last executing test programs: 2m5.798446931s ago: executing program 0 (id=500): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4040400}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x44}}, 0x20044055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket(0x2c, 0x80000, 0xdd1e) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r5, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x10, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @remote}, &(0x7f0000000740)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000780)={@loopback, @multicast1, 0x0}, &(0x7f00000007c0)=0xc) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r12, 0x107, 0x18, &(0x7f0000000800)={r11, 0x1, 0x6}, 0x10) sendto$packet(r12, &(0x7f0000000040), 0x0, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r14, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x2000800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x8, 0x1, 0x0, 0x7, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x124, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x94}, 0x890) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r1, 0x2000000) 2m5.679308377s ago: executing program 0 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x2000000, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0xffffffff, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 2m5.516460007s ago: executing program 0 (id=508): creat(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000e4ff0000180000007b020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getcwd(0x0, 0x0) 2m5.434197562s ago: executing program 0 (id=511): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000c10, &(0x7f0000000cc0)={[{@nobh}, {@abort}, {@nogrpid}, {@nodiscard}, {@noacl}], [{@context={'context', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x61, 0x32, 0x64, 0x35, 0x37, 0x5, 0x32], 0x2d, [0x37, 0x38, 0x33], 0x2d, [0x31, 0x63, 0x65, 0x61], 0x2d, [0x35, 0x65, 0x64, 0x34], 0x2d, [0x35, 0x61, 0x66, 0x34, 0x0, 0x62, 0x39, 0x63]}}}, {@permit_directio}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0x0, 0x261, &(0x7f0000000980)="$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") socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x9}, 0x128, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPCvJ4mTbtNmF3qACtgFCgtarb3xtlHVC90LCFWVEIgD4rANiTcKseMQO1UTIpH+DXDgCn8CByQOSD1x4MYRiQNCKgekBSLQBgkkoxlPUm/idL2Nf0D8+UijmTfPM9/3ksy8mefJvAAm1o2IOIiIYkS8FREL+fpCPsXrnSn93KPD/ZWjw/2VQrTb3/pbIctP10XXNqln833ORcQ3vxbxvcLZuM3dvY3lWq26nafLrfpWubm7d3u9vrxWXatuVipLi0t3Xr37SmVgdb1e/8XDr66/8e1f/+rT7//u4Ms/TIs1n+d112OQOlWfOYmTmo6IN4YRbAym8nlxzOXgo0ki4mMR8bns+F+IqeyvEwC4zNrthWgvdKcBgMsuyfrACkkp7wuYjyQplTp9eC/ElaTWaLZuPWjsbK52+squxkzyYL1WvXNt9g8/yK4YZgppejHLy/KzdOVU+m5EXIuIn8w+k6VLK43a6vguewBgoj17qv3/52yn/e9Dj2/1AID/G3PjLgAAMHLafwCYPNp/AJg8fbT/+Zf9B0MvCwAwGk9x/58MsxwAwOjo/weAyaP9B4CJ8o0330yn9lH+/uvVt3d3Nhpv316tNjdK9Z2V0kpje6u01misZe/sqT9pf7VGY2vx5dh5p9yqNlvl5u7e/XpjZ7N1P3uv9/3qzEhqBQB8mGvX3/t9ISIOXnsmm6JrLAdtNVxunueByeUlfjC5jPYFk6v/e/zfDrUcwPj0vA+Y67n4uJ8+RRDPGcH/lJuf7L//3xjPcLno/4fJNfWRtpodeDmA0dP/D5Or3S6cHvO/eJIFAFxKF3jGv/2jQV2EAGP1pOeAB/L9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwy8xHx/SgkpXws8PlIklIp4rmIuBozhQfrteqdiHg+rkfEzGyaXhx3oQGAC0r+UsjH/7q58NL86dxi4V/ZYP/FtPXP120vpuv/frJ+9nj4sMoH211gXEEAYMDeWW61tiv5vOtG/tHh/srxNMryPLwX/8mHIl45OtzPpk7OdExn87nsWuLKPwp5ujMW6YsRMTWA+AfvRsQnetW/kPWNXM1HPu2OH3ns50YaP3ksfpLldebpxdfHB1AWmDTv3YuI13sdf0ncyOa9j/+57Ax1cQ/vdXZ2fO47OtwvHsc/Pv9N9YifHvM3+o3x8m++fmZle6GT927Ei9OPxT85/xzHL5wT/6U+4//xU5/58VfOyWv/LOJm9I7fHavcqm+Vm7t7t9fry2vVtepmpbK0uHTn1buvVMpZH3X5uKf6rL++duv588qW1v/KOfHneta/eLLtF/qs/8///dZ3P/sh8b/0+V7xk3ihZ/yOtE38Yp/xl6/88tzhu9P4q+fU/0m//1t9xn//z3urfX4UABiB5u7exnKtVt2+0EJ6FzqI/ZxZSIs40B32WCh2Ff5PMdxYT7UwM6yf6tAXpk+uFQe75++kexxxdZKB1+JCC49GFWu85yVg+D446MddEgAAAAAAAAAAAAAA4Dyj+NelcdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+u/AQAA//9xkcaD") times(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x25, 0x4, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 2m4.794931629s ago: executing program 0 (id=519): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000020000800010000000700000800000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000003"], 0x50) 2m4.464048648s ago: executing program 0 (id=529): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000840)='\b\x00\x00\x00', 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8002) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7, 0x3f00000000000000, 0x0, 0x300, 0x0, 0xd1d1}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x7, 0x3f00000000000000, 0x0, 0x300, 0x0, 0xd1d1}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@gettaction={0xd0, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x75f}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x542}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2ae0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004058}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2ae0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004058}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @remote, 0x1}, 0x1c) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) socket(0x10, 0x80003, 0x0) (async) r6 = socket(0x10, 0x80003, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x16, 0x0, 0xfd}]}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0x0) (async) write$binfmt_misc(r7, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) (async) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m4.410545351s ago: executing program 32 (id=529): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000840)='\b\x00\x00\x00', 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8002) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7, 0x3f00000000000000, 0x0, 0x300, 0x0, 0xd1d1}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x7, 0x3f00000000000000, 0x0, 0x300, 0x0, 0xd1d1}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@gettaction={0xd0, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x75f}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x542}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2ae0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004058}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2ae0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004058}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a8f7e6dad505f3278620aff2e6ef4e8acabd6384884ab126cdc12c68c11f07d56956fef94ef9013bb2180f47995d18e9f6ef8d51448cbf26e0ad55166ba4af5005664a8e4205c891110f03eca8d9009dcde47795c76f95a48f895314e6253aaa2f54d9dd63f0ece1466b056bd15418fc7a56d88f7544c18b83489af5711ae49d809384661c42fd5c650e9986d572bf0179bd43a2b4ec16b26a02037697e77da58d208aaba0b985ea529903b1ef3d25f8b3d609c1e6f396cd390f4912ee27800a6318d9833bc48dc53b866c5e7b5"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @remote, 0x1}, 0x1c) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) socket(0x10, 0x80003, 0x0) (async) r6 = socket(0x10, 0x80003, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x16, 0x0, 0xfd}]}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0x0) (async) write$binfmt_misc(r7, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) (async) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m39.272034992s ago: executing program 4 (id=860): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1cb041, 0x8) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x81, 0xfc039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547b7e, 0x4, @perf_config_ext={0x80000000000006, 0x6}, 0x9092, 0x0, 0x9, 0x4, 0x1ea, 0xa772da53, 0x8, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000040)=@chain) 1m39.219796375s ago: executing program 4 (id=863): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xb3a4, 0x8000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) r8 = semget$private(0x0, 0x7, 0x444) semop(r8, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r7, 0x9}, 0x8) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000380)=0x8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x8001}, r9, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x9}}, 0xffffff69) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, r9, 0xb}}, 0xffffffffffffffa4) 1m38.288069569s ago: executing program 4 (id=878): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r1 = msgget$private(0x0, 0x80) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) msgrcv(r1, 0x0, 0x0, 0x3, 0x1000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0), 0x0, 0x1) ioctl$TCFLSH(r3, 0x541b, 0x7ffffffffffffffe) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) msgsnd(r1, &(0x7f0000000400)={0x3}, 0x6, 0x800) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) 1m38.032433734s ago: executing program 4 (id=888): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000), 0x64, 0x51d, &(0x7f0000000900)="$eJzs3UFvG1kdAPD/OHY2adNNFjjASiwLuyitoHayYXcjDssiITitBCz3EhIniuLEUey0TVRBKj4AEkKAxAkuXJD4AEioEheOCKkSnEGAQAhaOHCADrI9SdPUdpzWjdP495Mm82bmPf/fc/TG82ZGMwEMrVcj4t2IeJCm6ZWImMzW57Ip9lpTI9/9e7cWG1MSafr+P5JIsnX7n5Vk84tZsbGI+OqXIr6RPB63trO7tlCplLey5VJ9fbNU29m9urq+sFJeKW/Mzc2+Nf/2/JvzM31p56WIeOcLf/n+d376xXd++ekbf7z2t8vfbFRrItt+uB0nlO+2sdX0QvO7OFxg6wmDnUX5Zgsz422zjB1dcfsZ1wkAgPYax/gfiIhPRMSVmIyR7oezAAAAwHMo/dxE/DeJSNsb7bAeAAAAeI7kmvfAJrlidi/ARORyxWLrHt4PxYVcpVqrf2q5ur2x1LpXdioKueXVSnkmu1d4KgpJY3m2mX64/MaR5bmIeCkivjc53lwuLlYrS4M++QEAAABD4uKR8f+/J1vjfwAAAOCcmRp0BQAAAIBnzvgfAAAAzj/jfwAAADjXvvzee40p3X//9dL1ne216vWrS+XaWnF9e7G4WN3aLK5UqyvNZ/atd/2wekSlWt38TGxs3yzVy7V6qbaze229ur1Rv7b6+DugAQAAgNPx0sfu/D6JiL3PjjenhtHeivaYDTir8gepJJu36dZ/eLE1/3OEs3hwfowMugLAwOQHXQFgYAqDrgAwcMkx2zsO+3+TzT/e3/oAAAD9N/2Rztf/c11L7nXfDJx5OjEML9f/YXg1r//3eievgwU4VwqOAGDoPfX1/2Ol6YkqBAAA9N1Ec0pyxez03kTkcsVixKXmawEKyfJqpTwTES9GxO8mCy80lmebJZNjxwwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAA51pE7q/Jr1rP8p+efH3i6PmB0eQ/k5G9IvTGj97/wc2Fen1rtrH+nwfr6z/M1r8xiDMYAAAAMBRO9AL//XH6/jgeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrp/r1bi/vTacb9++cjYqpd/HyMNedjUYiIC/9KIn+oXBIRI32IP9748+F28ZNGtQ5Ctos/3of4e7e7xo+p7FtoF/9iH+LDMLvT2P+8267/5eLV5vxw/xs9KJePeKQ/PqnO+7842P+NdOj/l3qM8fLdn5c6xr8d8XK+/f5nP37SIf5rPcb/+td2dzttS38cMd329yd5JFapvr5Zqu3sXl1dX1gpr5Q35uZm35p/e/7N+ZnS8mqlnP1tG+O7H/3Fg27tv9Ah/tQx7X+9x/b/7+7Nex9sJQvt4l9+rU38X/8ky/F4/Fz22/fJLN3YPr2f3mulD3vlZ799pVv7lzq0/7j//+Ue23/lK9/+U49ZAYBTUNvZXVuoVMpb7RMvZNm65TnjicYo/QxUQ+IMJr7V1w9M0zRtdJan+JwkTlpqKuuhff9+BrdPAgAAno2HB/2DrgkAAAAAAAAAAAAAAAAAAAAMr9N4ytrRmHsHqaQfj9AGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiL/wcAAP//JgbTCA==") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10fff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r5, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008001740fffff8010800084000000030050001000600000005000500070000000d0003006c6973743a736574000000000900020073797a3100000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0xe2c, 0x1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 1m37.362527063s ago: executing program 4 (id=903): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)}], 0x1}, 0x4000005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x40) 1m37.014670963s ago: executing program 4 (id=912): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1cb041, 0x8) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x81, 0xfc039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547b7e, 0x4, @perf_config_ext={0x80000000000006, 0x6}, 0x9092, 0x0, 0x9, 0x4, 0x1ea, 0xa772da53, 0x8, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000040)=@chain) 1m36.978667885s ago: executing program 33 (id=912): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1cb041, 0x8) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x81, 0xfc039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547b7e, 0x4, @perf_config_ext={0x80000000000006, 0x6}, 0x9092, 0x0, 0x9, 0x4, 0x1ea, 0xa772da53, 0x8, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000040)=@chain) 30.615866591s ago: executing program 6 (id=1905): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0xf4ffffffffffffff) 29.960829639s ago: executing program 6 (id=1915): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0x2bd, &(0x7f0000000cc0)="$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") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (fail_nth: 2) 29.730909123s ago: executing program 6 (id=1918): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x61, 0x0, 0x30]}}, 0x0, 0x29}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r3, 0x0) pipe(&(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 29.692928585s ago: executing program 6 (id=1920): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="99742dbd70e2fadbdf2515000f00140001800d0001007564703ad6d3b05473"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@bsdgroups}, {@nobh}]}, 0x9, 0x678, &(0x7f00000007c0)="$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") sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000000c0a090000000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 29.218971032s ago: executing program 6 (id=1929): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x3246, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x5, 0x2, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4079, 0xfef) (async) read$hiddev(r1, &(0x7f00000000c0)=""/4079, 0xfef) r2 = syz_open_procfs(0x0, &(0x7f0000004380)='smaps\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000480)=""/191, 0xbf}], 0x1) (async) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000480)=""/191, 0xbf}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000010c0)=0x14) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) read$hiddev(r1, &(0x7f0000001100)=""/234, 0xea) syz_clone3(&(0x7f0000000900)={0x200000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000900)={0x200000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x0], 0x1}, 0x58) 29.158697156s ago: executing program 6 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2a}]}]}, 0x30}, 0x1, 0x0, 0xff1f0000, 0xaa34a4cfdf933201}, 0x10) 14.11313937s ago: executing program 34 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2a}]}]}, 0x30}, 0x1, 0x0, 0xff1f0000, 0xaa34a4cfdf933201}, 0x10) 2.654726376s ago: executing program 3 (id=2254): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x1200, r1}) 2.565564672s ago: executing program 3 (id=2256): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10fff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0xe2c, 0x1) syz_emit_ethernet(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0xb, &(0x7f0000005000/0x3000)=nil, 0x1) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c00000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c00028005000e0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.478038336s ago: executing program 5 (id=2259): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="75746638006d61703d6f985c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010302071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736bbe30c8486470722677b93165cfe6f62127553b2017754598752d8b7369672c7063723d303030303030303030303030306e749dbc529c0000004119997600a2299d2c35a2efc1bf03fc87a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b00"/229, @ANYRESDEC=0x0, @ANYBLOB="bcafa60c6b81cfdeeb19c7b6d67ac3e043050813549d58d5a8f964a57a91afd6b734cc1c78a04a20f6e0a1374ccff9a2d5aed973dbf760bb6b51230c4e18303ffd90b076d882825bb272ae", @ANYRES64], 0xff, 0x677, &(0x7f0000000c00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x60a, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3840020, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES64=r6], 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x100) 1.827506584s ago: executing program 2 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="010826bd7000030000000b00000008000300", @ANYRES32=r4, @ANYBLOB="faff5080080008800400010004000600"], 0x2c}}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="0400870004006c0004008700080057007506000084008e0008002700010000000800a1000300000008005700e50d0000080022010c02000008009f00030000000500180116000000050019010c00000008009f0002000000050019010c00000008009f00050000000800a0000104000008009f000300000008002201ca010000"], 0x9c}}, 0x4844) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x3, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000001200)=0x10001, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r10], 0x448}}, 0x0) (async) sendmsg$can_bcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r10, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r11, 