f31169b532b083815b06584838a4ea64e3f1127424c6f85f40538723db37dd32db3f323f2af40034b52ba0ddae2333bfd2439f7dd8d5e0984cce1c4d334633742ff6419a5035fef6365ac199cca1ef42a7bb6847d11b57c59adc9f537cdd6e72a6366000000000000000000", 0xa9}, {&(0x7f0000001300)="e42aa50af5b08adc4075bc570b77f45451ad3abed91d349402bda61f690c10e2d01735ed40829beec62c52b37ee3141ec5d8445d617c1e1e728521b1bfc0e177c119f47fa022d521fc3460219fda4b89de6929454f7c219241fec81a303d6d69678e04e3db9e6885d7cb0c04f8c4da7fd5bb629f586b27ebc63adea95056fad3ab8e15ba8e834fd62b0e754546889068eb9bb81e36ba86f18f219fd82617e209b86be01aeed15a7274184bb41995d060276c0b8f9e2e4eed4c749536be3b25e166a2149a43b5a3db2ceaa1f8b4590a3432d9", 0xd2}, {&(0x7f0000001400)="e7d017e8315304e06cfa71580da71dd63a50dfe45c6c7a0ebb61feb916d866de4973d4b5e37953dae05eef48cd10fb9aa4bc159bc07803f28dfe328e544acc86e3bf7067bcf0d42ac4e6f218026358dcc2f4e39442e99f0586994481ca2f088386a37e75dacfaea3b7b2f554a5adfb3bef20f308c0b660f3d56d36dd21b6aa6bb5baa47d6b85639e4c7db2019e06de165d75200b787caaaabacafd8d4fbbe366d3", 0xa1}, {&(0x7f00000014c0)="7e318c1602348785b7564d9b8855838d5b2eec2ae655853169b00b2ac5549aa2331552faae0d3ed6be257f4742a9a0f5366a16bd9fd086ab82a8e521c8cf83320c2f7d72efaf38a39819d28b910cf3d549d29cb56d58bd3cff7e57925d0feeaff3b154fcf61de913c28d19ad72a8215f8bf28e215537f884922bca6fac7f1130026be7415555eda23a57087fe99bb6ce30e46dba1a6a19b3aa9d39e27aeebdaad023d8aca7a40cc89e1da489ee7b5a116500cc19c38be086567037f82862996bdb59b27d1c9b1b29b27532e1befd0d4665f37d5de2f38a5ab7fee4cf7e938a84bd7a199401a75260832bac5af591fa193ac291db", 0xf4}], 0x4}, 0x0) sendmmsg$inet(r5, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000d40)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003040)="a38b", 0x2}], 0x1}}], 0x3, 0x4040040) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8081, 0x4) mbind(&(0x7f0000579000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000001700), 0x81, 0x6) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000740)={0x0, 0x18}) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000180)=""/65, &(0x7f0000000200)=0x41) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 47.169457843s ago: executing program 0 (id=1365): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x388) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18") r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x4008240b, &(0x7f00000013c0)) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) mq_getsetattr(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c697000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = socket(0xa, 0x5, 0x0) listen(r7, 0x100) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000c07840000000200013481750d800800000000010000", @ANYRES32=0x0], 0x20, 0x4000000}, 0x8010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r9 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) 47.05946872s ago: executing program 0 (id=1369): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x98, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@grpquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x101}}]}, 0x1, 0x50d, &(0x7f0000000600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) sendmsg$key(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x2, 0x13, 0x3, 0x0, 0x7, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1b, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x1e, 0x14, 0x2}]}, 0x38}}, 0xc010) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x6, 0x382, &(0x7f0000000040)="$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") perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x8d, 0x4a, 0x7, 0x0, 0x6, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x7fffffff}, 0x10, 0x80, 0x2a, 0x1, 0x3, 0x0, 0xff01, 0x0, 0x9, 0x0, 0xffff}, r2, 0xffffffffffffffff, r1, 0x2) io_setup(0x3ff, &(0x7f0000000500)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f00000000c0)=0x20800001, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/address_bits', 0x2a900, 0x9) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000000)=0x1) 47.0592176s ago: executing program 42 (id=1369): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x98, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@grpquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x101}}]}, 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='rdma.current\x00', 0x275a, 0x0) sendmsg$key(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x2, 0x13, 0x3, 0x0, 0x7, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1b, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x1e, 0x14, 0x2}]}, 0x38}}, 0xc010) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x6, 0x382, &(0x7f0000000040)="$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") perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x8d, 0x4a, 0x7, 0x0, 0x6, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x7fffffff}, 0x10, 0x80, 0x2a, 0x1, 0x3, 0x0, 0xff01, 0x0, 0x9, 0x0, 0xffff}, r2, 0xffffffffffffffff, r1, 0x2) io_setup(0x3ff, &(0x7f0000000500)=0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f00000000c0)=0x20800001, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/address_bits', 0x2a900, 0x9) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000000)=0x1) 33.14935039s ago: executing program 43 (id=1352): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974"], 0x38}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r3 = socket(0x10, 0x2, 0x3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xff}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000520099b100000000000000001c"], 0x14}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x1f}, 0x48) close(r5) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7703646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14006eeb1000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a7c33dfeb0014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r12 = dup(r10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) writev(r9, &(0x7f0000000c40)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf08412e900092f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="a43b2eaab400000000000000655814d57a16633fa8cbbd2085471641e9", 0x1d}], 0x3) 16.021345747s ago: executing program 8 (id=1804): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x1, 0x45) 15.986780809s ago: executing program 8 (id=1805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80) (fail_nth: 2) 15.931101933s ago: executing program 8 (id=1807): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 15.929936183s ago: executing program 8 (id=1808): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) socket(0x1000000000000010, 0x80802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x388) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x1, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)="68dd64c90b429cb3f3cfb5da5670a7ba950bb63afa52eca5658cfb9239a617fb6b2307af22e4a4c3619ce5074ce9735e1366d74c6273a6972918f84ddb59d62da9e4f4751b533e9c918c66a530a3ad3182f83b173322b983ecb5bfce58d273917de8e0bcea3541d50573c810c990bad830041c69f6f8209b18") r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x4008240b, &(0x7f00000013c0)) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) mq_getsetattr(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = socket(0xa, 0x5, 0x0) listen(r7, 0x100) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000c07840000000200013481750d800800000000010000", @ANYRES32=0x0], 0x20, 0x4000000}, 0x8010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r9 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0xe0) 15.052114944s ago: executing program 8 (id=1836): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1, 0x80) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x810, r0, 0xc5df6000) cachestat(r0, &(0x7f0000000040)={0x1, 0x9}, &(0x7f0000000080), 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x2, 0x447, 0x5, 0x5, 0xfffffff7, 0x4, 0x7fffffff, 0x3]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10c}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ab}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004844) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) tkill(r3, 0x3f) getpriority(0x2, r3) r4 = io_uring_setup(0x788f, &(0x7f0000000300)={0x0, 0x4d46, 0x8000, 0x1, 0x27c}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/104, 0x68}], 0x1) r5 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x78, 0xb, 0x4, 0x0, 0x7, 0x88001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x8001}, 0x10008, 0x5, 0x8001, 0x7, 0x1, 0x5, 0x6, 0x0, 0xc}, r3, 0x1, 0xffffffffffffffff, 0x2) r6 = dup2(r4, r0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r6) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) name_to_handle_at(r8, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@OVL_FILEID_V1={0x21, 0xf8, {'\x00', {0x0, 0xfb, 0x1e, 0x4, 0x80, "8fd9ce340561b7926db7a006bec2dffa", "ccba56b3178b358815"}}}, &(0x7f00000006c0), 0x1000) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000700), &(0x7f0000000740)={0x0, 0xfb, 0xed, 0x2, 0x1, "1c8746a3e0c67a7ce025941ea27f1a90", "ee8d700680e8b9783deda2c4479b6f8146411b350b7375b69269d7bc9b507e59b7b94e14d2c8902ec1bf6c8dc90b58742793f34767427edc32aaa177c3db9994b8a2aaf47709c7fa83e15e42a8aadbf3a5b551416f1f9f9b59cc4480e4a0070e998a65e01603f9bc07dd060a386396c3864844b85faa5bed74c5b1aa412bf4763de572f73e1c30b76df6167b218098ed17bbad3b54e128f0209cf08d7833842972053fc4de422c971aa35c1bbb4204fcdff5952829fc8606246360ff30163100a031536dd76011d44ab952fced63d0530f167b689e473442"}, 0xed, 0x1) linkat(r8, &(0x7f0000000840)='./file0\x00', r8, &(0x7f0000000880)='./file0\x00', 0x400) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f00000008c0)=""/75) unlinkat(r8, &(0x7f0000000940)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x200) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f00000009c0)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r6, 0x20, &(0x7f0000000b00)={&(0x7f0000000a00)=""/190, 0xbe, 0x0, &(0x7f0000000ac0)=""/57, 0x39}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000b80)) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000bc0)) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000c00), 0x10) 14.978565628s ago: executing program 8 (id=1841): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x2, 0x107fff, 0x10, 0x4, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x400, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0xffffffff]}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.013351895s ago: executing program 1 (id=2053): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31, 0x3) r1 = socket(0x28, 0x5, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.876164193s ago: executing program 2 (id=2058): capset(0x0, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d0a00000000000095000000000000000806ff630ae1a6b3153853bdb464f74385d7b1319f2466b3d7edd847909ddaf8e83ef188a3200554a5e403c76247f624af442d11d712ff15b5dc5d81debcf5a128d2856783f4148bf53798f6c7e184cdd6148cba66e21ecbda604b4b0ed6ecbe14bfaa10aaede3ed5e07c0893a19a1c9f28346e57238cf70f03a84b1665eb903e6ea0bd4d260b4ff14582329220e0a6af4af6649a818a8bc"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 2.737364331s ago: executing program 2 (id=2060): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) truncate(&(0x7f0000000080)='./file1\x00', 0x9471) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2bb0c, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x800, 0x5fc}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24045081}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r2, r2, 0x2f}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2f0000001800000004000000", @ANYBLOB="4aebcd31b0"], 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac65", 0xce}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad", 0x84}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807", 0x57}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(r4) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x80, 0x4, 0x7, 0x0, 0xe, 0x0, 0x6, 0x48082, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_config_ext={0x8001, 0x1}, 0xf4939fa96f247d8a, 0x2, 0x65d, 0x6, 0x7f, 0x5, 0x401, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffc}, r3, 0xa, 0xffffffffffffffff, 0x4) 2.677654815s ago: executing program 3 (id=2061): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000280)=0x7, 0x4) 2.620979098s ago: executing program 3 (id=2063): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x537c0b8d69afff6f}, 0x20008000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd59e, 0x1, 0x40000002, 0xbc}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r8, 0x2000, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000440)={0x68, 0x29, 0x2, {0x0, [{{0x2, 0x1, 0x1}, 0x6, 0x9a, 0x7, './file0'}, {{0x40, 0x3, 0x3}, 0x6, 0x3, 0x7, './file0'}, {{0x8, 0x0, 0x7}, 0x6e19219c, 0x1, 0x7, './file0'}]}}, 0x68) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000380)=[r4, 0xffffffffffffffff], 0x2, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$packet_rx_ring(r12, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r13 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r13, &(0x7f0000000000)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401, 0x1}, 0x20) setsockopt$packet_int(r12, 0x107, 0xe, &(0x7f0000000280)=0x7, 0x4) 2.181540714s ago: executing program 1 (id=2068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271d", 0x8}], 0x4}, 0x0) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 2.164101184s ago: executing program 1 (id=2069): socket$inet(0x2, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x842cc0, 0x0) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x2) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x3, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x101000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000580)={@broadcast, @random="ec49a502f8fb", @void, {@generic={0xf5}}}, &(0x7f0000000240)={0x0, 0x1, [0xd80, 0xdc8, 0x545, 0x309]}) close(0xffffffffffffffff) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.872733312s ago: executing program 2 (id=2073): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xb) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) io_setup(0x3ff, &(0x7f0000000500)) 1.870484571s ago: executing program 3 (id=2075): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10340, 0x0) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x40, 0x9, 0x3f, 0x0, 0x3, 0xc2180, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8200, 0x7, 0x81, 0x0, 0x800, 0x9, 0xc7, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x2, r4, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000008"], 0x870) epoll_create1(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10340, 0x0) (async) getsockopt$MRT(r2, 0x0, 0xd0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) writev(r4, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x40, 0x9, 0x3f, 0x0, 0x3, 0xc2180, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8200, 0x7, 0x81, 0x0, 0x800, 0x9, 0xc7, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x2, r4, 0x0) (async) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000008"], 0x870) (async) epoll_create1(0x0) (async) 1.838413253s ago: executing program 3 (id=2076): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000010700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.419174818s ago: executing program 2 (id=2082): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x2f0) r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/132) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000000140)=""/85) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect(0x2, 0x6ee78b90ef7fb6da, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000005c0)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x300c}]}, 0x34}}, 0x40005) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x7, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x4024440) (async) socket$inet_udp(0x2, 0x2, 0x0) 1.300333005s ago: executing program 2 (id=2085): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) 1.125300905s ago: executing program 1 (id=2088): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xff}, 0x10}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b400a1889afbfee6be007111b70000000000160000577248b8ca9b10cea37d000000000095737400"/55], &(0x7f0000000300)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300030000000800090002000000"], 0x44}}, 0x0) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) splice(r5, 0x0, r4, 0x0, 0x400c5, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffe3e) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x7}, &(0x7f0000000140)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffdcffffffffffff0806000108000604000100000000007fffffff00ffffffffffffffffffff"], 0x0) r10 = openat$cgroup_ro(r6, &(0x7f0000000580)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) ftruncate(r10, 0xc17a) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[], 0x1057c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x4, 0x9, 0x9, 0x1, 0x6, 0xffffffffffffffff}) syz_clone3(&(0x7f00000006c0)={0x200080, &(0x7f0000000200), &(0x7f0000000240), 0x0, {0x24}, &(0x7f0000000380)=""/10, 