last executing test programs: 29.497814969s ago: executing program 4 (id=586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") syz_open_dev$sg(0x0, 0x4a38, 0x48001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x40000000000015b, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000001}, {0xffffffff, 0x0, 0x9, 0xa}]}) r1 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp, @window={0x3, 0xfffe}, @sack_perm, @timestamp], 0x6) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003c000707fcffff0800000025047c0000"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x22000) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 28.554258454s ago: executing program 4 (id=594): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) r1 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x6000) 28.394661914s ago: executing program 4 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000a80)={0x1cc, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x1b0, 0x70, [@NL80211_MESH_SETUP_IE={0xe5, 0x3, "b3931f0ed20571838b55842afee81796d29393615d3474a70b83ea4c70d99f9a986f93ccc1c88d2e322473c605907aa43abb7cd55d2c499424b9d3eed8ec71a12f6dc0c8a951ea65b2d8a6402d8b7cc75c950611129ec4e275b242e25530bb828b4f0a7e7c73d3c5cabfd387b97ab8bb6ecefb1f4cc67c673b8d51d6129e328f0fdba65e0272685666527193318e414b895ffa008d16e36e42e1a162f2c78202dcfaf88089273cbd998ef6c620cfa074069bea1dffdba8731b3a72beac7702270e26b8c751ca4ed5f2dad4043c4f5f7f6d81bad625d01ca48faf6d7d01730ad366"}, @NL80211_MESH_SETUP_IE={0x9a, 0x3, "2a8d7614dcfe477608c387629ae78ffef03fdf2c5e08c0b6cfd21b4374139fb945cc62afe75fef906b673b1258e3403d734d1a1745bf51a1726c17049fa26e043d59a8e411c2d1ca88f0ff328619209d9abf9d29e99359da2777607eddf7df27784783c8e8630cee1d298dc67191cb05e6b08cd69d6e0ec06119c3f2fc060b5ca68e6ac01730f88af2183f23cf1370605fed05092519"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) 28.213977284s ago: executing program 4 (id=601): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r6) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x110000, 0x32, 0x43a1bd76, 0x0, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000008001b000000000024001a8020000a80140007"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x1) syz_pidfd_open(r2, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x2, &(0x7f0000000040)=0xb, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x800, 0x4005, 0x4, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa0}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) 27.250705021s ago: executing program 4 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r2 = fsopen(&(0x7f00000002c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x3f, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x5c, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x7, 0xd}, {0xa, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x800}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) setresuid(0xee01, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setresuid(0xee00, 0xee00, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000440)={{r1, &(0x7f0000000140)='\x00', 0x200000, &(0x7f0000000180)={@_ha_fsid={[0x1ff, 0x400]}, {0x2, 0xc440, 0x37c7f88c, 0x9}}, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0xf1}, 0x1, &(0x7f0000000380)=[{0x2, 0x81, &(0x7f0000000300)='[\x00', &(0x7f0000000340)="78415415214c1a0c5f0c8b01b48cd4a46ca26c5692d0f09be733291ba011e3e1db1aee62ff9f7f6c6afa8d0b7124c08ac381152c6db5ecbd85d47d", 0x3b, 0x18}]}) set_mempolicy(0x8000, &(0x7f0000000400)=0x1, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2}, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x8, 0x0, 0x68d4, 0x4, r5, 0xda, '\x00', r4, r5, 0x1, 0x3, 0x4}, 0x50) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000000100)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28) 26.648671116s ago: executing program 4 (id=622): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xffc, 0x20da, 0x7, 0xa, 0x20004, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 26.648480786s ago: executing program 32 (id=622): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xffc, 0x20da, 0x7, 0xa, 0x20004, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 18.558197031s ago: executing program 1 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000043c0), r4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) 17.627249365s ago: executing program 1 (id=720): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x181, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (fail_nth: 4) 17.271143356s ago: executing program 1 (id=725): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz82JwkAABeA3+5MNe0oJu6Vkr+vVk01YQsBaImhjViEjxiDoXUT4vsvjMW8GJjxVmWOYomb7fXP4fje/9v/jukmGn99s+rekTUqbpO8y/k01q/NsUbLrm5Tu82u+eBhrrZe3PrLcP/Z3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAaTgEAAP//LuQOEw==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x81, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz82JwkAABeA3+5MNe0oJu6Vkr+vVk01YQsBaImhjViEjxiDoXUT4vsvjMW8GJjxVmWOYomb7fXP4fje/9v/jukmGn99s+rekTUqbpO8y/k01q/NsUbLrm5Tu82u+eBhrrZe3PrLcP/Z3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAaTgEAAP//LuQOEw==") (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x81, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) 16.202154649s ago: executing program 1 (id=740): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x7c, 0x2ce, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c000}, 0x8880) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000080)) 15.296477402s ago: executing program 1 (id=750): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 32) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1ff}}], 0x18}, 0x20048855) (rerun: 32) 15.103899874s ago: executing program 1 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000040)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040004, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.095687954s ago: executing program 33 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000040)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040004, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.313470017s ago: executing program 3 (id=879): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 3.257433959s ago: executing program 3 (id=893): utime(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) r0 = memfd_create(&(0x7f0000000500)='\xfd\x0fmg\x06\xad\xafk\xe2\x03>ult\xbf3#/\x00n\xaa\xaad\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\xb8;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xab\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\ac\xdb\xdd\x97\x89_G\b\x05.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdb\a\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\xa5\xfd!\xb0\rd\xa7?\xecQ\xf0m\'\'@6\x96\x8bDi[\xca\x16\xf0\x18\x93u\xf6\r\x91v/\xd7\xc4\xff\x1fO\xa2\x87\x8b\x9e9\xcf\xe4\xcc\xda\x01\xf0;\x83B\xa0\x04\xaa\xa2\xf2\\\xe9yL0\x1dY\x15\x93I\xf7\xc9\xe9\x0e\xcez\xc7\xd4r\xd3\xb53\xf8\xd0\x92\x1c\xaa\x83\xff\xbe\xf3W\xff]\xed\xf9\xb1i\x84\xee]\x9d\xa7\xca', 0x0) syz_usb_connect(0x5, 0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029cf8cd0804234802887c010203010d02320001020c5001029df99ab109050a1000020254000725018009100009050504200008000100000000000000"], 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x40f4810, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7001, &(0x7f0000000180)={0x0, 0xe04, 0x2000, 0x2, 0x3c3}, &(0x7f0000000200), &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 2.547292891s ago: executing program 3 (id=900): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) (fail_nth: 1) 2.20951321s ago: executing program 3 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000a"], 0x184}}, 0x300) 1.990615553s ago: executing program 3 (id=914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000140)=ANY=[@ANYRES32=r2]) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="4c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000020000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000000000000000003f000000fe3200000000000000000000000000000000000000000000000000000000000000000000000000200000000000080000000000000000000000000000000001000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./bus\x00', 0x22000b04) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x24048060}, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) write$bt_hci(r6, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) sendfile(r6, r3, 0x0, 0x40001) sendfile(r6, r4, 0x0, 0x7ffff000) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000200004025e7a1a440000102030109025c0002010000000904000001020d000005260600010524"], 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) 1.502862672s ago: executing program 0 (id=931): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b", 0x5, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300), 0x0) 1.423357347s ago: executing program 0 (id=933): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1000000, 0x10) 1.390756218s ago: executing program 0 (id=934): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000002000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) signalfd(r0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) 1.374462849s ago: executing program 5 (id=935): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r6, r6, 0x2e}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r5, 0x4, r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001540)={r8, r4, 0x0, r4}, 0x10) 1.263178966s ago: executing program 0 (id=936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x101, 0x1, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x23c902, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@authinfo={0x18, 0x84, 0x6, {0x8000}}], 0x18, 0x4855}, 0x24000052) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71db}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r2, &(0x7f0000032280)=""/102369, 0x18fe1, 0x200) 1.262115766s ago: executing program 5 (id=938): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e26, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018190000", @ANYRES32=r0, @ANYBLOB="000000210000000018310000050000000000000000000000183100000200000000000000000000008510000007000000185b0000060000000000000000000000950000000000000018120000f59782633209d457684703c38a4f30fdc89d17fedfce8033c0531bb1a28fb91775fa66205ee983295f504842bef70eedda2d86b2712cc4d1470f97845afd44e6962990d7ff98340a517eba13dd0dcaf23431e9cf197e35a3fc2c7e6b2a6f93cd8eb24f33247442256e8e421ac7", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018270000", @ANYRES32=0x1, @ANYBLOB="0000000005000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xffffffffffffffbb, &(0x7f0000000700)=""/208, 0x40f00, 0x2, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x5fd1, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000380)=[{0x3, 0x3, 0x6, 0xc}, {0x0, 0x3, 0x9, 0x1}, {0x2, 0x4, 0x7, 0x2}, {0x3, 0x5, 0xa, 0x2}, {0x3, 0x1, 0xe, 0x5}, {0x5, 0x1, 0xd, 0x5}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000ff00611148000000000085000000190000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000005c0), 0x10, 0x0, r10}, 0x94) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140019001000010000ff0000000000000300000a28000000000a0300000000000000000003000003080002400000000409000174bb126afdc24b12600073797a300000000028000000000a010400000000000000000300000a0900010073797a300000000008000240000000071400000010000100000000000000d7000000000ada7f263d6e6611614da67b7ca64b3bd4b1ab8e232525d6d5fe7159050000000a151c1dae42ecb25e2be4e551115a798136b036933f471d2bb291c28f4a432ae7e53f76314f7e1263b0f9cd700181c53ec9c6a14218747ee30e159f5d7619f679f0b499d7089ef60ad173da63bf53a8cca0b435490660c51b3d6cab8cb065f1e1d3c5179fdbb5c33f2f3267bb141796fdf7387420c3239827cd6b7dd0ed2fa25f760da9939e1c2ea10b9b4e799be529c756449333b4f0cee1724c"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) close(r2) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) 1.115185835s ago: executing program 5 (id=940): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb0000000000000000020001000000fffd0000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) signalfd(r0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) 1.052225758s ago: executing program 5 (id=942): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 979.094733ms ago: executing program 0 (id=943): unshare(0x20040400) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsmount(r1, 0x0, 0x8a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="70000000020701030000070000000000050000030c00034000000000000000062c0007800800014000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) sendmmsg(r2, &(0x7f0000001700)=[{{&(0x7f0000000040)=@nfc={0x27, r5, 0x0, 0x5}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)="6293b329b4d5478882700f44a78133f0602dd2619ed488fc7ffd5b1e7145569079a8adb63adb2358b2f21ef84bab54b3d84a9dfd0a711d0121335571ef3956f01ca332975cf063872712e30437d133dd123f3712c54dbe5603e237101f4c0b9b7e5683921ce61d31eac0190e7063acf24e84ba68f3e2465e39", 0x79}, {&(0x7f0000000140)="0d7b3398f0513412429d3e4c93166598946bb94d0c08b93e3a76d1730cb38908c02a3abfeda75273300c0479f9c72e90036187232396d2cd212bea366cd4ae5e9ea516f7c36ac0ea5ccea5a6e82493a981af0505b94dd7f40f4fdfebcbdc6b58b86789fbb2dddc6e6dd14347ad542e163b67ef804a0ca27133d2a8341587521013d7d08eed0476a71f1a1694040135b78e72e15b40c9822a4dfe4318164699be31a4bbdcca5374d765b503c6c110fdbc34ce4e3687661a1b141b8f0ede9b03d95071c830af332d092b689087f210c90381f255e0f7e9e8c8912f0b6f78d60027d62629645b8c04b2011f47a942b4ab1c4c74d9", 0xf3}, {&(0x7f0000000240)="aae590ff8ce65c17fb51105b17ccfe3b53d5ef045954ef2b915712ff5b6d0fd6c6b2e3a155234afb198d2de19d83305eadcb92d9c284f3469f3863ddebf0ad77a586d9fa42bd5c8e2ff8e61c0d529672c4fcdf3d07d764e119d1d7144c4d68ec69c45e861274cf186222ce31be63e22d4d8038e1d1737bec45c438837e9d8e131e157c891655f176e69dfb33878564e163d8d2f6da3eef07ea29f815ac93a415093d64793cc6da65b08f6a21af7bf961d303945c6fe89d0bc58f323939976d393716359c513030f32ea7752484ceca3a29b31f26f62182b913", 0xd9}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="4cc0a2367a15c384e81f8a363345c95424b8a71c5d7eb210d248950a3a9f4acb570273f41d88055c8207c79a64a2f0cb53fda6f4131d4524632b5489ca957933ddca3f1bb9c435521c0c90cdd3caf6011e", 0x51}, {&(0x7f00000013c0)="9bb450aecc6626e189d5ec5ebafd233e1fbfab7c311f05b925c2ec5d2af71914cad21de20f249053aa3f53df4f0853e493baa6246f865f2cadd18a2b651aa2f11d5789bcab8ecd5870ca69672ba94ecad0951aac896c8f26530871f8cf8552", 0x5f}, {&(0x7f0000001440)="1b0b81d6d2ab4577dcfbbea57c4eed8d087e9e7a565d05d41da9dcf22e97fd563824ab42c43d497b8808676ad326ad466d1be575dc3ad3da5edb20854003f53e272d84d180b9d52069c7e68016b995c0010a23ca803e5d8a58519065225fd3200094925aed74444cbdf7a4d3e90f76fc74a3ed571f703528bda2d8c15679b5c12b6cd7bc2e7f7e2c3b2b96d9464f2e230c2abfc81ae633708efa9fff7841a61a6d817908d92d7125492acadf1ba65c2e71224b7598290d31bbe6369bc24e9c9040c2014780be3a770fc21ab74cd541ecf95e72ad9e4068cbf8225110b6d9", 0xde}, {&(0x7f0000001540)="b5cffcbba8ae742db6378f1bc262c3b0d9bb4f67e9d95947e9057340ee3a974fc0a36a94c2af1c7768ab19c02c305e63f190d71a5db900fa73174e0b5c6d7457867274c40f9b1b28222c7253971e6827a944c0a6444e1d620abcd20780255ac69c46354e299ef544c3b478", 0x6b}], 0x8, &(0x7f0000001640)=[{0x70, 0x113, 0xffffffff, "33a3ab612e07ecab2b19dcaaa5dca36b89e11f28051d124359db5da3ffd86e5d7e5cf5e5a8ac07dd2b252777449595f7ed9c80758367e7b86aff9827fe942eb4cf988a73ae7bdef19f42b9d32ac1dbba4236f356699f56a0033e0c"}, {0x20, 0x103, 0x1, "3e446be07fd2c958fd13e8a98fe0d7"}], 0x90}}], 0x1, 0x0) 834.012721ms ago: executing program 5 (id=945): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x5, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000000000000) 699.520499ms ago: executing program 0 (id=947): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfefffffe}, 0x50) ioctl$FIOCLEX(r0, 0x5451) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000080)=""/53, 0x35}], 0x6, &(0x7f0000000700)=""/241, 0xf1}, 0x10020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0xfffffdd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x1a) 692.834049ms ago: executing program 6 (id=949): unshare(0x20040400) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="bfbbbbbb"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) close(0x3) socket$xdp(0x2c, 0x3, 0x0) setsockopt$packet_int(r1, 0x11b, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 603.175375ms ago: executing program 5 (id=950): write$selinux_user(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x400, 0x4, 0x268}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read(r1, &(0x7f0000000a40)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x34004000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r3) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_gettime(r3, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11}, 0xa) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 593.629975ms ago: executing program 6 (id=951): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300"], 0x50) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x1e, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb, @loopback, 0x2008004}, {0xa, 0x4e20, 0x863e, @private2, 0x10dd}, r5, 0x7ff}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) close(r4) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4044041) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r6 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r6, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/268, 0x10c}], 0x1, 0x7e, 0xfffffdf8) unlink(&(0x7f0000000140)='./cgroup\x00') syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 403.204916ms ago: executing program 6 (id=953): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xc, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x0, 0x97}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000005000)=""/4119, 0x3f5d9f}], 0x100000000000011a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 254.065595ms ago: executing program 2 (id=956): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000040) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x804, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60", 0x58, 0xbcff, 0x0, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 238.301946ms ago: executing program 2 (id=957): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x9, 0x4, 0xff, 0x0, 0x0, 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x50}}, 0x14) 223.454227ms ago: executing program 6 (id=958): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x100000000000000, 0x10) 140.977642ms ago: executing program 2 (id=959): unshare(0x8060500) r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000200)={{0x0, 0x3, 0x7ff, 0x3, 0x3, 0x3, 0x53, 0xfffffff9, 0x10001, 0x3, 0x2, 0xd, 0x4, 0x7, 0x7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001300)={{r3, 0x0, 0x81, 0x0, 0x10, 0x5, 0x2, 0x2, 0x7, 0xfff, 0x5, 0x4, 0x1, 0x3, 0x7}}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @empty, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x7fffffff}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) getsockopt(r0, 0x200000000114, 0x2711, 0x0, 0x0) 140.633892ms ago: executing program 2 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000004c0)=[0x7, 0xa92, 0x7ff, 0x0, 0x1, 0x6, 0x1]) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x70, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "f02d3f6aa0f99857"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "03ef7506ecbef970"}, 0x3}}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8}}]}, 0x70}}, 0x0) 140.525422ms ago: executing program 6 (id=961): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x5, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xfdffffffffffffff) 122.410562ms ago: executing program 2 (id=962): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000005000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) signalfd(r0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) 84.487375ms ago: executing program 6 (id=963): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x2c}, {0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) r4 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40800) 22.813568ms ago: executing program 2 (id=964): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4004, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x130, 0x0, 0x290, 0x98, 0x290, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x2e, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010100, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xfe, 0x3}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x9, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$rds(r5, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f00000004c0)=""/247, 0xf7}], 0x2, &(0x7f0000000780)=[@fadd={0x58, 0x114, 0x6, {{0xffff, 0x2}, &(0x7f0000000140)=0x4, &(0x7f00000001c0)=0x5e, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffff8, 0x21, 0xfe3}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xd500000}, &(0x7f0000000200)=0x4, &(0x7f0000000400)=0x10001, 0x100000001, 0x58d, 0x9, 0x6, 0x68, 0x4}}], 0xb0}, 0x349b6d0db9165bb1) syz_mount_image$iso9660(&(0x7f0000000880), &(0x7f0000000280)='./file0\x00', 0x8082, &(0x7f0000000000)=ANY=[], 0x3, 0x805, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={&(0x7f0000000680)}, 0x10000, 0x9f3af70, 0xfffffffd, 0x6, 0x96, 0xffff, 0x1000, 0x0, 0x0, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0xb, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/68, 0x44}], 0x4}, 0x0, 0x40000000, 0x1, {0x2}}) syz_io_uring_setup(0x2769, &(0x7f0000000140)={0x0, 0x9857, 0x8000, 0x400001, 0x15c}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x2000001, &(0x7f00000006c0), &(0x7f0000000700), 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=965): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r0, 0xa180}], 0x1, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): 9 [ 66.369397][ T5039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5039 comm=syz.4.479 [ 66.410422][ T5053] loop1: detected capacity change from 0 to 512 [ 66.423315][ T5053] EXT4-fs: Ignoring removed orlov option [ 66.444131][ T5053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.460331][ T5053] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.468300][ T5053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.481: bg 0: block 248: padding at end of block bitmap is not set [ 66.490111][ T5053] loop1: lost filesystem error report for type 5 error -117 [ 66.490316][ T5053] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.481: Failed to acquire dquot type 1 [ 66.497713][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 66.497737][ C1] EXT4-fs (loop1): last error at time 1771079636: ext4_validate_block_bitmap:441 [ 66.503628][ T5062] loop0: detected capacity change from 0 to 1024 [ 66.509515][ T5053] loop1: lost filesystem error report for type 5 error -117 [ 66.533724][ T5053] EXT4-fs (loop1): 1 truncate cleaned up [ 66.547941][ T5053] EXT4-fs mount: 55 callbacks suppressed [ 66.548094][ T5053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.548666][ T5062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.583142][ T5053] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 66.595611][ T5053] EXT4-fs error (device loop1): __ext4_remount:6806: comm syz.1.481: Abort forced by user [ 66.606279][ T5053] EXT4-fs (loop1): Remounting filesystem read-only [ 66.612945][ T5053] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 66.622535][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.632286][ T5053] ext4 filesystem being remounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.683773][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.720424][ T5068] 9pnet_fd: Insufficient options for proto=fd [ 66.748731][ T5070] netlink: 256 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.765294][ T5070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.489'. [ 66.792719][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 66.801939][ T5073] loop2: detected capacity change from 0 to 2048 [ 66.824800][ T5073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.857207][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.887705][ T5085] loop2: detected capacity change from 0 to 256 [ 66.987422][ T5093] 9p: Bad value for 'rfdno' [ 67.355076][ T5112] netlink: 'syz.0.500': attribute type 8 has an invalid length. [ 67.925189][ T5131] netlink: 56 bytes leftover after parsing attributes in process `syz.4.512'. [ 68.024626][ T5133] loop0: detected capacity change from 0 to 1024 [ 68.032747][ T5133] EXT4-fs: Ignoring removed oldalloc option [ 68.040480][ T5133] EXT4-fs: Ignoring removed bh option [ 68.073395][ T5133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.102124][ T5133] tmpfs: Unknown parameter '' [ 68.110721][ T5144] FAULT_INJECTION: forcing a failure. [ 68.110721][ T5144] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.112536][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 68.166550][ T5146] netlink: 256 bytes leftover after parsing attributes in process `syz.2.518'. [ 68.176844][ T5144] CPU: 1 UID: 0 PID: 5144 Comm: syz.3.516 Not tainted syzkaller #0 PREEMPT(full) [ 68.176878][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 68.176920][ T5144] Call Trace: [ 68.176929][ T5144] [ 68.176986][ T5144] __dump_stack+0x1d/0x30 [ 68.177018][ T5144] dump_stack_lvl+0x95/0xd0 [ 68.177045][ T5144] dump_stack+0x15/0x1b [ 68.177155][ T5144] should_fail_ex+0x263/0x280 [ 68.177178][ T5144] should_fail_alloc_page+0xf2/0x100 [ 68.177213][ T5144] __alloc_frozen_pages_noprof+0x108/0x360 [ 68.177245][ T5144] alloc_pages_mpol+0xb3/0x260 [ 68.177285][ T5144] vma_alloc_folio_noprof+0x1a9/0x300 [ 68.177327][ T5144] handle_mm_fault+0x111f/0x3020 [ 68.177354][ T5144] ? mt_find+0x291/0x3d0 [ 68.177393][ T5144] do_user_addr_fault+0x3fd/0x1050 [ 68.177430][ T5144] exc_page_fault+0x62/0xa0 [ 68.177455][ T5144] asm_exc_page_fault+0x26/0x30 [ 68.177544][ T5144] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 68.177579][ T5144] Code: 1a 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 68.177602][ T5144] RSP: 0018:ffffc90002757ba8 EFLAGS: 00050206 [ 68.177646][ T5144] RAX: ffff888103506d78 RBX: ffffc90002757d28 RCX: 0000000000000dce [ 68.177660][ T5144] RDX: 0000000000000000 RSI: ffff8881053d7200 RDI: 0000200000032280 [ 68.177674][ T5144] RBP: 0000000000000000 R08: 0000000000000712 R09: 0000000000000000 [ 68.177686][ T5144] R10: 00018881053d7200 R11: 00018881053d7fcd R12: ffffc90002757d10 [ 68.177747][ T5144] R13: 0000000000000dce R14: 0000000000000dce R15: 0000000000000dce [ 68.177767][ T5144] _copy_to_iter+0x2df/0xea0 [ 68.177799][ T5144] ? single_stop+0x9/0x10 [ 68.177838][ T5144] ? traverse+0x379/0x3a0 [ 68.177864][ T5144] seq_read_iter+0x1d5/0x940 [ 68.177951][ T5144] ? _parse_integer+0x27/0x40 [ 68.177971][ T5144] ? kstrtoull+0x111/0x140 [ 68.177991][ T5144] seq_read+0x279/0x2c0 [ 68.178101][ T5144] ? __pfx_seq_read+0x10/0x10 [ 68.178123][ T5144] proc_reg_read+0x128/0x1c0 [ 68.178156][ T5144] ? __pfx_proc_reg_read+0x10/0x10 [ 68.178243][ T5144] vfs_read+0x1ab/0x7f0 [ 68.178270][ T5144] ? __rcu_read_unlock+0x4e/0x70 [ 68.178296][ T5144] ? __fget_files+0x184/0x1c0 [ 68.178314][ T5144] ? mutex_unlock+0x4e/0x90 [ 68.178353][ T5144] __x64_sys_pread64+0xfd/0x150 [ 68.178407][ T5144] x64_sys_call+0x27b5/0x3020 [ 68.178438][ T5144] do_syscall_64+0x12c/0x370 [ 68.178481][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.178501][ T5144] RIP: 0033:0x7f02002ebf79 [ 68.178516][ T5144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.178610][ T5144] RSP: 002b:00007f01fed3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 68.178631][ T5144] RAX: ffffffffffffffda RBX: 00007f0200565fa0 RCX: 00007f02002ebf79 [ 68.178684][ T5144] RDX: 0000000000018fe1 RSI: 0000200000032280 RDI: 0000000000000004 [ 68.178700][ T5144] RBP: 00007f01fed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.178714][ T5144] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 68.178726][ T5144] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 68.178743][ T5144] [ 68.510657][ T5148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.529664][ T5148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.816225][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 68.816243][ T28] audit: type=1400 audit(1771079639.117:396): avc: denied { read } for pid=5158 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.530311][ T5179] loop4: detected capacity change from 0 to 512 [ 69.762385][ T5179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.803661][ T5133] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.513: Allocating blocks 1-17 which overlap fs metadata [ 69.804309][ T5147] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.513: Allocating blocks 1-17 which overlap fs metadata [ 69.843150][ T5179] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.876753][ T28] audit: type=1400 audit(1771079640.167:397): avc: denied { getopt } for pid=5192 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.903091][ T28] audit: type=1400 audit(1771079640.177:398): avc: denied { write } for pid=5192 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.990469][ T5195] binfmt_misc: register: failed to install interpreter file ./file0 [ 70.022402][ T28] audit: type=1400 audit(1771079640.317:399): avc: denied { remove_name } for pid=5178 comm="syz.4.528" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.022460][ T5197] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.4.528: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=8, size=2048 fake=0 [ 70.061883][ T28] audit: type=1400 audit(1771079640.317:400): avc: denied { unlink } for pid=5178 comm="syz.4.528" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.075612][ T5197] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 70.168429][ T28] audit: type=1400 audit(1771079640.467:401): avc: denied { create } for pid=5210 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 70.193583][ T5209] FAULT_INJECTION: forcing a failure. [ 70.193583][ T5209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.226767][ T5209] CPU: 1 UID: 0 PID: 5209 Comm: syz.1.537 Not tainted syzkaller #0 PREEMPT(full) [ 70.226797][ T5209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 70.226810][ T5209] Call Trace: [ 70.226818][ T5209] [ 70.226830][ T5209] __dump_stack+0x1d/0x30 [ 70.226860][ T5209] dump_stack_lvl+0x95/0xd0 [ 70.226883][ T5209] dump_stack+0x15/0x1b [ 70.226977][ T5209] should_fail_ex+0x263/0x280 [ 70.227063][ T5209] should_fail+0xb/0x20 [ 70.227104][ T5209] should_fail_usercopy+0x1a/0x20 [ 70.227128][ T5209] _copy_to_user+0x20/0xa0 [ 70.227158][ T5209] simple_read_from_buffer+0xb5/0x130 [ 70.227265][ T5209] proc_fail_nth_read+0x10e/0x150 [ 70.227287][ T5209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.227309][ T5209] vfs_read+0x1ab/0x7f0 [ 70.227372][ T5209] ? __rcu_read_unlock+0x4e/0x70 [ 70.227390][ T5209] ? __fget_files+0x184/0x1c0 [ 70.227408][ T5209] ? mutex_lock+0x57/0x90 [ 70.227431][ T5209] ksys_read+0xdc/0x1a0 [ 70.227521][ T5209] __x64_sys_read+0x40/0x50 [ 70.227554][ T5209] x64_sys_call+0x2886/0x3020 [ 70.227657][ T5209] do_syscall_64+0x12c/0x370 [ 70.227685][ T5209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.227709][ T5209] RIP: 0033:0x7f3644dec84e [ 70.227725][ T5209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.227740][ T5209] RSP: 002b:00007f364387efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.227835][ T5209] RAX: ffffffffffffffda RBX: 00007f364387f6c0 RCX: 00007f3644dec84e [ 70.227847][ T5209] RDX: 000000000000000f RSI: 00007f364387f0a0 RDI: 0000000000000004 [ 70.227859][ T5209] RBP: 00007f364387f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.227870][ T5209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.227939][ T5209] R13: 00007f36450a6038 R14: 00007f36450a5fa0 R15: 00007ffe71c34ba8 [ 70.227955][ T5209] [ 70.230480][ T5216] __nla_validate_parse: 5 callbacks suppressed [ 70.230496][ T5216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.539'. [ 70.453990][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.529077][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.543896][ T5226] netlink: 56 bytes leftover after parsing attributes in process `syz.0.540'. [ 70.595404][ T5231] FAULT_INJECTION: forcing a failure. [ 70.595404][ T5231] name failslab, interval 1, probability 0, space 0, times 0 [ 70.610104][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz.4.543 Not tainted syzkaller #0 PREEMPT(full) [ 70.610134][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 70.610147][ T5231] Call Trace: [ 70.610154][ T5231] [ 70.610233][ T5231] __dump_stack+0x1d/0x30 [ 70.610262][ T5231] dump_stack_lvl+0x95/0xd0 [ 70.610287][ T5231] dump_stack+0x15/0x1b [ 70.610309][ T5231] should_fail_ex+0x263/0x280 [ 70.610416][ T5231] should_failslab+0x8c/0xb0 [ 70.610449][ T5231] __kmalloc_noprof+0xb8/0x4e0 [ 70.610525][ T5231] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 70.610565][ T5231] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 70.610645][ T5231] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 70.610680][ T5231] ? selinux_capable+0x31/0x40 [ 70.610707][ T5231] ? security_capable+0x7b/0x90 [ 70.610740][ T5231] ? ns_capable+0x7c/0xb0 [ 70.610905][ T5231] genl_rcv_msg+0x432/0x470 [ 70.610940][ T5231] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 70.611034][ T5231] netlink_rcv_skb+0x123/0x220 [ 70.611062][ T5231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 70.611101][ T5231] genl_rcv+0x28/0x40 [ 70.611134][ T5231] netlink_unicast+0x5c0/0x690 [ 70.611162][ T5231] netlink_sendmsg+0x5c8/0x6f0 [ 70.611242][ T5231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.611349][ T5231] ____sys_sendmsg+0x5af/0x600 [ 70.611381][ T5231] ___sys_sendmsg+0x195/0x1e0 [ 70.611420][ T5231] __x64_sys_sendmsg+0xd4/0x160 [ 70.611471][ T5231] x64_sys_call+0x194c/0x3020 [ 70.611573][ T5231] do_syscall_64+0x12c/0x370 [ 70.611611][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.611636][ T5231] RIP: 0033:0x7f17752fbf79 [ 70.611659][ T5231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.611692][ T5231] RSP: 002b:00007f1773d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.611712][ T5231] RAX: ffffffffffffffda RBX: 00007f1775575fa0 RCX: 00007f17752fbf79 [ 70.611725][ T5231] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 70.611737][ T5231] RBP: 00007f1773d57090 R08: 0000000000000000 R09: 0000000000000000 [ 70.611755][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.611785][ T5231] R13: 00007f1775576038 R14: 00007f1775575fa0 R15: 00007fffd59b3f98 [ 70.611805][ T5231] [ 70.862266][ T5237] FAULT_INJECTION: forcing a failure. [ 70.862266][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.883065][ T5237] CPU: 0 UID: 0 PID: 5237 Comm: syz.3.546 Not tainted syzkaller #0 PREEMPT(full) [ 70.883097][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 70.883108][ T5237] Call Trace: [ 70.883115][ T5237] [ 70.883123][ T5237] __dump_stack+0x1d/0x30 [ 70.883212][ T5237] dump_stack_lvl+0x95/0xd0 [ 70.883318][ T5237] dump_stack+0x15/0x1b [ 70.883341][ T5237] should_fail_ex+0x263/0x280 [ 70.883367][ T5237] should_fail+0xb/0x20 [ 70.883387][ T5237] should_fail_usercopy+0x1a/0x20 [ 70.883445][ T5237] _copy_to_user+0x20/0xa0 [ 70.883475][ T5237] simple_read_from_buffer+0xb5/0x130 [ 70.883511][ T5237] proc_fail_nth_read+0x10e/0x150 [ 70.883584][ T5237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.883611][ T5237] vfs_read+0x1ab/0x7f0 [ 70.883684][ T5237] ? __rcu_read_unlock+0x4e/0x70 [ 70.883706][ T5237] ? __fget_files+0x184/0x1c0 [ 70.883737][ T5237] ? mutex_lock+0x57/0x90 [ 70.883819][ T5237] ksys_read+0xdc/0x1a0 [ 70.883850][ T5237] __x64_sys_read+0x40/0x50 [ 70.883881][ T5237] x64_sys_call+0x2886/0x3020 [ 70.883945][ T5237] do_syscall_64+0x12c/0x370 [ 70.884044][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.884066][ T5237] RIP: 0033:0x7f02002ac84e [ 70.884084][ T5237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.884120][ T5237] RSP: 002b:00007f01fed3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.884152][ T5237] RAX: ffffffffffffffda RBX: 00007f01fed3f6c0 RCX: 00007f02002ac84e [ 70.884223][ T5237] RDX: 000000000000000f RSI: 00007f01fed3f0a0 RDI: 0000000000000004 [ 70.884238][ T5237] RBP: 00007f01fed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.884252][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.884265][ T5237] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 70.884285][ T5237] [ 71.009367][ T5252] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 71.009388][ T5252] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 71.009448][ T5252] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 71.009459][ T5252] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 71.009471][ T5252] netlink: 'syz.2.549': attribute type 2 has an invalid length. [ 71.009485][ T5252] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 71.038319][ T5254] loop4: detected capacity change from 0 to 512 [ 71.038748][ T5254] EXT4-fs: Ignoring removed orlov option [ 71.040052][ T5254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.042870][ T5254] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.043628][ T5254] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.548: bg 0: block 248: padding at end of block bitmap is not set [ 71.043671][ T5254] loop4: lost filesystem error report for type 5 error -117 [ 71.043849][ T5254] Quota error (device loop4): write_blk: dquota write failed [ 71.043864][ T5254] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 71.043879][ T5254] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.548: Failed to acquire dquot type 1 [ 71.043898][ T5254] loop4: lost filesystem error report for type 5 error -117 [ 71.044592][ T5254] EXT4-fs (loop4): 1 truncate cleaned up [ 71.052111][ T5254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.059545][ T5254] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 71.075563][ T5254] EXT4-fs error (device loop4): __ext4_remount:6806: comm syz.4.548: Abort forced by user [ 71.075900][ T5254] EXT4-fs (loop4): Remounting filesystem read-only [ 71.075915][ T5254] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 71.076018][ T5254] ext4 filesystem being remounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.084379][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.550'. [ 71.388452][ T28] audit: type=1326 audit(1771079641.687:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.2.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f676d9dbf79 code=0x0 [ 71.419764][ T5265] loop2: detected capacity change from 0 to 512 [ 71.427692][ T5265] ext3: Unknown parameter 'smackfstransmute' [ 71.459109][ T5270] netlink: 56 bytes leftover after parsing attributes in process `syz.3.553'. [ 71.468364][ T5266] loop2: detected capacity change from 0 to 1024 [ 71.483563][ T5266] EXT4-fs: Ignoring removed orlov option [ 71.523666][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.541708][ T5266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.653779][ T5279] netlink: 56 bytes leftover after parsing attributes in process `syz.4.555'. [ 72.015116][ T5298] loop0: detected capacity change from 0 to 128 [ 72.055930][ T5298] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.105568][ T5298] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.282528][ T5306] loop0: detected capacity change from 0 to 1024 [ 72.294752][ T5309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.562'. [ 72.412323][ T5306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.804020][ T5318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.811250][ T5318] IPv6: NLM_F_CREATE should be set when creating new route [ 72.818633][ T5318] IPv6: NLM_F_CREATE should be set when creating new route [ 72.825875][ T5318] IPv6: NLM_F_CREATE should be set when creating new route [ 73.233063][ T28] audit: type=1400 audit(1771079643.097:403): avc: denied { mount } for pid=5305 comm="syz.0.561" name="/" dev="rpc_pipefs" ino=9952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 73.295605][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.394753][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.413148][ T5322] loop0: detected capacity change from 0 to 512 [ 73.454630][ T5322] EXT4-fs: Ignoring removed orlov option [ 73.482296][ T5322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.548299][ T5322] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.573666][ T5322] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.565: bg 0: block 248: padding at end of block bitmap is not set [ 73.625573][ T5330] loop1: detected capacity change from 0 to 1024 [ 73.645775][ T5322] loop0: lost filesystem error report for type 5 error -117 [ 73.647719][ T5322] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.565: Failed to acquire dquot type 1 [ 73.655187][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.655213][ C1] EXT4-fs (loop0): last error at time 1771079643: ext4_validate_block_bitmap:441 [ 73.723645][ T5322] loop0: lost filesystem error report for type 5 error -117 [ 73.724392][ T5322] EXT4-fs (loop0): 1 truncate cleaned up [ 73.787834][ T5322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.816740][ T5322] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.836489][ T5322] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.565: Abort forced by user [ 73.848313][ T5322] EXT4-fs (loop0): Remounting filesystem read-only [ 73.861497][ T5322] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 73.879857][ T5322] ext4 filesystem being remounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.986398][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.333863][ T5357] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.482917][ T5369] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 74.490679][ T5369] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 74.498676][ T5369] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 74.506532][ T5369] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 74.514593][ T5369] netlink: 'syz.0.576': attribute type 2 has an invalid length. [ 74.522324][ T5369] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 74.572584][ T5376] loop4: detected capacity change from 0 to 128 [ 74.594456][ T5376] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.624812][ T5376] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.646175][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 74.646245][ T28] audit: type=1400 audit(1771079644.947:405): avc: denied { execute } for pid=5375 comm="syz.4.578" path="/131/cpu.stat" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.693825][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.729968][ T5384] loop3: detected capacity change from 0 to 512 [ 74.743607][ T5384] EXT4-fs: Ignoring removed orlov option [ 74.763950][ T5384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.785821][ T5388] netlink: 'syz.0.582': attribute type 10 has an invalid length. [ 74.797834][ T5384] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.808725][ T5391] FAULT_INJECTION: forcing a failure. [ 74.808725][ T5391] name failslab, interval 1, probability 0, space 0, times 0 [ 74.809409][ T5384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.580: bg 0: block 248: padding at end of block bitmap is not set [ 74.822033][ T5391] CPU: 1 UID: 0 PID: 5391 Comm: syz.4.583 Not tainted syzkaller #0 PREEMPT(full) [ 74.822061][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 74.822074][ T5391] Call Trace: [ 74.822092][ T5391] [ 74.822101][ T5391] __dump_stack+0x1d/0x30 [ 74.822128][ T5391] dump_stack_lvl+0x95/0xd0 [ 74.822210][ T5391] dump_stack+0x15/0x1b [ 74.822287][ T5391] should_fail_ex+0x263/0x280 [ 74.822312][ T5391] should_failslab+0x8c/0xb0 [ 74.822342][ T5391] __kmalloc_noprof+0xb8/0x4e0 [ 74.822425][ T5391] ? ethnl_default_set_doit+0xbd/0x680 [ 74.822522][ T5391] ? __nla_parse+0x40/0x60 [ 74.822547][ T5391] ethnl_default_set_doit+0xbd/0x680 [ 74.822575][ T5391] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 74.822659][ T5391] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 74.822695][ T5391] genl_family_rcv_msg_doit+0x187/0x1f0 [ 74.822761][ T5391] genl_rcv_msg+0x432/0x470 [ 74.822792][ T5391] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 74.822835][ T5391] netlink_rcv_skb+0x123/0x220 [ 74.822859][ T5391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.822894][ T5391] genl_rcv+0x28/0x40 [ 74.822932][ T5391] netlink_unicast+0x5c0/0x690 [ 74.822957][ T5391] netlink_sendmsg+0x5c8/0x6f0 [ 74.823010][ T5391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.823042][ T5391] ____sys_sendmsg+0x5af/0x600 [ 74.823117][ T5391] ___sys_sendmsg+0x195/0x1e0 [ 74.823152][ T5391] __x64_sys_sendmsg+0xd4/0x160 [ 74.823291][ T5391] x64_sys_call+0x194c/0x3020 [ 74.823377][ T5391] do_syscall_64+0x12c/0x370 [ 74.823417][ T5391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.823440][ T5391] RIP: 0033:0x7f17752fbf79 [ 74.823500][ T5391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.823519][ T5391] RSP: 002b:00007f1773d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.823540][ T5391] RAX: ffffffffffffffda RBX: 00007f1775575fa0 RCX: 00007f17752fbf79 [ 74.823627][ T5391] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 74.823641][ T5391] RBP: 00007f1773d57090 R08: 0000000000000000 R09: 0000000000000000 [ 74.823654][ T5391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.823667][ T5391] R13: 00007f1775576038 R14: 00007f1775575fa0 R15: 00007fffd59b3f98 [ 74.823740][ T5391] [ 74.832361][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.839307][ T5384] loop3: lost filesystem error report for type 5 error -117 [ 74.845304][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.855834][ T5384] Quota error (device loop3): write_blk: dquota write failed [ 74.866184][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 74.866207][ C0] EXT4-fs (loop3): last error at time 1771079645: ext4_validate_block_bitmap:441 [ 74.885467][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.898286][ T5384] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 74.899128][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.923554][ T5384] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.580: Failed to acquire dquot type 1 [ 74.927344][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.933407][ T5384] loop3: lost filesystem error report for type 5 error -117 [ 74.937935][ T5388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.943955][ T5384] EXT4-fs (loop3): 1 truncate cleaned up [ 74.956476][ T5388] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 75.106324][ T5400] loop4: detected capacity change from 0 to 1024 [ 75.134046][ T5384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.148682][ T5398] loop0: detected capacity change from 0 to 512 [ 75.209985][ T5384] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 75.232615][ T5400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.255253][ T5398] EXT4-fs: Ignoring removed orlov option [ 75.361317][ T5384] EXT4-fs error (device loop3): __ext4_remount:6806: comm syz.3.580: Abort forced by user [ 75.373147][ T28] audit: type=1400 audit(1771079645.647:406): avc: denied { read write } for pid=5406 comm="syz.2.588" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.393088][ T5384] EXT4-fs (loop3): Remounting filesystem read-only [ 75.398105][ T28] audit: type=1400 audit(1771079645.647:407): avc: denied { open } for pid=5406 comm="syz.2.588" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.428197][ T5384] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 75.443913][ T5384] ext4 filesystem being remounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.449826][ T5408] tun0: tun_chr_ioctl cmd 1074025675 [ 75.454895][ T28] audit: type=1400 audit(1771079645.647:408): avc: denied { ioctl } for pid=5406 comm="syz.2.588" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.461438][ T5398] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 75.493878][ T5408] tun0: persist enabled [ 75.515012][ T5415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.522243][ T5415] IPv6: NLM_F_CREATE should be set when creating new route [ 75.529488][ T5415] IPv6: NLM_F_CREATE should be set when creating new route [ 75.536714][ T5415] IPv6: NLM_F_CREATE should be set when creating new route [ 75.550519][ T5408] tun0: tun_chr_ioctl cmd 1074025675 [ 75.560895][ T5408] tun0: persist enabled [ 75.569004][ T5408] netlink: 'syz.2.588': attribute type 3 has an invalid length. [ 75.577271][ T5398] System zones: 0-2, 18-18, 34-35 [ 75.585342][ T5398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.597978][ T5408] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.588'. [ 75.608109][ T5398] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.622451][ T5408] netlink: 'syz.2.588': attribute type 39 has an invalid length. [ 75.685483][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.770356][ T28] audit: type=1400 audit(1771079646.067:409): avc: denied { map } for pid=5397 comm="syz.0.585" path="/114/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.807578][ T28] audit: type=1400 audit(1771079646.097:410): avc: denied { connect } for pid=5397 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.868723][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.005522][ T5421] loop2: detected capacity change from 0 to 512 [ 76.030666][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.055812][ T5421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.075320][ T5421] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.092263][ T28] audit: type=1400 audit(1771079646.387:411): avc: denied { rename } for pid=5419 comm="syz.2.593" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.117612][ T5427] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 76.136373][ T5426] 9pnet: p9_errstr2errno: server reported unknown error [ 76.151440][ T28] audit: type=1400 audit(1771079646.387:412): avc: denied { unlink } for pid=5419 comm="syz.2.593" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.182237][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.213477][ T5437] loop0: detected capacity change from 0 to 128 [ 76.260295][ T5437] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.273529][ T5435] 9p: Bad value for 'rfdno' [ 76.295700][ T5437] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.331265][ T5443] netlink: 256 bytes leftover after parsing attributes in process `syz.3.598'. [ 76.371661][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.394718][ T5449] loop4: detected capacity change from 0 to 128 [ 76.419582][ T5452] FAULT_INJECTION: forcing a failure. [ 76.419582][ T5452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.432785][ T5452] CPU: 1 UID: 0 PID: 5452 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT(full) [ 76.432811][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 76.432823][ T5452] Call Trace: [ 76.432830][ T5452] [ 76.432839][ T5452] __dump_stack+0x1d/0x30 [ 76.432922][ T5452] dump_stack_lvl+0x95/0xd0 [ 76.432947][ T5452] dump_stack+0x15/0x1b [ 76.432987][ T5452] should_fail_ex+0x263/0x280 [ 76.433023][ T5452] should_fail+0xb/0x20 [ 76.433046][ T5452] should_fail_usercopy+0x1a/0x20 [ 76.433075][ T5452] _copy_from_iter+0xcf/0xea0 [ 76.433098][ T5452] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 76.433183][ T5452] ? __alloc_skb+0x362/0x690 [ 76.433218][ T5452] ? __alloc_skb+0x4f6/0x690 [ 76.433287][ T5452] pfkey_sendmsg+0x126/0x9b0 [ 76.433316][ T5452] ? avc_has_perm+0x101/0x190 [ 76.433337][ T5452] ? selinux_socket_sendmsg+0x192/0x1c0 [ 76.433366][ T5452] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 76.433406][ T5452] ____sys_sendmsg+0x5af/0x600 [ 76.433439][ T5452] ___sys_sendmsg+0x195/0x1e0 [ 76.433489][ T5452] __x64_sys_sendmsg+0xd4/0x160 [ 76.433559][ T5452] x64_sys_call+0x194c/0x3020 [ 76.433585][ T5452] do_syscall_64+0x12c/0x370 [ 76.433622][ T5452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.433682][ T5452] RIP: 0033:0x7f02002ebf79 [ 76.433702][ T5452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.433723][ T5452] RSP: 002b:00007f01fed3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.433748][ T5452] RAX: ffffffffffffffda RBX: 00007f0200565fa0 RCX: 00007f02002ebf79 [ 76.433832][ T5452] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 76.433847][ T5452] RBP: 00007f01fed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.433860][ T5452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.433907][ T5452] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 76.434022][ T5452] [ 76.745054][ T5461] tipc: Started in network mode [ 76.756911][ T5461] tipc: Node identity 5a6985dc7b48, cluster identity 4711 [ 76.778419][ T5461] tipc: Enabled bearer , priority 0 [ 76.814185][ T5461] syzkaller0: entered promiscuous mode [ 76.829134][ T5461] syzkaller0: entered allmulticast mode [ 76.861343][ T5461] tipc: Resetting bearer [ 76.924100][ T5459] tipc: Resetting bearer [ 76.931827][ T5459] tipc: Disabling bearer [ 77.355591][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 77.523768][ T5500] netlink: 56 bytes leftover after parsing attributes in process `syz.3.613'. [ 77.553732][ T5503] netlink: 256 bytes leftover after parsing attributes in process `syz.0.612'. [ 77.572556][ T5506] loop2: detected capacity change from 0 to 1024 [ 77.582789][ T5503] netlink: 72 bytes leftover after parsing attributes in process `syz.0.612'. [ 77.599955][ T5506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.674542][ T260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.753564][ T5514] 9pnet: p9_errstr2errno: server reported unknown error [ 77.775303][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.775607][ T260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.867392][ T260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.920900][ T260] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.957775][ T5533] tun0: tun_chr_ioctl cmd 1074025675 [ 77.971783][ T5533] tun0: persist enabled [ 77.985369][ T5533] tun0: tun_chr_ioctl cmd 1074025675 [ 77.990725][ T5533] tun0: persist enabled [ 78.014206][ T5533] netlink: 'syz.1.619': attribute type 3 has an invalid length. [ 78.043929][ T5533] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.619'. [ 78.085494][ T260] bridge_slave_1: left allmulticast mode [ 78.093294][ T5554] 9p: Bad value for 'rfdno' [ 78.097037][ T260] bridge_slave_1: left promiscuous mode [ 78.104506][ T260] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.114805][ T260] bridge_slave_0: left allmulticast mode [ 78.120471][ T260] bridge_slave_0: left promiscuous mode [ 78.135365][ T260] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.337151][ T260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.347393][ T260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.357197][ T260] bond0 (unregistering): Released all slaves [ 78.380912][ T5563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.411525][ T260] hsr_slave_0: left promiscuous mode [ 78.418061][ T260] hsr_slave_1: left promiscuous mode [ 78.441677][ T5574] FAULT_INJECTION: forcing a failure. [ 78.441677][ T5574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.458804][ T5574] CPU: 0 UID: 0 PID: 5574 Comm: syz.2.627 Not tainted syzkaller #0 PREEMPT(full) [ 78.458880][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 78.458892][ T5574] Call Trace: [ 78.458899][ T5574] [ 78.458907][ T5574] __dump_stack+0x1d/0x30 [ 78.458982][ T5574] dump_stack_lvl+0x95/0xd0 [ 78.459009][ T5574] dump_stack+0x15/0x1b [ 78.459034][ T5574] should_fail_ex+0x263/0x280 [ 78.459105][ T5574] should_fail+0xb/0x20 [ 78.459129][ T5574] should_fail_usercopy+0x1a/0x20 [ 78.459203][ T5574] _copy_to_user+0x20/0xa0 [ 78.459317][ T5574] simple_read_from_buffer+0xb5/0x130 [ 78.459355][ T5574] proc_fail_nth_read+0x10e/0x150 [ 78.459384][ T5574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.459447][ T5574] vfs_read+0x1ab/0x7f0 [ 78.459477][ T5574] ? __rcu_read_unlock+0x4e/0x70 [ 78.459501][ T5574] ? __fget_files+0x184/0x1c0 [ 78.459524][ T5574] ? mutex_lock+0x57/0x90 [ 78.459554][ T5574] ksys_read+0xdc/0x1a0 [ 78.459660][ T5574] __x64_sys_read+0x40/0x50 [ 78.459690][ T5574] x64_sys_call+0x2886/0x3020 [ 78.459722][ T5574] do_syscall_64+0x12c/0x370 [ 78.459770][ T5574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.459801][ T5574] RIP: 0033:0x7f676d99c84e [ 78.459820][ T5574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.459844][ T5574] RSP: 002b:00007f676c42efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.459869][ T5574] RAX: ffffffffffffffda RBX: 00007f676c42f6c0 RCX: 00007f676d99c84e [ 78.459885][ T5574] RDX: 000000000000000f RSI: 00007f676c42f0a0 RDI: 0000000000000004 [ 78.459900][ T5574] RBP: 00007f676c42f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.459914][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.459928][ T5574] R13: 00007f676dc56038 R14: 00007f676dc55fa0 R15: 00007ffe168076d8 [ 78.459976][ T5574] [ 78.460400][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.659882][ T260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.683197][ T5576] netlink: 56 bytes leftover after parsing attributes in process `syz.3.628'. [ 78.724570][ T260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.732046][ T260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.745655][ T260] veth1_macvtap: left promiscuous mode [ 78.761613][ T260] veth0_macvtap: left promiscuous mode [ 78.767427][ T260] veth1_vlan: left promiscuous mode [ 78.772900][ T260] veth0_vlan: left promiscuous mode [ 78.849696][ T5584] loop3: detected capacity change from 0 to 1024 [ 78.866776][ T260] team0 (unregistering): Port device team_slave_1 removed [ 78.878457][ T260] team0 (unregistering): Port device team_slave_0 removed [ 78.894874][ T5584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.907192][ T5584] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.921665][ T5582] FAULT_INJECTION: forcing a failure. [ 78.921665][ T5582] name failslab, interval 1, probability 0, space 0, times 0 [ 78.934457][ T5582] CPU: 0 UID: 0 PID: 5582 Comm: syz.2.630 Not tainted syzkaller #0 PREEMPT(full) [ 78.934557][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 78.934569][ T5582] Call Trace: [ 78.934576][ T5582] [ 78.934585][ T5582] __dump_stack+0x1d/0x30 [ 78.934616][ T5582] dump_stack_lvl+0x95/0xd0 [ 78.934688][ T5582] dump_stack+0x15/0x1b [ 78.934714][ T5582] should_fail_ex+0x263/0x280 [ 78.934742][ T5582] should_failslab+0x8c/0xb0 [ 78.934775][ T5582] __kmalloc_noprof+0xb8/0x4e0 [ 78.934850][ T5582] ? ethnl_default_notify+0x10f/0x6e0 [ 78.934880][ T5582] ethnl_default_notify+0x10f/0x6e0 [ 78.934905][ T5582] ? __pfx_nsim_set_coalesce+0x10/0x10 [ 78.934996][ T5582] ? __ethnl_set_coalesce+0xe04/0xe50 [ 78.935016][ T5582] ethnl_notify+0x9d/0x150 [ 78.935034][ T5582] ethnl_default_set_doit+0x429/0x680 [ 78.935120][ T5582] genl_family_rcv_msg_doit+0x187/0x1f0 [ 78.935145][ T5582] genl_rcv_msg+0x432/0x470 [ 78.935165][ T5582] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 78.935260][ T5582] netlink_rcv_skb+0x123/0x220 [ 78.935354][ T5582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 78.935378][ T5582] genl_rcv+0x28/0x40 [ 78.935415][ T5582] netlink_unicast+0x5c0/0x690 [ 78.935443][ T5582] netlink_sendmsg+0x5c8/0x6f0 [ 78.935463][ T5582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.935553][ T5582] ____sys_sendmsg+0x5af/0x600 [ 78.935573][ T5582] ___sys_sendmsg+0x195/0x1e0 [ 78.935597][ T5582] __x64_sys_sendmsg+0xd4/0x160 [ 78.935617][ T5582] x64_sys_call+0x194c/0x3020 [ 78.935682][ T5582] do_syscall_64+0x12c/0x370 [ 78.935783][ T5582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.935798][ T5582] RIP: 0033:0x7f676d9dbf79 [ 78.935811][ T5582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.935824][ T5582] RSP: 002b:00007f676c42f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.935840][ T5582] RAX: ffffffffffffffda RBX: 00007f676dc55fa0 RCX: 00007f676d9dbf79 [ 78.936047][ T5582] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 78.936059][ T5582] RBP: 00007f676c42f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.936068][ T5582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.936076][ T5582] R13: 00007f676dc56038 R14: 00007f676dc55fa0 R15: 00007ffe168076d8 [ 78.936091][ T5582] [ 79.292188][ T5542] chnl_net:caif_netlink_parms(): no params data found [ 79.317914][ T5610] EXT4-fs error (device loop3): ext4_free_blocks:6726: comm syz.3.631: Freeing blocks not in datazone - block = 0, count = 16 [ 79.382481][ T5542] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.389706][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.397182][ T5542] bridge_slave_0: entered allmulticast mode [ 79.404046][ T5542] bridge_slave_0: entered promiscuous mode [ 79.410836][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.418100][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.425262][ T5542] bridge_slave_1: entered allmulticast mode [ 79.431749][ T5542] bridge_slave_1: entered promiscuous mode [ 79.451129][ T5618] syzkaller0: entered promiscuous mode [ 79.456682][ T5618] syzkaller0: entered allmulticast mode [ 79.475284][ T5542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.487208][ T5542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.505742][ T5542] team0: Port device team_slave_0 added [ 79.512062][ T5542] team0: Port device team_slave_1 added [ 79.524136][ T5620] validate_nla: 2 callbacks suppressed [ 79.524242][ T5620] netlink: 'syz.1.635': attribute type 46 has an invalid length. [ 79.528913][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.544463][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.570356][ T5542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.581916][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.588914][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.615063][ T5542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.649209][ T5542] hsr_slave_0: entered promiscuous mode [ 79.657955][ T5542] hsr_slave_1: entered promiscuous mode [ 79.663988][ T5542] debugfs: 'hsr0' already exists in 'hsr' [ 79.669748][ T5542] Cannot create hsr debugfs directory [ 80.516910][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 81.403003][ T5632] loop0: detected capacity change from 0 to 512 [ 81.409726][ T5632] EXT4-fs: Ignoring removed orlov option [ 81.424047][ T5632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.434272][ T5632] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.441215][ T5632] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.639: bg 0: block 248: padding at end of block bitmap is not set [ 81.455653][ T5632] loop0: lost filesystem error report for type 5 error -117 [ 81.455991][ T5632] __quota_error: 15 callbacks suppressed [ 81.456002][ T5632] Quota error (device loop0): write_blk: dquota write failed [ 81.463061][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 81.463415][ T5632] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.468915][ C0] EXT4-fs (loop0): last error at time 1771079651: ext4_validate_block_bitmap:441 [ 81.502154][ T5632] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.639: Failed to acquire dquot type 1 [ 81.513328][ T5632] loop0: lost filesystem error report for type 5 error -117 [ 81.514071][ T5632] EXT4-fs (loop0): 1 truncate cleaned up [ 81.530401][ T5632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.549825][ T5632] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.565824][ T5632] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.639: Abort forced by user [ 81.576109][ T5632] EXT4-fs (loop0): Remounting filesystem read-only [ 81.582611][ T5632] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 81.591034][ T5632] ext4 filesystem being remounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.838535][ T5592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.847534][ T5594] netlink: 256 bytes leftover after parsing attributes in process `syz.2.632'. [ 81.857201][ T5594] workqueue: Failed to create a rescuer kthread for wq "phy10": -EINTR [ 81.868664][ T5542] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.887689][ T40] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 81.902873][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.904974][ T5542] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.915343][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.915343][ T40] [ 81.931658][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 81.937847][ T40] EXT4-fs (loop3): Free/Dirty block details [ 81.944283][ T40] EXT4-fs (loop3): free_blocks=16 [ 81.949549][ T40] EXT4-fs (loop3): dirty_blocks=16 [ 81.955040][ T40] EXT4-fs (loop3): Block reservation details [ 81.961688][ T40] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 81.968835][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.984769][ T5542] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.021891][ T5542] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.037746][ T5649] loop1: detected capacity change from 0 to 256 [ 82.056860][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.102679][ T5659] loop3: detected capacity change from 0 to 1024 [ 82.135435][ T5659] EXT4-fs (loop3): invalid first ino: 0 [ 82.167016][ T5542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.207666][ T5542] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.219728][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.226882][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.241450][ T1874] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.248577][ T1874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.350682][ T5542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.381245][ T28] audit: type=1400 audit(1771079652.677:428): avc: denied { create } for pid=5700 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 82.418066][ T28] audit: type=1400 audit(1771079652.697:429): avc: denied { ioctl } for pid=5700 comm="syz.0.650" path="socket:[12536]" dev="sockfs" ino=12536 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 82.512708][ T5722] loop0: detected capacity change from 0 to 1024 [ 82.542944][ T5722] EXT4-fs (loop0): inodes count not valid: 8192 vs 32 [ 82.588832][ T5542] veth0_vlan: entered promiscuous mode [ 82.607599][ T5542] veth1_vlan: entered promiscuous mode [ 82.637943][ T5542] veth0_macvtap: entered promiscuous mode [ 82.649741][ T5542] veth1_macvtap: entered promiscuous mode [ 82.668742][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.688845][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.700913][ T2082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.709868][ T2082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.721768][ T2082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.730877][ T2082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.751136][ T28] audit: type=1400 audit(1771079653.047:430): avc: denied { mounton } for pid=5542 comm="syz-executor" path="/root/syzkaller.fUENwq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.781252][ T28] audit: type=1400 audit(1771079653.077:431): avc: denied { mount } for pid=5542 comm="syz-executor" name="/" dev="gadgetfs" ino=4914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.891205][ T5747] loop5: detected capacity change from 0 to 128 [ 82.905855][ T5747] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.920195][ T5747] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.945728][ T5751] 9p: Bad value for 'wfdno' [ 82.957265][ T5542] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.002816][ T5757] netlink: 56 bytes leftover after parsing attributes in process `syz.5.659'. [ 83.015019][ T5753] loop1: detected capacity change from 0 to 764 [ 83.071951][ T5764] loop3: detected capacity change from 0 to 256 [ 83.094520][ T5764] syz.3.662 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.143589][ T5768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5768 comm=syz.2.665 [ 83.145755][ T28] audit: type=1400 audit(1771079653.447:432): avc: denied { map } for pid=5763 comm="syz.3.662" path="pipe:[1576]" dev="pipefs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 83.195488][ T28] audit: type=1400 audit(1771079653.447:433): avc: denied { execute } for pid=5763 comm="syz.3.662" path="pipe:[1576]" dev="pipefs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 83.253615][ T5772] loop5: detected capacity change from 0 to 1024 [ 83.330857][ T5772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.383716][ T5785] loop3: detected capacity change from 0 to 128 [ 83.445400][ T5785] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.467034][ T5785] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.478182][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.513843][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.549455][ T5790] 9p: Bad value for 'rfdno' [ 83.591083][ T5793] loop0: detected capacity change from 0 to 1024 [ 83.598808][ T5793] EXT4-fs (loop0): inodes count not valid: 204800 vs 32 [ 83.686276][ T5799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5799 comm=syz.5.674 [ 83.692885][ T5800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.676'. [ 83.699416][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 83.728559][ T260] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.739557][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 83.740631][ T28] audit: type=1400 audit(1771079654.037:434): avc: denied { create } for pid=5797 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 83.757608][ T260] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.801924][ T260] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.837066][ T260] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.924977][ T5805] netlink: 56 bytes leftover after parsing attributes in process `syz.5.677'. [ 84.047020][ T28] audit: type=1400 audit(1771079654.347:435): avc: denied { listen } for pid=5808 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.118860][ T5814] EXT4-fs: Ignoring removed orlov option [ 84.155789][ T5814] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 84.182070][ T5814] System zones: 0-2, 18-18, 34-35 [ 84.207782][ T5814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.229783][ T5823] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.273337][ T5814] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.286143][ T5823] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.375185][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.396043][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.406110][ T5834] 9p: Bad value for 'rfdno' [ 84.607767][ T5842] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 84.607767][ T5842] The task syz.2.686 (5842) triggered the difference, watch for misbehavior. [ 84.874611][ T5840] EXT4-fs: Ignoring removed orlov option [ 84.885683][ T5845] netlink: 56 bytes leftover after parsing attributes in process `syz.5.688'. [ 84.916283][ T5840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.960973][ T5852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=5852 comm=syz.1.690 [ 84.982952][ T5840] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.008478][ T5840] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.687: bg 0: block 248: padding at end of block bitmap is not set [ 85.008516][ T5840] loop3: lost filesystem error report for type 5 error -117 [ 85.010861][ T5840] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.687: Failed to acquire dquot type 1 [ 85.010892][ T5840] loop3: lost filesystem error report for type 5 error -117 [ 85.013044][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 85.013065][ C1] EXT4-fs (loop3): last error at time 1771079655: ext4_acquire_dquot:7003 [ 85.048451][ T5854] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 85.057594][ T5840] EXT4-fs (loop3): 1 truncate cleaned up [ 85.114189][ T5840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.162976][ T5860] netlink: 256 bytes leftover after parsing attributes in process `syz.2.693'. [ 85.162999][ T5860] netlink: 72 bytes leftover after parsing attributes in process `syz.2.693'. [ 85.368280][ T5875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.698'. [ 85.379723][ T5868] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.434774][ T5868] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.549180][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.824729][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.878211][ T5905] 9p: Bad value for 'rfdno' [ 85.908229][ T5907] syzkaller1: entered promiscuous mode [ 85.934087][ T5907] syzkaller1: entered allmulticast mode [ 85.982334][ T5913] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.994876][ T5913] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.109988][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.142781][ T5921] Cannot find add_set index 4 as target [ 86.280946][ T5932] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 86.386847][ T5932] bond2: entered promiscuous mode [ 86.403299][ T5932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.439433][ T5929] bond2: (slave bridge2): making interface the new active one [ 86.476909][ T5929] bridge2: entered promiscuous mode [ 86.516956][ T5929] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 86.683123][ T5946] set_capacity_and_notify: 6 callbacks suppressed [ 86.683141][ T5946] loop5: detected capacity change from 0 to 256 [ 86.706872][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.717383][ T5946] FAT-fs (loop5): Filesystem has been set read-only [ 86.724280][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.733225][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.743432][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.752249][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.761924][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.770783][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.779590][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.788403][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.797187][ T5946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 86.955765][ T5958] loop3: detected capacity change from 0 to 128 [ 86.984601][ T5958] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.016460][ T5958] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.088347][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.105611][ T5963] loop0: detected capacity change from 0 to 512 [ 87.122257][ T5963] EXT4-fs: Ignoring removed orlov option [ 87.136483][ T5965] __nla_validate_parse: 2 callbacks suppressed [ 87.136506][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 87.178668][ T5963] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 87.195163][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 87.195226][ T28] audit: type=1400 audit(1771079657.497:442): avc: denied { read } for pid=5964 comm="syz.3.724" path="socket:[12946]" dev="sockfs" ino=12946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.235811][ T5963] System zones: 0-2, 18-18, 34-35 [ 87.252348][ T5963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.281531][ T5963] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.282567][ T5970] netlink: 256 bytes leftover after parsing attributes in process `syz.3.726'. [ 87.354579][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.418290][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.728'. [ 87.618585][ T6001] FAULT_INJECTION: forcing a failure. [ 87.618585][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.639643][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.0.732 Not tainted syzkaller #0 PREEMPT(full) [ 87.639675][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 87.639688][ T6001] Call Trace: [ 87.639696][ T6001] [ 87.639704][ T6001] __dump_stack+0x1d/0x30 [ 87.639733][ T6001] dump_stack_lvl+0x95/0xd0 [ 87.639773][ T6001] dump_stack+0x15/0x1b [ 87.639798][ T6001] should_fail_ex+0x263/0x280 [ 87.639825][ T6001] should_fail+0xb/0x20 [ 87.639849][ T6001] should_fail_usercopy+0x1a/0x20 [ 87.639876][ T6001] _copy_to_user+0x20/0xa0 [ 87.639964][ T6001] simple_read_from_buffer+0xb5/0x130 [ 87.640033][ T6001] proc_fail_nth_read+0x10e/0x150 [ 87.640062][ T6001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.640089][ T6001] vfs_read+0x1ab/0x7f0 [ 87.640139][ T6001] ? __rcu_read_unlock+0x4e/0x70 [ 87.640161][ T6001] ? __fget_files+0x184/0x1c0 [ 87.640184][ T6001] ? mutex_lock+0x57/0x90 [ 87.640240][ T6001] ksys_read+0xdc/0x1a0 [ 87.640304][ T6001] __x64_sys_read+0x40/0x50 [ 87.640333][ T6001] x64_sys_call+0x2886/0x3020 [ 87.640418][ T6001] do_syscall_64+0x12c/0x370 [ 87.640465][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.640511][ T6001] RIP: 0033:0x7f5d4f10c84e [ 87.640529][ T6001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.640671][ T6001] RSP: 002b:00007f5d4dba6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.640695][ T6001] RAX: ffffffffffffffda RBX: 00007f5d4dba76c0 RCX: 00007f5d4f10c84e [ 87.640717][ T6001] RDX: 000000000000000f RSI: 00007f5d4dba70a0 RDI: 0000000000000004 [ 87.640732][ T6001] RBP: 00007f5d4dba7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.640747][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.640762][ T6001] R13: 00007f5d4f3c6038 R14: 00007f5d4f3c5fa0 R15: 00007ffd72c6abd8 [ 87.640828][ T6001] [ 87.836942][ T6003] loop5: detected capacity change from 0 to 128 [ 87.901870][ T6003] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.921348][ T6008] ip6gre0: Caught tx_queue_len zero misconfig [ 87.943517][ T6008] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 87.951208][ T6003] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.068934][ T6013] loop2: detected capacity change from 0 to 512 [ 88.075865][ T6013] EXT4-fs: Ignoring removed orlov option [ 88.119633][ T5542] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.129533][ T6013] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 88.143749][ T6018] FAULT_INJECTION: forcing a failure. [ 88.143749][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.144788][ T6013] System zones: [ 88.159893][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz.0.739 Not tainted syzkaller #0 PREEMPT(full) [ 88.159950][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 88.159965][ T6018] Call Trace: [ 88.159973][ T6018] [ 88.159982][ T6018] __dump_stack+0x1d/0x30 [ 88.160073][ T6018] dump_stack_lvl+0x95/0xd0 [ 88.160106][ T6018] dump_stack+0x15/0x1b [ 88.160130][ T6018] should_fail_ex+0x263/0x280 [ 88.160154][ T6018] should_fail+0xb/0x20 [ 88.160174][ T6018] should_fail_usercopy+0x1a/0x20 [ 88.160226][ T6018] copy_folio_from_iter_atomic+0x269/0x1170 [ 88.160314][ T6018] ? shmem_write_begin+0xfc/0x1f0 [ 88.160341][ T6018] ? shmem_write_begin+0x135/0x1f0 [ 88.160364][ T6018] generic_perform_write+0x2c1/0x490 [ 88.160429][ T6018] shmem_file_write_iter+0xc5/0xf0 [ 88.160457][ T6018] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 88.160482][ T6018] vfs_write+0x5a6/0x9f0 [ 88.160580][ T6018] ksys_write+0xdc/0x1a0 [ 88.160611][ T6018] __x64_sys_write+0x40/0x50 [ 88.160672][ T6018] x64_sys_call+0x27e1/0x3020 [ 88.160702][ T6018] do_syscall_64+0x12c/0x370 [ 88.160740][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.160766][ T6018] RIP: 0033:0x7f5d4f14bf79 [ 88.160812][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.160914][ T6018] RSP: 002b:00007f5d4dba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.160940][ T6018] RAX: ffffffffffffffda RBX: 00007f5d4f3c5fa0 RCX: 00007f5d4f14bf79 [ 88.161027][ T6018] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004 [ 88.161042][ T6018] RBP: 00007f5d4dba7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.161057][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.161071][ T6018] R13: 00007f5d4f3c6038 R14: 00007f5d4f3c5fa0 R15: 00007ffd72c6abd8 [ 88.161203][ T6018] [ 88.172335][ T28] audit: type=1400 audit(1771079658.457:443): avc: denied { mount } for pid=5980 comm="syz.1.725" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.313152][ T6013] 0-2 [ 88.377397][ T28] audit: type=1400 audit(1771079658.677:444): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 88.395684][ T6013] , 18-18, 34-35 [ 88.418581][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.428119][ T6024] loop1: detected capacity change from 0 to 256 [ 88.435931][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.437871][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.460370][ T6024] FAT-fs (loop1): Filesystem has been set read-only [ 88.476242][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.483442][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.488427][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.499127][ T6013] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.513447][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.540265][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.553278][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.569401][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.582204][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.591049][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.592100][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.600212][ T6024] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.645061][ T6033] netlink: 256 bytes leftover after parsing attributes in process `syz.2.743'. [ 88.699431][ T6038] loop2: detected capacity change from 0 to 256 [ 88.710242][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.719312][ T6038] FAT-fs (loop2): Filesystem has been set read-only [ 88.726166][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.738297][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.789584][ T6031] loop0: detected capacity change from 0 to 1024 [ 88.805606][ T28] audit: type=1400 audit(1771079659.107:445): avc: denied { getopt } for pid=6030 