0x50009401, &(0x7f0000000040)={{}, "91a4ce853f0795da69bf259eb83d492962fde2f19892d7680db7c0c99c7827f6d6cbc548e9591dc67aa69dac1d68b721f08e1394ae0e5fedc5177f672706132683d0379c7215a13585d0218d2db37bcc86d731571359298f73f05fec293ad501cef6507f2a7b001275db79d68b617196329f55607f2a05ebe46ece7b16bfa0251179c5797e875515885ba2dc225eef246b6e2f9ff921d7d2421aeefa2a5849713c86e06154c91342fee8d581c1aefcd77c8a4a7d3c91e2afee0cd97ed7c398d831a417444391a5e9abdf9a7a3bafd158ff3fe47d12ab61befc0ae1fc207c703c30a4c80e87ba07d19954733c253f5fe0cc65397d258ecbb1763129f4c748f2c9196179f1cbb587646a71b19f1f8be8dd7dc33a3c888addc0822af639eb45c3761a4b9cf70e592a2e6c6075fc8fa43a700a9111e75f8807d2366f3a5a453d6036ed054df44f8f89318bad4f432e87b626d309ae057e5fa2ef953535f6be5804d613e794de1bb5527e89867ad0166b0ec85406d46c9f1cb03fa74d1e694fdcd629ea09f9bae136e507d7c6d69320a44847c96e30b1c269836e3e3bc6b1de188cb03a1e38c9c6e431945bb5e44d6c522b6240b9e8d5e463cf92f1e381756cdf3ed4ade0c565d19a992b97e2b640709b31bc1cff82fe6df719b2e244af7d8ac472432f67682bc649404070b7c069e17c332598ff9c6696116fa7dfc350998f9ffcc2da9648d68b8789bd3fd06dcbec2e1ce44a56acb30006572c88ea7e37db9b4c400722648af00f941b39a7a5e1e52dcdb004796cc123aba690f22a91235eda3e57decb8e975ff6547338faaa685ca8acac80981ceffbb666b8ac6ca70f28e8f448cba18eee0c13390caebbd4ed34078267d4f5d92d70f31d5f364a5017493e61e594194fbdc6bde32be645f93cd107fec6b8fe9ea7c84124aa1e562dfe9a34cacb17010aa2c7649e093f5fc9f46559e512876c754c22f074a485bba10d884153f95891391251e576446e6bba0dd6de7670730240448fd6867d9a655ecdff11c14236e2790186c20da10e8520d1dc79e8deb15f07624c9d1b835a5fb1eac22aed6fac7861f130aa536e8fb54412488b77794c251485686e3677ca184f458f85064d89629bf044a5ef030b2264b9e6adf34b7fec9f773651ce91261ba4c55e556afe54cd87f37b2a7c40e46567b662bdba0bbc1848b3262aa8cba561ee72b14f72c60ef98ae8a5831ad02a5e0cc79a10c6720b05de1779ead3bc36a4f4bf32f87d9db271ede7879b218ac0ab47dfbc83ae6c77a501ae46cd8f1a9a219f3e7a323debcc06f2ed375172af586d9a5c86505b9dd5c60788026a53343e7456874d6930f8fa1c4a9101756efd2b008bb778960aa7002dfed92f01241e928dd409e9ad08617a6dbc227b74de5d4470f97f7148588ab166933c6a09314bdcd436ffea682923fcea28ce467e3277383ead1d3ced8d2e29944e4655ff3c4551112ab1f286602459128ae6200199ce5a8058bfe1c041234d0c6108e75d58d247baa0ef7e59f023b3e81766c077923f48e6858641917b02fdf1331e05ead25c0335fef6565e7f95a105efd43aafe8e79c132ddba0cd34bd1dbaad8aeefcafa3baa895e862e751cd947090ce270e060d64dc85daedffa982161e3210922e2b13b451cea5bafada8d37053d60a59b41c7144589fce727dfbd83e9f6eea49d0a1f1cff7cc2457a98263f64b5139b3c7601f012618a8fd0d104edd34abb841fd5a4477c17d4f6da7c9fc14febc496132c0b638bcaa610e774c15f181585639f1ffcb4716f93b33c14708cbb085ba0091370aba6c99c59cf7ab18f71364bbeba23b832d94c355f90e7e6c063a79f2bcb44abb00b1e019068f7d4279a561abda67f3433b94e58d1a2037805c70de7cbf4ff6657688c7c686637a282bb4a6404dcfaec9efad147b12f01277b5fe264c85858621148474682cdd7ccbab68b57437126b2ffeb59bc60a71bbe1fb8abf230deffbbc61f627b955632d0b934e7c61ff5a02d2809a1e43057fefe509e12ae3b0f6f10791b083062740597a580b8638b4d66e62902b83b4c59eeedb70dd19b72bf6e347d28c717d30beda42c1d7b2efe6ff8aca5e4d294830d6d8375dbbbd256a5a995508f5cd358a546f345c2fe3191262dc72c02ca44d94ed340c752064cd7d54f786a4fcef5e30edae93793440ac5f43e51e4012e170589c775ceda0337c02db84eb8bd91c5cc6a37e813be3cd6a14fe9d639851508ae99c97242e3bcd28e9b04c3a42c38c0a0292db5de990378f1fc40dc3b8e6776e4928a338cab8991e33653332b4b170d353e5e2abccaa53763059daa733cfa39cde3f231de459cab59dd3f803358ab3a7da2ca69cb80c1925088b04776660ee0d58579e6b9d19aa73db135e913ae8fe376ab5afbef83bd17990d6c724578125f8fe20aa79d9454f212733403fa56de590981160ba86498c098226229dd121129fe24d98214bceba33d057d5d882bbfbf942c9084a2a8eb4e0082b95ee71e3416ce32327df88223a3ccd3ee410cb6ffb16bb80c562abe41abeae1f56b77e71113707c35194deca7e0473cf52e64468cbde7d78db5491895875795d200cbd092879f4809f938fe82d3e9ce5b4c62032c25f0225a298b57692071ae97b93513bfebfcb49ab970e6f4a381046ceb82052ac0455f431aa5c2f6484c06ee850d7881769d1d241f8d6369d003a8b14eb5923d8aa2c5b719cb355f5952d911723981b07cdc811acf30d8688c874fef08af02e377470c28fba203369f84389ed4e3e4f5401377d2d55bd2e8856ff26f7dbb8dbf942d66aec45d28ec9864382534ee53123e00243f35c45356c89e98dd28483f8ea67f31f493b6fc820b99dd32a6662a10ef17922ae023b456265d7092337af04e968bd3cad8fdb1e5aef133b91744c5f14b0a59a6c364fc59b46a591672943ffee41f5d206137c91ba64f40e99b1337db0fca555b039004ebec2c002b228f27a4ea2de63c4ebc362f14f91795874f2c470574c363227c92a440f6c02602080409a3fad69ed14db5f1ba97bf5651ecb01c30490dd512f4a9fab7750454a7439e3d4de0d50537ddc93a0a20ec7fead3cb9beb246b37fafd8807eef4569cb59f724151a60936f86933515a89c72b2a961678c809d240b5a62b9519d5d76bc920faf22a7f72a18fa000094b8b0d9ce3b9b5c78c771f978d09fad34675a3b9588c9a8d8fe1ca8d0ab685e6a7504fdf548f5720632cf918ad6451a4c0bccec64654f60e869a718e1a64e0cbef34cae2d8ab8c4fdd79957b676d52a4f7212636b46e221efacd20654f28fdbcf2d6cd82f385a568fd09f9df351e226c58abcc9d72c7d2f6703b5adafdac7b52ec6ee65e1240c33d721d5f6435d0e0dafce7e758a23e4eddb3be801a8de1bd3d8f22eb2c9eea1a17791f30f0ebbef49539f68deebb97786d0407d7c21e2b8a30524c48052077d526dd96eacf3e36609c24d97b39e1ee00f18c0d7f95c35266a9789c8c10d2c95f5d3e0641c3a7df5dd7d25ff5b2ad30c0d7be284dece6779d74e11fc45c7842a1719047a3912ff209d10cf43c5c5275f64069522f3863c26854251f8616f3d93c166910fb9abee31e126ef640588e5673cf686f54f4bab19bf028f85aa3aa2b493721fd6d47e9ec4c663be2a3479e656a207c442759d88f5aea0830475a250781611e1f0c5629a27fc55b8ab3f6cb33134be82efe8c9631a02d0536dd72049cd8c20d03663bfdb202a2b05c0119d9028f5ac946e73862e7b68ecc30a1ff9c67309ae80d65437f893a71a8e8385ec0dde8ff37d6409227b5da9ae479df2901f27388385a62db522216765d52786a94471bc053c3d2388b756675963b6e03880d3605655071a21155f7a79f39c38f18d6d3025815a413105cd1186f92b5469f5e4df121cbfd5fe18f7254eae6746c9f177fee52664ddb6ef92c14f2f97327301d11e264d58a2936ecc956487cbb3cb5651b8dbd7347f403f134789b35216befa4cf3bd83ab0099be646b5c6ff6424c3a51d74b6939ffce7eaf698f1497e8601532df7979cdcb463d363a060abe99fe6bf941142e8ad170caf892616ab69088622537778e146acf1e8d561ead4fd23c6faaa5e5c7f91809fdd7ef2d67a3fd9c565526dd35ec14fa5b58badb0f267556dbf852b670973b46b7c462d48766a2ce46646e60830b675b049213246b11652f1d4e9e3c393346087ce7502e543b18aab58858edeb32708096b50635d7d941141d7ebe9c4e56bff83cf9286ca8b65627932ee4c22890590d105f10a0ffd8171de18cc51f8f98d1b8b6bbfc4a132eb94e3753d5c853c358b12cf9651ed6d325415300e9df0e36a4d7b9d9541f3d58c8e0615c35a93fe37eed461c907d891e8cf9baf7c8e6326279681385a28d48b5bdd676416aebb5a24ceeff1bc038c2ea6d1fcf894974ac7d44076cc2789bfe6c2dd7922d6fe223e836bfa2bc1f71c5603f75ff9f2bce7ccd6015d8cd9fd5a4577a74f1031cc5ccac67b6deb44bad47ac2dd3f3085ceb1fbb899dfff9f94def74d8c5def20a34a74609c56eb42a1b7fb6c355ff7b22e1506bd4da65177276923241beec996f7e62ace31138a71255ee65d8a8d3ab24ed4c5eb89efbffa1c93ff7d30787172d4f72929ea89be413b6e03ea264062322523621b2c45aba0d684ef26826452a004ab5bd4e03ea1e11c17199d80dcff3691205875c10178442c8c5c71bb624b3673ed61857ba27244357bb764a565d9171c6f3811474aa679389a8ed7882de8a19d5961860825f48d450e49f7fbf4e6536914093693c81c05aefc0055d6ee0ddaf86cd4f00b2c402270057b22774295b093726932865d2fa45c2d3dc1f29c2f35caf797d671e7a4419ffdbe693b4c6c84e85ffcc7ae66638335035301c3316d281d6a8eb01b6d429f0040c896334cf100628cf88b6c4be011584c2104f358b36f2a0f5cb2ae357cb262fc6647eb159928f37678aa6d0f917d48a09dc023f0dfa886ac9515903e7b6cab0ffa55ebf0fe9cdadd6add9567cfeb89b1d92fce8c86483a56d9d7cb7667dee6879b4118574d356498dfbc5cafb3a4c760c9a449d8618e144447607e2d51dba2aa206db2924e35fa595860084a35f90fc1e019ded853253aa574c8e34d3cb188351bffb6a0f93a9996e77c1174e5b82e77fadedb713243d9a64a9548625e6df31c2f556a06fdaacbdcd6226ca8c28216459209288d05ef4491a95707e727377ced160d5da219bd99f11e2d58aa42cd162a599cd0a0631b404284cbb79f22661064a924fdbcc50472e43fce27e794cb5ee602a5105622f022a10f6386980dd72dae501863ec4a6f56f7e65d103b0e7a0ca7730e96fb476585be3df31759534b52c2627b005376ae5a82652ff490de0f4ba25c86b2da10a1e74e3e073480a970a2851d0f8fc63fb55d4113277e1dee8e470aabb630e2ed451b8e6711cfe721d902adbe5331848baf62da30d1503d286e6fa12751e52405232c248243e9c68b706812ab0759400a79499cc1a10d8fed1235775c9e630841fee5f56bc8bbb25602d048157abadba7c464311c0c96c1a68afa4f8deab8b63d71982d6152c4deedf8fdcdaa376e01a5215e7ca3f0a2ad615fd10ac59e3a4543b617fa7727534c3887db60225590b7f4cd2f4a791793d3a4d16311b980130b97be7046d54bfb670a04d0d9087ae7a506b5628bd496c1b63c6a056b7043b592221566edce5745b57cae77cb11ae5a03802fc58185eb5a7bdd894fa6c326ac6d"}) 1.673667113s ago: executing program 2 (id=2266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0xfe000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffd, 0x8}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 1.616597007s ago: executing program 3 (id=2267): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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") (fail_nth: 5) 1.427731117s ago: executing program 2 (id=2268): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030010000000100"/20, @ANYRES64=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018", @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES32=r3], 0xa0}, 0x4004885) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8418, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x0, 0x6, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e21, 0x20000402, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000840), 0x4) sendmmsg$inet6(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r7, 0x0, 0x79) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1, 0x0, 0x0, 0x0, 0xf}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=0x1, 0x11, 0x0, 0x1d1e, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@cgroup=r10, r8, 0xd, 0x28, 0x0, @void, @void, @void, @value=r11, r9}, 0x20) syz_emit_ethernet(0x12c, &(0x7f0000000180)=ANY=[@ANYBLOB="8580f83288e1aaaaaaaaaa1c0004bc9c4a901f2d0a891f6cfb7f42b25637af69dba27aaf75b886c5d698ac48982ff7e4083ccc5c2a55bef2c49d2cfd239294693b4f5109b92cf43a84e6caa1e74f564eb8c89b7e8ec1add7d2c68fba2b1f5be3143f642cd307a49001a1a4713222707eb7a2dc6b93681baa298f38142c1095efc548b8efafe1bc69131a4fbc2862d0f5ded7beb216386f882eda9000ecbea2d2bc974e98a9a22b1847d31e22f9a3252c880e6361e4b32c360cab05a23bf454414c48f2d1343b0852a2e14a5cdbe7b01a7a944f9b08d5467576939c9152c4f1ea880f1a69a1a225ff7558d14fc6fd1589e3887ae49d5a79fe974d16d9b9b8361800f9e1961f1b8a6e56a6e1e6edaf75dfb08613417eb8123b0f14d8e4b3988684dd111c62170de9cca8c063ea"], 0x0) 1.397618309s ago: executing program 3 (id=2269): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x2}, 0x800, 0x10020, 0x20000, 0x6, 0x6, 0x20005, 0x200b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x1003f}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xacd3, 0x3fff8001}, 0x2, 0x32, 0xfffff000, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = io_uring_setup(0x2f04, &(0x7f0000000b80)={0x0, 0xa868, 0x40, 0x20001, 0x2d6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100000f00000025bd7000ffdbdf25030006003c00000002004e20e0000001000000000000000003000500ff00000002004e2064010102000000000000000002001300020000002cbd700003351000030017003280000002004e21ffffffff00"/120], 0x78}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24008880) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000140)=[r7, r4], 0x2) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0xac}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="190827bd7000fbdbdf250d0000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r11, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x0, 0x0) 1.356443142s ago: executing program 2 (id=2270): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1.305055954s ago: executing program 5 (id=2272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x6, 0x7fff, 0x2, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x20, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xd, 0x85, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x8000, 0x4f2c, 0x2}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3595d40355a85200"/20, @ANYRES32=0x0, @ANYBLOB="800000000000000008000300", @ANYRES32=r9, @ANYBLOB="1800128008000100677470000c0002800500050001000000"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x7, 0x3, 0x50, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback, 0x40, 0x8, 0xffffffff, 0x81}}) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.181104842s ago: executing program 1 (id=2274): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.140666264s ago: executing program 1 (id=2275): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) 1.140128014s ago: executing program 1 (id=2276): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0xfa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", 0x0, 0x0, 0x0, 0x3, 0x0}) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) unshare(0x22020600) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r1) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "66aac1", 0x0, 0x73, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) read$qrtrtun(r5, &(0x7f00000002c0)=""/52, 0x34) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r6, 0x107, 0x6, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x4e22, 0x8}}}}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r10 = dup(r9) ioctl$TCSETS(r9, 0x40045431, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0xd, "0062ba7d82070400000000000000002400"}) r11 = syz_open_pts(r9, 0x48080) r12 = dup3(r11, r9, 0x80000) read(r9, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TCSETSW2(r12, 0x402c542c, &(0x7f0000000200)={0x3, 0x6, 0x4e, 0xfffffff7, 0x23, "2b000400", 0x5, 0x9bd3}) write$binfmt_script(r10, &(0x7f0000000100)={'#! ', './bus', [], 0xa, "fac6ebe9bbf31000e1df08fc5c1c91714cf87cca9aa06353ec5533f7ace1a713ea44735df4511ab03178358c9959be82297cc5fbdb28a7a744d3"}, 0x43) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x60}}, 0x4040) splice(r7, 0x0, r13, 0x0, 0x88000cc, 0x1000000000000000) fcntl$setpipe(r8, 0x407, 0x1000000300007) 1.000488282s ago: executing program 7 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}, 0x1, 0x0, 0xc00e0000, 0x406c450}, 0x0) 991.405213ms ago: executing program 7 (id=2279): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffbfffb, @loopback, 0x2}, 0x80, &(0x7f0000000b00)=[{0x0, 0x2}, {&(0x7f0000000000)="8a0a8fc2da09c004ecc2a4ddc85db5b0a04e565fb23891e0b15243256cd1b5993f5439eb2b2f0dc7bdc0beaf7afab1390fe6c256b34aebe2950a6b306e6990cce16b4d36b8884e292e663889c57a692b29929426abf3e874810a34e1056ea1", 0x2}], 0x2, 0x0, 0x80fe}, 0xce8c0) 965.850904ms ago: executing program 7 (id=2280): unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005a0001000000f4f9002304000a04f5110800010002000000080002", 0x1f) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e"], 0x24}], 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)) r1 = socket(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "a664494a51"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) unshare(0x4c040a80) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x2a, 0x9, 0x2, 0x4}, 0x10) dup3(r4, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e63, 0x471, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x6) 600.926396ms ago: executing program 7 (id=2281): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="75746638006d61703d6f985c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010302071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736bbe30c8486470722677b93165cfe6f62127553b2017754598752d8b7369672c7063723d303030303030303030303030306e749dbc529c0000004119997600a2299d2c35a2efc1bf03fc87a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b00"/229, @ANYRESDEC=0x0, @ANYBLOB="bcafa60c6b81cfdeeb19c7b6d67ac3e043050813549d58d5a8f964a57a91afd6b734cc1c78a04a20f6e0a1374ccff9a2d5aed973dbf760bb6b51230c4e18303ffd90b076d882825bb272ae", @ANYRES64], 0xff, 0x677, &(0x7f0000000c00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3840020, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES64=r7], 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x100) 502.244381ms ago: executing program 2 (id=2282): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f29000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 472.981223ms ago: executing program 2 (id=2283): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2c6, &(0x7f0000000fc0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x9}, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 432.868055ms ago: executing program 3 (id=2284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt(r1, 0x2991, 0x4, &(0x7f0000000180)="73b5615e98bdf93cc02ab8c00228fb82493c200c0d5fc106bf37447274ef7537081ffb85caa9c5f7bc19bab12032f3429ffc9b03489c5e70e87f23edf766edc11cc8409ad7e8ce431da598d3ccf5a906f0519a2e94ff90de7a7a9cc112fab91fc72a612a0930e6ad92acc93842b6ddb87c93d02816aefa77fd8c68a432de4f1db6c279d21f401b0e48cbdf6735ddf6027196a31df312805a9e3c889744bf8b1e8e1a258b602326ae2e5cd7b8540214e816f18d974b8d496fc78a9ed38a44aec9a0eff4799408", 0xc6) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 432.208375ms ago: executing program 5 (id=2285): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040082}, 0x0) 424.118496ms ago: executing program 7 (id=2286): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) 333.163491ms ago: executing program 3 (id=2287): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x6]}, &(0x7f0000000100)=0x8) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00f1bfa4a06c80e5a700004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b000100"], 0x40}}, 0x20000840) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) 332.580891ms ago: executing program 7 (id=2288): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000002540), &(0x7f0000002580)=0x4) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000d042abd7000fddbdf4700000000", @ANYRES32=r2, @ANYBLOB='!\b\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000010) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) recvmsg(r5, &(0x7f00000002c0)={&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/136, 0x88}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/105, 0x69}], 0x5, &(0x7f0000000000)=""/27, 0x1b}, 0x40000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b00)={r4, 0xe0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000002880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000002900)=[{}, {}], 0x10, 0x10, &(0x7f0000002940), &(0x7f0000002980), 0x8, 0xe7, 0x8, 0x8, &(0x7f00000029c0)}}, 0x10) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002b80)=@o_path={&(0x7f0000002b40)='./file0\x00', 0x0, 0x10, r0}, 0x18) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r12}, &(0x7f00000002c0), &(0x7f0000000300)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x1b, 0x22, &(0x7f00000025c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x3, 0x0, 0x2, 0x8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0xfb, 0x1, 0x7, 0x1, 0x8001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002700)='syzkaller\x00', 0x7fff, 0x46, &(0x7f0000002740)=""/70, 0x41100, 0x12, '\x00', r2, @fallback=0x1d, r4, 0x8, &(0x7f00000027c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002800)={0x2, 0x7, 0x7, 0x4}, 0x10, r9, r10, 0x0, &(0x7f0000002bc0)=[r1, r4, r4, r11, r4], 0x0, 0x10, 0x7}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r8, 0x8001}}, 0x48) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 263.659965ms ago: executing program 5 (id=2289): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000540)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 263.047405ms ago: executing program 1 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="70000000020701030000070000000000050000030c00034000fff000000000062c0007"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 148.681891ms ago: executing program 5 (id=2291): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xf, 0xf4039, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xc}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0xf86}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={r6, 0x5}, &(0x7f0000000240)=0x8) fcntl$setpipe(r2, 0x407, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @rand_addr=0xdffffc13}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) 148.388432ms ago: executing program 1 (id=2292): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) process_mrelease(0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xffff, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r6, 0x25, 0x4, @void}, 0x10) (async) r7 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa4283704ae75a7e1, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r6, @ANYRES8=r2, @ANYRESHEX=r1, @ANYBLOB="279bf0de956bc639aa086bc73d297f5cd88d8ea284718144a5b1efea0e1fce5f7b9c7d7fc483132412cc1266f509e087d978c89e46ba20b648f219fbbca997"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000040), 