0xa, &(0x7f0000000f00)=""/4096, &(0x7f0000000680)=[r11, 0x0], 0x2}, 0x58) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r12, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x6, 0x5}, 0x14) 954.020105ms ago: executing program 3 (id=2089): capset(&(0x7f0000000040)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d0a00000000000095000000000000000806ff630ae1a6b3153853bdb464f74385d7b1319f2466b3d7edd847909ddaf8e83ef188a3200554a5e403c76247f624af442d11d712ff15b5dc5d81debcf5a128d2856783f4148bf53798f6c7e184cdd6148cba66e21ecbda604b4b0ed6ecbe14bfaa10aaede3ed5e07c0893a19a1c9f28346e57238cf70f03a84b1665eb903e6ea0bd4d260b4ff14582329220e0a6af4af6649a818a8bc"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 952.650835ms ago: executing program 9 (id=2090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$inet(0x2, 0x4, 0x46) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0xfff1}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040028}, 0x0) syz_mount_image$iso9660(&(0x7f0000002fc0), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@check_relaxed}, {}, {@cruft}, {@map_acorn}, {@dmode={'dmode', 0x3d, 0x4}}, {@uid={'uid', 0x3d, r5}}, {@check_strict}, {@check_strict}, {@utf8}, {@nocompress}, {}], [{@smackfsfloor}, {@permit_directio}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}, 0x0, 0x406, &(0x7f0000002b80)="$eJzs3M9OG0ccwPFZYiilUhQpahIIh0nTSvQQZ3cpRiin7XpsJlnvrmbWEZyqqECECqQqqVS4tFz6R2ofIte+QS99okbtG1Dtrk0BG1zxzyj6fqRoxp7fzvxmY83IRrMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJ6y7rueISMftJXmysG6SVr+GT7aKotvfR0eKU8YVwsn/ifFxca98697t/5o/LDu5W766K8bzYlzsfnDn1pPblZHu9ackfCW2d3Zf/VHm+L/iK//sFy49sSvSVLG2iW4FTSW1TeRCreY+XmxY2dCRsss2Uy0ZGhVkiZEz4afSW1iYlaq6nLTjZj2IVPfN+Ue+69bk02qqAmOT+PHTqg0XdRTpuFnE5M15zHz+QXymM5mpoCXl2vrG6uygJPMg75R2R4gfiiB/UE++6/ue5/tebW5hbt51K77ryyNvuMeInkuG/6HFcF3k8g2cy35n/wcAAAAAAO8up/iNPf/+P1r8Du+Iho6UO+y0AAAAAADABSr+8n83L0bz2j3h8P0fAAAAAIB3zc+Hz9i93++MnU3fc/78Wxgz6uylSx87m0EeHmyKSnHdjeM9Zo0p52ank6KoVTqvQjXtTJZBk93ot51ibdBZP6cngc7IxxMoT9jtf98nAfGrmCqDplbKcqXbUo4y0dCRqoZJ9MQTQXBzJFNL2bdbo0IU0/8lbt10xNr6xmr1y1cbK0Uue3kve5udAxQ95yh6boa41R3x9cG5x/4zHut0UYw7UY7rHp7/SNk+0jvmpOj/HyB+FPfLmPsTZTlxdP7j+fy96pHZr393MPtOFt6ZZn44i+kyZnrmYV48nOmThT8oC/9wFiffi/NlMds/i78Ospg9ZxYAMCxrA3Yhp3fjP8Mqd3G7++kr+oMy5sFUsbBWpvqs6O6gfcU95+72e88zEE7aY/Nxf4tb1TEhDnbVN/kFb04c10a+k9/CG683vxZ3tnd2H61vvni5+nJ1y/dna+5nrjvni9FiGp2CvQcA0Icyb52J7CfHGJ1+4Y0teEG2qKRJwmfS6HpTSR1nyoSLQdxUMjVJloRJlFee67qy0rbTNDGZbCRGponVS8WTX2Tn0S9WtYI406FNIxVYJcMkzoIwk3VtQ5m2P4+0XVSmuNimKtQNHQaZTmJpk7YJVVVKq9ShQF1XcaYbOq/GMjW6FZhl+TyJ2i0l68qGRqdZkk/LHIyl40ZiWkW31WHfbAAArontnd2vXmxsrH5ziZVhzxEAABzFLg0AAAAAAAAAAAAAAAAAAAAAwPV3Fef/LrbiCCGuQRpUqFx0ZeysH+z9S8hn2CsTgMv2bwAAAP//4Ieocw==") ioctl(r4, 0x8916, &(0x7f0000000000)) r10 = socket$igmp6(0xa, 0x3, 0x2) r11 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008"], 0x92fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 937.666786ms ago: executing program 3 (id=2091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4040004) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt(r4, 0x0, 0x50, 0x0, &(0x7f0000001ffc)) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xffe0, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x69}}, @TCA_CHAIN={0x0, 0xb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20048850) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x80000001, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) recvfrom(r6, 0x0, 0x0, 0x734, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 592.377476ms ago: executing program 9 (id=2092): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (fail_nth: 4) 383.817948ms ago: executing program 2 (id=2093): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xb) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) io_setup(0x3ff, &(0x7f0000000500)) 344.80344ms ago: executing program 9 (id=2094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 244.327496ms ago: executing program 9 (id=2095): r0 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000005b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000007f"], 0x60, 0x4000000}], 0x1, 0x20040099) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000740)={[{@i_version}, {@nogrpid}, {@bh}], [{@euid_lt={'euid<', r1}}, {@appraise}, {@flag='nolazytime'}, {@smackfsroot={'smackfsroot', 0x3d, '\''}}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0x100000001, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000340), 0x1, 0x7c3, &(0x7f0000001680)="$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") socket(0xa, 0x5, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f0000005b00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000007f"], 0x60, 0x4000000}], 0x1, 0x20040099) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000740)={[{@i_version}, {@nogrpid}, {@bh}], [{@euid_lt={'euid<', r1}}, {@appraise}, {@flag='nolazytime'}, {@smackfsroot={'smackfsroot', 0x3d, '\''}}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") (async) creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) fallocate(r2, 0x0, 0x100000001, 0x1) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000340), 0x1, 0x7c3, &(0x7f0000001680)="$eJzs3c1rHOcZAPBnVpJXkt1KhdLWN0HBFRivKle1W+jBpYdSqMHQnmuL1Vq4WmmNdmUsIahNCeQSSEIOgeTicz6cW675gFyS/Bc5BBsnkU0ccggKszsrydKuPmxpV7F+PxjN+87M6nmf+Xx3Z9gN4MgaSf/kIk5GxMtJxFA2PYmIvnqpN+JCY7nHK8v9EVFMYnX1X18n9WUerSwXY8NrUsezym8i4qMXIk7ntsatLi7NTJbLpfmsPlabvT5WXVw6c212cro0XZo7Nz4xcfb8H8+f279cv/186cT9V/7+u3cvfP//X9996eMkLsSJbN7GPPbLSIxk66QvXYVP+Nt+B+uypNsN4Kmkh2ZP4yiPkzEUPfVSGwOdbBkAcFD+FxGrAMARk7j+A8AR0/wc4NHKcrE5dPcTic568NeI6G/k/zgbGnN6s3t2/fX7oIOPkifujCQRMbwP8Uci4s33/3OqJ6un7XAvDeiEW7cj4srwyNbzf7LlmYW9+v12M1fz9dHIpslH7foD3fRB2v/5U6v+X26t/xMt+j/5xrH7q2eNv/Pxn7v3rDG2k/b//tJ4tm1T/2/tobXhnqz2s3qfry+5eq1cSs9tP4+I0ejLp/Xx+qKte26jD3942C5+1v97Ox2+efW/b6Xx0/H6Erl7vfknXzM1Wev95FkTzzy4HYNZcVP+ydr2T9r0fy/tMsY//vziG+3mpfmn+TaHrfkfrNU7Eadabv/1bZls+3ziWH13GGvuFC2898Xrg+3ib9z+6ZDGT8f7n2lrD25HfQdIkvV10Jizlv9wsvF5zereY3x2Z+jDdvN2zr/l/j95LPl3vXwsm3ZzslabH484lvxz6/Sz669t1pvLp/mP/rb18d8I23r/T98TXtll/r33v3rn6fM/WGn+U9vv/5u2f382eX3KToW7j2d62sXf3fafqJdGsynp9t8pr9206+n2ZgAAAAAAAAAAAAAAAAAAAAAAAADYu1xEnIgkV1gr53KFQuM3vH8Zg7lypVo7fbWyMDcV9d/KHo6+XPOrLoc2fB/qePZ9+M362U31P0TELyLitfxAvV4oVspT3U4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADLH2/z+f+rLfLdbBwAcmP5uNwAA6DjXfwA4evZ2/R84sHYAAJ3j/T8AHD27vv5fOdh2AACd0+b6v9zpdgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDcunTxYjqsfreyXEzrUzcWF2YqN85MlaozhdmFYqFYmb9emK5UpsulQrEy2/Yf3WqMypXK9YmYW7g5VitVa2PVxaXLs5WFudrla7OT06XLpb6OZQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu1ddXJqZLJdL889D4dP8emL7HGKgqwkOHorVu7HQG4eiGYe6kI8ts3KHomG7Kmw8Swx04cwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8NPwYwAAAP//L0cXYQ==") (async) 210.194938ms ago: executing program 1 (id=2096): socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc893, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x1, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) socket(0x6, 0xa, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x10001, 0x5, 0x5, 0x1, 0x8, 0xa7c, 0x3, {0x0, @in6={{0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x103f, 0x5, 0x8d, 0x100005, 0xebec}}, &(0x7f0000000280)=0xb0) 120.691784ms ago: executing program 9 (id=2097): r0 = syz_open_dev$loop(&(0x7f0000002680), 0x7, 0x10b300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xe, 0xffff}, @window={0x3, 0x3, 0x81}]}}}}}}}, 0x0) 460.501µs ago: executing program 1 (id=2098): r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x842cc0, 0x0) flock(r1, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x3, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x101000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000580)={@broadcast, @random="ec49a502f8fb", @void, {@generic={0xf5}}}, &(0x7f0000000240)={0x0, 0x1, [0xd80, 0xdc8, 0x545, 0x309]}) close(0xffffffffffffffff) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 0s ago: executing program 9 (id=2099): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x2c0, 0x1d0, 0x1d0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@loopback, @loopback, 0x0, 0xff, 0x1, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0xd98, 0x101, 0x6, 0x7fff, 0x1, 'veth1_to_team\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfb) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000100)=0x107) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x15, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, r8, r4}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x5) accept(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000080)={r11, 0x1, r10, 0x4}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x121) fcntl$setlease(r12, 0x400, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r14, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) fcntl$setlease(r12, 0x400, 0x2) ioctl$MON_IOCX_GETX(r12, 0x4018920a, &(0x7f0000000400)={&(0x7f0000000440), &(0x7f00000001c0)=""/109, 0x6d}) r15 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r15, &(0x7f00000004c0)={0xa, {0x3, 0x6}}, 0xa) kernel console output (not intermixed with test programs): ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.281397][ T9913] RSP: 002b:00007f286a3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.281425][ T9913] RAX: ffffffffffffffda RBX: 00007f286bc05fa0 RCX: 00007f286b98aeb9 [ 139.281475][ T9913] RDX: 0000000004000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 139.281494][ T9913] RBP: 00007f286a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.281513][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.281526][ T9913] R13: 00007f286bc06038 R14: 00007f286bc05fa0 R15: 00007fff69caa0a8 [ 139.281546][ T9913] [ 139.764523][ T9947] loop9: detected capacity change from 0 to 2048 [ 139.792054][ T9947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.828393][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.951595][ T9973] __nla_validate_parse: 18 callbacks suppressed [ 139.951683][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 139.967278][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 139.979945][ T9973] loop2: detected capacity change from 0 to 512 [ 139.987002][ T9973] EXT4-fs (loop2): invalid inodes per group: 0 [ 139.987002][ T9973] [ 140.085186][ T9983] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1557'. [ 140.152212][ T9950] chnl_net:caif_netlink_parms(): no params data found [ 140.203281][ T9989] loop9: detected capacity change from 0 to 8192 [ 140.237102][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.244339][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.261331][ T9950] bridge_slave_0: entered allmulticast mode [ 140.269966][ T9950] bridge_slave_0: entered promiscuous mode [ 140.291228][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.298503][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.306440][ T9950] bridge_slave_1: entered allmulticast mode [ 140.313092][ T9950] bridge_slave_1: entered promiscuous mode [ 140.344901][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'. [ 140.386841][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.400894][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.451715][T10014] loop9: detected capacity change from 0 to 2048 [ 140.479141][ T9950] team0: Port device team_slave_0 added [ 140.487638][ T9950] team0: Port device team_slave_1 added [ 140.494694][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 140.519375][T10014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.536588][T10031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.543860][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 140.549443][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.551294][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 140.558174][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.565448][T10031] IPv6: NLM_F_CREATE should be set when creating new route [ 140.591358][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.610273][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.617371][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.643400][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.666452][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.706965][ T9950] hsr_slave_0: entered promiscuous mode [ 140.713300][ T9950] hsr_slave_1: entered promiscuous mode [ 140.723736][ T9950] debugfs: 'hsr0' already exists in 'hsr' [ 140.725172][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 140.729770][ T9950] Cannot create hsr debugfs directory [ 140.783645][T10041] loop3: detected capacity change from 0 to 512 [ 140.797297][T10041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.830786][T10041] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.1569: inode #0: comm syz.3.1569: iget: illegal inode # [ 140.844532][T10041] EXT4-fs (loop3): Remounting filesystem read-only [ 140.851077][T10041] EXT4-fs (loop3): get orphan inode failed [ 140.857809][T10041] EXT4-fs (loop3): mount failed [ 141.036915][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 141.118121][T10082] loop3: detected capacity change from 0 to 2048 [ 141.135827][T10082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.196608][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.209784][ T9950] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 141.221472][ T9950] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 141.250673][T10103] loop1: detected capacity change from 0 to 1024 [ 141.258301][ T9950] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 141.274521][T10103] EXT4-fs: Ignoring removed orlov option [ 141.294049][ T9950] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 141.305705][T10103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.380741][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.391009][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.403991][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.425154][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.450599][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.457731][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.472311][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.479431][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.510406][ T9950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.520946][ T9950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.601169][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.784245][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 141.807007][ T9950] veth0_vlan: entered promiscuous mode [ 141.819480][ T9950] veth1_vlan: entered promiscuous mode [ 141.842698][ T9950] veth0_macvtap: entered promiscuous mode [ 141.850922][ T9950] veth1_macvtap: entered promiscuous mode [ 141.877939][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.899303][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.911455][ T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.930831][ T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.952006][ T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.964595][ T60] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.974229][T10191] loop9: detected capacity change from 0 to 512 [ 141.991288][T10191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.998008][T10191] EXT4-fs: Ignoring removed bh option [ 142.023081][T10198] FAULT_INJECTION: forcing a failure. [ 142.023081][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 142.035949][T10198] CPU: 0 UID: 0 PID: 10198 Comm: syz.2.1587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.036072][T10198] Tainted: [W]=WARN [ 142.036081][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.036097][T10198] Call Trace: [ 142.036105][T10198] [ 142.036114][T10198] __dump_stack+0x1d/0x30 [ 142.036206][T10198] dump_stack_lvl+0x95/0xd0 [ 142.036293][T10198] dump_stack+0x15/0x1b [ 142.036313][T10198] should_fail_ex+0x263/0x280 [ 142.036348][T10198] should_failslab+0x8c/0xb0 [ 142.036379][T10198] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 142.036418][T10198] ? __alloc_skb+0x2f0/0x4b0 [ 142.036499][T10198] __alloc_skb+0x2f0/0x4b0 [ 142.036536][T10198] ? __alloc_skb+0x219/0x4b0 [ 142.036567][T10198] netlink_alloc_large_skb+0xbf/0xf0 [ 142.036607][T10198] netlink_sendmsg+0x40c/0x6f0 [ 142.036630][T10198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.036649][T10198] ____sys_sendmsg+0x5af/0x600 [ 142.036677][T10198] ___sys_sendmsg+0x195/0x1e0 [ 142.036719][T10198] __x64_sys_sendmsg+0xd4/0x160 [ 142.036801][T10198] x64_sys_call+0x17ba/0x3000 [ 142.036833][T10198] do_syscall_64+0xc0/0x2a0 [ 142.036865][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.036887][T10198] RIP: 0033:0x7f85b6f1aeb9 [ 142.036936][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.036955][T10198] RSP: 002b:00007f85b5977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.037052][T10198] RAX: ffffffffffffffda RBX: 00007f85b7195fa0 RCX: 00007f85b6f1aeb9 [ 142.037072][T10198] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 142.037102][T10198] RBP: 00007f85b5977090 R08: 0000000000000000 R09: 0000000000000000 [ 142.037193][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.037283][T10198] R13: 00007f85b7196038 R14: 00007f85b7195fa0 R15: 00007ffdef333b38 [ 142.037307][T10198] [ 