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.923197][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.931939][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.953463][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.962205][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 88.962318][ T6042] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 88.994569][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.003654][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.012418][ T6038] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.157474][ T6048] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=6048 comm=syz.5.747 [ 89.281884][ T3319] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 89.327218][ T3319] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 89.691567][ T6080] loop2: detected capacity change from 0 to 1024 [ 89.811046][ T28] audit: type=1400 audit(1771079660.077:446): avc: denied { mounton } for pid=6079 comm="syz.2.760" path="/syzcgroup/unified/syz2/file1" dev="cgroup2" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 89.917367][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.987441][ T6090] loop3: detected capacity change from 0 to 128 [ 90.024501][ T6090] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.058209][ T6080] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.760: Allocating blocks 385-513 which overlap fs metadata [ 90.072924][ T28] audit: type=1400 audit(1771079660.357:447): avc: denied { read write } for pid=6079 comm="syz.2.760" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.142492][ T6090] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.158154][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 90.170429][ T28] audit: type=1400 audit(1771079660.357:448): avc: denied { open } for pid=6079 comm="syz.2.760" path="/syzcgroup/unified/syz2/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.224928][ T12] bridge_slave_1: left allmulticast mode [ 90.230682][ T12] bridge_slave_1: left promiscuous mode [ 90.238089][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.248355][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.268063][ T12] bridge_slave_0: left allmulticast mode [ 90.277123][ T6079] EXT4-fs (loop2): pa ffff8881086c5310: logic 16, phys. 129, len 24 [ 90.285301][ T6079] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 8 [ 90.295404][ T6096] FAULT_INJECTION: forcing a failure. [ 90.295404][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.309040][ T12] bridge_slave_0: left promiscuous mode [ 90.313757][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.3.762 Not tainted syzkaller #0 PREEMPT(full) [ 90.313834][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 90.313865][ T6096] Call Trace: [ 90.313872][ T6096] [ 90.313880][ T6096] __dump_stack+0x1d/0x30 [ 90.313907][ T6096] dump_stack_lvl+0x95/0xd0 [ 90.313930][ T6096] dump_stack+0x15/0x1b [ 90.314008][ T6096] should_fail_ex+0x263/0x280 [ 90.314113][ T6096] should_fail+0xb/0x20 [ 90.314134][ T6096] should_fail_usercopy+0x1a/0x20 [ 90.314216][ T6096] _copy_to_user+0x20/0xa0 [ 90.314245][ T6096] simple_read_from_buffer+0xb5/0x130 [ 90.314341][ T6096] proc_fail_nth_read+0x10e/0x150 [ 90.314421][ T6096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.314445][ T6096] vfs_read+0x1ab/0x7f0 [ 90.314547][ T6096] ? __rcu_read_unlock+0x4e/0x70 [ 90.314568][ T6096] ? __fget_files+0x184/0x1c0 [ 90.314589][ T6096] ? mutex_lock+0x57/0x90 [ 90.314622][ T6096] ksys_read+0xdc/0x1a0 [ 90.314719][ T6096] __x64_sys_read+0x40/0x50 [ 90.314747][ T6096] x64_sys_call+0x2886/0x3020 [ 90.314845][ T6096] do_syscall_64+0x12c/0x370 [ 90.314884][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.314906][ T6096] RIP: 0033:0x7f02002ac84e [ 90.314975][ T6096] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.314998][ T6096] RSP: 002b:00007f01fed3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.315021][ T6096] RAX: ffffffffffffffda RBX: 00007f01fed3f6c0 RCX: 00007f02002ac84e [ 90.315036][ T6096] RDX: 000000000000000f RSI: 00007f01fed3f0a0 RDI: 0000000000000003 [ 90.315107][ T6096] RBP: 00007f01fed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.315121][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.315134][ T6096] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 90.315154][ T6096] [ 90.522987][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.633463][ T28] audit: type=1400 audit(1771079660.937:449): avc: denied { write } for pid=6110 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.655097][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.665067][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.674258][ T12] bond0 (unregistering): Released all slaves [ 90.711343][ T6119] netlink: 212 bytes leftover after parsing attributes in process `syz.2.769'. [ 90.847164][ T12] hsr_slave_0: left promiscuous mode [ 90.866104][ T12] hsr_slave_1: left promiscuous mode [ 90.871733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.893587][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.993716][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.996861][ T28] audit: type=1400 audit(1771079661.297:450): avc: denied { shutdown } for pid=6118 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.045764][ T12] team0 (unregistering): Port device team_slave_0 removed [ 91.081204][ T28] audit: type=1400 audit(1771079661.327:451): avc: denied { read } for pid=6118 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.131944][ T6143] FAULT_INJECTION: forcing a failure. [ 91.131944][ T6143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.147824][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.2.771 Not tainted syzkaller #0 PREEMPT(full) [ 91.147857][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 91.147871][ T6143] Call Trace: [ 91.147878][ T6143] [ 91.147885][ T6143] __dump_stack+0x1d/0x30 [ 91.147943][ T6143] dump_stack_lvl+0x95/0xd0 [ 91.147967][ T6143] dump_stack+0x15/0x1b [ 91.147990][ T6143] should_fail_ex+0x263/0x280 [ 91.148016][ T6143] should_fail_alloc_page+0xf2/0x100 [ 91.148112][ T6143] __alloc_frozen_pages_noprof+0x108/0x360 [ 91.148141][ T6143] alloc_pages_mpol+0xb3/0x260 [ 91.148241][ T6143] folio_alloc_mpol_noprof+0x39/0x80 [ 91.148340][ T6143] shmem_get_folio_gfp+0x3da/0xd60 [ 91.148366][ T6143] shmem_write_begin+0xfc/0x1f0 [ 91.148428][ T6143] generic_perform_write+0x183/0x490 [ 91.148452][ T6143] shmem_file_write_iter+0xc5/0xf0 [ 91.148531][ T6143] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 91.148555][ T6143] vfs_write+0x5a6/0x9f0 [ 91.148638][ T6143] ksys_write+0xdc/0x1a0 [ 91.148663][ T6143] __x64_sys_write+0x40/0x50 [ 91.148688][ T6143] x64_sys_call+0x27e1/0x3020 [ 91.148791][ T6143] do_syscall_64+0x12c/0x370 [ 91.148820][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.148839][ T6143] RIP: 0033:0x7f676d9dbf79 [ 91.148854][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.148871][ T6143] RSP: 002b:00007f676c40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.148921][ T6143] RAX: ffffffffffffffda RBX: 00007f676dc56090 RCX: 00007f676d9dbf79 [ 91.148934][ T6143] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004 [ 91.148946][ T6143] RBP: 00007f676c40e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.148958][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.148969][ T6143] R13: 00007f676dc56128 R14: 00007f676dc56090 R15: 00007ffe168076d8 [ 91.148986][ T6143] [ 91.697930][ T6077] chnl_net:caif_netlink_parms(): no params data found [ 91.706534][ T6161] loop3: detected capacity change from 0 to 256 [ 91.755382][ T6169] 9p: Bad value for 'rfdno' [ 91.793543][ T6161] FAT-fs (loop3): Directory bread(block 64) failed [ 91.800125][ T6161] FAT-fs (loop3): Directory bread(block 65) failed [ 91.813107][ T6161] FAT-fs (loop3): Directory bread(block 66) failed [ 91.819719][ T6161] FAT-fs (loop3): Directory bread(block 67) failed [ 91.826768][ T6161] FAT-fs (loop3): Directory bread(block 68) failed [ 91.834017][ T6161] FAT-fs (loop3): Directory bread(block 69) failed [ 91.840878][ T6161] FAT-fs (loop3): Directory bread(block 70) failed [ 91.847568][ T6161] FAT-fs (loop3): Directory bread(block 71) failed [ 91.854343][ T6161] FAT-fs (loop3): Directory bread(block 72) failed [ 91.856534][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.860898][ T6161] FAT-fs (loop3): Directory bread(block 73) failed [ 91.900234][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.919974][ T6161] dns_resolver: Unsupported content type (231) [ 91.922173][ T6077] bridge_slave_0: entered allmulticast mode [ 91.939833][ T6077] bridge_slave_0: entered promiscuous mode [ 92.096018][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.116757][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.127950][ T6077] bridge_slave_1: entered allmulticast mode [ 92.615077][ T6077] bridge_slave_1: entered promiscuous mode [ 92.681809][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.705147][ T6209] loop0: detected capacity change from 0 to 512 [ 92.719186][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.729977][ T6209] EXT4-fs: Ignoring removed orlov option [ 92.736622][ T6209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.745971][ T6209] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.764037][ T6209] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.786: bg 0: block 248: padding at end of block bitmap is not set [ 92.811136][ T6077] team0: Port device team_slave_0 added [ 92.823905][ T6209] loop0: lost filesystem error report for type 5 error -117 [ 92.824262][ T6209] __quota_error: 1 callbacks suppressed [ 92.824275][ T6209] Quota error (device loop0): write_blk: dquota write failed [ 92.837164][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 92.837183][ C0] EXT4-fs (loop0): last error at time 1771079663: ext4_validate_block_bitmap:441 [ 92.927481][ T6077] team0: Port device team_slave_1 added [ 92.937659][ T6217] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.947805][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.787'. [ 92.963285][ T6209] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 92.983642][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.993778][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.020445][ T6209] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.786: Failed to acquire dquot type 1 [ 93.032917][ T6209] loop0: lost filesystem error report for type 5 error -117 [ 93.034400][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.052967][ T6209] EXT4-fs (loop0): 1 truncate cleaned up [ 93.059399][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.089535][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.113700][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.160656][ T6209] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 93.190741][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.201445][ T6209] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.786: Abort forced by user [ 93.223207][ T6209] EXT4-fs (loop0): Remounting filesystem read-only [ 93.229752][ T6209] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 93.297208][ T6209] ext4 filesystem being remounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.309771][ T6077] hsr_slave_0: entered promiscuous mode [ 93.323586][ T6077] hsr_slave_1: entered promiscuous mode [ 93.339768][ T6077] debugfs: 'hsr0' already exists in 'hsr' [ 93.349458][ T6077] Cannot create hsr debugfs directory [ 93.431667][ T23] hid_parser_main: 1 callbacks suppressed [ 93.431690][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 93.448796][ T6244] 9p: Bad value for 'rfdno' [ 93.465752][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.610454][ T6258] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.618676][ T28] audit: type=1400 audit(1771079663.907:453): avc: denied { write } for pid=6257 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.648335][ T6258] loop0: detected capacity change from 0 to 2048 [ 93.674069][ T6264] loop5: detected capacity change from 0 to 512 [ 93.680703][ T6264] EXT4-fs: Ignoring removed nobh option [ 93.727484][ T3541] loop0: p1 p2 [ 93.735600][ T6264] ------------[ cut here ]------------ [ 93.741086][ T6264] EA inode 11 i_nlink=1026 [ 93.741103][ T6264] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.790/6264 [ 93.756321][ T6264] Modules linked in: [ 93.760258][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.5.790 Not tainted syzkaller #0 PREEMPT(full) [ 93.769626][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 93.779763][ T6264] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 93.786472][ T6264] Code: e4 7e 99 ff 4c 8d 2d cd 1b 5e 05 49 8d 7e 40 e8 74 11 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 0c b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f 1f dc 03 66 66 66 66 66 66 2e [ 93.806355][ T6264] RSP: 0018:ffffc900027475a8 EFLAGS: 00010246 [ 93.812548][ T6264] RAX: ffff888105141af8 RBX: ffff88811bc94a68 RCX: ffffffff81bfc048 [ 93.820686][ T6264] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871ddc00 [ 93.828708][ T6264] RBP: 000000000000000b R08: 000188811bc94a1b R09: 0000000000000000 [ 93.836753][ T6264] R10: ffffc900027474d8 R11: 0001c900027474d8 R12: ffff88811bc94a18 [ 93.844834][ T6264] R13: ffffffff871ddc00 R14: ffff88811bc949d0 R15: 0000000000000001 [ 93.852863][ T6264] FS: 00007fd3311556c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 93.861847][ T6264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.868502][ T6264] CR2: 0000555a483b1000 CR3: 00000001045a8000 CR4: 00000000003506f0 [ 93.876527][ T6264] Call Trace: [ 93.879822][ T6264] [ 93.882769][ T6264] ext4_xattr_set_entry+0x77c/0x1010 [ 93.888133][ T6264] ext4_xattr_ibody_set+0x184/0x3c0 [ 93.893411][ T6264] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 93.899254][ T6264] __ext4_expand_extra_isize+0x246/0x280 [ 93.905018][ T6264] __ext4_mark_inode_dirty+0x29b/0x400 [ 93.910509][ T6264] ext4_evict_inode+0x7c3/0xd60 [ 93.915501][ T6264] ? __pfx_ext4_evict_inode+0x10/0x10 [ 93.920907][ T6264] evict+0x2af/0x510 [ 93.924873][ T6264] ? __dquot_initialize+0x146/0x7c0 [ 93.930171][ T6264] iput+0x41a/0x580 [ 93.934035][ T6264] ext4_process_orphan+0x1a9/0x1c0 [ 93.939170][ T6264] ext4_orphan_cleanup+0x6a8/0xa00 [ 93.944420][ T6264] ext4_fill_super+0x3408/0x37c0 [ 93.949403][ T6264] ? set_blocksize+0x14c/0x270 [ 93.954242][ T6264] ? setup_bdev_super+0x30e/0x370 [ 93.959406][ T6264] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.964823][ T6264] get_tree_bdev_flags+0x291/0x300 [ 93.969981][ T6264] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.975467][ T6264] get_tree_bdev+0x1f/0x30 [ 93.980109][ T6264] ext4_get_tree+0x1c/0x30 [ 93.984752][ T6264] vfs_get_tree+0x57/0x1d0 [ 93.989211][ T6264] do_new_mount+0x288/0x8d0 [ 93.993972][ T6264] path_mount+0x4d0/0xbc0 [ 93.998730][ T6264] __se_sys_mount+0x28c/0x2e0 [ 94.003493][ T6264] ? __se_sys_mkdirat+0xa2/0xf0 [ 94.008379][ T6264] ? kmem_cache_free+0xc8/0x380 [ 94.013477][ T6264] __x64_sys_mount+0x67/0x80 [ 94.018177][ T6264] x64_sys_call+0x2d61/0x3020 [ 94.023512][ T6264] do_syscall_64+0x12c/0x370 [ 94.028386][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.034418][ T6264] RIP: 0033:0x7fd33274d20a [ 94.038876][ T6264] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.058633][ T6264] RSP: 002b:00007fd331154e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.067161][ T6264] RAX: ffffffffffffffda RBX: 00007fd331154ee0 RCX: 00007fd33274d20a [ 94.075266][ T6264] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fd331154ea0 [ 94.083371][ T6264] RBP: 0000200000000180 R08: 00007fd331154ee0 R09: 0000000000800718 [ 94.091496][ T6264] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 94.099534][ T6264] R13: 00007fd331154ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 94.107574][ T6264] [ 94.110611][ T6264] ---[ end trace 0000000000000000 ]--- [ 94.116795][ T6264] EXT4-fs (loop5): 1 orphan inode deleted [ 94.118365][ T6258] loop0: p1 p2 [ 94.298203][ T6077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.379919][ T6286] loop0: detected capacity change from 0 to 512 [ 94.393063][ T6077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.412912][ T6286] EXT4-fs: Ignoring removed orlov option [ 94.419137][ T6077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.453222][ T6286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.461895][ T6289] bridge0: port 3(gretap0) entered blocking state [ 94.479232][ T6289] bridge0: port 3(gretap0) entered disabled state [ 94.488732][ T6289] gretap0: entered allmulticast mode [ 94.494599][ T6286] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.504627][ T6289] gretap0: entered promiscuous mode [ 94.515005][ T6286] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.798: bg 0: block 248: padding at end of block bitmap is not set [ 94.520462][ T6289] bridge0: port 3(gretap0) entered blocking state [ 94.535800][ T6289] bridge0: port 3(gretap0) entered forwarding state [ 94.552869][ T6286] loop0: lost filesystem error report for type 5 error -117 [ 94.553057][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 94.556936][ T6077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.560371][ C0] EXT4-fs (loop0): last error at time 1771079664: ext4_validate_block_bitmap:441 [ 94.610634][ T6286] Quota error (device loop0): write_blk: dquota write failed [ 94.623049][ T6286] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 94.643125][ T6286] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.798: Failed to acquire dquot type 1 [ 94.681500][ T6286] loop0: lost filesystem error report for type 5 error -117 [ 94.682202][ T6286] EXT4-fs (loop0): 1 truncate cleaned up [ 94.726400][ T6286] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.758546][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.792863][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.800269][ T6286] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.798: Abort forced by user [ 94.821679][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.828791][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.843632][ T6286] EXT4-fs (loop0): Remounting filesystem read-only [ 94.845069][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.853164][ T6286] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.857243][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.878957][ T6286] ext4 filesystem being remounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.906762][ T6077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.921097][ T6305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.800'. [ 95.071216][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.208226][ T28] audit: type=1400 audit(1771079665.507:454): avc: denied { read } for pid=6335 comm="syz.2.