0x9) timerfd_create(0x1, 0x80800) (async) close(0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) 132.370082ms ago: executing program 1 (id=2293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x6, 0x7fff, 0x2, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x20, 0xfffffffa}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xd, 0x85, 0x16, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x8000, 0x4f2c, 0x2}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3595d40355a85200"/20, @ANYRES32=0x0, @ANYBLOB="800000000000000008000300", @ANYRES32=r9, @ANYBLOB="1800128008000100677470000c0002800500050001000000"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x7, 0x3, 0x50, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback, 0x40, 0x8, 0xffffffff, 0x81}}) syz_open_dev$tty1(0xc, 0x4, 0x2) 0s ago: executing program 5 (id=2294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000006e03000006000000850000002d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@dax}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000001140)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.stat\x00', 0x275a, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x3c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f1", 0x1) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): mily 0 port 6081 - 0 [ 157.356495][ T9274] syz.6.1786: attempt to access beyond end of device [ 157.356495][ T9274] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 157.372803][ T9274] syz.6.1786: attempt to access beyond end of device [ 157.372803][ T9274] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 157.392980][ T9278] Unable to read rock-ridge attributes [ 157.413348][ T2505] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.456405][ T2505] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.469456][ T2505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.483251][ T2505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.785492][ T9316] netlink: 'syz.6.1802': attribute type 10 has an invalid length. [ 157.793839][ T9313] loop5: detected capacity change from 0 to 2048 [ 157.803468][ T9313] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.810008][ T9313] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.837411][ T9313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.860845][ T9323] loop6: detected capacity change from 0 to 128 [ 157.874554][ T9323] FAULT_INJECTION: forcing a failure. [ 157.874554][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 157.887320][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.6.1804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.887365][ T9323] Tainted: [W]=WARN [ 157.887412][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.887423][ T9323] Call Trace: [ 157.887429][ T9323] [ 157.887437][ T9323] __dump_stack+0x1d/0x30 [ 157.887459][ T9323] dump_stack_lvl+0x95/0xd0 [ 157.887531][ T9323] dump_stack+0x15/0x1b [ 157.887550][ T9323] should_fail_ex+0x263/0x280 [ 157.887579][ T9323] should_failslab+0x8c/0xb0 [ 157.887600][ T9323] __kmalloc_noprof+0xb8/0x580 [ 157.887676][ T9323] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 157.887705][ T9323] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 157.887733][ T9323] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 157.887899][ T9323] ? selinux_capable+0x31/0x40 [ 157.887917][ T9323] ? security_capable+0x7b/0x90 [ 157.887944][ T9323] ? ns_capable+0x7c/0xb0 [ 157.887969][ T9323] genl_rcv_msg+0x432/0x470 [ 157.888020][ T9323] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 157.888042][ T9323] netlink_rcv_skb+0x123/0x220 [ 157.888072][ T9323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.888198][ T9323] genl_rcv+0x28/0x40 [ 157.888292][ T9323] netlink_unicast+0x5c0/0x690 [ 157.888324][ T9323] netlink_sendmsg+0x5c8/0x6f0 [ 157.888344][ T9323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.888362][ T9323] ____sys_sendmsg+0x5af/0x600 [ 157.888472][ T9323] ___sys_sendmsg+0x195/0x1e0 [ 157.888514][ T9323] __x64_sys_sendmsg+0xd4/0x160 [ 157.888548][ T9323] x64_sys_call+0x17ba/0x3000 [ 157.888572][ T9323] do_syscall_64+0xc0/0x2a0 [ 157.888617][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.888650][ T9323] RIP: 0033:0x7f526c8caeb9 [ 157.888665][ T9323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.888741][ T9323] RSP: 002b:00007f526b327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.888759][ T9323] RAX: ffffffffffffffda RBX: 00007f526cb45fa0 RCX: 00007f526c8caeb9 [ 157.888772][ T9323] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 157.888840][ T9323] RBP: 00007f526b327090 R08: 0000000000000000 R09: 0000000000000000 [ 157.888851][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.888885][ T9323] R13: 00007f526cb46038 R14: 00007f526cb45fa0 R15: 00007ffde93a3168 [ 157.888904][ T9323] [ 158.152378][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.313796][ T9339] syzkaller0: entered promiscuous mode [ 158.319373][ T9339] syzkaller0: entered allmulticast mode [ 158.327797][ T9339] tipc: Enabled bearer , priority 0 [ 158.334829][ T9337] tipc: Resetting bearer [ 158.350513][ T9337] tipc: Disabling bearer [ 158.421759][ T9345] FAULT_INJECTION: forcing a failure. [ 158.421759][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 158.434560][ T9345] CPU: 1 UID: 0 PID: 9345 Comm: syz.6.1813 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.434699][ T9345] Tainted: [W]=WARN [ 158.434709][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.434726][ T9345] Call Trace: [ 158.434734][ T9345] [ 158.434744][ T9345] __dump_stack+0x1d/0x30 [ 158.434805][ T9345] dump_stack_lvl+0x95/0xd0 [ 158.434836][ T9345] dump_stack+0x15/0x1b [ 158.434880][ T9345] should_fail_ex+0x263/0x280 [ 158.434944][ T9345] should_failslab+0x8c/0xb0 [ 158.435035][ T9345] __kmalloc_cache_noprof+0x64/0x4a0 [ 158.435072][ T9345] ? netlbl_cipsov4_add+0x369/0x12a0 [ 158.435111][ T9345] netlbl_cipsov4_add+0x369/0x12a0 [ 158.435173][ T9345] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 158.435212][ T9345] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 158.435293][ T9345] genl_family_rcv_msg_doit+0x187/0x1f0 [ 158.435337][ T9345] genl_rcv_msg+0x432/0x470 [ 158.435372][ T9345] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 158.435545][ T9345] netlink_rcv_skb+0x123/0x220 [ 158.435583][ T9345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.435624][ T9345] genl_rcv+0x28/0x40 [ 158.435669][ T9345] netlink_unicast+0x5c0/0x690 [ 158.435714][ T9345] netlink_sendmsg+0x5c8/0x6f0 [ 158.435814][ T9345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.435842][ T9345] ____sys_sendmsg+0x5af/0x600 [ 158.435881][ T9345] ___sys_sendmsg+0x195/0x1e0 [ 158.435926][ T9345] __x64_sys_sendmsg+0xd4/0x160 [ 158.435959][ T9345] x64_sys_call+0x17ba/0x3000 [ 158.436053][ T9345] do_syscall_64+0xc0/0x2a0 [ 158.436096][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.436127][ T9345] RIP: 0033:0x7f526c8caeb9 [ 158.436149][ T9345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.436223][ T9345] RSP: 002b:00007f526b327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.436248][ T9345] RAX: ffffffffffffffda RBX: 00007f526cb45fa0 RCX: 00007f526c8caeb9 [ 158.436263][ T9345] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 158.436276][ T9345] RBP: 00007f526b327090 R08: 0000000000000000 R09: 0000000000000000 [ 158.436313][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.436357][ T9345] R13: 00007f526cb46038 R14: 00007f526cb45fa0 R15: 00007ffde93a3168 [ 158.436386][ T9345] [ 158.697815][ T9348] netlink: 'syz.3.1814': attribute type 5 has an invalid length. [ 158.705691][ T9348] netlink: 'syz.3.1814': attribute type 11 has an invalid length. [ 158.756618][ T9359] loop3: detected capacity change from 0 to 164 [ 158.770547][ T9359] Unable to read rock-ridge attributes [ 158.798906][ T9359] Unable to read rock-ridge attributes [ 158.850057][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 158.850074][ T29] audit: type=1326 audit(2000000038.240:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 158.880094][ T29] audit: type=1326 audit(2000000038.240:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 158.881121][ T9369] FAULT_INJECTION: forcing a failure. [ 158.881121][ T9369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.881158][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.2.1823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.881199][ T9369] Tainted: [W]=WARN [ 158.881208][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.881238][ T9369] Call Trace: [ 158.881244][ T9369] [ 158.881252][ T9369] __dump_stack+0x1d/0x30 [ 158.881280][ T9369] dump_stack_lvl+0x95/0xd0 [ 158.881304][ T9369] dump_stack+0x15/0x1b [ 158.881378][ T9369] should_fail_ex+0x263/0x280 [ 158.881411][ T9369] should_fail+0xb/0x20 [ 158.881439][ T9369] should_fail_usercopy+0x1a/0x20 [ 158.881543][ T9369] _copy_from_user+0x1c/0xb0 [ 158.881570][ T9369] input_event_from_user+0x5e/0x190 [ 158.881601][ T9369] ? input_inject_event+0x104/0x120 [ 158.881696][ T9369] evdev_write+0x1b0/0x2b0 [ 158.881739][ T9369] ? __pfx_evdev_write+0x10/0x10 [ 158.881852][ T9369] vfs_write+0x269/0x9f0 [ 158.881922][ T9369] ? kmem_cache_free+0xdf/0x380 [ 158.882052][ T9369] ? putname+0x90/0x100 [ 158.882144][ T9369] ksys_write+0xdc/0x1a0 [ 158.882253][ T9369] __x64_sys_write+0x40/0x50 [ 158.882319][ T9369] x64_sys_call+0x2847/0x3000 [ 158.882486][ T9369] do_syscall_64+0xc0/0x2a0 [ 158.882647][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.882723][ T9369] RIP: 0033:0x7f6475b5aeb9 [ 158.882801][ T9369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.882866][ T9369] RSP: 002b:00007f64745b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.882992][ T9369] RAX: ffffffffffffffda RBX: 00007f6475dd5fa0 RCX: 00007f6475b5aeb9 [ 158.883039][ T9369] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 000000000000000d [ 158.883091][ T9369] RBP: 00007f64745b7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.883195][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.883238][ T9369] R13: 00007f6475dd6038 R14: 00007f6475dd5fa0 R15: 00007fff70396b18 [ 158.883303][ T9369] [ 158.905426][ T29] audit: type=1326 audit(2000000038.240:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 158.905483][ T29] audit: type=1326 audit(2000000038.240:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 158.905553][ T29] audit: type=1326 audit(2000000038.240:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 158.905590][ T29] audit: type=1326 audit(2000000038.250:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f526c88b78e code=0x7ffc0000 [ 158.908084][ T9369] loop2: detected capacity change from 0 to 1024 [ 158.917120][ T9369] EXT4-fs error (device loop2): ext4_quota_enable:7177: inode #3: comm syz.2.1823: casefold flag without casefold feature [ 158.918093][ T9369] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.1823: Bad quota inode: 3, type: 0 [ 158.975022][ T9367] 9p: Bad value for 'wfdno' [ 158.979831][ T29] audit: type=1326 audit(2000000038.330:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 158.997572][ T9369] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 158.999126][ T29] audit: type=1326 audit(2000000038.330:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 159.004612][ T9369] EXT4-fs (loop2): mount failed [ 159.008674][ T29] audit: type=1326 audit(2000000038.360:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 159.346832][ T29] audit: type=1326 audit(2000000038.380:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526c8caeb9 code=0x7ffc0000 [ 159.448802][ T9384] netlink: 'syz.5.1828': attribute type 7 has an invalid length. [ 159.456761][ T9384] netlink: 'syz.5.1828': attribute type 8 has an invalid length. [ 159.525663][ T9389] loop5: detected capacity change from 0 to 1024 [ 159.542648][ T9389] ext4: Unknown parameter 'obj_type' [ 159.548569][ T9393] loop6: detected capacity change from 0 to 128 [ 159.578568][ T9394] loop2: detected capacity change from 0 to 128 [ 159.594440][ T9389] ext4: Unknown parameter 'obj_type' [ 159.710744][ T9400] Unable to read rock-ridge attributes [ 159.758775][ T9400] Unable to read rock-ridge attributes [ 159.925635][ T9406] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 159.937175][ T9408] EXT4-fs: inline encryption not supported [ 159.957637][ T9408] EXT4-fs: inline encryption not supported [ 160.016504][ T9408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.065281][ T9408] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 160.143720][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.271276][ T9418] __nla_validate_parse: 29 callbacks suppressed [ 160.271298][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1840'. [ 160.565760][ T9434] FAULT_INJECTION: forcing a failure. [ 160.565760][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 160.565877][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.5.1845 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.565916][ T9434] Tainted: [W]=WARN [ 160.565926][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.565943][ T9434] Call Trace: [ 160.565952][ T9434] [ 160.565964][ T9434] __dump_stack+0x1d/0x30 [ 160.566085][ T9434] dump_stack_lvl+0x95/0xd0 [ 160.566197][ T9434] dump_stack+0x15/0x1b [ 160.566262][ T9434] should_fail_ex+0x263/0x280 [ 160.566374][ T9434] ? __pfx_fat_alloc_inode+0x10/0x10 [ 160.566503][ T9434] should_failslab+0x8c/0xb0 [ 160.566610][ T9434] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 160.566781][ T9434] ? fat_alloc_inode+0x38/0xc0 [ 160.566865][ T9434] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 160.567013][ T9434] ? __pfx_fat_alloc_inode+0x10/0x10 [ 160.567104][ T9434] fat_alloc_inode+0x38/0xc0 [ 160.567190][ T9434] ? __pfx_fat_alloc_inode+0x10/0x10 [ 160.567268][ T9434] alloc_inode+0x40/0x170 [ 160.567401][ T9434] new_inode+0x1d/0xe0 [ 160.567499][ T9434] fat_build_inode+0x169/0x290 [ 160.567688][ T9434] msdos_create+0x279/0x360 [ 160.567812][ T9434] ? __pfx_msdos_create+0x10/0x10 [ 160.567948][ T9434] path_openat+0x1121/0x23c0 [ 160.568092][ T9434] do_filp_open+0x15d/0x280 [ 160.568180][ T9434] do_sys_openat2+0xa6/0x150 [ 160.568358][ T9434] __x64_sys_creat+0x65/0x90 [ 160.568457][ T9434] x64_sys_call+0x2f1c/0x3000 [ 160.568628][ T9434] do_syscall_64+0xc0/0x2a0 [ 160.568735][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.568816][ T9434] RIP: 0033:0x7f52b362aeb9 [ 160.568891][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.569005][ T9434] RSP: 002b:00007f52b2087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 160.569072][ T9434] RAX: ffffffffffffffda RBX: 00007f52b38a5fa0 RCX: 00007f52b362aeb9 [ 160.569125][ T9434] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0 [ 160.569176][ T9434] RBP: 00007f52b2087090 R08: 0000000000000000 R09: 0000000000000000 [ 160.569311][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.569355][ T9434] R13: 00007f52b38a6038 R14: 00007f52b38a5fa0 R15: 00007fffee0371b8 [ 160.569434][ T9434] [ 160.651246][ T9438] syz.5.1847(9438): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 160.966775][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1849'. [ 160.976028][ T9446] bridge_slave_1: left allmulticast mode [ 160.981780][ T9446] bridge_slave_1: left promiscuous mode [ 160.987764][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.006156][ T9446] bridge_slave_0: left allmulticast mode [ 161.011905][ T9446] bridge_slave_0: left promiscuous mode [ 161.017646][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.084086][ T9378] vfat: Unknown parameter '' [ 161.116153][ T6672] loop2: p1 p3 < p5 p6 > [ 161.136982][ T9436] loop2: p1 p3 < p5 p6 > [ 161.221373][ T9455] netlink: 'syz.5.1852': attribute type 7 has an invalid length. [ 161.229369][ T9455] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1852'. [ 161.242414][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1852'. [ 161.320876][ T9458] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.336609][ T9458] EXT4-fs (loop5): mount failed [ 161.994894][ T9490] FAULT_INJECTION: forcing a failure. [ 161.994894][ T9490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.008214][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.6.1861 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.008257][ T9490] Tainted: [W]=WARN [ 162.008266][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.008285][ T9490] Call Trace: [ 162.008293][ T9490] [ 162.008303][ T9490] __dump_stack+0x1d/0x30 [ 162.008381][ T9490] dump_stack_lvl+0x95/0xd0 [ 162.008411][ T9490] dump_stack+0x15/0x1b [ 162.008438][ T9490] should_fail_ex+0x263/0x280 [ 162.008490][ T9490] should_fail+0xb/0x20 [ 162.008529][ T9490] should_fail_usercopy+0x1a/0x20 [ 162.008591][ T9490] _copy_from_user+0x1c/0xb0 [ 162.008683][ T9490] generic_map_update_batch+0x3b1/0x540 [ 162.008768][ T9490] ? __pfx_generic_map_update_batch+0x10/0x10 [ 162.008828][ T9490] bpf_map_do_batch+0x25c/0x380 [ 162.008930][ T9490] __sys_bpf+0x5f8/0x7b0 [ 162.008975][ T9490] __x64_sys_bpf+0x41/0x50 [ 162.009018][ T9490] x64_sys_call+0x28e1/0x3000 [ 162.009044][ T9490] do_syscall_64+0xc0/0x2a0 [ 162.009085][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.009144][ T9490] RIP: 0033:0x7f526c8caeb9 [ 162.009165][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.009215][ T9490] RSP: 002b:00007f526b306028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.009251][ T9490] RAX: ffffffffffffffda RBX: 00007f526cb46090 RCX: 00007f526c8caeb9 [ 162.009270][ T9490] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 162.009328][ T9490] RBP: 00007f526b306090 R08: 0000000000000000 R09: 0000000000000000 [ 162.009346][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.009386][ T9490] R13: 00007f526cb46128 R14: 00007f526cb46090 R15: 00007ffde93a3168 [ 162.009413][ T9490] [ 162.390527][ T9498] set_capacity_and_notify: 7 callbacks suppressed [ 162.390582][ T9498] loop2: detected capacity change from 0 to 512 [ 162.438143][ T9500] loop5: detected capacity change from 0 to 764 [ 162.463409][ T9498] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 162.646775][ T9505] loop6: detected capacity change from 0 to 164 [ 162.654441][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 162.683096][ T9498] loop2: detected capacity change from 0 to 8192 [ 162.694834][ T9503] loop5: detected