142.254201][T10191] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 142.278882][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.300072][T10191] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #11: comm syz.9.1586: corrupted inode contents [ 142.341272][T10191] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #11: comm syz.9.1586: mark_inode_dirty error [ 142.355460][T10191] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1586: invalid indirect mapped block 1 (level 1) [ 142.374574][T10191] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #11: comm syz.9.1586: corrupted inode contents [ 142.387595][T10201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.418288][T10191] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 142.427293][T10191] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #11: comm syz.9.1586: corrupted inode contents [ 142.439591][T10191] EXT4-fs error (device loop9): ext4_truncate:4635: inode #11: comm syz.9.1586: mark_inode_dirty error [ 142.451841][T10191] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 142.466244][T10191] EXT4-fs (loop9): 1 truncate cleaned up [ 142.478007][T10191] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.490484][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 142.546130][ T6567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.599714][T10232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1597'. [ 142.787864][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.952240][T10269] SELinux: failed to load policy [ 142.990743][T10282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.040335][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.320550][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 143.320581][ T29] audit: type=1400 audit(1770162592.989:1589): avc: denied { create } for pid=10323 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.347267][ T29] audit: type=1400 audit(1770162592.989:1590): avc: denied { write } for pid=10323 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.434152][ T29] audit: type=1400 audit(1770162593.059:1591): avc: denied { mount } for pid=10328 comm="syz.8.1615" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.456529][ T29] audit: type=1400 audit(1770162593.069:1592): avc: denied { name_bind } for pid=10328 comm="syz.8.1615" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 143.478342][ T29] audit: type=1400 audit(1770162593.069:1593): avc: denied { read } for pid=10328 comm="syz.8.1615" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.501706][ T29] audit: type=1400 audit(1770162593.069:1594): avc: denied { open } for pid=10328 comm="syz.8.1615" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.526028][ T29] audit: type=1400 audit(1770162593.069:1595): avc: denied { setattr } for pid=10328 comm="syz.8.1615" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.550507][ T29] audit: type=1400 audit(1770162593.079:1596): avc: denied { create } for pid=10331 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.570232][ T29] audit: type=1400 audit(1770162593.079:1597): avc: denied { unmount } for pid=10328 comm="syz.8.1615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.661067][ T29] audit: type=1400 audit(1770162593.279:1598): avc: denied { map_read map_write } for pid=10331 comm="syz.1.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.691559][T10347] set_capacity_and_notify: 2 callbacks suppressed [ 143.691582][T10347] loop8: detected capacity change from 0 to 2048 [ 143.741406][T10347] EXT4-fs: Ignoring removed oldalloc option [ 143.831012][T10347] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 143.849423][T10347] System zones: 0-7 [ 143.860670][T10347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.932503][T10372] loop2: detected capacity change from 0 to 512 [ 144.010701][T10380] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.1620: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 144.029454][T10372] EXT4-fs: Invalid want_extra_isize 0 [ 144.138669][T10380] EXT4-fs (loop8): Remounting filesystem read-only [ 144.238804][T10393] loop1: detected capacity change from 0 to 1024 [ 144.287866][T10393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.332861][T10393] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.417506][T10393] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 3) [ 144.495422][T10393] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 144.508437][T10393] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.508437][T10393] [ 144.558153][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.618754][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.712775][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.770571][T10389] loop3: detected capacity change from 0 to 512 [ 144.807223][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.829987][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.845622][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.866013][T10389] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.901321][T10389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.921899][T10421] syzkaller0: entered promiscuous mode [ 144.927555][T10421] syzkaller0: entered allmulticast mode [ 144.934381][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 144.948992][T10389] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1633: inode #15: comm syz.3.1633: iget: illegal inode # [ 144.968644][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.006683][T10404] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1632: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.021626][T10389] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1633: couldn't read orphan inode 15 (err -117) [ 145.115982][ T52] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 145.132708][T10389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.185901][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.198259][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.198259][ T52] [ 145.266325][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.302733][T10389] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 145.337312][T10440] loop2: detected capacity change from 0 to 1024 [ 145.353856][T10389] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 145.384770][T10440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.424026][T10440] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.519855][T10440] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 3) [ 145.535416][T10455] loop8: detected capacity change from 0 to 2048 [ 145.549260][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.576929][T10455] EXT4-fs: Ignoring removed oldalloc option [ 145.599728][T10456] syzkaller0: entered promiscuous mode [ 145.605304][T10456] syzkaller0: entered allmulticast mode [ 145.611312][T10440] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 145.623699][T10440] EXT4-fs (loop2): This should not happen!! Data will be lost [ 145.623699][T10440] [ 145.672000][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.675491][T10455] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 145.697963][T10455] System zones: 0-7 [ 145.704552][T10455] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.752755][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.839505][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.864763][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.936363][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 145.951356][T10484] EXT4-fs error (device loop8): ext4_ext_precache:632: inode #2: comm syz.8.1646: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 146.035199][T10484] EXT4-fs (loop8): Remounting filesystem read-only [ 146.043084][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 146.103144][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 146.136154][T10467] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.1644: lblock 3 mapped to illegal pblock 3 (length 1) [ 146.225121][ T52] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 146.252975][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 146.265373][ T52] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.265373][ T52] [ 146.387914][ T6567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.406768][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.457992][T10514] Cannot find del_set index 2 as target [ 146.638150][T10536] __nla_validate_parse: 7 callbacks suppressed [ 146.638185][T10536] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1660'. [ 147.082587][T10570] loop1: detected capacity change from 0 to 512 [ 147.120339][T10570] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.154566][T10570] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.160973][T10570] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.1667: inode #15: comm syz.1.1667: iget: illegal inode # [ 147.174761][T10570] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1667: couldn't read orphan inode 15 (err -117) [ 147.245382][T10570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.415061][T10570] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 147.425409][T10570] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 147.475026][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.673591][T10593] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1675'. [ 147.798067][T10600] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1678'. [ 147.828397][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 147.883676][T10603] tipc: Can't bind to reserved service type 0 [ 147.931330][T10606] loop1: detected capacity change from 0 to 512 [ 147.938417][T10606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.959443][T10606] EXT4-fs (loop1): 1 truncate cleaned up [ 147.970304][T10606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.153180][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.326013][T10612] loop2: detected capacity change from 0 to 512 [ 148.338639][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 148.338658][ T29] audit: type=1400 audit(1770162598.009:1787): avc: denied { write } for pid=10629 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.398900][T10612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.430571][ T29] audit: type=1400 audit(1770162598.099:1788): avc: denied { ioctl } for pid=10629 comm="syz.1.1685" path="socket:[29286]" dev="sockfs" ino=29286 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.493108][T10612] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.526387][T10612] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.1681: inode #15: comm syz.2.1681: iget: illegal inode # [ 148.596263][ T29] audit: type=1400 audit(1770162598.269:1789): avc: denied { create } for pid=10633 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.648863][T10612] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1681: couldn't read orphan inode 15 (err -117) [ 148.690418][ T29] audit: type=1400 audit(1770162598.319:1790): avc: denied { create } for pid=10633 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 148.710165][ T29] audit: type=1400 audit(1770162598.319:1791): avc: denied { ioctl } for pid=10633 comm="syz.3.1686" path="socket:[29297]" dev="sockfs" ino=29297 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.734976][ T29] audit: type=1400 audit(1770162598.319:1792): avc: denied { getopt } for pid=10633 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.754929][T10632] loop1: detected capacity change from 0 to 8192 [ 148.770738][T10612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.782821][T10630] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1685'. [ 148.867521][ T29] audit: type=1400 audit(1770162598.529:1793): avc: denied { bind } for pid=10629 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.966453][T10641] loop8: detected capacity change from 0 to 4096 [ 148.994372][T10641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.013397][ T29] audit: type=1400 audit(1770162598.539:1794): avc: denied { ioctl } for pid=10629 comm="syz.1.1685" path="socket:[28621]" dev="sockfs" ino=28621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.071484][T10641] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1689: corrupted inode contents [ 149.098054][T10651] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1691'. [ 149.117608][T10641] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.1689: mark_inode_dirty error [ 149.143870][ T29] audit: type=1400 audit(1770162598.789:1795): avc: denied { remove_name } for pid=10640 comm="syz.8.1689" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.166659][ T29] audit: type=1400 audit(1770162598.789:1796): avc: denied { rename } for pid=10640 comm="syz.8.1689" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.167027][T10641] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1689: corrupted inode contents [ 149.254369][T10612] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 149.278139][T10641] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.1689: mark_inode_dirty error [ 149.302750][T10659] loop3: detected capacity change from 0 to 2048 [ 149.321694][T10612] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 149.358479][T10659] EXT4-fs: Ignoring removed oldalloc option [ 149.394320][T10641] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1689: corrupted inode contents [ 149.416612][T10641] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.1689: mark_inode_dirty error [ 149.440202][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 149.459791][T10641] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1689: corrupted inode contents [ 149.483733][T10641] EXT4-fs error (device loop8): ext4_truncate:4635: inode #15: comm syz.8.1689: mark_inode_dirty error [ 149.497466][ T6567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.508645][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 149.518728][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 149.534518][T10641] EXT4-fs error (device loop8) in ext4_setattr:6035: Corrupt filesystem [ 149.542974][T10659] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 149.567564][T10652] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.1689: corrupted inode contents [ 149.584324][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 149.643894][T10659] System zones: 0-7 [ 149.655529][T10659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.680756][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.693178][T10681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.842996][T10681] bond1: (slave ip6tnl1): refused to change device type [ 149.918876][T10712] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1692: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 149.967096][T10710] netlink: 'syz.8.1701': attribute type 1 has an invalid length. [ 150.053207][T10712] EXT4-fs (loop3): Remounting filesystem read-only [ 150.154636][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.164159][T10736] bridge_slave_1: left allmulticast mode [ 150.169861][T10736] bridge_slave_1: left promiscuous mode [ 150.175716][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.184351][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.210632][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.225452][T10736] bridge_slave_0: left allmulticast mode [ 150.231174][T10736] bridge_slave_0: left promiscuous mode [ 150.236930][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.503460][T10754] loop2: detected capacity change from 0 to 128 [ 150.514188][T10756] FAULT_INJECTION: forcing a failure. [ 150.514188][T10756] name failslab, interval 1, probability 0, space 0, times 0 [ 150.526904][T10756] CPU: 0 UID: 0 PID: 10756 Comm: syz.3.1713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.526939][T10756] Tainted: [W]=WARN [ 150.526947][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.527033][T10756] Call Trace: [ 150.527041][T10756] [ 150.527049][T10756] __dump_stack+0x1d/0x30 [ 150.527148][T10756] dump_stack_lvl+0x95/0xd0 [ 150.527171][T10756] dump_stack+0x15/0x1b [ 150.527191][T10756] should_fail_ex+0x263/0x280 [ 150.527306][T10756] should_failslab+0x8c/0xb0 [ 150.527331][T10756] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 150.527365][T10756] ? __alloc_skb+0x2f0/0x4b0 [ 150.527406][T10756] __alloc_skb+0x2f0/0x4b0 [ 150.527440][T10756] ? __alloc_skb+0x219/0x4b0 [ 150.527485][T10756] netlink_alloc_large_skb+0xbf/0xf0 [ 150.527585][T10756] netlink_sendmsg+0x40c/0x6f0 [ 150.527614][T10756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.527638][T10756] ____sys_sendmsg+0x5af/0x600 [ 150.527660][T10756] ___sys_sendmsg+0x195/0x1e0 [ 150.527716][T10756] __x64_sys_sendmsg+0xd4/0x160 [ 150.527746][T10756] x64_sys_call+0x17ba/0x3000 [ 150.527781][T10756] do_syscall_64+0xc0/0x2a0 [ 150.527816][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.527916][T10756] RIP: 0033:0x7fd67e9faeb9 [ 150.527936][T10756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.527976][T10756] RSP: 002b:00007fd67d457028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.527996][T10756] RAX: ffffffffffffffda RBX: 00007fd67ec75fa0 RCX: 00007fd67e9faeb9 [ 150.528010][T10756] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 