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.301333][ T28] audit: type=1326 audit(1771079665.597:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33274bf79 code=0x7ffc0000 [ 95.350810][ T28] audit: type=1326 audit(1771079665.597:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33274bf79 code=0x7ffc0000 [ 95.422277][ T6356] loop0: detected capacity change from 0 to 8192 [ 95.443818][ T6077] veth0_vlan: entered promiscuous mode [ 95.462073][ T6077] veth1_vlan: entered promiscuous mode [ 95.489977][ T28] audit: type=1400 audit(1771079665.787:457): avc: denied { create } for pid=6373 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.523368][ T3541] loop0: p1 < > p2 p4 < p5 > [ 95.538931][ T3541] loop0: partition table partially beyond EOD, truncated [ 95.542650][ T6077] veth0_macvtap: entered promiscuous mode [ 95.555412][ T28] audit: type=1400 audit(1771079665.817:458): avc: denied { setopt } for pid=6373 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.578681][ T3541] loop0: p1 start 134217728 is beyond EOD, truncated [ 95.583382][ T6382] xt_hashlimit: size too large, truncated to 1048576 [ 95.594010][ T3541] loop0: p2 size 591360 extends beyond EOD, truncated [ 95.616215][ T6077] veth1_macvtap: entered promiscuous mode [ 95.627758][ T6382] xt_hashlimit: max too large, truncated to 1048576 [ 95.629295][ T3541] loop0: p5 size 591360 extends beyond EOD, [ 95.645915][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 95.652165][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.667364][ T3541] truncated [ 95.725313][ T6356] loop0: p1 < > p2 p4 < p5 > [ 95.730371][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.778955][ T6392] loop5: detected capacity change from 0 to 512 [ 95.786353][ T6356] loop0: partition table partially beyond EOD, truncated [ 95.807024][ T6389] ip6tnl0: Caught tx_queue_len zero misconfig [ 95.813996][ T6392] EXT4-fs: Ignoring removed orlov option [ 95.834397][ T6392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.844437][ T6356] loop0: p1 start 134217728 is beyond EOD, truncated [ 95.851149][ T6356] loop0: p2 size 591360 extends beyond EOD, truncated [ 95.876031][ T6392] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.883950][ T6392] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.810: bg 0: block 248: padding at end of block bitmap is not set [ 95.923616][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.932418][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.954965][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.970089][ T6356] loop0: p5 size 591360 extends beyond EOD, truncated [ 95.973166][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.979096][ T6392] loop5: lost filesystem error report for type 5 error -117 [ 96.013056][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 96.026889][ C0] EXT4-fs (loop5): last error at time 1771079666: ext4_validate_block_bitmap:441 [ 96.038387][ T6392] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.810: Failed to acquire dquot type 1 [ 96.070744][ T6392] loop5: lost filesystem error report for type 5 error -117 [ 96.079438][ T6392] EXT4-fs (loop5): 1 truncate cleaned up [ 96.103486][ T6392] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 96.123816][ T6392] EXT4-fs error (device loop5): __ext4_remount:6806: comm syz.5.810: Abort forced by user [ 96.203857][ T6392] EXT4-fs (loop5): Remounting filesystem read-only [ 96.214894][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.218935][ T6392] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 96.236860][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 96.242075][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 96.270959][ T6424] loop6: detected capacity change from 0 to 256 [ 96.280626][ T6392] ext4 filesystem being remounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.315803][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.324635][ T6424] FAT-fs (loop6): Filesystem has been set read-only [ 96.331311][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.350757][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.382519][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.414334][ T6426] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 96.422040][ T6426] netlink: 'syz.0.814': attribute type 4 has an invalid length. [ 96.429850][ T6426] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.814'. [ 96.445051][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.488967][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.501279][ T6426] netlink: 26840 bytes leftover after parsing attributes in process `syz.0.814'. [ 96.522641][ T6433] loop5: detected capacity change from 0 to 1024 [ 96.532549][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.551753][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.574949][ T6433] EXT4-fs mount: 7 callbacks suppressed [ 96.574969][ T6433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.593383][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.626778][ T6424] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 96.756425][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.032076][ T6459] loop5: detected capacity change from 0 to 1024 [ 97.061705][ T6459] EXT4-fs: Ignoring removed oldalloc option [ 97.091888][ T6459] EXT4-fs: Ignoring removed bh option [ 97.156748][ T6459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.211380][ T6470] loop6: detected capacity change from 0 to 512 [ 97.222966][ T6459] tmpfs: Unknown parameter '' [ 97.239017][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.825'. [ 97.257718][ T6470] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 97.293841][ T6470] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.313637][ T6470] EXT4-fs (loop6): 1 truncate cleaned up [ 97.345403][ T6470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.366244][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.828'. [ 97.376246][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.385808][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.387813][ T6478] FAULT_INJECTION: forcing a failure. [ 97.387813][ T6478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.407404][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.3.830 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.407442][ T6478] Tainted: [W]=WARN [ 97.407450][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.407462][ T6478] Call Trace: [ 97.407468][ T6478] [ 97.407477][ T6478] __dump_stack+0x1d/0x30 [ 97.407539][ T6478] dump_stack_lvl+0x95/0xd0 [ 97.407561][ T6478] dump_stack+0x15/0x1b [ 97.407586][ T6478] should_fail_ex+0x263/0x280 [ 97.407615][ T6478] should_fail+0xb/0x20 [ 97.407680][ T6478] should_fail_usercopy+0x1a/0x20 [ 97.407707][ T6478] _copy_from_user+0x1c/0xb0 [ 97.407767][ T6478] do_sock_getsockopt+0xf1/0x210 [ 97.407799][ T6478] __x64_sys_getsockopt+0x11d/0x1a0 [ 97.407832][ T6478] x64_sys_call+0x2dcf/0x3020 [ 97.407881][ T6478] do_syscall_64+0x12c/0x370 [ 97.407930][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.407956][ T6478] RIP: 0033:0x7f02002ebf79 [ 97.407976][ T6478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.407998][ T6478] RSP: 002b:00007f01fed3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 97.408029][ T6478] RAX: ffffffffffffffda RBX: 00007f0200565fa0 RCX: 00007f02002ebf79 [ 97.408043][ T6478] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 97.408056][ T6478] RBP: 00007f01fed3f090 R08: 0000200000000000 R09: 0000000000000000 [ 97.408072][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.408087][ T6478] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 97.408109][ T6478] [ 97.807121][ T6489] netlink: 256 bytes leftover after parsing attributes in process `syz.2.835'. [ 97.916863][ T6498] netlink: 256 bytes leftover after parsing attributes in process `syz.0.838'. [ 97.926548][ T6498] netlink: 72 bytes leftover after parsing attributes in process `syz.0.838'. [ 98.045779][ T6473] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4224: comm syz.5.825: Allocating blocks 1-17 which overlap fs metadata [ 98.059955][ T6459] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4224: comm syz.5.825: Allocating blocks 1-17 which overlap fs metadata [ 98.150768][ T6511] loop0: detected capacity change from 0 to 1024 [ 98.163647][ T6511] EXT4-fs (loop0): blocks per group (50331648) and clusters per group (8192) inconsistent [ 98.182011][ T6513] 9p: Bad value for 'rfdno' [ 98.315529][ T6528] loop0: detected capacity change from 0 to 512 [ 98.322291][ T6528] ext4: Unknown parameter 'yz2' [ 98.334231][ T6530] netlink: 56 bytes leftover after parsing attributes in process `syz.3.851'. [ 98.372381][ T6532] loop0: detected capacity change from 0 to 512 [ 98.403765][ T6532] EXT4-fs: Ignoring removed orlov option [ 98.411921][ T6077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.421781][ T6532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.437980][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 98.437997][ T28] audit: type=1400 audit(1771079668.737:465): avc: denied { listen } for pid=6541 comm="syz.6.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.464406][ T6543] netlink: 176 bytes leftover after parsing attributes in process `syz.3.854'. [ 98.474326][ T6543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.493594][ T6532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.525034][ T6532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.852: bg 0: block 248: padding at end of block bitmap is not set [ 98.539629][ T6532] loop0: lost filesystem error report for type 5 error -117 [ 98.539854][ T6532] Quota error (device loop0): write_blk: dquota write failed [ 98.547478][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 98.547506][ C1] EXT4-fs (loop0): last error at time 1771079668: ext4_validate_block_bitmap:441 [ 98.570709][ T28] audit: type=1400 audit(1771079668.857:466): avc: denied { firmware_load } for pid=6541 comm="syz.6.855" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 98.573183][ T6532] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.606718][ T6532] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.852: Failed to acquire dquot type 1 [ 98.608666][ T28] audit: type=1400 audit(1771079668.907:467): avc: denied { watch } for pid=6552 comm="syz.2.859" path="/183" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.631554][ T6532] loop0: lost filesystem error report for type 5 error -117 [ 98.641697][ T6554] ------------[ cut here ]------------ [ 98.654535][ T6554] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 98.679235][ T6554] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.859/6554 [ 98.690071][ T6554] Modules linked in: [ 98.690717][ T6532] EXT4-fs (loop0): 1 truncate cleaned up [ 98.694047][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.2.859 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.700669][ T6532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.710490][ T6554] Tainted: [W]=WARN [ 98.726699][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 98.736818][ T6554] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 98.743153][ T6554] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 98.744030][ T6542] loop6: detected capacity change from 0 to 512 [ 98.762847][ T6554] RSP: 0018:ffffc900017fb368 EFLAGS: 00010246 [ 98.762876][ T6554] RAX: ffff888104c9ed78 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 98.783365][ T6554] RDX: ffffffff86812917 RSI: ffffffff866d46a9 RDI: ffffffff871d3750 [ 98.783662][ T6542] EXT4-fs: Ignoring removed bh option [ 98.791359][ T6554] RBP: ffff88811b4c6270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 98.791380][ T6554] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811b4c6230 [ 98.791397][ T6554] R13: 00000000ffffdfcc R14: ffff88811b4c627c R15: ffff88811b4c6268 [ 98.805137][ T6542] EXT4-fs: Ignoring removed oldalloc option [ 98.812785][ T6554] FS: 00007f676c42f6c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 98.812812][ T6554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.821607][ T6542] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.826780][ T6554] CR2: 0000200000001000 CR3: 00000001362ea000 CR4: 00000000003506f0 [ 98.826806][ T6554] Call Trace: [ 98.826816][ T6554] [ 98.826835][ T6554] reg_set_min_max+0x1c8/0x260 [ 98.871386][ T6554] check_cond_jmp_op+0x13b0/0x1ab0 [ 98.876614][ T6554] do_check+0x4a9b/0x9860 [ 98.881052][ T6554] do_check_common+0xd0b/0x1630 [ 98.885967][ T6554] bpf_check+0x2f6d/0xcc10 [ 98.890459][ T6554] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 98.896545][ T6554] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 98.902225][ T6554] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 98.908227][ T6554] ? pcpu_block_update+0x24e/0x3b0 [ 98.913553][ T6554] ? _find_next_zero_bit+0x29/0xa0 [ 98.918766][ T6554] ? pcpu_block_refresh_hint+0x157/0x170 [ 98.924643][ T6554] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 98.925910][ T28] audit: type=1400 audit(1771079668.947:468): avc: denied { watch_reads } for pid=6552 comm="syz.2.859" path="/183" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.930813][ T6554] ? css_rstat_updated+0xbb/0x280 [ 98.930867][ T6554] ? mod_memcg_state+0x182/0x270 [ 98.930887][ T6554] ? __rcu_read_unlock+0x4e/0x70 [ 98.968103][ T6554] ? avc_has_perm_noaudit+0xab/0x130 [ 98.973462][ T6554] ? avc_has_perm+0x101/0x190 [ 98.978167][ T6554] ? selinux_bpf_prog_load+0x197/0x1c0 [ 98.983756][ T6554] ? security_bpf_prog_load+0x9e/0x140 [ 98.989425][ T6554] bpf_prog_load+0xf76/0x1140 [ 98.994169][ T6554] ? security_bpf+0x2b/0x90 [ 98.997478][ T6542] EXT4-fs (loop6): 1 truncate cleaned up [ 98.998704][ T6554] __sys_bpf+0x505/0x7e0 [ 99.005235][ T6542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.008758][ T6554] __x64_sys_bpf+0x41/0x50 [ 99.025262][ T6554] x64_sys_call+0x10cb/0x3020 [ 99.030035][ T6554] do_syscall_64+0x12c/0x370 [ 99.034564][ T28] audit: type=1400 audit(1771079669.327:469): avc: denied { append } for pid=6541 comm="syz.6.855" path="/4/file2/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.034773][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.064042][ T6554] RIP: 0033:0x7f676d9dbf79 [ 99.068483][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.088202][ T6554] RSP: 002b:00007f676c42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.096670][ T6554] RAX: ffffffffffffffda RBX: 00007f676dc55fa0 RCX: 00007f676d9dbf79 [ 99.104713][ T6554] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 99.112706][ T6554] RBP: 00007f676da727e0 R08: 0000000000000000 R09: 0000000000000000 [ 99.120786][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.129172][ T6554] R13: 00007f676dc56038 R14: 00007f676dc55fa0 R15: 00007ffe168076d8 [ 99.137189][ T6554] [ 99.140280][ T6554] ---[ end trace 0000000000000000 ]--- [ 99.145905][ T6532] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 99.164477][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.186220][ T6532] EXT4-fs error (device loop0): __ext4_remount:6806: comm syz.0.852: Abort forced by user [ 99.196519][ T6532] EXT4-fs (loop0): Remounting filesystem read-only [ 99.203294][ T6532] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.213467][ T6562] loop3: detected capacity change from 0 to 256 [ 99.217819][ T6077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.230641][ T6532] ext4 filesystem being remounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.258804][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.290717][ T6562] FAT-fs (loop3): Filesystem has been set read-only [ 99.297660][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.306618][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.317154][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.328653][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.344977][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.354009][ T28] audit: type=1400 audit(1771079669.637:470): avc: denied { mount } for pid=6567 comm="syz.6.864" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.354264][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.377668][ T6568] loop6: detected capacity change from 0 to 512 [ 99.394646][ T28] audit: type=1400 audit(1771079669.647:471): avc: denied { search } for pid=6567 comm="syz.6.864" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.408289][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.422453][ T28] audit: type=1400 audit(1771079669.647:472): avc: denied { search } for pid=6567 comm="syz.6.864" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.454445][ T6570] netlink: 256 bytes leftover after parsing attributes in process `syz.2.865'. [ 99.465099][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.473367][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.479336][ T6570] netlink: 72 bytes leftover after parsing attributes in process `syz.2.865'. [ 99.491781][ T6562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 99.913930][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.872'. [ 99.937442][ T6589] netlink: 32 bytes leftover after parsing attributes in process `syz.6.872'. [ 99.984452][ T6594] loop0: detected capacity change from 0 to 128 [ 99.995410][ T6589] lo speed is unknown, defaulting to 1000 [ 100.027281][ T6589] lo speed is unknown, defaulting to 1000 [ 100.037411][ T6589] lo speed is unknown, defaulting to 1000 [ 100.043687][ T6589] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.052357][ T6589] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.060124][ T6594] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.073662][ T6594] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.096619][ T6589] lo speed is unknown, defaulting to 1000 [ 100.102957][ T6589] lo speed is unknown, defaulting to 1000 [ 100.120280][ T6589] lo speed is unknown, defaulting to 1000 [ 100.124374][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.126709][ T6589] lo speed is unknown, defaulting to 1000 [ 100.143688][ T6589] lo speed is unknown, defaulting to 1000 [ 100.496075][ T6624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.881'. [ 100.801663][ T6644] 9p: Bad value for 'rfdno' [ 100.885283][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.890'. [ 100.906428][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.892'. [ 101.336708][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.441229][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.521160][ T6646] loop5: detected capacity change from 0 to 512 [ 101.561534][ T6646] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 101.607177][ T6646] EXT4-fs (loop5): 1 truncate cleaned up [ 101.639215][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.735084][ T6663] usb usb7: usbfs: process 6663 (syz.6.894) did not claim interface 0 before use [ 101.777362][ T6663] EXT4-fs: Ignoring removed orlov option [ 101.799946][ T6663] EXT4-fs: Ignoring removed oldalloc option [ 101.851811][ T6663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.874226][ T6663] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #2: comm syz.6.894: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 101.926053][ T6077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.992233][ T6646] ext4: Unknown parameter '184467440737095516150xffffffffffffffffÿÿÿÿÿÿ ' [ 102.052412][ T6672] FAULT_INJECTION: forcing a failure. [ 102.052412][ T6672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.096253][ T5542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.105514][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.3.900 Tainted: G W syzkaller #0 PREEMPT(full) [ 102.105549][ T6672] Tainted: [W]=WARN [ 102.105558][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 102.105573][ T6672] Call Trace: [ 102.105579][ T6672] [ 102.105629][ T6672] __dump_stack+0x1d/0x30 [ 102.105657][ T6672] dump_stack_lvl+0x95/0xd0 [ 102.105680][ T6672] dump_stack+0x15/0x1b [ 102.105704][ T6672] should_fail_ex+0x263/0x280 [ 102.105777][ T6672] should_fail+0xb/0x20 [ 102.105834][ T6672] should_fail_usercopy+0x1a/0x20 [ 102.105859][ T6672] _copy_to_user+0x20/0xa0 [ 102.105926][ T6672] simple_read_from_buffer+0xb5/0x130 [ 102.105963][ T6672] proc_fail_nth_read+0x10e/0x150 [ 102.106007][ T6672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.106034][ T6672] vfs_read+0x1ab/0x7f0 [ 102.106133][ T6672] ? __rcu_read_unlock+0x4e/0x70 [ 102.106156][ T6672] ? __fget_files+0x184/0x1c0 [ 102.106177][ T6672] ? mutex_lock+0x57/0x90 [ 102.106298][ T6672] ksys_read+0xdc/0x1a0 [ 102.106329][ T6672] __x64_sys_read+0x40/0x50 [ 102.106397][ T6672] x64_sys_call+0x2886/0x3020 [ 102.106425][ T6672] do_syscall_64+0x12c/0x370 [ 102.106457][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.106482][ T6672] RIP: 0033:0x7f02002ac84e [ 102.106554][ T6672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.106575][ T6672] RSP: 002b:00007f01fed3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.106599][ T6672] RAX: ffffffffffffffda RBX: 00007f01fed3f6c0 RCX: 00007f02002ac84e [ 102.106615][ T6672] RDX: 000000000000000f RSI: 00007f01fed3f0a0 RDI: 0000000000000004 [ 102.106663][ T6672] RBP: 00007f01fed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.106678][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.106692][ T6672] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 102.106713][ T6672] [ 102.415493][ T6687] 9p: Bad value for 'rfdno' [ 102.421325][ T6688] netlink: 256 bytes leftover after parsing attributes in process `syz.3.905'. [ 102.464888][ T6696] tmpfs: Unknown parameter 'mðol' [ 102.550801][ T6707] set_capacity_and_notify: 1 callbacks suppressed [ 102.550820][ T6707] loop3: detected capacity change from 0 to 1024 [ 102.566927][ T6707] EXT4-fs: Ignoring removed oldalloc option [ 102.572877][ T6707] EXT4-fs: Ignoring removed bh option [ 102.624474][ T6707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.692535][ T6707] tmpfs: Unknown parameter '' [ 102.764518][ T6735] 9p: Bad value for 'rfdno' [ 102.814843][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.838219][ T6744] netlink: 'syz.2.925': attribute type 3 has an invalid length. [ 102.846955][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.320438][ T6771] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 103.346430][ T6771] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 103.367979][ T6773] netlink: 'syz.5.938': attribute type 6 has an invalid length. [ 103.376084][ T6775] __nla_validate_parse: 3 callbacks suppressed [ 103.376102][ T6775] netlink: 256 bytes leftover after parsing attributes in process `syz.2.937'. [ 103.392702][ T6775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.937'. [ 103.484093][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 103.484110][ T28] audit: type=1326 audit(1771079673.777:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.535973][ T28] audit: type=1326 audit(1771079673.777:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.561332][ T28] audit: type=1326 audit(1771079673.777:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.588160][ T28] audit: type=1326 audit(1771079673.777:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.611942][ T28] audit: type=1400 audit(1771079673.787:499): avc: denied { read } for pid=6776 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.644369][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.943'. [ 103.653103][ T28] audit: type=1326 audit(1771079673.787:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.676852][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 103.687969][ T28] audit: type=1326 audit(1771079673.787:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.712165][ T28] audit: type=1326 audit(1771079673.787:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.754087][ T6802] netlink: 256 bytes leftover after parsing attributes in process `syz.5.945'. [ 103.757054][ T28] audit: type=1326 audit(1771079673.787:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.786546][ T28] audit: type=1326 audit(1771079673.787:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f676d9dbf79 code=0x7ffc0000 [ 103.919292][ T6707] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.914: Allocating blocks 1-17 which overlap fs metadata [ 103.965806][ T6815] loop5: detected capacity change from 0 to 256 [ 103.966972][ T6736] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.914: Allocating blocks 1-17 which overlap fs metadata [ 103.999938][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.008888][ T6815] FAT-fs (loop5): Filesystem has been set read-only [ 104.018070][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.027637][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.042804][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.054033][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.063305][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.072197][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.081485][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.091102][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.104942][ T6815] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 104.105263][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 104.582046][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.597194][ T3321] ================================================================== [ 104.605297][ T3321] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 104.613044][ T3321] [ 104.615381][ T3321] read-write to 0xffff888237d27750 of 8 bytes by task 6815 on cpu 1: [ 104.623457][ T3321] find_get_block_common+0x459/0x8a0 [ 104.628768][ T3321] bdev_getblk+0x4d/0x3f0 [ 104.633108][ T3321] __bread_gfp+0x51/0x240 [ 104.637450][ T3321] fat12_ent_bread+0xd0/0x380 [ 104.642158][ T3321] fat_ent_read+0x3b3/0x5c0 [ 104.646681][ T3321] fat_get_cluster+0x4de/0x820 [ 104.651476][ T3321] fat_get_mapped_cluster+0xe4/0x240 [ 104.656794][ T3321] fat_bmap+0x254/0x280 [ 104.660979][ T3321] fat_get_block+0xd3/0x5e0 [ 104.665492][ T3321] block_read_full_folio+0x1fd/0x6a0 [ 104.670790][ T3321] do_mpage_readpage+0xcdc/0xe00 [ 104.675756][ T3321] mpage_read_folio+0xbd/0x130 [ 104.680539][ T3321] fat_read_folio+0x1c/0x30 [ 104.685048][ T3321] filemap_read_folio+0x2e/0x110 [ 104.690014][ T3321] filemap_fault+0x5cf/0xb90 [ 104.694699][ T3321] __do_fault+0xbc/0x200 [ 104.698968][ T3321] handle_mm_fault+0x11d7/0x3020 [ 104.703917][ T3321] __get_user_pages+0x1023/0x1ea0 [ 104.709048][ T3321] __mm_populate+0x242/0x390 [ 104.713654][ T3321] vm_mmap_pgoff+0x23b/0x2d0 [ 104.718366][ T3321] ksys_mmap_pgoff+0x267/0x310 [ 104.723137][ T3321] x64_sys_call+0x14df/0x3020 [ 104.727820][ T3321] do_syscall_64+0x12c/0x370 [ 104.732423][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.738318][ T3321] [ 104.740641][ T3321] read to 0xffff888237d27750 of 8 bytes by task 3321 on cpu 0: [ 104.748182][ T3321] has_bh_in_lru+0x35/0x1f0 [ 104.752689][ T3321] __lru_add_drain_all+0x287/0x450 [ 104.757804][ T3321] lru_add_drain_all+0x10/0x20 [ 104.762573][ T3321] invalidate_bdev+0x47/0x70 [ 104.767183][ T3321] ext4_put_super+0x624/0x7d0 [ 104.771865][ T3321] generic_shutdown_super+0xee/0x220 [ 104.777245][ T3321] kill_block_super+0x2a/0x70 [ 104.781929][ T3321] ext4_kill_sb+0x42/0x80 [ 104.786266][ T3321] deactivate_locked_super+0x75/0x1c0 [ 104.791645][ T3321] deactivate_super+0x97/0xa0 [ 104.796334][ T3321] cleanup_mnt+0x2bb/0x330 [ 104.800842][ T3321] __cleanup_mnt+0x19/0x20 [ 104.805260][ T3321] task_work_run+0x130/0x1a0 [ 104.809856][ T3321] exit_to_user_mode_loop+0x1f4/0x6f0 [ 104.815234][ T3321] do_syscall_64+0x249/0x370 [ 104.819839][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.825734][ T3321] [ 104.828060][ T3321] value changed: 0x0000000000000000 -> 0xffff88811bd1c000 [ 104.835169][ T3321] [ 104.837497][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 104.843653][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 104.854681][ T3321] Tainted: [W]=WARN [ 104.858481][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 104.868534][ T3321] ================================================================== [ 104.911062][ T6874] FAULT_INJECTION: forcing a failure. [ 104.911062][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 104.940753][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.3.965 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.940831][ T6874] Tainted: [W]=WARN [ 104.940854][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 104.940867][ T6874] Call Trace: [ 104.940876][ T6874] [ 104.940885][ T6874] __dump_stack+0x1d/0x30 [ 104.940911][ T6874] dump_stack_lvl+0x95/0xd0 [ 104.940938][ T6874] dump_stack+0x15/0x1b [ 104.941100][ T6874] should_fail_ex+0x263/0x280 [ 104.941126][ T6874] should_failslab+0x8c/0xb0 [ 104.941164][ T6874] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 104.941301][ T6874] ? __alloc_skb+0x2d6/0x690 [ 104.941323][ T6874] __alloc_skb+0x2d6/0x690 [ 104.941347][ T6874] ? __alloc_skb+0x200/0x690 [ 104.941373][ T6874] alloc_skb_with_frags+0x7d/0x470 [ 104.941401][ T6874] ? handle_mm_fault+0x26b8/0x3020 [ 104.941508][ T6874] ? mt_find+0x1a1/0x3d0 [ 104.941529][ T6874] sock_alloc_send_pskb+0x44d/0x500 [ 104.941568][ T6874] unix_dgram_sendmsg+0x391/0x1060 [ 104.941641][ T6874] ? selinux_socket_sendmsg+0x192/0x1c0 [ 104.941748][ T6874] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 104.941776][ T6874] ____sys_sendmsg+0x5af/0x600 [ 104.941810][ T6874] ___sys_sendmsg+0x195/0x1e0 [ 104.941864][ T6874] ? path_openat+0x1b01/0x2050 [ 104.941910][ T6874] __sys_sendmmsg+0x185/0x320 [ 104.941951][ T6874] __x64_sys_sendmmsg+0x57/0x70 [ 104.942063][ T6874] x64_sys_call+0x27aa/0x3020 [ 104.942093][ T6874] do_syscall_64+0x12c/0x370 [ 104.942131][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.942154][ T6874] RIP: 0033:0x7f02002ebf79 [ 104.942223][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.942245][ T6874] RSP: 002b:00007f01fed3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.942271][ T6874] RAX: ffffffffffffffda RBX: 00007f0200565fa0 RCX: 00007f02002ebf79 [ 104.942289][ T6874] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 104.942305][ T6874] RBP: 00007f01fed3f090 R08: 0000000000000000 R09: 0000000000000000 [ 104.942320][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.942385][ T6874] R13: 00007f0200566038 R14: 00007f0200565fa0 R15: 00007ffca2c2c468 [ 104.942403][ T6874]