capacity change from 0 to 128 [ 162.701938][ T9505] Unable to read rock-ridge attributes [ 162.722553][ T9505] Unable to read rock-ridge attributes [ 162.725778][ T9503] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 162.808382][ T9507] loop6: detected capacity change from 0 to 164 [ 162.889081][ T9507] Unable to read rock-ridge attributes [ 162.974190][ T9510] Unable to read rock-ridge attributes [ 163.592293][ T9527] wireguard1: entered promiscuous mode [ 163.599635][ T9527] wireguard1: entered allmulticast mode [ 164.045913][ T9544] netlink: 'syz.2.1879': attribute type 11 has an invalid length. [ 164.059609][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 164.059628][ T29] audit: type=1326 audit(2000000043.450:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.6.1880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f526c8caeb9 code=0x0 [ 164.142139][ T9549] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 164.148779][ T9549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.154120][ T29] audit: type=1400 audit(2000000043.540:2473): avc: denied { watch } for pid=9540 comm="syz.2.1879" path="pipe:[27486]" dev="pipefs" ino=27486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 164.156287][ T9549] vhci_hcd vhci_hcd.0: Device attached [ 164.251825][ T9554] loop2: detected capacity change from 0 to 512 [ 164.279187][ T9554] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 164.355311][ T8672] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 164.378828][ T9556] loop5: detected capacity change from 0 to 512 [ 164.415410][ T8672] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 164.436681][ T9556] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 164.442171][ T9554] loop2: detected capacity change from 0 to 8192 [ 164.449670][ T9556] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.478565][ T9556] EXT4-fs error (device loop5): ext4_quota_enable:7173: comm syz.5.1882: Bad quota inum: 5, type: 1 [ 164.505566][ T29] audit: type=1400 audit(2000000043.900:2474): avc: denied { write } for pid=9559 comm="syz.3.1878" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.530434][ T9560] FAULT_INJECTION: forcing a failure. [ 164.530434][ T9560] name failslab, interval 1, probability 0, space 0, times 0 [ 164.539800][ T9556] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 164.543409][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.3.1878 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.543558][ T9560] Tainted: [W]=WARN [ 164.543587][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.543630][ T9560] Call Trace: [ 164.543652][ T9560] [ 164.543746][ T9560] __dump_stack+0x1d/0x30 [ 164.543830][ T9560] dump_stack_lvl+0x95/0xd0 [ 164.543905][ T9560] dump_stack+0x15/0x1b [ 164.544034][ T9560] should_fail_ex+0x263/0x280 [ 164.544141][ T9560] should_failslab+0x8c/0xb0 [ 164.544301][ T9560] __kmalloc_cache_noprof+0x64/0x4a0 [ 164.544395][ T9560] ? list_set_create+0x17e/0x320 [ 164.544479][ T9560] ? ip_set_elem_len+0x1e3/0x250 [ 164.544574][ T9560] list_set_create+0x17e/0x320 [ 164.544730][ T9560] ? __pfx_list_set_create+0x10/0x10 [ 164.544907][ T9560] ip_set_create+0x3cf/0x970 [ 164.545033][ T9560] ? __nla_parse+0x40/0x60 [ 164.545147][ T9560] nfnetlink_rcv_msg+0x509/0x5d0 [ 164.545279][ T9560] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 164.545490][ T9560] netlink_rcv_skb+0x123/0x220 [ 164.545600][ T9560] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.545717][ T9560] nfnetlink_rcv+0x167/0x1720 [ 164.545910][ T9560] ? __kfree_skb+0x109/0x150 [ 164.546010][ T9560] ? nlmon_xmit+0x4f/0x60 [ 164.546153][ T9560] ? consume_skb+0x49/0x140 [ 164.546515][ T9560] ? nlmon_xmit+0x4f/0x60 [ 164.546697][ T9560] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 164.546823][ T9560] ? __dev_queue_xmit+0x139a/0x1f20 [ 164.546979][ T9560] ? __dev_queue_xmit+0x148/0x1f20 [ 164.547062][ T9560] ? strlen+0x19/0x40 [ 164.547166][ T9560] ? ref_tracker_free+0x37d/0x3e0 [ 164.547354][ T9560] ? __netlink_deliver_tap+0x4dc/0x500 [ 164.547393][ T9560] netlink_unicast+0x5c0/0x690 [ 164.547529][ T9560] netlink_sendmsg+0x5c8/0x6f0 [ 164.547613][ T9560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.547732][ T9560] ____sys_sendmsg+0x5af/0x600 [ 164.547845][ T9560] ___sys_sendmsg+0x195/0x1e0 [ 164.547960][ T9560] __x64_sys_sendmsg+0xd4/0x160 [ 164.548127][ T9560] x64_sys_call+0x17ba/0x3000 [ 164.548221][ T9560] do_syscall_64+0xc0/0x2a0 [ 164.548347][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.548409][ T9560] RIP: 0033:0x7f574c98aeb9 [ 164.548473][ T9560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.548607][ T9560] RSP: 002b:00007f574b3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.548680][ T9560] RAX: ffffffffffffffda RBX: 00007f574cc05fa0 RCX: 00007f574c98aeb9 [ 164.548766][ T9560] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 164.548859][ T9560] RBP: 00007f574b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.548922][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.549029][ T9560] R13: 00007f574cc06038 R14: 00007f574cc05fa0 R15: 00007ffe19b0e968 [ 164.549103][ T9560] [ 164.842086][ T9556] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 164.849543][ T9556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.867417][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1882'. [ 164.876639][ T9550] vhci_hcd: connection reset by peer [ 164.882188][ T8162] vhci_hcd vhci_hcd.6: stop threads [ 164.887525][ T8162] vhci_hcd vhci_hcd.6: release socket [ 164.892932][ T8162] vhci_hcd vhci_hcd.6: disconnect device [ 164.974141][ T9565] syzkaller1: entered promiscuous mode [ 164.975178][ T29] audit: type=1400 audit(2000000044.360:2475): avc: denied { getopt } for pid=9564 comm="syz.3.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.979852][ T9565] syzkaller1: entered allmulticast mode [ 165.021514][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.034691][ T29] audit: type=1326 audit(2000000044.410:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.1.1883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f235faeb9 code=0x0 [ 165.076443][ T9571] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 165.083061][ T9571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.090588][ T9571] vhci_hcd vhci_hcd.0: Device attached [ 165.112919][ T9571] FAULT_INJECTION: forcing a failure. [ 165.112919][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.126277][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.1.1883 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.126320][ T9571] Tainted: [W]=WARN [ 165.126330][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.126344][ T9571] Call Trace: [ 165.126351][ T9571] [ 165.126359][ T9571] __dump_stack+0x1d/0x30 [ 165.126385][ T9571] dump_stack_lvl+0x95/0xd0 [ 165.126413][ T9571] dump_stack+0x15/0x1b [ 165.126475][ T9571] should_fail_ex+0x263/0x280 [ 165.126514][ T9571] should_fail+0xb/0x20 [ 165.126545][ T9571] should_fail_usercopy+0x1a/0x20 [ 165.126588][ T9571] _copy_from_user+0x1c/0xb0 [ 165.126673][ T9571] ___sys_sendmsg+0xc1/0x1e0 [ 165.126710][ T9571] __x64_sys_sendmsg+0xd4/0x160 [ 165.126816][ T9571] x64_sys_call+0x17ba/0x3000 [ 165.126850][ T9571] do_syscall_64+0xc0/0x2a0 [ 165.126889][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.126918][ T9571] RIP: 0033:0x7f4f235faeb9 [ 165.126935][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.126958][ T9571] RSP: 002b:00007f4f22036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.126981][ T9571] RAX: ffffffffffffffda RBX: 00007f4f23876090 RCX: 00007f4f235faeb9 [ 165.127017][ T9571] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 165.127034][ T9571] RBP: 00007f4f22036090 R08: 0000000000000000 R09: 0000000000000000 [ 165.127052][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.127068][ T9571] R13: 00007f4f23876128 R14: 00007f4f23876090 R15: 00007fffaebc2218 [ 165.127096][ T9571] [ 165.130819][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1886'. [ 165.207617][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 165.285798][ T8662] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 165.389071][ T8662] usb 3-1: new full-speed USB device number 5 using vhci_hcd [ 165.577901][ T29] audit: type=1326 audit(2000000044.970:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 165.601428][ T29] audit: type=1326 audit(2000000044.970:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 165.624930][ T29] audit: type=1326 audit(2000000044.970:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 165.648394][ T29] audit: type=1326 audit(2000000044.970:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 165.671993][ T29] audit: type=1326 audit(2000000044.970:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 165.720546][ T9606] team0: Port device team_slave_0 removed [ 165.734316][ T9606] team0: Port device team_slave_1 removed [ 165.740563][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.748247][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.756904][ T9606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.781776][ T9606] team0: Mode changed to "activebackup" [ 165.798429][ T9572] vhci_hcd: connection reset by peer [ 165.805367][ T8297] vhci_hcd vhci_hcd.1: stop threads [ 165.809540][ T9617] syzkaller1: entered promiscuous mode [ 165.810626][ T8297] vhci_hcd vhci_hcd.1: release socket [ 165.816278][ T9617] syzkaller1: entered allmulticast mode [ 165.821637][ T8297] vhci_hcd vhci_hcd.1: disconnect device [ 166.068176][ T9632] loop2: detected capacity change from 0 to 512 [ 166.233508][ T9639] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1910'. [ 166.309336][ T9644] FAULT_INJECTION: forcing a failure. [ 166.309336][ T9644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.322736][ T9644] CPU: 0 UID: 0 PID: 9644 Comm: syz.2.1911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.322829][ T9644] Tainted: [W]=WARN [ 166.322846][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.322863][ T9644] Call Trace: [ 166.322871][ T9644] [ 166.322882][ T9644] __dump_stack+0x1d/0x30 [ 166.322923][ T9644] dump_stack_lvl+0x95/0xd0 [ 166.322949][ T9644] dump_stack+0x15/0x1b [ 166.322969][ T9644] should_fail_ex+0x263/0x280 [ 166.323010][ T9644] should_fail_alloc_page+0xf2/0x100 [ 166.323173][ T9644] __alloc_frozen_pages_noprof+0x108/0x350 [ 166.323209][ T9644] alloc_pages_mpol+0xb3/0x260 [ 166.323327][ T9644] folio_alloc_mpol_noprof+0x39/0x80 [ 166.323370][ T9644] shmem_get_folio_gfp+0x3da/0xd60 [ 166.323417][ T9644] shmem_fault+0xf6/0x250 [ 166.323456][ T9644] __do_fault+0xbc/0x200 [ 166.323478][ T9644] handle_mm_fault+0xfa1/0x3030 [ 166.323542][ T9644] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 166.323635][ T9644] do_user_addr_fault+0x3fd/0x1050 [ 166.323674][ T9644] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 166.323716][ T9644] exc_page_fault+0x62/0xa0 [ 166.323739][ T9644] asm_exc_page_fault+0x26/0x30 [ 166.323786][ T9644] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 166.323813][ T9644] Code: e9 c4 15 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 15 02 00 66 2e 0f 1f [ 166.323847][ T9644] RSP: 0018:ffffc900033bbc48 EFLAGS: 00050206 [ 166.323869][ T9644] RAX: ffff88810a2a8a00 RBX: ffffc900033bbd40 RCX: 0000000000000003 [ 166.323960][ T9644] RDX: 0000000000000000 RSI: ffffc900033bbd40 RDI: 0000200000002d40 [ 166.323976][ T9644] RBP: 0000200000002d40 R08: 000000000000021e R09: 0000000000000000 [ 166.324057][ T9644] R10: 0001c900033bbd40 R11: 0001c900033bbd42 R12: 0000200000002d43 [ 166.324097][ T9644] R13: ffffc900033bbdf8 R14: 0000000000000003 R15: 00007ffffffff000 [ 166.324118][ T9644] _copy_to_iter+0x141/0xea0 [ 166.324224][ T9644] ? __pfx_woken_wake_function+0x10/0x10 [ 166.324267][ T9644] tty_read+0x1a9/0x490 [ 166.324314][ T9644] vfs_read+0x6c0/0x7f0 [ 166.324388][ T9644] ? __pfx_tty_read+0x10/0x10 [ 166.324428][ T9644] ksys_read+0xdc/0x1a0 [ 166.324449][ T9644] __x64_sys_read+0x40/0x50 [ 166.324471][ T9644] x64_sys_call+0x2889/0x3000 [ 166.324505][ T9644] do_syscall_64+0xc0/0x2a0 [ 166.324638][ T9644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.324664][ T9644] RIP: 0033:0x7f6475b5aeb9 [ 166.324683][ T9644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.324707][ T9644] RSP: 002b:00007f6474596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.324736][ T9644] RAX: ffffffffffffffda RBX: 00007f6475dd6090 RCX: 00007f6475b5aeb9 [ 166.324755][ T9644] RDX: 0000000000001009 RSI: 0000200000002d40 RDI: 0000000000000005 [ 166.324770][ T9644] RBP: 00007f6474596090 R08: 0000000000000000 R09: 0000000000000000 [ 166.324788][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.324805][ T9644] R13: 00007f6475dd6128 R14: 00007f6475dd6090 R15: 00007fff70396b18 [ 166.324831][ T9644] [ 166.652315][ T9650] FAULT_INJECTION: forcing a failure. [ 166.652315][ T9650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.665512][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.6.1915 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.665555][ T9650] Tainted: [W]=WARN [ 166.665562][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.665576][ T9650] Call Trace: [ 166.665643][ T9650] [ 166.665701][ T9650] __dump_stack+0x1d/0x30 [ 166.665732][ T9650] dump_stack_lvl+0x95/0xd0 [ 166.665797][ T9650] dump_stack+0x15/0x1b [ 166.665831][ T9650] should_fail_ex+0x263/0x280 [ 166.665871][ T9650] should_fail+0xb/0x20 [ 166.665949][ T9650] should_fail_usercopy+0x1a/0x20 [ 166.665993][ T9650] strncpy_from_user+0x27/0x250 [ 166.666074][ T9650] getname_flags+0xad/0x3b0 [ 166.666101][ T9650] __x64_sys_symlinkat+0x40/0x70 [ 166.666161][ T9650] x64_sys_call+0x2a36/0x3000 [ 166.666246][ T9650] do_syscall_64+0xc0/0x2a0 [ 166.666280][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.666368][ T9650] RIP: 0033:0x7f526c8caeb9 [ 166.666452][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.666473][ T9650] RSP: 002b:00007f526b327028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 166.666568][ T9650] RAX: ffffffffffffffda RBX: 00007f526cb45fa0 RCX: 00007f526c8caeb9 [ 166.666587][ T9650] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000080 [ 166.666603][ T9650] RBP: 00007f526b327090 R08: 0000000000000000 R09: 0000000000000000 [ 166.666618][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.666710][ T9650] R13: 00007f526cb46038 R14: 00007f526cb45fa0 R15: 00007ffde93a3168 [ 166.666739][ T9650] [ 167.066623][ T9673] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 167.085658][ T9669] EXT4-fs: Ignoring removed nobh option [ 167.114789][ T9673] bond0: entered promiscuous mode [ 167.119937][ T9673] bond0: entered allmulticast mode [ 167.140400][ T9669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.175160][ T9669] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 167.210296][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.213847][ T9669] EXT4-fs (loop6): filesystem has both journal inode and journal device! [ 167.556785][ T9696] set_capacity_and_notify: 4 callbacks suppressed [ 167.556808][ T9696] loop5: detected capacity change from 0 to 2048 [ 167.829118][ T3297] Alternate GPT is invalid, using primary GPT. [ 167.835599][ T3297] loop5: p2 p3 p7 [ 167.929570][ T9708] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1924'. [ 167.944002][ T9707] FAULT_INJECTION: forcing a failure. [ 167.944002][ T9707] name failslab, interval 1, probability 0, space 0, times 0 [ 167.956831][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz.3.1933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.956888][ T9707] Tainted: [W]=WARN [ 167.956898][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.956916][ T9707] Call Trace: [ 167.956926][ T9707] [ 167.956938][ T9707] __dump_stack+0x1d/0x30 [ 167.956977][ T9707] dump_stack_lvl+0x95/0xd0 [ 167.957096][ T9707] dump_stack+0x15/0x1b [ 167.957126][ T9707] should_fail_ex+0x263/0x280 [ 167.957232][ T9707] should_failslab+0x8c/0xb0 [ 167.957263][ T9707] __kmalloc_noprof+0xb8/0x580 [ 167.957298][ T9707] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 167.957376][ T9707] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 167.957419][ T9707] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 167.957458][ T9707] ? genl_get_cmd+0x639/0x660 [ 167.957495][ T9707] genl_rcv_msg+0x432/0x470 [ 167.957590][ T9707] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 167.957634][ T9707] netlink_rcv_skb+0x123/0x220 [ 167.957713][ T9707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.957756][ T9707] genl_rcv+0x28/0x40 [ 167.957784][ T9707] netlink_unicast+0x5c0/0x690 [ 167.957908][ T9707] netlink_sendmsg+0x5c8/0x6f0 [ 167.957940][ T9707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.957972][ T9707] ____sys_sendmsg+0x5af/0x600 [ 167.958076][ T9707] ___sys_sendmsg+0x195/0x1e0 [ 167.958122][ T9707] __x64_sys_sendmsg+0xd4/0x160 [ 167.958156][ T9707] x64_sys_call+0x17ba/0x3000 [ 167.958193][ T9707] do_syscall_64+0xc0/0x2a0 [ 167.958294][ T9707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.958317][ T9707] RIP: 0033:0x7f574c98aeb9 [ 167.958400][ T9707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.958427][ T9707] RSP: 002b:00007f574b3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.958455][ T9707] RAX: ffffffffffffffda RBX: 00007f574cc05fa0 RCX: 00007f574c98aeb9 [ 167.958476][ T9707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.958495][ T9707] RBP: 00007f574b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.958550][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.958568][ T9707] R13: 00007f574cc06038 R14: 00007f574cc05fa0 R15: 00007ffe19b0e968 [ 167.958596][ T9707] [ 168.191398][ T9708] netlink: zone id is out of range [ 168.196716][ T9708] netlink: zone id is out of range [ 168.202113][ T9703] loop2: detected capacity change from 0 to 512 [ 168.202643][ T9708] netlink: del zone limit has 8 unknown bytes [ 168.228020][ T9696] Alternate GPT is invalid, using primary GPT. [ 168.234451][ T9696] loop5: p2 p3 p7 [ 168.320883][ T2505] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.346005][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 168.357271][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 168.451799][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 168.509957][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 168.521272][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 168.523406][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 168.716079][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 