150.528030][T10756] RBP: 00007fd67d457090 R08: 0000000000000000 R09: 0000000000000000 [ 150.528048][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.528065][T10756] R13: 00007fd67ec76038 R14: 00007fd67ec75fa0 R15: 00007ffd869a9698 [ 150.528127][T10756] [ 150.802544][T10761] FAULT_INJECTION: forcing a failure. [ 150.802544][T10761] name failslab, interval 1, probability 0, space 0, times 0 [ 150.802586][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.1.1715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.802696][T10761] Tainted: [W]=WARN [ 150.802703][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.802721][T10761] Call Trace: [ 150.802728][T10761] [ 150.802737][T10761] __dump_stack+0x1d/0x30 [ 150.802874][T10761] dump_stack_lvl+0x95/0xd0 [ 150.802902][T10761] dump_stack+0x15/0x1b [ 150.802928][T10761] should_fail_ex+0x263/0x280 [ 150.802964][T10761] should_failslab+0x8c/0xb0 [ 150.802997][T10761] kmem_cache_alloc_noprof+0x68/0x490 [ 150.803083][T10761] ? getname_flags+0x7f/0x3b0 [ 150.803290][T10761] getname_flags+0x7f/0x3b0 [ 150.803368][T10761] __se_sys_statx+0x5e/0x1b0 [ 150.803457][T10761] ? vfs_write+0x86e/0x9f0 [ 150.803522][T10761] ? __rcu_read_unlock+0x4e/0x70 [ 150.803665][T10761] ? __fget_files+0x184/0x1c0 [ 150.803765][T10761] ? mutex_lock+0x57/0x90 [ 150.803857][T10761] ? mutex_unlock+0x4e/0x90 [ 150.803991][T10761] ? fput+0x8f/0xc0 [ 150.804138][T10761] ? ksys_write+0x194/0x1a0 [ 150.804202][T10761] __x64_sys_statx+0x67/0x80 [ 150.804287][T10761] x64_sys_call+0x2d43/0x3000 [ 150.804363][T10761] do_syscall_64+0xc0/0x2a0 [ 150.804536][T10761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.804661][T10761] RIP: 0033:0x7f62ee85aeb9 [ 150.804707][T10761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.804757][T10761] RSP: 002b:00007f62ed2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 150.804852][T10761] RAX: ffffffffffffffda RBX: 00007f62eead5fa0 RCX: 00007f62ee85aeb9 [ 150.804895][T10761] RDX: 0000000000004000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 150.804957][T10761] RBP: 00007f62ed2b7090 R08: 0000200000002500 R09: 0000000000000000 [ 150.805009][T10761] R10: 56159817211d7953 R11: 0000000000000246 R12: 0000000000000001 [ 150.805054][T10761] R13: 00007f62eead6038 R14: 00007f62eead5fa0 R15: 00007ffd5aa271d8 [ 150.805126][T10761] [ 151.113065][T10772] loop8: detected capacity change from 0 to 8192 [ 151.145378][T10772] loop8: p1 < > p2 p4 < p5 > [ 151.150116][T10772] loop8: partition table partially beyond EOD, truncated [ 151.157847][T10772] loop8: p1 start 134217728 is beyond EOD, truncated [ 151.164637][T10772] loop8: p2 size 591360 extends beyond EOD, truncated [ 151.178673][T10772] loop8: p5 size 591360 extends beyond EOD, truncated [ 151.222925][T10790] FAULT_INJECTION: forcing a failure. [ 151.222925][T10790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.236170][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.1.1725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.236214][T10790] Tainted: [W]=WARN [ 151.236240][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.236258][T10790] Call Trace: [ 151.236268][T10790] [ 151.236278][T10790] __dump_stack+0x1d/0x30 [ 151.236311][T10790] dump_stack_lvl+0x95/0xd0 [ 151.236452][T10790] dump_stack+0x15/0x1b [ 151.236479][T10790] should_fail_ex+0x263/0x280 [ 151.236588][T10790] should_fail+0xb/0x20 [ 151.236625][T10790] should_fail_usercopy+0x1a/0x20 [ 151.236683][T10790] _copy_from_user+0x1c/0xb0 [ 151.236706][T10790] ____sys_sendmsg+0x1e2/0x600 [ 151.236842][T10790] ___sys_sendmsg+0x195/0x1e0 [ 151.236899][T10790] __x64_sys_sendmsg+0xd4/0x160 [ 151.236930][T10790] x64_sys_call+0x17ba/0x3000 [ 151.236968][T10790] do_syscall_64+0xc0/0x2a0 [ 151.237054][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.237084][T10790] RIP: 0033:0x7f62ee85aeb9 [ 151.237104][T10790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.237130][T10790] RSP: 002b:00007f62ed2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.237198][T10790] RAX: ffffffffffffffda RBX: 00007f62eead5fa0 RCX: 00007f62ee85aeb9 [ 151.237218][T10790] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 151.237244][T10790] RBP: 00007f62ed2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.237261][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.237277][T10790] R13: 00007f62eead6038 R14: 00007f62eead5fa0 R15: 00007ffd5aa271d8 [ 151.237307][T10790] [ 151.421725][T10786] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.453400][ T6462] udevd[6462]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 151.454413][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 151.473021][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 151.486232][T10786] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.518014][T10795] loop1: detected capacity change from 0 to 1024 [ 151.540732][T10795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.541229][T10786] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.563320][T10795] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.581735][T10795] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 3) [ 151.596478][T10795] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 151.608880][T10795] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.608880][T10795] [ 151.621418][T10795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 151.637995][T10795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 151.654320][T10795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 151.666614][T10786] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.679724][T10795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 151.694742][T10801] loop8: detected capacity change from 0 to 1764 [ 151.702119][T10794] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 4: comm syz.1.1727: lblock 4 mapped to illegal pblock 4 (length 2) [ 151.723928][T10795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 151.762487][T10794] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 4: comm syz.1.1727: lblock 4 mapped to illegal pblock 4 (length 2) [ 151.764875][T10810] netlink: 'syz.3.1731': attribute type 1 has an invalid length. [ 151.788059][T10795] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 3: comm syz.1.1727: lblock 3 mapped to illegal pblock 3 (length 1) [ 151.788525][T10794] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: block 4: comm syz.1.1727: lblock 4 mapped to illegal pblock 4 (length 2) [ 151.867118][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.874459][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.920235][T10797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.931480][T10797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.978597][ T4612] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.001981][ T4612] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.028680][ T4612] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.050159][ T4612] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.085964][ T4612] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.097568][ T4612] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.106445][ T4612] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.114938][ T4612] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.130609][T10820] __nla_validate_parse: 10 callbacks suppressed [ 152.130625][T10820] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1734'. [ 152.177171][T10824] loop9: detected capacity change from 0 to 1024 [ 152.197518][T10824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.218038][T10824] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.253307][T10824] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 3) [ 152.284884][T10824] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 152.297257][T10824] EXT4-fs (loop9): This should not happen!! Data will be lost [ 152.297257][T10824] [ 152.315509][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.331294][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.346196][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.361182][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.389891][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.390230][T10823] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.1736: lblock 4 mapped to illegal pblock 4 (length 2) [ 152.405069][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.432340][T10833] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1736: lblock 3 mapped to illegal pblock 3 (length 1) [ 152.432944][T10823] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.1736: lblock 4 mapped to illegal pblock 4 (length 2) [ 152.476014][ T60] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 152.488383][ T60] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.488383][ T60] [ 152.502607][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.547687][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 152.603706][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 152.764990][T10844] loop3: detected capacity change from 0 to 1764 [ 152.995736][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.060735][T10840] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.108615][T10840] batman_adv: batadv0: Interface activated: dummy0 [ 153.116679][T10840] batadv0: mtu less than device minimum [ 153.126818][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.143864][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.159578][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.174588][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.191449][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.206973][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.221330][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.237481][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.252570][T10840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 153.382896][T10858] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1745'. [ 153.402771][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 153.402789][ T29] audit: type=1400 audit(1770162603.069:1942): avc: denied { setopt } for pid=10860 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.439257][T10859] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1747'. [ 153.448740][ T7875] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 153.452735][ T29] audit: type=1400 audit(1770162603.099:1943): avc: denied { write } for pid=10860 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.461159][ T7875] EXT4-fs (loop9): This should not happen!! Data will be lost [ 153.461159][ T7875] [ 153.489357][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.511869][T10863] loop3: detected capacity change from 0 to 1024 [ 153.557008][T10863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.583901][T10863] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.603971][T10868] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1749: inode has both inline data and extents flags [ 153.619879][T10863] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 3) [ 153.634675][T10863] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 153.647116][T10863] EXT4-fs (loop3): This should not happen!! Data will be lost [ 153.647116][T10863] [ 153.658856][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.663399][T10868] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1749: couldn't read orphan inode 15 (err -117) [ 153.686432][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.701575][T10868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.718986][T10862] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 4: comm syz.3.1751: lblock 4 mapped to illegal pblock 4 (length 2) [ 153.738101][T10877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.743622][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.762526][T10862] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 4: comm syz.3.1751: lblock 4 mapped to illegal pblock 4 (length 2) [ 153.778596][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.778647][T10877] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.798814][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.813347][T10877] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.1755: inode #15: comm syz.1.1755: iget: illegal inode # [ 153.814871][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.834493][T10877] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1755: couldn't read orphan inode 15 (err -117) [ 153.841147][T10863] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.1751: lblock 3 mapped to illegal pblock 3 (length 1) [ 153.865641][T10877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.889562][T10868] SELinux: security_context_str_to_sid (_:;Y-_·¡È §é‡IQÉR³§Ï›¨V§OùѹãoΞ>óäÑãG¦LŸ?./mnt) failed with errno=-22 [ 153.915166][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.932340][ T29] audit: type=1400 audit(1770162603.609:1944): avc: denied { remount } for pid=10875 comm="syz.1.1755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.962675][T10884] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 154.015065][T10891] set_capacity_and_notify: 2 callbacks suppressed [ 154.015086][T10891] loop9: detected capacity change from 0 to 1764 [ 154.030974][T10884] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 154.059429][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.216459][T10901] loop1: detected capacity change from 0 to 2048 [ 154.238645][T10901] EXT4-fs: Ignoring removed orlov option [ 154.244610][T10901] EXT4-fs: Ignoring removed oldalloc option [ 154.252010][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1764'. [ 154.282734][T10901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.300756][T10901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1763: bg 0: block 2: invalid block bitmap [ 154.316415][T10908] netlink: 'syz.8.1764': attribute type 10 has an invalid length. [ 154.349914][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.362057][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.370142][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.415875][ T29] audit: type=1400 audit(1770162604.089:1945): avc: denied { getopt } for pid=10910 comm="syz.1.1765" laddr=::1 lport=40758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.441837][ T29] audit: type=1400 audit(1770162604.119:1946): avc: denied { create } for pid=10903 comm="syz.8.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.462278][ T29] audit: type=1400 audit(1770162604.119:1947): avc: denied { write } for pid=10903 comm="syz.8.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.494140][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 154.506292][ T29] audit: type=1400 audit(1770162604.179:1948): avc: denied { allowed } for pid=10903 comm="syz.8.