168.736799][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 168.766043][ T9725] loop5: detected capacity change from 0 to 1024 [ 168.798420][ T9725] EXT4-fs: Ignoring removed nobh option [ 168.837405][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 168.858028][ T9725] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.871929][ T9725] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 168.901796][ T9725] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 168.987736][ T9731] loop5: detected capacity change from 0 to 256 [ 169.096892][ T9735] syzkaller1: entered promiscuous mode [ 169.102420][ T9735] syzkaller1: entered allmulticast mode [ 169.505426][ T8672] usb 13-1: enqueue for inactive port 0 [ 169.512001][ T8672] usb 13-1: enqueue for inactive port 0 [ 169.561789][ T9742] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 169.595388][ T8672] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 169.776772][ T9749] loop2: detected capacity change from 0 to 128 [ 169.832795][ T9754] loop2: detected capacity change from 0 to 256 [ 169.873502][ T9755] syzkaller0: entered promiscuous mode [ 169.879072][ T9755] syzkaller0: entered allmulticast mode [ 169.933244][ T9754] FAT-fs (loop2): Directory bread(block 64) failed [ 169.950877][ T9754] FAT-fs (loop2): Directory bread(block 65) failed [ 169.973518][ T9754] FAT-fs (loop2): Directory bread(block 66) failed [ 170.005307][ T9754] FAT-fs (loop2): Directory bread(block 67) failed [ 170.013713][ T9754] FAT-fs (loop2): Directory bread(block 68) failed [ 170.023832][ T9754] FAT-fs (loop2): Directory bread(block 69) failed [ 170.043897][ T9754] FAT-fs (loop2): Directory bread(block 70) failed [ 170.065251][ T9754] FAT-fs (loop2): Directory bread(block 71) failed [ 170.071932][ T9754] FAT-fs (loop2): Directory bread(block 72) failed [ 170.078578][ T9754] FAT-fs (loop2): Directory bread(block 73) failed [ 170.132872][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 170.132891][ T29] audit: type=1400 audit(2000000305.525:2503): avc: denied { mounton } for pid=9753 comm="syz.2.1952" path="/374/file1/bus" dev="loop2" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 170.323771][ T9770] loop1: detected capacity change from 0 to 1024 [ 170.343889][ T9770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.357001][ T9770] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 170.364739][ T9770] EXT4-fs warning (device loop1): ext4_rmdir:3185: inode #11: comm syz.1.1957: empty directory 'file1' has too many links (111) [ 170.385292][ T6526] Bluetooth: hci0: command 0x1003 tx timeout [ 170.385514][ T3752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.402311][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.441301][ T29] audit: type=1400 audit(2000000305.835:2504): avc: denied { create } for pid=9774 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.472054][ T8662] usb 3-1: enqueue for inactive port 0 [ 170.478269][ T8662] usb 3-1: enqueue for inactive port 0 [ 170.495486][ T29] audit: type=1400 audit(2000000305.885:2505): avc: denied { connect } for pid=9776 comm="syz.1.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 170.545568][ T8662] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 170.723566][ T9780] loop2: detected capacity change from 0 to 8192 [ 170.740881][ T9780] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 170.749595][ T9780] FAT-fs (loop2): Filesystem has been set read-only [ 170.803454][ T9782] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 170.821755][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.835927][ T9782] vlan3: entered allmulticast mode [ 170.841110][ T9782] bond0: entered allmulticast mode [ 170.868657][ T9785] loop5: detected capacity change from 0 to 512 [ 170.868671][ T29] audit: type=1400 audit(2000000306.265:2506): avc: denied { write } for pid=9781 comm="syz.2.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.895565][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 170.908936][ T9785] EXT4-fs (loop5): fragment/cluster size (4096) != block size (2048) [ 170.967395][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.975588][ T29] audit: type=1400 audit(2000000306.365:2507): avc: denied { write } for pid=9786 comm="syz.3.1963" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.996213][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.998939][ T29] audit: type=1400 audit(2000000306.365:2508): avc: denied { ioctl } for pid=9786 comm="syz.3.1963" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.053775][ T9785] loop5: detected capacity change from 0 to 8192 [ 171.137932][ T29] audit: type=1400 audit(2000000306.535:2509): avc: denied { create } for pid=9795 comm="syz.2.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.157776][ T9794] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1965: inode has both inline data and extents flags [ 171.308759][ T9794] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1965: couldn't read orphan inode 15 (err -117) [ 171.316995][ T9797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1966'. [ 171.322454][ T9794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.351137][ T29] audit: type=1400 audit(2000000306.705:2510): avc: denied { listen } for pid=9795 comm="syz.2.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.370698][ T29] audit: type=1400 audit(2000000306.705:2511): avc: denied { connect } for pid=9795 comm="syz.2.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.433687][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.475640][ T9805] FAULT_INJECTION: forcing a failure. [ 171.475640][ T9805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.488778][ T9805] CPU: 1 UID: 0 PID: 9805 Comm: syz.3.1971 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.488811][ T9805] Tainted: [W]=WARN [ 171.488817][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.488834][ T9805] Call Trace: [ 171.488918][ T9805] [ 171.488927][ T9805] __dump_stack+0x1d/0x30 [ 171.488952][ T9805] dump_stack_lvl+0x95/0xd0 [ 171.488975][ T9805] dump_stack+0x15/0x1b [ 171.488995][ T9805] should_fail_ex+0x263/0x280 [ 171.489109][ T9805] should_fail+0xb/0x20 [ 171.489144][ T9805] should_fail_usercopy+0x1a/0x20 [ 171.489181][ T9805] _copy_from_user+0x1c/0xb0 [ 171.489287][ T9805] ___sys_sendmsg+0xc1/0x1e0 [ 171.489332][ T9805] __sys_sendmmsg+0x185/0x320 [ 171.489368][ T9805] __x64_sys_sendmmsg+0x57/0x70 [ 171.489414][ T9805] x64_sys_call+0x1e28/0x3000 [ 171.489450][ T9805] do_syscall_64+0xc0/0x2a0 [ 171.489492][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.489559][ T9805] RIP: 0033:0x7f574c98aeb9 [ 171.489579][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.489600][ T9805] RSP: 002b:00007f574b3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.489656][ T9805] RAX: ffffffffffffffda RBX: 00007f574cc05fa0 RCX: 00007f574c98aeb9 [ 171.489675][ T9805] RDX: 0000000000000001 RSI: 0000200000003f80 RDI: 0000000000000004 [ 171.489693][ T9805] RBP: 00007f574b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.489732][ T9805] R10: 0000000020000051 R11: 0000000000000246 R12: 0000000000000001 [ 171.489748][ T9805] R13: 00007f574cc06038 R14: 00007f574cc05fa0 R15: 00007ffe19b0e968 [ 171.489769][ T9805] [ 171.680710][ T9810] FAULT_INJECTION: forcing a failure. [ 171.680710][ T9810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.693942][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.5.1970 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.693985][ T9810] Tainted: [W]=WARN [ 171.693995][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.694013][ T9810] Call Trace: [ 171.694023][ T9810] [ 171.694034][ T9810] __dump_stack+0x1d/0x30 [ 171.694110][ T9810] dump_stack_lvl+0x95/0xd0 [ 171.694142][ T9810] dump_stack+0x15/0x1b [ 171.694167][ T9810] should_fail_ex+0x263/0x280 [ 171.694235][ T9810] should_fail+0xb/0x20 [ 171.694271][ T9810] should_fail_usercopy+0x1a/0x20 [ 171.694316][ T9810] _copy_from_user+0x1c/0xb0 [ 171.694354][ T9810] ___sys_sendmsg+0xc1/0x1e0 [ 171.694465][ T9810] __x64_sys_sendmsg+0xd4/0x160 [ 171.694494][ T9810] x64_sys_call+0x17ba/0x3000 [ 171.694530][ T9810] do_syscall_64+0xc0/0x2a0 [ 171.694664][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.694696][ T9810] RIP: 0033:0x7f52b362aeb9 [ 171.694718][ T9810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.694747][ T9810] RSP: 002b:00007f52b2087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.694819][ T9810] RAX: ffffffffffffffda RBX: 00007f52b38a5fa0 RCX: 00007f52b362aeb9 [ 171.694835][ T9810] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000005 [ 171.694854][ T9810] RBP: 00007f52b2087090 R08: 0000000000000000 R09: 0000000000000000 [ 171.694873][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.694922][ T9810] R13: 00007f52b38a6038 R14: 00007f52b38a5fa0 R15: 00007fffee0371b8 [ 171.695027][ T9810] [ 171.896714][ T9808] geneve2: entered promiscuous mode [ 171.960931][ T9821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1975'. [ 172.004647][ T29] audit: type=1400 audit(2000000307.395:2512): avc: denied { create } for pid=9826 comm="syz.1.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.038183][ T9827] openvswitch: netlink: EtherType 0 is less than min 600 [ 172.112665][ T3297] loop3: p1 < > p4 [ 172.117059][ T9847] sctp: [Deprecated]: syz.2.1979 (pid 9847) Use of int in maxseg socket option. [ 172.117059][ T9847] Use struct sctp_assoc_value instead [ 172.147554][ T3297] loop3: p4 size 8388608 extends beyond EOD, truncated [ 172.169395][ T9831] loop3: p1 < > p4 [ 172.175494][ T9831] loop3: p4 size 8388608 extends beyond EOD, truncated [ 172.210025][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1978'. [ 172.337162][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 172.380438][ T9850] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.459760][ T9850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.527710][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1986'. [ 172.635952][ T9850] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.659014][ T9850] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.1981: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 172.662414][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.706192][ T9850] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1981: couldn't read orphan inode 11 (err -117) [ 172.719446][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.741108][ T9850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.786587][ T9850] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1981: Invalid block bitmap block 0 in block_group 0 [ 172.810507][ T9850] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1981: Failed to acquire dquot type 0 [ 172.847894][ T9850] netlink: 'syz.1.1981': attribute type 4 has an invalid length. [ 172.865710][ T9850] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1981: Invalid inode bitmap blk 137438953472 in block_group 0 [ 172.919025][ T8296] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm kworker/u8:22: Invalid inode table block 8589934593 in block_group 0 [ 172.936945][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.158344][ T9881] set_capacity_and_notify: 3 callbacks suppressed [ 173.158419][ T9881] loop1: detected capacity change from 0 to 512 [ 173.181460][ T9881] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 173.389505][ T9891] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1992'. [ 173.529086][ T9900] syzkaller0: entered promiscuous mode [ 173.534644][ T9900] syzkaller0: entered allmulticast mode [ 173.781898][ T9918] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 173.788481][ T9918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.796153][ T9918] vhci_hcd vhci_hcd.0: Device attached [ 174.035442][ T8662] usb 3-1: new high-speed USB device number 6 using vhci_hcd [ 174.504177][ T9921] vhci_hcd: connection reset by peer [ 174.515302][ T2505] vhci_hcd vhci_hcd.1: stop threads [ 174.520716][ T2505] vhci_hcd vhci_hcd.1: release socket [ 174.526168][ T2505] vhci_hcd vhci_hcd.1: disconnect device [ 174.728165][ T9997] loop3: detected capacity change from 0 to 1024 [ 174.735021][ T9997] EXT4-fs: Ignoring removed orlov option [ 174.927319][T10001] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 174.941833][T10001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.976182][T10001] vlan4: entered allmulticast mode [ 174.981379][T10001] bond5: entered allmulticast mode [ 175.002604][ T9990] loop2: detected capacity change from 0 to 512 [ 175.049890][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 175.113079][T10008] FAULT_INJECTION: forcing a failure. [ 175.113079][T10008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.126285][T10008] CPU: 1 UID: 0 PID: 10008 Comm: syz.2.2006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.126332][T10008] Tainted: [W]=WARN [ 175.126339][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.126353][T10008] Call Trace: [ 175.126360][T10008] [ 175.126370][T10008] __dump_stack+0x1d/0x30 [ 175.126438][T10008] dump_stack_lvl+0x95/0xd0 [ 175.126469][T10008] dump_stack+0x15/0x1b [ 175.126496][T10008] should_fail_ex+0x263/0x280 [ 175.126593][T10008] should_fail+0xb/0x20 [ 175.126632][T10008] should_fail_usercopy+0x1a/0x20 [ 175.126698][T10008] _copy_to_user+0x20/0xa0 [ 175.126728][T10008] put_user_ifreq+0x57/0xa0 [ 175.126754][T10008] sock_do_ioctl+0x1de/0x230 [ 175.126815][T10008] sock_ioctl+0x41b/0x610 [ 175.126876][T10008] ? mutex_lock+0x57/0x90 [ 175.126923][T10008] ? __pfx_sock_ioctl+0x10/0x10 [ 175.126955][T10008] __se_sys_ioctl+0xce/0x140 [ 175.126998][T10008] __x64_sys_ioctl+0x43/0x50 [ 175.127070][T10008] x64_sys_call+0x14b0/0x3000 [ 175.127132][T10008] do_syscall_64+0xc0/0x2a0 [ 175.127180][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.127205][T10008] RIP: 0033:0x7f6475b5aeb9 [ 175.127221][T10008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.127314][T10008] RSP: 002b:00007f64745b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.127402][T10008] RAX: ffffffffffffffda RBX: 00007f6475dd5fa0 RCX: 00007f6475b5aeb9 [ 175.127422][T10008] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 175.127436][T10008] RBP: 00007f64745b7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.127521][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.127538][T10008] R13: 00007f6475dd6038 R14: 00007f6475dd5fa0 R15: 00007fff70396b18 [ 175.127595][T10008] [ 175.799865][T10024] loop1: detected capacity change from 0 to 8192 [ 175.867229][ T3297] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 175.872503][ T3297] loop1: partition table partially beyond EOD, truncated [ 175.893122][ T3297] loop1: p1 start 30976 is beyond EOD, truncated [ 175.899666][ T3297] loop1: p2 size 16128 extends beyond EOD, truncated [ 175.921667][ T3297] loop1: p3 start 327168 is beyond EOD, truncated [ 175.936670][ T3297] loop1: p5 start 30976 is beyond EOD, truncated [ 175.943073][ T3297] loop1: p6 size 16128 extends beyond EOD, truncated [ 175.961839][T10024] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 175.967120][T10024] loop1: partition table partially beyond EOD, truncated [ 175.984464][T10024] loop1: p1 start 30976 is beyond EOD, truncated [ 175.990911][T10024] loop1: p2 size 16128 extends beyond EOD, truncated [ 176.005726][T10024] loop1: p3 start 327168 is beyond EOD, truncated [ 176.013434][T10024] loop1: p5 start 30976 is beyond EOD, truncated [ 176.019837][T10024] loop1: p6 size 16128 extends beyond EOD, truncated [ 176.135294][T10031] loop1: detected capacity change from 0 to 2048 [ 176.197861][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 176.206893][T10031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.221536][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 176.240445][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 176.305847][T10039] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 176.312495][T10039] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.320149][T10039] vhci_hcd vhci_hcd.0: Device attached [ 176.331070][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 176.331106][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 176.352705][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 176.372974][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 176.372990][ T29] audit: type=1326 audit(2000000312.759:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.403201][ T29] audit: type=1326 audit(2000000312.759:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.426875][ T29] audit: type=1326 audit(2000000312.759:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.450496][ T29] audit: type=1326 audit(2000000312.759:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.474482][ T29] audit: type=1326 audit(2000000312.759:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.498216][ T29] audit: type=1326 audit(2000000312.759:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.521955][ T29] audit: type=1326 audit(2000000312.759:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.545639][ T29] audit: type=1326 audit(2000000312.759:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.569117][ T29] audit: type=1326 audit(2000000312.759:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.592704][ T29] audit: type=1326 audit(2000000312.759:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52b362aeb9 code=0x7ffc0000 [ 176.616311][ T1034] usb 11-1: new high-speed USB device number 6 using vhci_hcd [ 176.634486][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.808424][T10055] loop3: detected capacity change from 0 to 1024 [ 176.820528][T10055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.930724][T10065] loop1: detected capacity change from 0 to 1024 [ 176.959935][T10065] EXT4-fs: Ignoring removed nobh option [ 176.966740][T10065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.971256][T10055] loop3: detected capacity change from 0 to 8192 [ 176.988652][T10065] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 177.004074][T10065] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 177.029537][T10041] vhci_hcd: connection reset by peer [ 177.042396][ T8163] vhci_hcd vhci_hcd.5: stop threads [ 177.043415][ T6672] loop3: p1 p3 p4 [ 177.047680][ T8163] vhci_hcd vhci_hcd.5: release socket [ 177.056843][ T8163] vhci_hcd vhci_hcd.5: disconnect device [ 177.067160][ T6672] loop3: p1 start 393225 is beyond EOD, truncated [ 177.073628][ T6672] loop3: p3 size 66846464 extends beyond EOD, truncated [ 177.113947][ T6672] loop3: p4 size 37048832 extends beyond EOD, truncated [ 177.124075][T10055] loop3: p1 p3 p4 [ 177.138825][T10055] loop3: p1 start 393225 is beyond EOD, truncated [ 177.145340][T10055] loop3: p3 size 66846464 extends beyond EOD, truncated [ 177.155340][T10055] loop3: p4 size 37048832 extends beyond EOD, truncated [ 177.186130][T10076] loop1: detected capacity change from 0 to 128 [ 177.205751][T10076] FAULT_INJECTION: forcing a failure. [ 177.205751][T10076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.218904][T10076] CPU: 1 UID: 0 PID: 10076 Comm: syz.1.2028 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.219008][T10076] Tainted: [W]=WARN [ 177.219018][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.219035][T10076] Call Trace: [ 177.219043][T10076] [ 177.219121][T10076] __dump_stack+0x1d/0x30 [ 177.219155][T10076] dump_stack_lvl+0x95/0xd0 [ 177.219183][T10076] dump_stack+0x15/0x1b [ 177.219204][T10076] should_fail_ex+0x263/0x280 [ 177.219244][T10076] should_fail+0xb/0x20 [ 177.219282][T10076] should_fail_usercopy+0x1a/0x20 [ 177.219359][T10076] _copy_from_user+0x1c/0xb0 [ 177.219453][T10076] kstrtouint_from_user+0x69/0xf0 [ 177.219496][T10076] proc_fail_nth_write+0x50/0x160 [ 177.219610][T10076] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.219638][T10076] vfs_write+0x269/0x9f0 [ 177.219694][T10076] ? __rcu_read_unlock+0x4e/0x70 [ 177.219765][T10076] ? __fget_files+0x184/0x1c0 [ 177.219797][T10076] ? mutex_lock+0x57/0x90 [ 177.219867][T10076] ksys_write+0xdc/0x1a0 [ 177.219895][T10076] __x64_sys_write+0x40/0x50 [ 177.219923][T10076] x64_sys_call+0x2847/0x3000 [ 177.219952][T10076] do_syscall_64+0xc0/0x2a0 [ 177.220106][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.220137][T10076] RIP: 0033:0x7f4f235bb78e [ 177.220160][T10076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.220221][T10076] RSP: 002b:00007f4f22056fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.220292][T10076] RAX: ffffffffffffffda RBX: 00007f4f220576c0 RCX: 00007f4f235bb78e [ 177.220319][T10076] RDX: 0000000000000001 RSI: 00007f4f220570a0 RDI: 0000000000000005 [ 177.220403][T10076] RBP: 00007f4f22057090 R08: 0000000000000000 R09: 0000000000000000 [ 177.220422][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.220440][T10076] R13: 00007f4f23876038 R14: 00007f4f23875fa0 R15: 00007fffaebc2218 [ 177.220468][T10076] [ 177.482949][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 177.489668][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 177.520017][T10080] loop3: detected capacity change from 0 to 1024 [ 177.572987][T10084] netlink: 'syz.1.2032': attribute type 9 has an invalid length. [ 177.602565][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2033'. [ 177.794319][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 177.831783][T10097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.882471][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.940469][T10103] netlink: 'syz.5.2039': attribute type 11 has an invalid length. [ 177.977639][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2040'. [ 177.986696][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2040'. [ 177.995824][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 178.219075][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2045'. [ 178.549351][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'. [ 178.914102][T10128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 178.920668][T10128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.928607][T10128] vhci_hcd vhci_hcd.0: Device attached [ 178.975025][T10133] set_capacity_and_notify: 3 callbacks suppressed [ 178.975050][T10133] loop2: detected capacity change from 0 to 4096 [ 178.993597][T10133] EXT4-fs: dax option not supported [ 179.038317][T10135] loop5: detected capacity change from 0 to 1024 [ 179.058748][T10135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.090932][T10135] FAULT_INJECTION: forcing a failure. [ 179.090932][T10135] name failslab, interval 1, probability 0, space 0, times 0 [ 179.103623][T10135] CPU: 1 UID: 0 PID: 10135 Comm: syz.5.2049 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.103666][T10135] Tainted: [W]=WARN [ 179.103693][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.103864][T10135] Call Trace: [ 179.103872][T10135] [ 179.103881][T10135] __dump_stack+0x1d/0x30 [ 179.103992][T10135] dump_stack_lvl+0x95/0xd0 [ 179.104024][T10135] dump_stack+0x15/0x1b [ 179.104050][T10135] should_fail_ex+0x263/0x280 [ 179.104083][T10135] should_failslab+0x8c/0xb0 [ 179.104186][T10135] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 179.104241][T10135] ? __d_alloc+0x37/0x340 [ 179.104277][T10135] __d_alloc+0x37/0x340 [ 179.104385][T10135] d_alloc+0x2e/0x100 [ 179.104415][T10135] lookup_one_qstr_excl+0x99/0x250 [ 179.104444][T10135] __start_renaming+0xff/0x2a0 [ 179.104508][T10135] do_renameat2+0x2b4/0x850 [ 179.104552][T10135] __x64_sys_renameat2+0x7e/0x90 [ 179.104608][T10135] x64_sys_call+0x35f/0x3000 [ 179.104651][T10135] do_syscall_64+0xc0/0x2a0 [ 179.104694][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.104796][T10135] RIP: 0033:0x7f52b362aeb9 [ 179.104815][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.104877][T10135] RSP: 002b:00007f52b2087028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 179.104912][T10135] RAX: ffffffffffffffda RBX: 00007f52b38a5fa0 RCX: 00007f52b362aeb9 [ 179.104932][T10135] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000004 [ 179.104951][T10135] RBP: 00007f52b2087090 R08: 0000000000000002 R09: 0000000000000000 [ 179.104971][T10135] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 179.104990][T10135] R13: 00007f52b38a6038 R14: 00007f52b38a5fa0 R15: 00007fffee0371b8 [ 179.105074][T10135] [ 179.308460][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.345256][ T8664] usb 7-1: new high-speed USB device number 6 using vhci_hcd [ 179.355361][ T8662] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 179.393332][T10133] loop2: detected capacity change from 0 to 8192 [ 179.397119][T10145] loop1: detected capacity change from 0 to 128 [ 179.435571][ T3297] loop2: p1 p3 p4 [ 179.439466][ T3297] loop2: p1 start 393225 is beyond EOD, truncated [ 179.446001][ T3297] loop2: p3 size 66846464 extends beyond EOD, truncated [ 179.481573][ T3297] loop2: p4 size 37048832 extends beyond EOD, truncated [ 179.502951][T10133] loop2: p1 p3 p4 [ 179.507485][T10133] loop2: p1 start 393225 is beyond EOD, truncated [ 179.513971][T10133] loop2: p3 size 66846464 extends beyond EOD, truncated [ 179.524499][T10133] loop2: p4 size 37048832 extends beyond EOD, truncated [ 179.584805][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'. [ 179.595331][T10150] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2053'. [ 179.637952][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 179.648657][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 179.686405][T10130] vhci_hcd: connection reset by peer [ 179.695667][ T8296] vhci_hcd vhci_hcd.3: stop threads [ 179.700951][ T8296] vhci_hcd vhci_hcd.3: release socket [ 179.706593][ T8296] vhci_hcd vhci_hcd.3: disconnect device [ 179.762213][T10160] loop2: detected capacity change from 0 to 1024 [ 179.769175][T10160] EXT4-fs: Ignoring removed nobh option [ 179.775929][T10160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.785404][T10160] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 179.805233][T10160] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 180.318447][T10170] FAULT_INJECTION: forcing a failure. [ 180.318447][T10170] name failslab, interval 1, probability 0, space 0, times 0 [ 180.331233][T10170] CPU: 1 UID: 0 PID: 10170 Comm: syz.2.2061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.331265][T10170] Tainted: [W]=WARN [ 180.331274][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.331290][T10170] Call Trace: [ 180.331298][T10170] [ 180.331306][T10170] __dump_stack+0x1d/0x30 [ 180.331335][T10170] dump_stack_lvl+0x95/0xd0 [ 180.331441][T10170] dump_stack+0x15/0x1b [ 180.331524][T10170] should_fail_ex+0x263/0x280 [ 180.331582][T10170] should_failslab+0x8c/0xb0 [ 180.331614][T10170] kmem_cache_alloc_noprof+0x68/0x490 [ 180.331647][T10170] ? skb_clone+0x151/0x1f0 [ 180.331674][T10170] skb_clone+0x151/0x1f0 [ 180.331771][T10170] __netlink_deliver_tap+0x2c9/0x500 [ 180.331854][T10170] ? netlink_attachskb+0x2e2/0x660 [ 180.331885][T10170] netlink_sendskb+0x126/0x150 [ 180.331993][T10170] netlink_unicast+0x2a2/0x690 [ 180.332036][T10170] netlink_ack+0x4c8/0x500 [ 180.332121][T10170] netlink_rcv_skb+0x192/0x220 [ 180.332163][T10170] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 180.332210][T10170] nfnetlink_rcv+0x167/0x1720 [ 180.332315][T10170] ? __kfree_skb+0x109/0x150 [ 180.332346][T10170] ? nlmon_xmit+0x4f/0x60 [ 180.332398][T10170] ? consume_skb+0x49/0x140 [ 180.332438][T10170] ? nlmon_xmit+0x4f/0x60 [ 180.332482][T10170] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 180.332639][T10170] ? __dev_queue_xmit+0x139a/0x1f20 [ 180.332685][T10170] ? __dev_queue_xmit+0x148/0x1f20 [ 180.332721][T10170] ? ref_tracker_free+0x37d/0x3e0 [ 180.332810][T10170] ? __netlink_deliver_tap+0x4dc/0x500 [ 180.332865][T10170] netlink_unicast+0x5c0/0x690 [ 180.332923][T10170] netlink_sendmsg+0x5c8/0x6f0 [ 180.332950][T10170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.333048][T10170] ____sys_sendmsg+0x5af/0x600 [ 180.333079][T10170] ___sys_sendmsg+0x195/0x1e0 [ 180.333173][T10170] __x64_sys_sendmsg+0xd4/0x160 [ 180.333200][T10170] x64_sys_call+0x17ba/0x3000 [ 180.333233][T10170] do_syscall_64+0xc0/0x2a0 [ 180.333337][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.333367][T10170] RIP: 0033:0x7f6475b5aeb9 [ 180.333388][T10170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.333414][T10170] RSP: 002b:00007f64745b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.333522][T10170] RAX: ffffffffffffffda RBX: 00007f6475dd5fa0 RCX: 00007f6475b5aeb9 [ 180.333542][T10170] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 180.333558][T10170] RBP: 00007f64745b7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.333622][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.333639][T10170] R13: 00007f6475dd6038 R14: 00007f6475dd5fa0 R15: 00007fff70396b18 [ 180.333667][T10170] [ 180.649829][T10168] loop1: detected capacity change from 0 to 2048 [ 180.690554][T10168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.721328][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.809496][T10183] loop1: detected capacity change from 0 to 1024 [ 180.833172][T10183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.866449][T10183] EXT4-fs (loop1): shut down requested (0) [ 180.894011][T10183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 180.902974][T10183] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 180.921743][T10188] loop2: detected capacity change from 0 to 512 [ 180.929056][T10188] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.936357][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.967470][T10188] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 180.986600][T10188] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2068: bg 0: block 248: padding at end of block bitmap is not set [ 181.006229][T10188] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2068: Failed to acquire dquot type 1 [ 181.018246][T10188] EXT4-fs (loop2): 1 truncate cleaned up [ 181.024501][T10188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 181.056086][T10188] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.2068: deleted inode referenced: 12 [ 181.067892][T10193] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 181.074519][T10193] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.082192][T10193] vhci_hcd vhci_hcd.0: Device attached [ 181.088509][T10188] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.2068: deleted inode referenced: 12 [ 181.111832][T10188] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.2068: deleted inode referenced: 12 [ 181.125374][T10188] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2068: Failed to acquire dquot type 1 [ 181.157001][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 181.165519][ T8296] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 1 [ 181.193844][T10200] loop2: detected capacity change from 0 to 128 [ 181.226247][T10198] loop3: detected capacity change from 0 to 8192 [ 181.236076][T10198] FAULT_INJECTION: forcing a failure. [ 181.236076][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 181.248786][T10198] CPU: 0 UID: 0 PID: 10198 Comm: syz.3.2070 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.248823][T10198] Tainted: [W]=WARN [ 181.248830][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.248881][T10198] Call Trace: [ 181.248891][T10198] [ 181.248928][T10198] __dump_stack+0x1d/0x30 [ 181.248963][T10198] dump_stack_lvl+0x95/0xd0 [ 181.248994][T10198] dump_stack+0x15/0x1b [ 181.249023][T10198] should_fail_ex+0x263/0x280 [ 181.249059][T10198] should_failslab+0x8c/0xb0 [ 181.249118][T10198] kmem_cache_alloc_noprof+0x68/0x490 [ 181.249150][T10198] ? security_file_alloc+0x32/0xf0 [ 181.249185][T10198] security_file_alloc+0x32/0xf0 [ 181.249217][T10198] init_file+0x5c/0x1c0 [ 181.249309][T10198] alloc_empty_file+0x8b/0x200 [ 181.249349][T10198] path_openat+0x62/0x23c0 [ 181.249397][T10198] ? _parse_integer_limit+0x170/0x190 [ 181.249465][T10198] ? _parse_integer+0x27/0x40 [ 181.249527][T10198] ? kstrtoull+0x111/0x140 [ 181.249571][T10198] ? kstrtouint+0x76/0xc0 [ 181.249684][T10198] do_filp_open+0x15d/0x280 [ 181.249731][T10198] do_sys_openat2+0xa6/0x150 [ 181.249771][T10198] __x64_sys_open+0xe6/0x110 [ 181.249808][T10198] x64_sys_call+0x166f/0x3000 [ 181.249839][T10198] do_syscall_64+0xc0/0x2a0 [ 181.249972][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.250040][T10198] RIP: 0033:0x7f574c98aeb9 [ 181.250134][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.250155][T10198] RSP: 002b:00007f574b3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 181.250182][T10198] RAX: ffffffffffffffda RBX: 00007f574cc05fa0 RCX: 00007f574c98aeb9 [ 181.250202][T10198] RDX: 0000000000000020 RSI: 0000000000105342 RDI: 0000200000000240 [ 181.250219][T10198] RBP: 00007f574b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.250233][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.250246][T10198] R13: 00007f574cc06038 R14: 00007f574cc05fa0 R15: 00007ffe19b0e968 [ 181.250274][T10198] [ 181.443798][T10200] bio_check_eod: 156 callbacks suppressed [ 181.443864][T10200] syz.2.2071: attempt to access beyond end of device [ 181.443864][T10200] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 181.482405][T10200] syz.2.2071: attempt to access beyond end of device [ 181.482405][T10200] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 181.496051][T10200] syz.2.2071: attempt to access beyond end of device [ 181.496051][T10200] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 181.510891][T10200] syz.2.2071: attempt to access beyond end of device [ 181.510891][T10200] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 181.515384][ T8678] usb 3-1: new high-speed USB device number 7 using vhci_hcd [ 181.551575][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 181.551595][ T29] audit: type=1400 audit(2000000317.939:2681): avc: denied { setopt } for pid=10203 comm="syz.5.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.581069][T10200] syz.2.2071: attempt to access beyond end of device [ 181.581069][T10200] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 181.623074][T10200] syz.2.2071: attempt to access beyond end of device [ 181.623074][T10200] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 181.668355][T10200] syz.2.2071: attempt to access beyond end of device [ 181.668355][T10200] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 181.682712][T10200] syz.2.2071: attempt to access beyond end of device [ 181.682712][T10200] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 181.698868][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2076'. [ 181.707937][ T29] audit: type=1400 audit(2000000318.089:2682): avc: denied { mount } for pid=10208 comm="syz.3.2076" name="/" dev="hugetlbfs" ino=30461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 181.715450][T10200] syz.2.2071: attempt to access beyond end of device [ 181.715450][T10200] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 181.752240][ T29] audit: type=1400 audit(2000000318.139:2683): avc: denied { bind } for pid=10210 comm="syz.5.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.757958][ T1034] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 181.772495][ T29] audit: type=1400 audit(2000000318.139:2684): avc: denied { name_bind } for pid=10210 comm="syz.5.2075" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 181.778853][T10200] syz.2.2071: attempt to access beyond end of device [ 181.778853][T10200] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 181.799343][ T29] audit: type=1400 audit(2000000318.139:2685): avc: denied { node_bind } for pid=10210 comm="syz.5.2075" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 181.818742][T10195] vhci_hcd: connection reset by peer [ 181.851856][ T8150] vhci_hcd vhci_hcd.1: stop threads [ 181.857299][ T8150] vhci_hcd vhci_hcd.1: release socket [ 181.862793][ T8150] vhci_hcd vhci_hcd.1: disconnect device [ 181.950859][T10221] program syz.3.2079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.052792][T10230] netlink: 'syz.2.2083': attribute type 10 has an invalid length. [ 182.061197][T10230] dummy0: entered promiscuous mode [ 182.066410][T10230] dummy0: entered allmulticast mode [ 182.072793][T10230] bridge0: port 3(dummy0) entered blocking state [ 182.079337][T10230] bridge0: port 3(dummy0) entered disabled state [ 182.094892][T10230] bridge0: port 3(dummy0) entered blocking state [ 182.101334][T10230] bridge0: port 3(dummy0) entered forwarding state [ 182.226863][T10239] ip6t_rpfilter: unknown options [ 182.259124][T10242] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2088: inode has both inline data and extents flags [ 182.273960][T10242] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2088: couldn't read orphan inode 15 (err -117) [ 182.287326][T10242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.305635][ T29] audit: type=1400 audit(2000000318.699:2686): avc: denied { setattr } for pid=10241 comm="syz.2.2088" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.343074][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.417058][T10247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.434626][T10250] EXT4-fs: Ignoring removed i_version option [ 182.441654][T10250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.458533][T10250] EXT4-fs error (device loop1): ext4_quota_enable:7177: inode #4: comm syz.1.2091: inode has both inline data and extents flags [ 182.477005][T10250] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.2091: Bad quota inode: 4, type: 1 [ 182.490734][T10250] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.526654][T10250] EXT4-fs (loop1): mount failed [ 182.549240][ T29] audit: type=1400 audit(2000000318.939:2687): avc: denied { mounton } for pid=10254 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 182.605352][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.695420][ T29] audit: type=1400 audit(2000000319.089:2688): avc: denied { create } for pid=10269 comm="syz.1.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.737657][T10270] EXT4-fs: Ignoring removed nobh option [ 182.743383][T10270] EXT4-fs: Ignoring removed bh option [ 182.749158][T10272] __nla_validate_parse: 4 callbacks suppressed [ 182.749174][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 182.773363][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.817923][T10270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0002-000000000000 r/w without journal. Quota mode: writeback. [ 182.836220][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.886809][T10254] chnl_net:caif_netlink_parms(): no params data found [ 182.911083][ T29] audit: type=1400 audit(2000000319.299:2689): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.955854][ T29] audit: type=1400 audit(2000000319.299:2690): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.988269][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.185659][T10295] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 183.201958][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.304430][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.311604][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.325417][T10254] bridge_slave_0: entered allmulticast mode [ 183.332120][T10254] bridge_slave_0: entered promiscuous mode [ 183.339092][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.346222][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.353471][T10254] bridge_slave_1: entered allmulticast mode [ 183.360179][T10254] bridge_slave_1: entered promiscuous mode [ 183.394506][T10254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.421980][ T31] bridge_slave_1: left allmulticast mode [ 183.428132][ T31] bridge_slave_1: left promiscuous mode [ 183.433960][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.445874][ T31] bridge_slave_0: left allmulticast mode [ 183.452056][ T31] bridge_slave_0: left promiscuous mode [ 183.458202][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.542904][ T31] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 183.552385][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0002-000000000000. [ 183.603414][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.620199][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.636480][ T31] bond0 (unregistering): Released all slaves [ 183.649441][ T31] bond1 (unregistering): (slave batadv1): Releasing active interface [ 183.659065][ T31] bond1 (unregistering): Released all slaves [ 183.662568][T10316] EXT4-fs: Ignoring removed nobh option [ 183.672406][T10316] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.682651][T10254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.689912][T10316] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 183.702068][T10316] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 183.728030][ T31] tipc: Left network mode [ 183.736514][T10254] team0: Port device team_slave_0 added [ 183.746139][ T31] hsr_slave_0: left promiscuous mode [ 183.756882][ T31] hsr_slave_1: left promiscuous mode [ 183.767721][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.775166][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.797025][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.804630][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.817834][ T31] veth1_macvtap: left promiscuous mode [ 183.833900][ T31] veth0_macvtap: left promiscuous mode [ 183.842750][ T31] veth1_vlan: left promiscuous mode [ 183.857590][ T31] veth0_vlan: left promiscuous mode [ 183.972725][ T31] team0 (unregistering): Port device team_slave_1 removed [ 183.985168][ T31] team0 (unregistering): Port device team_slave_0 removed [ 184.027976][T10254] team0: Port device team_slave_1 added [ 184.047599][T10254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.054595][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.080776][T10254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.095161][T10254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.102262][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.128232][T10254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.161742][T10254] hsr_slave_0: entered promiscuous mode [ 184.183458][T10254] hsr_slave_1: entered promiscuous mode [ 184.189532][T10254] debugfs: 'hsr0' already exists in 'hsr' [ 184.195396][T10254] Cannot create hsr debugfs directory [ 184.233251][T10344] set_capacity_and_notify: 8 callbacks suppressed [ 184.233272][T10344] loop5: detected capacity change from 0 to 164 [ 184.262500][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 184.455242][ T8664] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 184.687164][T10254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.716883][T10254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.735369][T10254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.748044][T10254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.764635][T10378] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 184.846284][T10254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.921063][T10254] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.966867][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.973982][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.991717][T10405] FAULT_INJECTION: forcing a failure. [ 184.991717][T10405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.004997][T10405] CPU: 1 UID: 0 PID: 10405 Comm: syz.5.2127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.005060][T10405] Tainted: [W]=WARN [ 185.005089][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.005104][T10405] Call Trace: [ 185.005111][T10405] [ 185.005119][T10405] __dump_stack+0x1d/0x30 [ 185.005152][T10405] dump_stack_lvl+0x95/0xd0 [ 185.005181][T10405] dump_stack+0x15/0x1b [ 185.005229][T10405] should_fail_ex+0x263/0x280 [ 185.005272][T10405] should_fail+0xb/0x20 [ 185.005306][T10405] should_fail_usercopy+0x1a/0x20 [ 185.005390][T10405] _copy_to_user+0x20/0xa0 [ 185.005425][T10405] simple_read_from_buffer+0xb5/0x130 [ 185.005534][T10405] proc_fail_nth_read+0x10e/0x150 [ 185.005614][T10405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.005722][T10405] vfs_read+0x1ab/0x7f0 [ 185.005746][T10405] ? __rcu_read_unlock+0x4e/0x70 [ 185.005788][T10405] ? __fget_files+0x184/0x1c0 [ 185.005886][T10405] ? mutex_lock+0x57/0x90 [ 185.005915][T10405] ksys_read+0xdc/0x1a0 [ 185.005996][T10405] __x64_sys_read+0x40/0x50 [ 185.006021][T10405] x64_sys_call+0x2889/0x3000 [ 185.006055][T10405] do_syscall_64+0xc0/0x2a0 [ 185.006140][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.006171][T10405] RIP: 0033:0x7f52b35eb78e [ 185.006192][T10405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.006217][T10405] RSP: 002b:00007f52b2086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.006272][T10405] RAX: ffffffffffffffda RBX: 00007f52b20876c0 RCX: 00007f52b35eb78e [ 185.006291][T10405] RDX: 000000000000000f RSI: 00007f52b20870a0 RDI: 0000000000000004 [ 185.006309][T10405] RBP: 00007f52b2087090 R08: 0000000000000000 R09: 0000000000000000 [ 185.006325][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.006339][T10405] R13: 00007f52b38a6038 R14: 00007f52b38a5fa0 R15: 00007fffee0371b8 [ 185.006361][T10405] [ 185.202875][T10406] loop2: detected capacity change from 0 to 1024 [ 185.205814][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.210414][T10406] EXT4-fs: Ignoring removed nobh option [ 185.216329][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.253066][T10408] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 185.259606][T10408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 185.267355][T10408] vhci_hcd vhci_hcd.0: Device attached [ 185.305276][T10406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.316347][T10406] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 185.326867][T10406] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 185.361920][T10413] xt_hashlimit: size too large, truncated to 1048576 [ 185.498561][T10254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.540703][T10413] loop5: detected capacity change from 0 to 1764 [ 185.623286][T10441] xt_hashlimit: size too large, truncated to 1048576 [ 185.724959][T10448] loop2: detected capacity change from 0 to 1764 [ 185.824425][T10410] vhci_hcd: connection closed [ 185.829185][ T8150] vhci_hcd vhci_hcd.1: stop threads [ 185.839283][ T8150] vhci_hcd vhci_hcd.1: release socket [ 185.844766][ T8150] vhci_hcd vhci_hcd.1: disconnect device [ 185.868349][T10254] veth0_vlan: entered promiscuous mode [ 185.889078][T10254] veth1_vlan: entered promiscuous mode [ 185.918685][T10254] veth0_macvtap: entered promiscuous mode [ 185.932391][T10254] veth1_macvtap: entered promiscuous mode [ 185.943441][T10254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.970741][T10254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.991179][ T8150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.000660][ T8150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.010287][ T8150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.028962][ T8150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.076328][T10476] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 186.193844][T10482] loop5: detected capacity change from 0 to 1024 [ 186.201766][T10482] EXT4-fs: Ignoring removed nobh option [ 186.215540][T10482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.242452][T10482] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 186.256531][T10482] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 186.402715][T10499] FAULT_INJECTION: forcing a failure. [ 186.402715][T10499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.416019][T10499] CPU: 0 UID: 0 PID: 10499 Comm: syz.5.2145 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.416061][T10499] Tainted: [W]=WARN [ 186.416068][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.416171][T10499] Call Trace: [ 186.416177][T10499] [ 186.416184][T10499] __dump_stack+0x1d/0x30 [ 186.416239][T10499] dump_stack_lvl+0x95/0xd0 [ 186.416267][T10499] dump_stack+0x15/0x1b [ 186.416286][T10499] should_fail_ex+0x263/0x280 [ 186.416315][T10499] should_fail+0xb/0x20 [ 186.416384][T10499] should_fail_usercopy+0x1a/0x20 [ 186.416494][T10499] _copy_from_user+0x1c/0xb0 [ 186.416538][T10499] kstrtouint_from_user+0x69/0xf0 [ 186.416569][T10499] proc_fail_nth_write+0x50/0x160 [ 186.416633][T10499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.416663][T10499] vfs_write+0x269/0x9f0 [ 186.416680][T10499] ? __rcu_read_unlock+0x4e/0x70 [ 186.416760][T10499] ? __fget_files+0x184/0x1c0 [ 186.416781][T10499] ? mutex_lock+0x57/0x90 [ 186.416805][T10499] ksys_write+0xdc/0x1a0 [ 186.416891][T10499] __x64_sys_write+0x40/0x50 [ 186.416940][T10499] x64_sys_call+0x2847/0x3000 [ 186.416963][T10499] do_syscall_64+0xc0/0x2a0 [ 186.417070][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.417164][T10499] RIP: 0033:0x7f52b35eb78e [ 186.417179][T10499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.417253][T10499] RSP: 002b:00007f52b2086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.417294][T10499] RAX: ffffffffffffffda RBX: 00007f52b20876c0 RCX: 00007f52b35eb78e [ 186.417308][T10499] RDX: 0000000000000001 RSI: 00007f52b20870a0 RDI: 0000000000000004 [ 186.417320][T10499] RBP: 00007f52b2087090 R08: 0000000000000000 R09: 0000000000000000 [ 186.417400][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.417479][T10499] R13: 00007f52b38a6038 R14: 00007f52b38a5fa0 R15: 00007fffee0371b8 [ 186.417498][T10499] [ 186.635112][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 186.654540][T10504] loop1: detected capacity change from 0 to 128 [ 186.701436][ T8678] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 186.761300][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 186.771281][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 186.771300][ T29] audit: type=1400 audit(2000000323.159:2818): avc: denied { create } for pid=10506 comm="syz.5.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.832918][ T29] audit: type=1400 audit(2000000323.199:2819): avc: denied { write } for pid=10508 comm="syz.7.2149" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.856408][ T29] audit: type=1400 audit(2000000323.199:2820): avc: denied { open } for pid=10508 comm="syz.7.2149" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.882242][T10515] random: crng reseeded on system resumption [ 186.990349][T10522] loop2: detected capacity change from 0 to 128 [ 187.067006][T10520] loop3: detected capacity change from 0 to 256 [ 187.141875][ T29] audit: type=1400 audit(2000000323.449:2821): avc: denied { create } for pid=10518 comm="syz.3.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.161998][ T29] audit: type=1400 audit(2000000323.449:2822): avc: denied { write } for pid=10518 comm="syz.3.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.199009][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2153'. [ 187.208116][T10528] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2153'. [ 187.368483][T10533] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 187.375237][T10533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.382984][T10533] vhci_hcd vhci_hcd.0: Device attached [ 187.394146][ T29] audit: type=1326 audit(2000000323.789:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574c98aeb9 code=0x7ffc0000 [ 187.418054][ T29] audit: type=1326 audit(2000000323.789:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f574c98aeb9 code=0x7ffc0000 [ 187.441961][ T29] audit: type=1326 audit(2000000323.789:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574c98aeb9 code=0x7ffc0000 [ 187.465758][ T29] audit: type=1326 audit(2000000323.789:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f574c98aeb9 code=0x7ffc0000 [ 187.489485][ T29] audit: type=1326 audit(2000000323.789:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10529 comm="syz.3.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574c98aeb9 code=0x7ffc0000 [ 187.521226][T10539] FAULT_INJECTION: forcing a failure. [ 187.521226][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 187.534005][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.2.2156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.534093][T10539] Tainted: [W]=WARN [ 187.534103][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.534120][T10539] Call Trace: [ 187.534128][T10539] [ 187.534139][T10539] __dump_stack+0x1d/0x30 [ 187.534172][T10539] dump_stack_lvl+0x95/0xd0 [ 187.534293][T10539] dump_stack+0x15/0x1b [ 187.534321][T10539] should_fail_ex+0x263/0x280 [ 187.534441][T10539] should_failslab+0x8c/0xb0 [ 187.534470][T10539] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 187.534510][T10539] ? v9fs_init_fs_context+0xae/0x220 [ 187.534613][T10539] kstrdup+0x3e/0xd0 [ 187.534639][T10539] v9fs_init_fs_context+0xae/0x220 [ 187.534741][T10539] alloc_fs_context+0x4a3/0x590 [ 187.534854][T10539] fs_context_for_mount+0x22/0x30 [ 187.534891][T10539] do_new_mount+0xea/0x700 [ 187.534918][T10539] ? security_capable+0x7b/0x90 [ 187.534956][T10539] path_mount+0x4d0/0xbc0 [ 187.535037][T10539] ? user_path_at+0xbf/0x130 [ 187.535078][T10539] __se_sys_mount+0x28c/0x2e0 [ 187.535106][T10539] ? fput+0x8f/0xc0 [ 187.535146][T10539] __x64_sys_mount+0x67/0x80 [ 187.535176][T10539] x64_sys_call+0x2cca/0x3000 [ 187.535331][T10539] do_syscall_64+0xc0/0x2a0 [ 187.535398][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.535428][T10539] RIP: 0033:0x7f6475b5aeb9 [ 187.535451][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.535478][T10539] RSP: 002b:00007f64745b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.535506][T10539] RAX: ffffffffffffffda RBX: 00007f6475dd5fa0 RCX: 00007f6475b5aeb9 [ 187.535556][T10539] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000000000000000 [ 187.535574][T10539] RBP: 00007f64745b7090 R08: 00002000000004c0 R09: 0000000000000000 [ 187.535593][T10539] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 187.535611][T10539] R13: 00007f6475dd6038 R14: 00007f6475dd5fa0 R15: 00007fff70396b18 [ 187.535639][T10539] [ 187.749898][ T8679] usb 7-1: new high-speed USB device number 7 using vhci_hcd [ 187.893280][T10553] loop1: detected capacity change from 0 to 128 [ 187.912145][T10553] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 187.919793][T10553] FAT-fs (loop1): Filesystem has been set read-only [ 187.928071][T10553] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 188.035863][T10535] vhci_hcd: connection reset by peer [ 188.041385][ T8162] vhci_hcd vhci_hcd.3: stop threads [ 188.046716][ T8162] vhci_hcd vhci_hcd.3: release socket [ 188.052314][ T8162] vhci_hcd vhci_hcd.3: disconnect device [ 188.112410][T10564] loop7: detected capacity change from 0 to 256 [ 188.136018][T10564] FAT-fs (loop7): Directory bread(block 64) failed [ 188.154568][T10564] FAT-fs (loop7): Directory bread(block 65) failed [ 188.165462][T10564] FAT-fs (loop7): Directory bread(block 66) failed [ 188.177459][T10564] FAT-fs (loop7): Directory bread(block 67) failed [ 188.189292][T10564] FAT-fs (loop7): Directory bread(block 68) failed [ 188.196189][T10564] FAT-fs (loop7): Directory bread(block 69) failed [ 188.202890][T10564] FAT-fs (loop7): Directory bread(block 70) failed [ 188.209938][T10564] FAT-fs (loop7): Directory bread(block 71) failed [ 188.216660][T10564] FAT-fs (loop7): Directory bread(block 72) failed [ 