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.531029][ T29] audit: type=1400 audit(1770162604.199:1949): avc: denied { read write } for pid=10910 comm="syz.1.1765" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.539488][T10904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.555043][ T29] audit: type=1400 audit(1770162604.199:1950): avc: denied { open } for pid=10910 comm="syz.1.1765" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.615239][T10908] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 154.634996][T10917] loop1: detected capacity change from 0 to 2048 [ 154.643224][T10909] bridge0: port 3(syz_tun) entered blocking state [ 154.649817][T10909] bridge0: port 3(syz_tun) entered disabled state [ 154.677213][T10917] EXT4-fs: Ignoring removed oldalloc option [ 154.685230][T10909] syz_tun: entered allmulticast mode [ 154.691904][T10909] syz_tun: entered promiscuous mode [ 154.702076][T10917] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 154.717487][T10921] loop9: detected capacity change from 0 to 2048 [ 154.736747][T10912] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 154.748266][T10917] System zones: 0-7 [ 154.752663][T10917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.765057][T10921] EXT4-fs: Ignoring removed oldalloc option [ 154.773950][ T7870] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 154.786393][ T7870] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.786393][ T7870] [ 154.795527][T10925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1769'. [ 154.796653][ T4612] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.814588][ T4612] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.816884][T10921] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 154.832376][T10921] System zones: 0-7 [ 154.836821][T10921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.844263][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.854221][ T4612] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.866556][ T4612] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.905915][T10912] infiniband syz1: set down [ 154.910501][T10912] infiniband syz1: added syz_tun [ 154.924384][T10912] RDS/IB: syz1: added [ 154.928667][T10912] smc: adding ib device syz1 with port count 1 [ 154.942764][T10912] smc: ib device syz1 port 1 has no pnetid [ 154.950207][ T29] audit: type=1400 audit(1770162604.599:1951): avc: denied { watch watch_reads } for pid=10916 comm="syz.1.1767" path=2F3234352FE91F7189591E9233614B dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.976806][T10921] EXT4-fs error (device loop9): ext4_find_extent:939: inode #2: comm syz.9.1768: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 154.997089][T10932] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1767: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 155.015904][T10921] EXT4-fs (loop9): Remounting filesystem read-only [ 155.023127][T10932] EXT4-fs (loop1): Remounting filesystem read-only [ 155.039450][T10934] loop3: detected capacity change from 0 to 512 [ 155.046734][T10934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.064861][T10934] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.072570][T10934] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1770: inode #15: comm syz.3.1770: iget: illegal inode # [ 155.089405][T10934] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1770: couldn't read orphan inode 15 (err -117) [ 155.103160][T10934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 155.126719][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.168077][T10939] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 155.178622][T10939] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 155.205325][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.242071][T10944] loop9: detected capacity change from 0 to 1024 [ 155.273054][T10944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.276023][T10946] syzkaller0: entered promiscuous mode [ 155.290704][T10946] syzkaller0: entered allmulticast mode [ 155.298926][T10944] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.313498][T10944] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 3) [ 155.327829][T10944] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 155.340288][T10944] EXT4-fs (loop9): This should not happen!! Data will be lost [ 155.340288][T10944] [ 155.356254][T10944] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.370575][T10944] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.385551][T10944] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.400123][T10944] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.417204][T10944] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.451019][T10943] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.1776: lblock 4 mapped to illegal pblock 4 (length 2) [ 155.470775][T10944] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1776: lblock 3 mapped to illegal pblock 3 (length 1) [ 155.483563][T10943] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.1776: lblock 4 mapped to illegal pblock 4 (length 2) [ 155.500218][T10943] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.1776: lblock 4 mapped to illegal pblock 4 (length 2) [ 155.514456][ T6384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.514987][T10952] FAULT_INJECTION: forcing a failure. [ 155.514987][T10952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.536553][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.3.1777 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.536605][T10952] Tainted: [W]=WARN [ 155.536613][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.536627][T10952] Call Trace: [ 155.536686][T10952] [ 155.536696][T10952] __dump_stack+0x1d/0x30 [ 155.536729][T10952] dump_stack_lvl+0x95/0xd0 [ 155.536757][T10952] dump_stack+0x15/0x1b [ 155.536848][T10952] should_fail_ex+0x263/0x280 [ 155.536889][T10952] should_fail+0xb/0x20 [ 155.536925][T10952] should_fail_usercopy+0x1a/0x20 [ 155.537027][T10952] _copy_from_user+0x1c/0xb0 [ 155.537055][T10952] ___sys_sendmsg+0xc1/0x1e0 [ 155.537130][T10952] __x64_sys_sendmsg+0xd4/0x160 [ 155.537157][T10952] x64_sys_call+0x17ba/0x3000 [ 155.537229][T10952] do_syscall_64+0xc0/0x2a0 [ 155.537271][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.537300][T10952] RIP: 0033:0x7fd67e9faeb9 [ 155.537321][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.537345][T10952] RSP: 002b:00007fd67d457028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.537389][T10952] RAX: ffffffffffffffda RBX: 00007fd67ec75fa0 RCX: 00007fd67e9faeb9 [ 155.537440][T10952] RDX: 0000000000000041 RSI: 0000200000000200 RDI: 0000000000000004 [ 155.537457][T10952] RBP: 00007fd67d457090 R08: 0000000000000000 R09: 0000000000000000 [ 155.537474][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.537503][T10952] R13: 00007fd67ec76038 R14: 00007fd67ec75fa0 R15: 00007ffd869a9698 [ 155.537522][T10952] [ 155.878342][T10966] loop8: detected capacity change from 0 to 1024 [ 155.896349][T10966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.917942][T10966] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.934597][T10966] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.1782: lblock 3 mapped to illegal pblock 3 (length 3) [ 155.958948][T10966] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 155.971368][T10966] EXT4-fs (loop8): This should not happen!! Data will be lost [ 155.971368][T10966] [ 156.046135][ T7875] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 156.081115][ T7875] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 156.093601][ T7875] EXT4-fs (loop8): This should not happen!! Data will be lost [ 156.093601][ T7875] [ 156.107724][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.131764][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 156.225567][ T7875] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 156.237992][ T7875] EXT4-fs (loop9): This should not happen!! Data will be lost [ 156.237992][ T7875] [ 156.259354][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.310609][T10988] loop3: detected capacity change from 0 to 256 [ 156.321305][T10988] FAT-fs (loop3): unable to read block(17179869180) for building NFS inode [ 156.505935][T11015] loop9: detected capacity change from 0 to 1024 [ 156.526034][T11015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.841323][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 157.245536][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.296208][T11066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59472 sclass=netlink_route_socket pid=11066 comm=syz.9.1814 [ 157.472397][T11083] __nla_validate_parse: 3 callbacks suppressed [ 157.472417][T11083] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1822'. [ 157.618142][T11111] bridge0: entered promiscuous mode [ 157.623420][T11111] bridge0: entered allmulticast mode [ 157.801124][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 157.839536][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 157.862029][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 157.884047][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 157.898066][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1838'. [ 157.921348][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 157.943193][T11138] netlink: 'syz.9.1838': attribute type 8 has an invalid length. [ 157.982736][T11154] loop3: detected capacity change from 0 to 512 [ 157.993306][T11154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.009954][T11154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 158.017562][T11154] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1843: inode #15: comm syz.3.1843: iget: illegal inode # [ 158.041316][T11154] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1843: couldn't read orphan inode 15 (err -117) [ 158.054789][T11154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.119231][T11169] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 158.128909][T11169] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 158.161327][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.322445][T11183] syz.1.1850: attempt to access beyond end of device [ 158.322445][T11183] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 158.358256][T11183] syz.1.1850: attempt to access beyond end of device [ 158.358256][T11183] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 158.372047][T11183] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 158.391520][T11190] syz.1.1850: attempt to access beyond end of device [ 158.391520][T11190] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 158.400839][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 158.436855][T11196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=3 sclass=netlink_tcpdiag_socket pid=11196 comm=syz.3.1852 [ 158.449711][T11183] syz.1.1850: attempt to access beyond end of device [ 158.449711][T11183] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 158.463471][T11183] Buffer I/O error on dev loop1, logical block 77, async page read [ 158.472596][T11183] syz.1.1850: attempt to access beyond end of device [ 158.472596][T11183] loop1: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 158.486459][T11183] Buffer I/O error on dev loop1, logical block 78, async page read [ 158.494836][T11183] syz.1.1850: attempt to access beyond end of device [ 158.494836][T11183] loop1: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 158.508610][T11183] Buffer I/O error on dev loop1, logical block 79, async page read [ 158.516614][T11183] syz.1.1850: attempt to access beyond end of device [ 158.516614][T11183] loop1: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 158.530340][T11183] Buffer I/O error on dev loop1, logical block 80, async page read [ 158.538920][T11183] syz.1.1850: attempt to access beyond end of device [ 158.538920][T11183] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 158.552667][T11183] Buffer I/O error on dev loop1, logical block 77, async page read [ 158.560693][T11183] syz.1.1850: attempt to access beyond end of device [ 158.560693][T11183] loop1: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 158.574589][T11183] Buffer I/O error on dev loop1, logical block 78, async page read [ 158.583902][T11183] syz.1.1850: attempt to access beyond end of device [ 158.583902][T11183] loop1: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 158.597659][T11183] Buffer I/O error on dev loop1, logical block 79, async page read [ 158.606449][T11183] Buffer I/O error on dev loop1, logical block 80, async page read [ 158.619228][T11182] Buffer I/O error on dev loop1, logical block 77, async page read [ 158.629548][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 158.639509][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 158.639923][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 158.640000][ T29] audit: type=1400 audit(1770162608.319:2099): avc: denied { write } for pid=11200 comm="syz.3.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.715244][ T29] audit: type=1400 audit(1770162608.389:2100): avc: denied { create } for pid=11204 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.735751][ T29] audit: type=1400 audit(1770162608.389:2101): avc: denied { mount } for pid=11204 comm="syz.2.1856" name="/" dev="hugetlbfs" ino=30464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 158.759004][ T29] audit: type=1400 audit(1770162608.389:2102): avc: denied { ioctl } for pid=11204 comm="syz.2.1856" path="socket:[31183]" dev="sockfs" ino=31183 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.775862][T11203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.794063][ T29] audit: type=1400 audit(1770162608.449:2103): avc: denied { create } for pid=11204 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.796352][T11203] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.815420][ T29] audit: type=1400 audit(1770162608.449:2104): avc: denied { write } for pid=11204 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.845546][ T29] audit: type=1400 audit(1770162608.509:2105): avc: denied { add_name } for pid=11202 comm="syz.3.1855" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.866621][ T29] audit: type=1400 audit(1770162608.509:2106): avc: denied { create } for pid=11202 comm="syz.3.1855" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 158.887157][ T29] audit: type=1400 audit(1770162608.509:2107): avc: denied { read write } for pid=11202 comm="syz.3.1855" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.909985][ T29] audit: type=1400 audit(1770162608.509:2108): avc: denied { open } for pid=11202 comm="syz.3.1855" path="/264/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.998110][ T52] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 159.021535][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 159.033967][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.033967][ T52] [ 159.045514][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.118928][T11225] set_capacity_and_notify: 2 callbacks suppressed [ 159.118951][T11225] loop3: detected capacity change from 0 to 8192 [ 159.153835][T11228] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 11228 comm: syz.1.1864) [ 159.169166][T11225] loop3: p1 p2 p4 [ 159.173005][T11225] loop3: p1 start 117442560 is beyond EOD, truncated [ 159.179997][T11225] loop3: p2 size 8388608 extends beyond EOD, truncated [ 159.190401][T11225] loop3: p4 size 262144 extends beyond EOD, truncated [ 159.201511][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.211669][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.789206][T11237] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 159.984260][T11249] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 160.024125][T11251] netlink: 'syz.1.1872': attribute type 5 has an invalid length. [ 160.239334][T11263] capability: warning: `syz.1.1878' uses 32-bit capabilities (legacy support in use) [ 160.722138][T11281] FAULT_INJECTION: forcing a failure. [ 160.722138][T11281] name failslab, interval 1, probability 0, space 0, times 0 [ 160.734911][T11281] CPU: 1 UID: 0 PID: 11281 Comm: syz.9.1884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.734945][T11281] Tainted: [W]=WARN [ 160.734952][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.734964][T11281] Call Trace: [ 160.734970][T11281] [ 160.735117][T11281] __dump_stack+0x1d/0x30 [ 160.735144][T11281] dump_stack_lvl+0x95/0xd0 [ 160.735166][T11281] dump_stack+0x15/0x1b [ 160.735239][T11281] should_fail_ex+0x263/0x280 [ 160.735271][T11281] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 160.735303][T11281] should_failslab+0x8c/0xb0 [ 160.735364][T11281] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 160.735408][T11281] ? shmem_alloc_inode+0x34/0x50 [ 160.735454][T11281] ? kstrtouint+0x76/0xc0 [ 160.735509][T11281] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 160.735594][T11281] shmem_alloc_inode+0x34/0x50 [ 160.735630][T11281] alloc_inode+0x40/0x170 [ 160.735680][T11281] new_inode+0x1d/0xe0 [ 160.735710][T11281] shmem_get_inode+0x246/0x750 [ 160.735747][T11281] __shmem_file_setup+0x112/0x210 [ 160.735776][T11281] shmem_file_setup+0x3b/0x50 [ 160.735835][T11281] memfd_alloc_file+0x4e/0x300 [ 160.735908][T11281] __se_sys_memfd_create+0x2e1/0x3b0 [ 160.735943][T11281] __x64_sys_memfd_create+0x31/0x40 [ 160.736024][T11281] x64_sys_call+0x28cb/0x3000 [ 160.736100][T11281] do_syscall_64+0xc0/0x2a0 [ 160.736132][T11281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.736154][T11281] RIP: 0033:0x7f286b98aeb9 [ 160.736174][T11281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.736219][T11281] RSP: 002b:00007f286a3e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 160.736243][T11281] RAX: ffffffffffffffda RBX: 000000000000032e RCX: 00007f286b98aeb9 [ 160.736330][T11281] RDX: 00007f286a3e6ee0 RSI: 0000000000000000 RDI: 00007f286b9f7333 [ 160.736348][T11281] RBP: 0000200000000a40 R08: 00000000ffffffff R09: 0000000000000000 [ 160.736365][T11281] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 160.736383][T11281] R13: 00007f286a3e6ee0 R14: 00007f286a3e6ea0 R15: 0000200000000280 [ 160.736526][T11281] [ 160.984718][T11285] loop2: detected capacity change from 0 to 512 [ 160.991637][T11285] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.002845][T11285] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.009782][T11285] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.1885: inode #15: comm syz.2.1885: iget: illegal inode # [ 161.023037][T11285] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1885: couldn't read orphan inode 15 (err -117) [ 161.035612][T11285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.101333][T11296] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 161.119637][T11296] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 161.167185][T11304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11304 comm=syz.1.1893 [ 161.235565][T11308] FAULT_INJECTION: forcing a failure. [ 161.235565][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 161.248338][T11308] CPU: 0 UID: 0 PID: 11308 Comm: syz.1.1894 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.248381][T11308] Tainted: [W]=WARN [ 161.248390][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.248408][T11308] Call Trace: [ 161.248415][T11308] [ 161.248424][T11308] __dump_stack+0x1d/0x30 [ 161.248490][T11308] dump_stack_lvl+0x95/0xd0 [ 161.248518][T11308] dump_stack+0x15/0x1b [ 161.248543][T11308] should_fail_ex+0x263/0x280 [ 161.248583][T11308] should_failslab+0x8c/0xb0 [ 161.248614][T11308] __kmalloc_noprof+0xb8/0x580 [ 161.248639][T11308] ? security_perf_event_alloc+0x48/0x120 [ 161.248667][T11308] ? mutex_unlock+0x4e/0x90 [ 161.248742][T11308] security_perf_event_alloc+0x48/0x120 [ 161.248777][T11308] perf_event_alloc+0x171c/0x18d0 [ 161.248805][T11308] ? __fget_files+0x184/0x1c0 [ 161.248902][T11308] __se_sys_perf_event_open+0x4c9/0x1290 [ 161.248969][T11308] __x64_sys_perf_event_open+0x67/0x80 [ 161.248997][T11308] x64_sys_call+0x78c/0x3000 [ 161.249030][T11308] do_syscall_64+0xc0/0x2a0 [ 161.249095][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.249123][T11308] RIP: 0033:0x7f62ee85aeb9 [ 161.249154][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.249177][T11308] RSP: 002b:00007f62ed2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 161.249204][T11308] RAX: ffffffffffffffda RBX: 00007f62eead5fa0 RCX: 00007f62ee85aeb9 [ 161.249220][T11308] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000500 [ 161.249295][T11308] RBP: 00007f62ed2b7090 R08: 0000000000000001 R09: 0000000000000000 [ 161.249312][T11308] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 161.249325][T11308] R13: 00007f62eead6038 R14: 00007f62eead5fa0 R15: 00007ffd5aa271d8 [ 161.249399][T11308] [ 161.697305][T11323] loop1: detected capacity change from 0 to 512 [ 161.704078][T11323] EXT4-fs: Ignoring removed i_version option [ 161.710213][T11323] EXT4-fs: Ignoring removed bh option [ 161.726289][T11323] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.972905][T11332] loop3: detected capacity change from 0 to 512 [ 161.979971][T11332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.993081][T11332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 161.999913][T11332] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1903: inode #15: comm syz.3.1903: iget: illegal inode # [ 162.012935][T11332] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1903: couldn't read orphan inode 15 (err -117) [ 162.080646][T11337] loop2: detected capacity change from 0 to 1024 [ 162.090879][T11338] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 162.113998][T11338] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 162.123652][T11337] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.212141][T11346] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 162.262057][T11355] netlink: 'syz.2.1911': attribute type 39 has an invalid length. [ 162.349507][T11366] loop3: detected capacity change from 0 to 512 [ 162.359496][T11366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 162.371027][T11366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.384752][T11366] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 162.403256][T11370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=11370 comm=syz.9.1915 [ 162.416272][T11366] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 162.423122][T11366] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.1916: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 162.441571][T11366] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1916: couldn't read orphan inode 13 (err -117) [ 162.462442][T11366] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.1916: inode #15: comm syz.3.1916: iget: illegal inode # [ 162.599145][T11380] __nla_validate_parse: 21 callbacks suppressed [ 162.599219][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 163.000743][T11385] FAULT_INJECTION: forcing a failure. [ 163.000743][T11385] name failslab, interval 1, probability 0, space 0, times 0 [ 163.013432][T11385] CPU: 1 UID: 0 PID: 11385 Comm: syz.1.1924 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.013461][T11385] Tainted: [W]=WARN [ 163.013467][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.013479][T11385] Call Trace: [ 163.013485][T11385] [ 163.013531][T11385] __dump_stack+0x1d/0x30 [ 163.013553][T11385] dump_stack_lvl+0x95/0xd0 [ 163.013572][T11385] dump_stack+0x15/0x1b [ 163.013589][T11385] should_fail_ex+0x263/0x280 [ 163.013654][T11385] should_failslab+0x8c/0xb0 [ 163.013675][T11385] __kvmalloc_node_noprof+0x148/0x680 [ 163.013701][T11385] ? bpf_test_run_xdp_live+0x137/0x1360 [ 163.013810][T11385] ? mutex_unlock+0x4e/0x90 [ 163.013845][T11385] bpf_test_run_xdp_live+0x137/0x1360 [ 163.013876][T11385] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 163.013911][T11385] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.013936][T11385] ? mutex_unlock+0x4e/0x90 [ 163.013959][T11385] ? 0xffffffffa02054c0 [ 163.013972][T11385] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 163.014067][T11385] ? 0xffffffffa02054c0 [ 163.014101][T11385] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 163.014125][T11385] bpf_prog_test_run_xdp+0x57b/0xa10 [ 163.014220][T11385] ? __rcu_read_unlock+0x4e/0x70 [ 163.014320][T11385] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 163.014358][T11385] bpf_prog_test_run+0x204/0x340 [ 163.014389][T11385] __sys_bpf+0x4c0/0x7b0 [ 163.014436][T11385] __x64_sys_bpf+0x41/0x50 [ 163.014458][T11385] x64_sys_call+0x28e1/0x3000 [ 163.014515][T11385] do_syscall_64+0xc0/0x2a0 [ 163.014543][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.014562][T11385] RIP: 0033:0x7f62ee85aeb9 [ 163.014576][T11385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.014672][T11385] RSP: 002b:00007f62ed2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.014690][T11385] RAX: ffffffffffffffda RBX: 00007f62eead5fa0 RCX: 00007f62ee85aeb9 [ 163.014703][T11385] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 163.014715][T11385] RBP: 00007f62ed2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.014743][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.014754][T11385] R13: 00007f62eead6038 R14: 00007f62eead5fa0 R15: 00007ffd5aa271d8 [ 163.014773][T11385] [ 163.284749][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 163.297766][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 163.308080][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 163.317454][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 163.366616][T11397] FAULT_INJECTION: forcing a failure. [ 163.366616][T11397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.379773][T11397] CPU: 0 UID: 0 PID: 11397 Comm: syz.9.1930 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.379868][T11397] Tainted: [W]=WARN [ 163.379874][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.379886][T11397] Call Trace: [ 163.379893][T11397] [ 163.379908][T11397] __dump_stack+0x1d/0x30 [ 163.379931][T11397] dump_stack_lvl+0x95/0xd0 [ 163.380006][T11397] dump_stack+0x15/0x1b [ 163.380023][T11397] should_fail_ex+0x263/0x280 [ 163.380051][T11397] should_fail+0xb/0x20 [ 163.380121][T11397] should_fail_usercopy+0x1a/0x20 [ 163.380152][T11397] _copy_from_user+0x1c/0xb0 [ 163.380175][T11397] ___sys_sendmsg+0xc1/0x1e0 [ 163.380240][T11397] __x64_sys_sendmsg+0xd4/0x160 [ 163.380338][T11397] x64_sys_call+0x17ba/0x3000 [ 163.380360][T11397] do_syscall_64+0xc0/0x2a0 [ 163.380388][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.380439][T11397] RIP: 0033:0x7f286b98aeb9 [ 163.380453][T11397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.380515][T11397] RSP: 002b:00007f286a3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.380584][T11397] RAX: ffffffffffffffda RBX: 00007f286bc05fa0 RCX: 00007f286b98aeb9 [ 163.380662][T11397] RDX: 00000000000040c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 163.380729][T11397] RBP: 00007f286a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.380741][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.380752][T11397] R13: 00007f286bc06038 R14: 00007f286bc05fa0 R15: 00007fff69caa0a8 [ 163.380847][T11397] [ 163.555842][T11399] net_ratelimit: 11 callbacks suppressed [ 163.555898][T11399] Set syz1 is full, maxelem 65536 reached [ 163.673863][T11409] netlink: 'syz.3.1936': attribute type 6 has an invalid length. [ 163.684599][T11409] Falling back ldisc for ttyS3. [ 163.692538][T11409] loop3: detected capacity change from 0 to 512 [ 163.696290][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 163.696312][ T29] audit: type=1400 audit(1770162613.369:2159): avc: denied { mount } for pid=11404 comm="syz.2.1934" name="/" dev="ramfs" ino=31542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.735976][ T29] audit: type=1400 audit(1770162613.409:2160): avc: denied { unmount } for pid=11404 comm="syz.2.1934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 163.821806][T11414] loop1: detected capacity change from 0 to 512 [ 163.829068][T11414] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.854232][T11414] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.860804][T11414] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.1938: inode #15: comm syz.1.1938: iget: illegal inode # [ 163.867483][T11405] loop2: detected capacity change from 0 to 512 [ 163.881682][T11414] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1938: couldn't read orphan inode 15 (err -117) [ 163.900080][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 163.909033][T11416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1939'. [ 163.950222][ T29] audit: type=1400 audit(1770162613.619:2161): avc: denied { mounton } for pid=11404 comm="syz.2.1934" path="/239/file0" dev="ramfs" ino=31542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 163.954725][T11405] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 163.984648][T11419] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 163.998738][T11419] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 164.044689][T11402] loop9: detected capacity change from 0 to 512 [ 164.060483][T11402] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.069621][T11402] EXT4-fs (loop9): filesystem is read-only [ 164.075494][T11402] EXT4-fs (loop9): invalid inodes per group: 5 [ 164.075494][T11402] [ 164.140070][T11423] loop3: detected capacity change from 0 to 2048 [ 164.154281][T11423] EXT4-fs: Ignoring removed oldalloc option [ 164.166581][T11402] loop9: detected capacity change from 0 to 128 [ 164.224282][T11423] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 164.232534][T11423] System zones: 0-7 [ 164.261292][T11429] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 164.271766][T11429] SELinux: failed to load policy [ 164.278655][ T29] audit: type=1400 audit(1770162613.929:2162): avc: denied { load_policy } for pid=11404 comm="syz.2.1934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 164.300775][ T29] audit: type=1400 audit(1770162613.979:2163): avc: denied { watch watch_reads } for pid=11422 comm="syz.3.1942" path=2F3238372FE91F7189591E9233614B dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.334505][T11435] IPv6: Can't replace route, no match found [ 164.378384][T11437] loop2: detected capacity change from 0 to 1024 [ 164.384524][T11438] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1942: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 164.412619][T11442] Set syz1 is full, maxelem 65536 reached [ 164.418969][T11437] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.432987][T11438] EXT4-fs (loop3): Remounting filesystem read-only [ 164.517220][T11450] loop9: detected capacity change from 0 to 512 [ 164.524330][T11450] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 164.536274][T11450] EXT4-fs (loop9): orphan cleanup on readonly fs [ 164.542754][T11450] EXT4-fs error (device loop9): ext4_orphan_get:1391: comm syz.9.1949: inode #15: comm syz.9.1949: iget: illegal inode # [ 164.555996][T11450] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1949: couldn't read orphan inode 15 (err -117) [ 164.570460][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1951'. [ 164.595423][ T29] audit: type=1400 audit(1770162614.269:2164): avc: denied { ioctl } for pid=11436 comm="syz.2.1944" path="socket:[31912]" dev="sockfs" ino=31912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.623654][T11457] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 164.633395][T11457] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 164.657845][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 164.666848][ T29] audit: type=1400 audit(1770162614.329:2165): avc: denied { getopt } for pid=11458 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.709120][ T29] audit: type=1400 audit(1770162614.369:2166): avc: denied { read write } for pid=11460 comm="syz.1.1953" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.733643][ T29] audit: type=1400 audit(1770162614.369:2167): avc: denied { open } for pid=11460 comm="syz.1.1953" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.758883][ T29] audit: type=1400 audit(1770162614.379:2168): avc: denied { create } for pid=11460 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.779990][T11463] loop2: detected capacity change from 0 to 512 [ 164.795181][T11463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.825516][T11463] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.980697][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 165.152861][T11481] loop9: detected capacity change from 0 to 1024 [ 165.165511][T11481] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.177838][T11481] EXT4-fs (loop9): orphan cleanup on readonly fs [ 165.185458][T11481] EXT4-fs error (device loop9): ext4_quota_enable:7177: comm syz.9.1961: inode #2304: comm syz.9.1961: iget: illegal inode # [ 165.208464][T11482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11482 comm=syz.2.1960 [ 165.222346][T11481] EXT4-fs error (device loop9): ext4_quota_enable:7180: comm syz.9.1961: Bad quota inode: 2304, type: 2 [ 165.237856][T11481] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 165.237965][T11482] loop2: detected capacity change from 0 to 512 [ 165.238613][T11482] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.255823][T11481] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 165.280697][T11482] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 165.323885][T11482] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 165.590515][T11497] loop2: detected capacity change from 0 to 512 [ 165.598768][T11497] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.609598][T11497] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.616087][T11497] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.1965: inode #15: comm syz.2.1965: iget: illegal inode # [ 165.629105][T11497] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1965: couldn't read orphan inode 15 (err -117) [ 165.694292][T11501] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 165.704255][T11500] loop1: detected capacity change from 0 to 1024 [ 165.709867][T11501] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 165.730519][T11500] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1966: missing EA_INODE flag [ 165.743500][T11500] EXT4-fs (loop1): Remounting filesystem read-only [ 165.751463][T11500] FAULT_INJECTION: forcing a failure. [ 165.751463][T11500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.764589][T11500] CPU: 0 UID: 0 PID: 11500 Comm: syz.1.1966 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.764735][T11500] Tainted: [W]=WARN [ 165.764745][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.764762][T11500] Call Trace: [ 165.764771][T11500] [ 165.764780][T11500] __dump_stack+0x1d/0x30 [ 165.764814][T11500] dump_stack_lvl+0x95/0xd0 [ 165.764842][T11500] dump_stack+0x15/0x1b [ 165.764882][T11500] should_fail_ex+0x263/0x280 [ 165.764922][T11500] should_fail+0xb/0x20 [ 165.764957][T11500] should_fail_usercopy+0x1a/0x20 [ 165.765006][T11500] strncpy_from_user+0x27/0x250 [ 165.765103][T11500] getname_flags+0xad/0x3b0 [ 165.765137][T11500] __x64_sys_rename+0x40/0x70 [ 165.765168][T11500] x64_sys_call+0x24e/0x3000 [ 165.765242][T11500] do_syscall_64+0xc0/0x2a0 [ 165.765275][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.765436][T11500] RIP: 0033:0x7f62ee85aeb9 [ 165.765457][T11500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.765481][T11500] RSP: 002b:00007f62ed2b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 165.765519][T11500] RAX: ffffffffffffffda RBX: 00007f62eead5fa0 RCX: 00007f62ee85aeb9 [ 165.765538][T11500] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 165.765615][T11500] RBP: 00007f62ed2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.765633][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.765651][T11500] R13: 00007f62eead6038 R14: 00007f62eead5fa0 R15: 00007ffd5aa271d8 [ 165.765678][T11500] [ 165.982848][T11510] loop1: detected capacity change from 0 to 2048 [ 165.991549][T11510] EXT4-fs: Ignoring removed oldalloc option [ 166.014805][T11510] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 166.023025][T11510] System zones: 0-7 [ 166.108610][T11515] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1970: missing EA_INODE flag [ 166.120440][T11515] EXT4-fs (loop3): Remounting filesystem read-only [ 166.127450][T11518] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1969: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 166.166246][T11518] EXT4-fs (loop1): Remounting filesystem read-only [ 166.190848][T11521] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 166.266113][T11528] random: crng reseeded on system resumption [ 166.273654][T11528] Hibernate inconsistent memory map detected! [ 166.279902][T11528] PM: hibernation: Image