188.223287][T10564] FAT-fs (loop7): Directory bread(block 73) failed [ 188.245725][T10563] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 188.254303][T10563] FAT-fs (loop7): Filesystem has been set read-only [ 188.264335][T10563] bio_check_eod: 158 callbacks suppressed [ 188.264353][T10563] syz.7.2169: attempt to access beyond end of device [ 188.264353][T10563] loop7: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 188.284762][T10563] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 188.294748][T10563] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 188.306156][T10563] syz.7.2169: attempt to access beyond end of device [ 188.306156][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.320119][T10563] syz.7.2169: attempt to access beyond end of device [ 188.320119][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.334433][T10563] syz.7.2169: attempt to access beyond end of device [ 188.334433][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.348811][T10563] syz.7.2169: attempt to access beyond end of device [ 188.348811][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.363291][T10563] syz.7.2169: attempt to access beyond end of device [ 188.363291][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.377361][T10563] syz.7.2169: attempt to access beyond end of device [ 188.377361][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.391909][T10563] syz.7.2169: attempt to access beyond end of device [ 188.391909][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.407083][T10563] syz.7.2169: attempt to access beyond end of device [ 188.407083][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.421787][T10563] syz.7.2169: attempt to access beyond end of device [ 188.421787][T10563] loop7: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 188.854359][T10591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=10591 comm=syz.3.2179 [ 188.900802][T10584] EXT4-fs: Ignoring removed bh option [ 189.026369][T10595] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 12 [ 189.232847][T10584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.279129][T10603] set_capacity_and_notify: 2 callbacks suppressed [ 189.279146][T10603] loop2: detected capacity change from 0 to 2048 [ 189.346763][T10603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.374033][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.393882][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.452330][T10613] syzkaller1: entered promiscuous mode [ 189.457975][T10613] syzkaller1: entered allmulticast mode [ 189.493713][T10606] loop3: detected capacity change from 0 to 8192 [ 189.601812][T10620] loop5: detected capacity change from 0 to 256 [ 189.626678][T10620] msdos: Unknown parameter 'dohs' [ 189.638530][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2190'. [ 189.724618][T10626] loop5: detected capacity change from 0 to 164 [ 189.792287][T10626] Unable to read rock-ridge attributes [ 189.901824][T10635] FAULT_INJECTION: forcing a failure. [ 189.901824][T10635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.915317][T10635] CPU: 1 UID: 0 PID: 10635 Comm: syz.1.2195 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.915384][T10635] Tainted: [W]=WARN [ 189.915393][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.915411][T10635] Call Trace: [ 189.915419][T10635] [ 189.915427][T10635] __dump_stack+0x1d/0x30 [ 189.915460][T10635] dump_stack_lvl+0x95/0xd0 [ 189.915514][T10635] dump_stack+0x15/0x1b [ 189.915540][T10635] should_fail_ex+0x263/0x280 [ 189.915619][T10635] should_fail_alloc_page+0xf2/0x100 [ 189.915654][T10635] __alloc_frozen_pages_noprof+0x108/0x350 [ 189.915759][T10635] alloc_pages_mpol+0xb3/0x260 [ 189.915799][T10635] vma_alloc_folio_noprof+0x1a9/0x300 [ 189.915833][T10635] do_wp_page+0xf6d/0x2560 [ 189.915916][T10635] ? css_rstat_updated+0xbb/0x280 [ 189.915959][T10635] ? __rcu_read_lock+0x36/0x50 [ 189.916002][T10635] handle_mm_fault+0x8c7/0x3030 [ 189.916124][T10635] ? vma_start_read+0x1c7/0x2c0 [ 189.916185][T10635] do_user_addr_fault+0x62f/0x1050 [ 189.916222][T10635] ? ksys_mmap_pgoff+0xc1/0x310 [ 189.916255][T10635] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 189.916279][T10635] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 189.916334][T10635] ? irqentry_exit+0x3c/0x510 [ 189.916367][T10635] exc_page_fault+0x62/0xa0 [ 189.916392][T10635] asm_exc_page_fault+0x26/0x30 [ 189.916476][T10635] RIP: 0033:0x7f4f234b27e3 [ 189.916494][T10635] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 189.916519][T10635] RSP: 002b:00007f4f22056470 EFLAGS: 00010206 [ 189.916541][T10635] RAX: 0000000000005400 RBX: 00007f4f22056530 RCX: 00007f4f19c37000 [ 189.916560][T10635] RDX: 00007f4f220566d0 RSI: 0000000000000036 RDI: 00007f4f220565d0 [ 189.916580][T10635] RBP: 00000000000000c4 R08: 0000000000000006 R09: 0000000000000015 [ 189.916598][T10635] R10: 000000000000001c R11: 00007f4f22056530 R12: 0000000000000001 [ 189.916638][T10635] R13: 00007f4f236a7900 R14: 000000000000002e R15: 00007f4f220565d0 [ 189.916665][T10635] [ 189.916677][T10635] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 189.944325][T10633] Unable to read rock-ridge attributes [ 189.967159][T10635] loop1: detected capacity change from 0 to 128 [ 190.008221][T10635] FAT-fs (loop1): bogus number of reserved sectors [ 190.046100][T10637] program syz.3.2196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.050194][T10635] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 190.168403][T10635] FAT-fs (loop1): Can't find a valid FAT filesystem [ 190.237484][T10639] loop3: detected capacity change from 0 to 2048 [ 190.406788][T10644] loop3: detected capacity change from 0 to 256 [ 190.491953][T10646] loop3: detected capacity change from 0 to 1024 [ 190.506559][T10646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.534372][T10646] vhci_hcd vhci_hcd.4: default hub control req: 0206 v0301 i0000 l0 [ 190.543168][T10618] bridge0: port 3(dummy0) entered disabled state [ 190.549633][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.557000][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.781097][T10651] loop7: detected capacity change from 0 to 512 [ 190.811372][T10651] EXT4-fs (loop7): invalid inodes per group: 4294967295 [ 190.811372][T10651] [ 190.949110][T10653] loop7: detected capacity change from 0 to 512 [ 190.966341][T10653] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.116979][T10656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65053 sclass=netlink_route_socket pid=10656 comm=syz.7.2203 [ 191.219903][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.298573][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2206'. [ 191.332862][T10618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.481976][T10673] EXT4-fs: Ignoring removed bh option [ 191.528824][T10673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.825628][ T8150] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.851698][ T8150] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.855909][T10673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.876221][ T8150] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.886666][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 191.886829][ T29] audit: type=1400 audit(2000000328.279:3271): avc: denied { create } for pid=10694 comm="syz.3.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.925468][ T8150] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.979236][ T29] audit: type=1400 audit(2000000328.279:3272): avc: denied { bind } for pid=10694 comm="syz.3.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.023835][T10702] netlink: 'syz.7.2218': attribute type 1 has an invalid length. [ 192.174346][ T29] audit: type=1400 audit(2000000328.559:3273): avc: denied { create } for pid=10721 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=bluetooth_socket permissive=1 [ 192.188833][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2224'. [ 192.195217][ T29] audit: type=1400 audit(2000000328.569:3274): avc: denied { create } for pid=10721 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 192.195252][ T29] audit: type=1400 audit(2000000328.569:3275): avc: denied { setopt } for pid=10721 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 192.195319][ T29] audit: type=1400 audit(2000000328.569:3276): avc: denied { write } for pid=10721 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 192.264891][ T29] audit: type=1326 audit(2000000328.569:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.2.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6475b5aeb9 code=0x7ffc0000 [ 192.288551][ T29] audit: type=1326 audit(2000000328.579:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.2.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6475b5aeb9 code=0x7ffc0000 [ 192.312180][ T29] audit: type=1326 audit(2000000328.579:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10721 comm="syz.2.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6475b5aeb9 code=0x7ffc0000 [ 192.356149][ T29] audit: type=1400 audit(2000000328.659:3280): avc: denied { read } for pid=10721 comm="syz.2.2223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 192.607134][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 192.622016][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.631659][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.644831][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.654496][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.662801][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.672443][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.692398][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.702156][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.711276][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 192.720923][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 192.839156][T10743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.855286][ T8679] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 192.875994][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.968555][T10752] Unable to read rock-ridge attributes [ 193.037579][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 193.062581][T10759] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.078332][T10758] Unable to read rock-ridge attributes [ 193.442885][T10766] bridge0: port 3(vlan2) entered blocking state [ 193.449356][T10766] bridge0: port 3(vlan2) entered disabled state [ 193.456042][T10766] vlan2: entered allmulticast mode [ 193.461192][T10766] bridge0: entered allmulticast mode [ 193.467254][T10766] vlan2: left allmulticast mode [ 193.472122][T10766] bridge0: left allmulticast mode [ 193.557466][T10770] netlink: zone id is out of range [ 193.562678][T10770] netlink: get zone limit has 4 unknown bytes [ 193.792798][T10784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.855883][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.912030][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 193.930245][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 193.933427][ T8163] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.994892][ T8163] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.016075][ T8163] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.029800][ T8163] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.054379][T10803] vfat: Unknown parameter 'ÿ00000000000000000000000' [ 194.096112][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2257'. [ 194.149124][T10815] Unable to read rock-ridge attributes [ 194.160896][T10816] Unable to read rock-ridge attributes [ 194.247766][T10820] ALSA: seq fatal error: cannot create timer (-22) [ 194.270400][T10821] Unable to read rock-ridge attributes [ 194.335768][T10819] Unable to read rock-ridge attributes [ 194.521904][T10823] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 194.970644][T10843] FAULT_INJECTION: forcing a failure. [ 194.970644][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 194.983399][T10843] CPU: 0 UID: 0 PID: 10843 Comm: syz.3.2267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.983441][T10843] Tainted: [W]=WARN [ 194.983451][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.983516][T10843] Call Trace: [ 194.983530][T10843] [ 194.983544][T10843] __dump_stack+0x1d/0x30 [ 194.983571][T10843] dump_stack_lvl+0x95/0xd0 [ 194.983593][T10843] dump_stack+0x15/0x1b [ 194.983616][T10843] should_fail_ex+0x263/0x280 [ 194.983735][T10843] should_failslab+0x8c/0xb0 [ 194.983768][T10843] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 194.983852][T10843] ? __d_alloc+0x37/0x340 [ 194.983889][T10843] __d_alloc+0x37/0x340 [ 194.983926][T10843] d_alloc_pseudo+0x1e/0x80 [ 194.983963][T10843] alloc_file_pseudo+0x91/0x190 [ 194.984060][T10843] __shmem_file_setup+0x1dd/0x210 [ 194.984099][T10843] shmem_file_setup+0x3b/0x50 [ 194.984136][T10843] __se_sys_memfd_create+0x2f6/0x6c0 [ 194.984229][T10843] __x64_sys_memfd_create+0x31/0x40 [ 194.984272][T10843] x64_sys_call+0x28cb/0x3000 [ 194.984384][T10843] do_syscall_64+0xc0/0x2a0 [ 194.984424][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.984454][T10843] RIP: 0033:0x7f574c98aeb9 [ 194.984475][T10843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.984500][T10843] RSP: 002b:00007f574b3e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 194.984590][T10843] RAX: ffffffffffffffda RBX: 00000000000005fe RCX: 00007f574c98aeb9 [ 194.984605][T10843] RDX: 00007f574b3e6ee0 RSI: 0000000000000000 RDI: 00007f574c9f7333 [ 194.984622][T10843] RBP: 0000200000000ac0 R08: 00000000ffffffff R09: 0000000000000000 [ 194.984641][T10843] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 194.984659][T10843] R13: 00007f574b3e6ee0 R14: 00007f574b3e6ea0 R15: 0000200000000180 [ 194.984686][T10843] [ 195.270628][T10851] netlink: 'syz.1.2271': attribute type 21 has an invalid length. [ 195.284509][T10851] set_capacity_and_notify: 9 callbacks suppressed [ 195.284581][T10851] loop1: detected capacity change from 0 to 1024 [ 195.307877][T10851] EXT4-fs: Ignoring removed orlov option [ 195.319458][T10851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.386776][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.654836][T10878] loop7: detected capacity change from 0 to 512 [ 195.662239][T10878] EXT4-fs: Ignoring removed bh option [ 195.676115][T10878] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 195.685715][T10878] EXT4-fs (loop7): 1 truncate cleaned up [ 195.691830][T10878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.957656][T10254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.996028][T10881] loop7: detected capacity change from 0 to 164 [ 196.021831][T10881] Unable to read rock-ridge attributes [ 196.054443][T10881] Unable to read rock-ridge attributes [ 196.159230][T10899] loop2: detected capacity change from 0 to 256 [ 196.182051][T10899] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.195050][T10899] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.276869][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 196.286053][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 196.358903][T10925] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2290'. [ 196.384582][T10925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2290'. [ 196.626992][T10962] loop5: detected capacity change from 0 to 4096 [ 196.633746][T10962] EXT4-fs: dax option not supported [ 196.757183][T10962] loop5: detected capacity change from 0 to 1024 [ 196.765617][T10962] EXT4-fs: Ignoring removed oldalloc option [ 196.771668][T10962] EXT4-fs: Ignoring removed bh option [ 196.787235][T10962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.056041][T10962] ================================================================== [ 197.064196][T10962] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 197.072239][T10962] [ 197.074660][T10962] write to 0xffff88811a84776c of 4 bytes by task 10968 on cpu 1: [ 197.082803][T10962] xas_set_mark+0x12b/0x140 [ 197.087575][T10962] tag_pages_for_writeback+0xe3/0x2e0 [ 197.093114][T10962] ext4_do_writepages+0x6a8/0x2800 [ 197.098280][T10962] ext4_writepages+0x18f/0x320 [ 197.103090][T10962] do_writepages+0x1c6/0x310 [ 197.107748][T10962] file_write_and_wait_range+0x178/0x2f0 [ 197.113433][T10962] generic_buffers_fsync_noflush+0x45/0x130 [ 197.119379][T10962] ext4_sync_file+0x1aa/0x680 [ 197.124125][T10962] vfs_fsync_range+0x10d/0x130 [ 197.129015][T10962] ext4_buffered_write_iter+0x34f/0x3c0 [ 197.134610][T10962] ext4_file_write_iter+0x380/0xf70 [ 197.139851][T10962] iter_file_splice_write+0x6bc/0xa80 [ 197.145276][T10962] direct_splice_actor+0x156/0x2a0 [ 197.150417][T10962] splice_direct_to_actor+0x311/0x670 [ 197.155819][T10962] do_splice_direct+0x119/0x1a0 [ 197.160698][T10962] do_sendfile+0x382/0x650 [ 197.165140][T10962] __x64_sys_sendfile64+0x105/0x150 [ 197.170364][T10962] x64_sys_call+0x2db1/0x3000 [ 197.175086][T10962] do_syscall_64+0xc0/0x2a0 [ 197.179629][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.185551][T10962] [ 197.187892][T10962] read to 0xffff88811a84776c of 4 bytes by task 10962 on cpu 0: [ 197.195539][T10962] file_write_and_wait_range+0x130/0x2f0 [ 197.201201][T10962] generic_buffers_fsync_noflush+0x45/0x130 [ 197.207121][T10962] ext4_sync_file+0x1aa/0x680 [ 197.211835][T10962] vfs_fsync_range+0x10d/0x130 [ 197.216623][T10962] ext4_buffered_write_iter+0x34f/0x3c0 [ 197.222205][T10962] ext4_file_write_iter+0x380/0xf70 [ 197.227459][T10962] iter_file_splice_write+0x6bc/0xa80 [ 197.232853][T10962] direct_splice_actor+0x156/0x2a0 [ 197.237988][T10962] splice_direct_to_actor+0x311/0x670 [ 197.243385][T10962] do_splice_direct+0x119/0x1a0 [ 197.248260][T10962] do_sendfile+0x382/0x650 [ 197.252711][T10962] __x64_sys_sendfile64+0x105/0x150 [ 197.257940][T10962] x64_sys_call+0x2db1/0x3000 [ 197.262643][T10962] do_syscall_64+0xc0/0x2a0 [ 197.267181][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.273109][T10962] [ 197.275456][T10962] value changed: 0x02000021 -> 0x04000021 [ 197.281220][T10962] [ 197.283562][T10962] Reported by Kernel Concurrency Sanitizer on: [ 197.289821][T10962] CPU: 0 UID: 0 PID: 10962 Comm: syz.5.2294 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.301217][T10962] Tainted: [W]=WARN [ 197.305038][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.315206][T10962] ================================================================== [ 197.533829][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.