mismatch: architecture specific data [ 166.376953][T11534] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.416494][T11534] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 3) [ 166.450893][T11534] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 166.463350][T11534] EXT4-fs (loop9): This should not happen!! Data will be lost [ 166.463350][T11534] [ 166.477627][T11552] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.492420][T11552] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.512766][T11552] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.546077][T11533] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.561093][T11552] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.576414][T11533] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.591137][T11552] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.606891][T11533] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.621212][T11557] atomic_op ffff888104c30d28 conn xmit_atomic 0000000000000000 [ 166.625166][T11552] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.1978: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.762473][T11567] netlink: 'syz.3.1991': attribute type 8 has an invalid length. [ 166.964234][ T6462] loop3: p1 < > p2 p3 < > p4 < p5 > [ 166.969621][ T6462] loop3: partition table partially beyond EOD, truncated [ 166.979880][T11589] bio_check_eod: 729 callbacks suppressed [ 166.979906][T11589] syz.2.1999: attempt to access beyond end of device [ 166.979906][T11589] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 166.999655][ T6462] loop3: p1 start 4294967288 is beyond EOD, truncated [ 167.007351][ T6462] loop3: p3 start 4284289 is beyond EOD, truncated [ 167.014662][T11589] syz.2.1999: attempt to access beyond end of device [ 167.014662][T11589] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 167.028411][T11589] buffer_io_error: 727 callbacks suppressed [ 167.028425][T11589] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 167.046765][T11589] syz.2.1999: attempt to access beyond end of device [ 167.046765][T11589] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 167.062947][T11581] loop3: p1 < > p2 p3 < > p4 < p5 > [ 167.065080][T11590] syz.2.1999: attempt to access beyond end of device [ 167.065080][T11590] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 167.068411][T11581] loop3: partition table partially beyond EOD, truncated [ 167.089221][T11581] loop3: p1 start 4294967288 is beyond EOD, truncated [ 167.097508][T11581] loop3: p3 start 4284289 is beyond EOD, truncated [ 167.109752][T11589] syz.2.1999: attempt to access beyond end of device [ 167.109752][T11589] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 167.123546][T11589] Buffer I/O error on dev loop2, logical block 77, async page read [ 167.150520][T11589] syz.2.1999: attempt to access beyond end of device [ 167.150520][T11589] loop2: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 167.157245][ T7129] udevd[7129]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 167.164434][T11589] Buffer I/O error on dev loop2, logical block 78, async page read [ 167.177894][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 167.195645][ T6462] udevd[6462]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 167.212801][T11589] syz.2.1999: attempt to access beyond end of device [ 167.212801][T11589] loop2: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 167.215304][T11583] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 167.226569][T11589] Buffer I/O error on dev loop2, logical block 79, async page read [ 167.247582][T11583] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.252483][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 167.265896][ T6462] udevd[6462]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 167.275329][T11589] syz.2.1999: attempt to access beyond end of device [ 167.275329][T11589] loop2: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 167.289362][T11589] Buffer I/O error on dev loop2, logical block 80, async page read [ 167.299685][ T6059] udevd[6059]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 167.314199][T11589] syz.2.1999: attempt to access beyond end of device [ 167.314199][T11589] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 167.320074][T11583] EXT4-fs (loop1): 1 orphan inode deleted [ 167.327966][T11589] Buffer I/O error on dev loop2, logical block 77, async page read [ 167.328458][T11589] syz.2.1999: attempt to access beyond end of device [ 167.328458][T11589] loop2: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 167.337004][ T52] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 167.341996][T11589] Buffer I/O error on dev loop2, logical block 78, async page read [ 167.381731][T11589] Buffer I/O error on dev loop2, logical block 79, async page read [ 167.389760][T11589] Buffer I/O error on dev loop2, logical block 80, async page read [ 167.420538][ T52] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 167.432953][ T52] EXT4-fs (loop9): This should not happen!! Data will be lost [ 167.432953][ T52] [ 167.645925][T11618] __nla_validate_parse: 7 callbacks suppressed [ 167.645945][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 167.669476][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 167.678885][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 167.688210][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 167.697317][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 167.892349][T11617] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2010'. [ 168.644528][T11669] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 168.794511][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 168.794541][ T29] audit: type=1400 audit(1770162618.469:2759): avc: denied { unmount } for pid=9105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 168.840999][ T29] audit: type=1400 audit(1770162618.509:2760): avc: denied { map_create } for pid=11677 comm="syz.9.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.862791][ T29] audit: type=1400 audit(1770162618.509:2761): avc: denied { map_read map_write } for pid=11677 comm="syz.9.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 168.882923][ T29] audit: type=1400 audit(1770162618.519:2762): avc: denied { create } for pid=11677 comm="syz.9.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.902841][ T29] audit: type=1400 audit(1770162618.529:2763): avc: denied { setopt } for pid=11677 comm="syz.9.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.922638][ T29] audit: type=1400 audit(1770162618.529:2764): avc: denied { ioctl } for pid=11677 comm="syz.9.2031" path="socket:[33018]" dev="sockfs" ino=33018 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.947649][ T29] audit: type=1400 audit(1770162618.529:2765): avc: denied { write } for pid=11677 comm="syz.9.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.051010][T11693] EXT4-fs: Ignoring removed oldalloc option [ 169.063701][ T29] audit: type=1400 audit(1770162618.729:2766): avc: denied { mounton } for pid=11695 comm="syz.1.2037" path="/proc/747/task" dev="proc" ino=32268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 169.086597][ T29] audit: type=1400 audit(1770162618.729:2767): avc: denied { mount } for pid=11695 comm="syz.1.2037" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.124127][ T29] audit: type=1400 audit(1770162618.799:2768): avc: denied { lock } for pid=11698 comm="syz.9.2038" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=32275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 169.160316][T11693] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 169.186029][T11693] System zones: 0-7 [ 169.214282][T11693] EXT4-fs mount: 33 callbacks suppressed [ 169.214301][T11693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.263288][T11693] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.2034: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 169.285425][T11693] EXT4-fs (loop3): Remounting filesystem read-only [ 169.303042][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.337392][T11708] set_capacity_and_notify: 9 callbacks suppressed [ 169.337413][T11708] loop2: detected capacity change from 0 to 128 [ 169.401946][T11699] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2038'. [ 169.411802][T11699] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2038'. [ 169.421062][T11699] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2038'. [ 169.570223][T11722] loop2: detected capacity change from 0 to 512 [ 169.577005][T11722] EXT4-fs: Ignoring removed nobh option [ 169.589798][T11722] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.642917][T11727] loop9: detected capacity change from 0 to 512 [ 169.660085][T11729] loop3: detected capacity change from 0 to 1764 [ 169.674127][T11722] EXT4-fs (loop2): 1 truncate cleaned up [ 169.674233][T11727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.690332][T11722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.705908][T11727] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.723884][T11727] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.769129][ T6567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.828053][T11739] loop2: detected capacity change from 0 to 2048 [ 169.836117][T11739] EXT4-fs: Ignoring removed oldalloc option [ 169.864891][T11739] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 169.883925][T11739] System zones: 0-7 [ 169.888270][T11739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.903667][T11739] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.2050: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 169.927229][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.936534][T11739] EXT4-fs (loop2): Remounting filesystem read-only [ 169.939959][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 170.000543][ T6567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.017759][T11754] loop9: detected capacity change from 0 to 128 [ 170.034793][T11756] loop3: detected capacity change from 0 to 512 [ 170.044026][T11756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.068952][T11756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 170.076003][T11756] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.2059: inode #15: comm syz.3.2059: iget: illegal inode # [ 170.088984][T11756] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2059: couldn't read orphan inode 15 (err -117) [ 170.101748][T11756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.142269][T11762] loop2: detected capacity change from 0 to 128 [ 170.166269][T11763] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 170.175959][T11763] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 170.195121][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.349120][T11778] FAULT_INJECTION: forcing a failure. [ 170.349120][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 170.362006][T11778] CPU: 0 UID: 0 PID: 11778 Comm: syz.9.2066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.362044][T11778] Tainted: [W]=WARN [ 170.362054][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.362116][T11778] Call Trace: [ 170.362123][T11778] [ 170.362131][T11778] __dump_stack+0x1d/0x30 [ 170.362164][T11778] dump_stack_lvl+0x95/0xd0 [ 170.362224][T11778] dump_stack+0x15/0x1b [ 170.362251][T11778] should_fail_ex+0x263/0x280 [ 170.362286][T11778] should_failslab+0x8c/0xb0 [ 170.362348][T11778] __kvmalloc_node_noprof+0x148/0x680 [ 170.362377][T11778] ? bpf_test_run_xdp_live+0x137/0x1360 [ 170.362498][T11778] ? mutex_unlock+0x4e/0x90 [ 170.362528][T11778] bpf_test_run_xdp_live+0x137/0x1360 [ 170.362575][T11778] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 170.362599][T11778] ? __pfx_autoremove_wake_function+0x10/0x10 [ 170.362627][T11778] ? mutex_unlock+0x4e/0x90 [ 170.362738][T11778] ? 0xffffffffa02054c0 [ 170.362758][T11778] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 170.362804][T11778] ? 0xffffffffa02054c0 [ 170.362831][T11778] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 170.362927][T11778] bpf_prog_test_run_xdp+0x57b/0xa10 [ 170.362990][T11778] ? __rcu_read_unlock+0x4e/0x70 [ 170.363073][T11778] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 170.363103][T11778] bpf_prog_test_run+0x204/0x340 [ 170.363130][T11778] __sys_bpf+0x4c0/0x7b0 [ 170.363219][T11778] __x64_sys_bpf+0x41/0x50 [ 170.363240][T11778] x64_sys_call+0x28e1/0x3000 [ 170.363262][T11778] do_syscall_64+0xc0/0x2a0 [ 170.363290][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.363382][T11778] RIP: 0033:0x7f286b98aeb9 [ 170.363396][T11778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.363412][T11778] RSP: 002b:00007f286a3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.363431][T11778] RAX: ffffffffffffffda RBX: 00007f286bc05fa0 RCX: 00007f286b98aeb9 [ 170.363497][T11778] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 170.363530][T11778] RBP: 00007f286a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.363541][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.363552][T11778] R13: 00007f286bc06038 R14: 00007f286bc05fa0 R15: 00007fff69caa0a8 [ 170.363570][T11778] [ 170.775795][T11793] FAULT_INJECTION: forcing a failure. [ 170.775795][T11793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.789061][T11793] CPU: 1 UID: 0 PID: 11793 Comm: syz.9.2072 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.789091][T11793] Tainted: [W]=WARN [ 170.789097][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.789109][T11793] Call Trace: [ 170.789114][T11793] [ 170.789121][T11793] __dump_stack+0x1d/0x30 [ 170.789178][T11793] dump_stack_lvl+0x95/0xd0 [ 170.789198][T11793] dump_stack+0x15/0x1b [ 170.789215][T11793] should_fail_ex+0x263/0x280 [ 170.789243][T11793] should_fail+0xb/0x20 [ 170.789333][T11793] should_fail_usercopy+0x1a/0x20 [ 170.789409][T11793] _copy_from_user+0x1c/0xb0 [ 170.789472][T11793] ___sys_sendmsg+0xc1/0x1e0 [ 170.789501][T11793] __x64_sys_sendmsg+0xd4/0x160 [ 170.789522][T11793] x64_sys_call+0x17ba/0x3000 [ 170.789555][T11793] do_syscall_64+0xc0/0x2a0 [ 170.789584][T11793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.789604][T11793] RIP: 0033:0x7f286b98aeb9 [ 170.789618][T11793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.789634][T11793] RSP: 002b:00007f286a3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.789692][T11793] RAX: ffffffffffffffda RBX: 00007f286bc05fa0 RCX: 00007f286b98aeb9 [ 170.789704][T11793] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 170.789716][T11793] RBP: 00007f286a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.789727][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.789738][T11793] R13: 00007f286bc06038 R14: 00007f286bc05fa0 R15: 00007fff69caa0a8 [ 170.789755][T11793] [ 171.042994][T11803] loop2: detected capacity change from 0 to 128 [ 171.127394][T11809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.148482][T11809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.163402][T11809] bond0 (unregistering): Released all slaves [ 171.260756][T11816] FAULT_INJECTION: forcing a failure. [ 171.260756][T11816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.273946][T11816] CPU: 1 UID: 0 PID: 11816 Comm: syz.9.2080 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.273992][T11816] Tainted: [W]=WARN [ 171.274045][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.274058][T11816] Call Trace: [ 171.274063][T11816] [ 171.274070][T11816] __dump_stack+0x1d/0x30 [ 171.274094][T11816] dump_stack_lvl+0x95/0xd0 [ 171.274113][T11816] dump_stack+0x15/0x1b [ 171.274191][T11816] should_fail_ex+0x263/0x280 [ 171.274218][T11816] should_fail+0xb/0x20 [ 171.274317][T11816] should_fail_usercopy+0x1a/0x20 [ 171.274366][T11816] _copy_from_user+0x1c/0xb0 [ 171.274427][T11816] ___sys_sendmsg+0xc1/0x1e0 [ 171.274456][T11816] __x64_sys_sendmsg+0xd4/0x160 [ 171.274476][T11816] x64_sys_call+0x17ba/0x3000 [ 171.274499][T11816] do_syscall_64+0xc0/0x2a0 [ 171.274551][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.274570][T11816] RIP: 0033:0x7f286b98aeb9 [ 171.274585][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.274637][T11816] RSP: 002b:00007f286a3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.274689][T11816] RAX: ffffffffffffffda RBX: 00007f286bc05fa0 RCX: 00007f286b98aeb9 [ 171.274702][T11816] RDX: 0000000000000080 RSI: 00002000000004c0 RDI: 0000000000000004 [ 171.274713][T11816] RBP: 00007f286a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.274725][T11816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.274768][T11816] R13: 00007f286bc06038 R14: 00007f286bc05fa0 R15: 00007fff69caa0a8 [ 171.274785][T11816] [ 171.473711][ T44] Bluetooth: hci0: sending frame failed (-49) [ 171.480021][ T4402] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 171.557673][T11830] loop2: detected capacity change from 0 to 1024 [ 171.575885][T11830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.599225][T11830] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.616979][T11836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.629997][T11830] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 3) [ 171.644404][T11830] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 171.656802][T11830] EXT4-fs (loop2): This should not happen!! Data will be lost [ 171.656802][T11830] [ 171.675994][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.690874][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.706134][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.722217][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.736942][T11829] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.758383][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.772597][T11840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11840 comm=syz.1.2088 [ 171.773628][T11829] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.800862][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.815260][T11830] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.2085: lblock 3 mapped to illegal pblock 3 (length 1) [ 171.920143][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.980734][T11850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.993360][T11850] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.011612][T11857] iso9660: Unknown parameter 'smackfsfloor' [ 172.027045][T11850] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 3) [ 172.055286][T11850] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 172.067807][T11850] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.067807][T11850] [ 172.078681][T11860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.093096][T11860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.107810][T11860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.122419][T11860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.137756][T11860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.139170][T11849] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 4: comm syz.3.2091: lblock 4 mapped to illegal pblock 4 (length 2) [ 172.153100][T11860] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2091: lblock 3 mapped to illegal pblock 3 (length 1) [ 172.179785][T11849] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 4: comm syz.3.2091: lblock 4 mapped to illegal pblock 4 (length 2) [ 172.180957][T11849] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 4: comm syz.3.2091: lblock 4 mapped to illegal pblock 4 (length 2) [ 172.256972][T11862] FAULT_INJECTION: forcing a failure. [ 172.256972][T11862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.270198][T11862] CPU: 1 UID: 0 PID: 11862 Comm: syz.9.2092 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.270239][T11862] Tainted: [W]=WARN [ 172.270247][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.270313][T11862] Call Trace: [ 172.270320][T11862] [ 172.270328][T11862] __dump_stack+0x1d/0x30 [ 172.270413][T11862] dump_stack_lvl+0x95/0xd0 [ 172.270461][T11862] dump_stack+0x15/0x1b [ 172.270489][T11862] should_fail_ex+0x263/0x280 [ 172.270529][T11862] should_fail+0xb/0x20 [ 172.270563][T11862] should_fail_usercopy+0x1a/0x20 [ 172.270662][T11862] _copy_to_user+0x20/0xa0 [ 172.270691][T11862] simple_read_from_buffer+0xb5/0x130 [ 172.270737][T11862] proc_fail_nth_read+0x10e/0x150 [ 172.270784][T11862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.270819][T11862] vfs_read+0x1ab/0x7f0 [ 172.270843][T11862] ? __rcu_read_unlock+0x4e/0x70 [ 172.270878][T11862] ? __fget_files+0x184/0x1c0 [ 172.270915][T11862] ? mutex_lock+0x57/0x90 [ 172.270938][T11862] ksys_read+0xdc/0x1a0 [ 172.270962][T11862] __x64_sys_read+0x40/0x50 [ 172.270987][T11862] x64_sys_call+0x2889/0x3000 [ 172.271020][T11862] do_syscall_64+0xc0/0x2a0 [ 172.271089][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.271112][T11862] RIP: 0033:0x7f286b94b78e [ 172.271161][T11862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.271191][T11862] RSP: 002b:00007f286a3e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.271217][T11862] RAX: ffffffffffffffda RBX: 00007f286a3e76c0 RCX: 00007f286b94b78e [ 172.271283][T11862] RDX: 000000000000000f RSI: 00007f286a3e70a0 RDI: 0000000000000003 [ 172.271295][T11862] RBP: 00007f286a3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.271312][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.271329][T11862] R13: 00007f286bc06038 R14: 00007f286bc05fa0 R15: 00007fff69caa0a8 [ 172.271354][T11862] [ 172.489775][ T4612] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 172.502162][ T4612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 172.502162][ T4612] [ 172.514441][ T6567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.564266][T11866] bio_check_eod: 128 callbacks suppressed [ 172.564285][T11866] syz.2.2093: attempt to access beyond end of device [ 172.564285][T11866] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 172.591246][T11866] syz.2.2093: attempt to access beyond end of device [ 172.591246][T11866] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 172.605021][T11866] buffer_io_error: 50 callbacks suppressed [ 172.605035][T11866] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 172.620165][T11866] syz.2.2093: attempt to access beyond end of device [ 172.620165][T11866] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 172.638247][T11868] EXT4-fs: Ignoring removed i_version option [ 172.644366][T11868] EXT4-fs: Ignoring removed bh option [ 172.649966][T11868] ext4: Unknown parameter 'euid<00000000000000000000' [ 172.671318][T11866] syz.2.2093: attempt to access beyond end of device [ 172.671318][T11866] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 172.701755][T11871] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 172.709370][T11871] FAT-fs (loop1): Filesystem has been set read-only [ 172.723546][T11868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.755941][ T9105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.798528][T11869] syz.2.2093: attempt to access beyond end of device [ 172.798528][T11869] loop2: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 172.812288][T11869] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 172.926063][ T6567] ================================================================== [ 172.934214][ T6567] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 172.941657][ T6567] [ 172.944022][ T6567] read-write to 0xffff88810788bd90 of 8 bytes by interrupt on cpu 0: [ 172.952173][ T6567] __xa_clear_mark+0xf5/0x1e0 [ 172.956924][ T6567] __folio_end_writeback+0xf4/0x360 [ 172.962181][ T6567] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 172.968484][ T6567] folio_end_writeback+0x1c/0x70 [ 172.973483][ T6567] end_buffer_async_write+0x156/0x1f0 [ 172.978894][ T6567] end_bio_bh_io_sync+0x79/0xa0 [ 172.983892][ T6567] bio_endio+0x37a/0x410 [ 172.988182][ T6567] blk_update_request+0x338/0x730 [ 172.993259][ T6567] blk_mq_end_request+0x26/0x50 [ 172.998158][ T6567] lo_complete_rq+0x98/0x140 [ 173.002784][ T6567] blk_done_softirq+0x77/0xb0 [ 173.007527][ T6567] handle_softirqs+0xb9/0x280 [ 173.012253][ T6567] run_ksoftirqd+0x1c/0x30 [ 173.016721][ T6567] smpboot_thread_fn+0x32a/0x510 [ 173.021715][ T6567] kthread+0x488/0x510 [ 173.025856][ T6567] ret_from_fork+0x148/0x280 [ 173.030489][ T6567] ret_from_fork_asm+0x1a/0x30 [ 173.035309][ T6567] [ 173.037683][ T6567] read to 0xffff88810788bd90 of 8 bytes by task 6567 on cpu 1: [ 173.045258][ T6567] xas_find_marked+0x213/0x620 [ 173.050066][ T6567] filemap_get_folios_tag+0xfa/0x510 [ 173.055406][ T6567] filemap_write_and_wait_range+0x1f5/0x370 [ 173.061340][ T6567] sync_blockdev+0x35/0x50 [ 173.065830][ T6567] sync_filesystem+0x162/0x190 [ 173.070628][ T6567] generic_shutdown_super+0x44/0x210 [ 173.075962][ T6567] kill_block_super+0x2a/0x70 [ 173.080757][ T6567] deactivate_locked_super+0x75/0x1c0 [ 173.086177][ T6567] deactivate_super+0x97/0xa0 [ 173.090899][ T6567] cleanup_mnt+0x2bb/0x330 [ 173.095359][ T6567] __cleanup_mnt+0x19/0x20 [ 173.099811][ T6567] task_work_run+0x130/0x1a0 [ 173.104448][ T6567] exit_to_user_mode_loop+0x1f7/0x6f0 [ 173.109870][ T6567] do_syscall_64+0x1d3/0x2a0 [ 173.114513][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.120445][ T6567] SYZFAIL: failed to send rpc fd=3 want=7352 sent=0 n=-1 (errno 32: Broken pipe) [ 173.122795][ T6567] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 173.129925][ T6567] [ 173.132293][ T6567] Reported by Kernel Concurrency Sanitizer on: [ 173.138479][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.149987][ T6567] Tainted: [W]=WARN [ 173.153817][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.163902][ T6567] ================================================================== [ 173.274722][ T7870] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 173.287098][ T7870] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.287098][ T7870] [ 173.383887][ T6103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.563212][T11887] chnl_net:caif_netlink_parms(): no params data found [ 173.835706][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.845145][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.854387][ T4612] bond0 (unregistering): Released all slaves [ 173.870994][T11887] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.878199][T11887] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.885694][T11887] bridge_slave_0: entered allmulticast mode [ 173.892400][T11887] bridge_slave_0: entered promiscuous mode [ 173.899859][T11887] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.907035][T11887] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.918042][T11887] bridge_slave_1: entered allmulticast mode [ 173.924730][T11887] bridge_slave_1: entered promiscuous mode [ 173.933152][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 173.933169][ T29] audit: type=1400 audit(1770162623.599:2973): avc: denied { read open } for pid=11903 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.971879][ T29] audit: type=1400 audit(1770162623.639:2974): avc: denied { getattr } for pid=11903 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.006102][ T4612] hsr_slave_0: left promiscuous mode [ 174.012002][ T4612] hsr_slave_1: left promiscuous mode [ 174.019246][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.028479][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.063663][ T29] audit: type=1400 audit(1770162623.729:2975): avc: denied { add_name } for pid=11902 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.086391][ T29] audit: type=1400 audit(1770162623.729:2976): avc: denied { create } for pid=11902 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.108903][ T29] audit: type=1400 audit(1770162623.729:2977): avc: denied { write } for pid=11902 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=11257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.135295][ T29] audit: type=1400 audit(1770162623.729:2978): avc: denied { append } for pid=11902 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=11257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.160070][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 174.167293][ T29] audit: type=1400 audit(1770162623.829:2979): avc: denied { remove_name } for pid=11913 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=11257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.191113][ T29] audit: type=1400 audit(1770162623.829:2980): avc: denied { unlink } for pid=11913 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=11257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.216905][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 174.253349][T11887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.265627][T11887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.285797][T11887] team0: Port device team_slave_0 added [ 174.292510][T11887] team0: Port device team_slave_1 added [ 174.308803][T11887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.315805][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.341861][T11887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.353095][T11887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.360156][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.386312][T11887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.417785][T11887] hsr_slave_0: entered promiscuous mode [ 174.424111][T11887] hsr_slave_1: entered promiscuous mode [ 174.430044][T11887] debugfs: 'hsr0' already exists in 'hsr' [ 174.435824][T11887] Cannot create hsr debugfs directory [ 175.926009][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.935387][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.944619][ T4612] bond0 (unregistering): Released all slaves [ 176.021711][ T4612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.031534][ T4612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.040752][ T4612] bond0 (unregistering): Released all slaves [ 176.176866][ T4612] bond1 (unregistering): Released all slaves [ 176.303888][ T4612] hsr_slave_0: left promiscuous mode [ 176.310337][ T4612] hsr_slave_1: left promiscuous mode [ 176.315993][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.323532][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.331115][ T4612] batman_adv: batadv0: Interface deactivated: dummy0 [ 176.337831][ T4612] batman_adv: batadv0: Removing interface: dummy0 [ 176.346620][ T4612] hsr_slave_0: left promiscuous mode [ 176.352378][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.360755][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.370374][ T4612] hsr_slave_0: left promiscuous mode [ 176.376291][ T4612] hsr_slave_1: left promiscuous mode [ 176.381908][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.389656][ T4612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.429460][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 176.439546][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 176.503217][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 176.513990][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 176.575806][ T4612] team0 (unregistering): Port device team_slave_1 removed [ 176.586670][ T4612] team0 (unregistering): Port device team_slave_0 removed [ 176.677884][T11887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.684745][ T29] audit: type=1400 audit(1770162626.349:2981): avc: denied { create } for pid=11887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.705604][ T29] audit: type=1400 audit(1770162626.349:2982): avc: denied { write } for pid=11887 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.730484][T11887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.742211][T11887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.752412][T11887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.801720][T11887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.815797][T11887] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.826531][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.833631][ T7867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.849031][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.856231][ T7867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.943092][T11887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.087924][T11887] veth0_vlan: entered promiscuous mode [ 177.096530][T11887] veth1_vlan: entered promiscuous mode [ 177.122092][T11887] veth0_macvtap: entered promiscuous mode [ 177.130448][T11887] veth1_macvtap: entered promiscuous mode [ 177.142329][T11887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.155288][T11887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.167086][ T7870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.191182][ T7870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.211225][ T7870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.221968][ T7870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.387849][ T4612] IPVS: stop unused estimator thread 0... [ 179.060889][ T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.476705][ T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.526736][ T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.566724][ T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.633603][ T60] bridge_slave_1: left allmulticast mode [ 180.639469][ T60] bridge_slave_1: left promiscuous mode [ 180.645238][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.653344][ T60] bridge_slave_0: left allmulticast mode [ 180.659096][ T60] bridge_slave_0: left promiscuous mode [ 180.664848][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.737722][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.747809][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.757439][ T60] bond0 (unregistering): Released all slaves [ 180.827641][ T60] hsr_slave_0: left promiscuous mode [ 180.833322][ T60] hsr_slave_1: left promiscuous mode [ 180.839225][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.846753][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.854563][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.862019][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.873282][ T60] veth1_macvtap: left promiscuous mode [ 180.880865][ T60] veth0_macvtap: left promiscuous mode [ 180.886676][ T60] veth1_vlan: left promiscuous mode [ 180.891949][ T60] veth0_vlan: left promiscuous mode [ 180.966332][ T60] team0 (unregistering): Port device team_slave_1 removed [ 180.976447][ T60] team0 (unregistering): Port device team_slave_0 removed