last executing test programs: 6m25.305785793s ago: executing program 32 (id=217): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008007800000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bca6d4fbe40a23624dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/190], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m17.074166373s ago: executing program 33 (id=115): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed0000630300ff000000000c440000000000007a0a00fe00ffffffd704000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6m14.421817877s ago: executing program 34 (id=161): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x49, 0x0, &(0x7f0000000480)="844e8bbd3561576b10c630789508a19e40bad234704d1a6d586081fd0ce43fb914331ef506bdb5716751cc02a478b0c8e500aab7a887567679f0994d38e119762d1f3653296aa053ba", 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x200040c0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="935025", 0x3}, {0x0}], 0x2}}], 0x1, 0xc000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xfd}, 'port1\x00', 0x511e36599023629, 0xa0400, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x46b, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f00000002c0)={0xfdf, 0xfffffffb, 0x5, 0xff, 0x3ff, 0x10c}) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 5m59.961654181s ago: executing program 35 (id=606): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m57.170234843s ago: executing program 36 (id=649): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5m56.739223029s ago: executing program 37 (id=656): socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) r1 = dup(r0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000980)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) 5m50.617921596s ago: executing program 38 (id=746): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@discard}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 5m17.210176474s ago: executing program 39 (id=1323): syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb18509d6727fda298a3a207bf64bbbbbbbb080045000028000000000006907864010102ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200008a6334b56289e5871835ac1a2822f6b3500", @ANYRES32=r2, @ANYBLOB="94515d5ac75f64fa9cc040c92a9c47635d8b9ff1f786d2a2d4871f7ee3e952", @ANYRES16=r0, @ANYRESOCT=r3, @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x44040894}, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0xbd1, 0x38000000, 0x6c, 0xb3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x0, 0x25dedbf5, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0x3, 0x4}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e2b, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x4088, @mcast1, 0x8}, r7, 0x80}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x626, 0x3, @rand_addr=' \x01\x00', 0x15}, 0x1c) listen(r0, 0x200b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000800000004", @ANYBLOB="b1e24f94fc5eac9f3c8e06f7b36deccd3b49d67ccac2676cadf352319244a9a5327d1ae47f77e007117707501692fd6cc2617b61045bc8a018"], 0x0, 0x96, 0x0, 0x1}, 0x28) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[], 0xff2e) 4m32.488747041s ago: executing program 40 (id=2308): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@remote]}) 4m29.332282015s ago: executing program 41 (id=2365): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_SET(r0, 0x0, 0x24008814) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004bbf46662fa36000"/35], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x4}], 0x1c) readv(r5, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getrlimit(0x5, &(0x7f0000000340)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0xc804) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0x5, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m42.411037131s ago: executing program 42 (id=2942): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 3m32.922215864s ago: executing program 43 (id=3317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09f3ffffff000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m31.983645779s ago: executing program 44 (id=3332): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3m30.273773309s ago: executing program 45 (id=3347): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x576, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000000004ffffff8c000000100000000000000020"], 0x24, 0x0) 3m28.609881266s ago: executing program 46 (id=3358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004330000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 3m10.744833558s ago: executing program 2 (id=3623): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0], 0x50) r3 = socket(0x1, 0x80000, 0x5) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x1, 0x700, 0xcc7, 0xf, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @multicast1}}}}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x28, 0x1409, 0x1, 0x709d2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200ffffffb703000008000000b704000085000000c30000009500000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0xce, 0x3, 0x23, 0xfe, 0x3, 0xe8, 0xa0, 0x7, 0x5, 0x3, 0xfe, 0x3, 0xa}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r8, 0x9, 0x30}, &(0x7f0000000080)=0xc) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$getregset(0x4204, r12, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) renameat2(r0, &(0x7f0000000580)='./file1\x00', r1, &(0x7f00000005c0)='./file1\x00', 0x5) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r10, 0xffffffff}, 0x8) 3m9.794778893s ago: executing program 2 (id=3633): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3m9.113739173s ago: executing program 2 (id=3646): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fcntl$setstatus(r1, 0x4, 0x400) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$vsock_stream(r0, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r4 = io_uring_setup(0x79c4, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) munlockall() r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x614) 3m9.011278359s ago: executing program 47 (id=3646): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) fcntl$setstatus(r1, 0x4, 0x400) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$vsock_stream(r0, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r4 = io_uring_setup(0x79c4, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, 0x0, 0x1) munlockall() r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x614) 2m43.841328326s ago: executing program 48 (id=4103): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {'\x00', "00000000000300"}}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 2m26.666149657s ago: executing program 49 (id=4424): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) fremovexattr(r0, &(0x7f0000000080)=@random={'trusted.', '\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2m25.531741903s ago: executing program 3 (id=4438): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000001955090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.400363091s ago: executing program 3 (id=4439): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) mmap(&(0x7f0000d96000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r3, r3, 0x2f}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r3, r4, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x7}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010428bd70000000007acc000003", @ANYRES32=0x0, @ANYBLOB="0000000000040000280012800b00010067656e65766500001800028014000700fe8000000000000000000000000000401400030067656e65766531000000000000000000"], 0x5c}}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xb}, {0xd, 0xa}, {0x5, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0xc840) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) process_mrelease(r1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x12020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(r9, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @private=0xa010102}, 0x1, 0x2, 0x1}}, 0x80, 0x0}, 0x4000000) connect$llc(r9, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10) 2m24.529149382s ago: executing program 3 (id=4445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2m24.377772031s ago: executing program 50 (id=4446): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) r2 = epoll_create(0x4) (async) timer_create(0x0, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001007564700008000100756470004c000280080001001f000000080002000200000008000400100000000800040004000000080002000000000008000100010000000800020000"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x1000000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xb0000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6000a2, 0x0) (async) cachestat(r0, &(0x7f0000000000)={0x264, 0x4}, 0x0, 0xee) (async) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) (async) timerfd_gettime(r0, &(0x7f0000000040)) 2m23.909372528s ago: executing program 3 (id=4450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) pipe(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = dup(r8) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, 0x0) 2m23.829089693s ago: executing program 3 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="123c345f4873e4b0360ced2be150193eb4d5be8dd134e290657a31a74a182d91b2bd4950987636e1384fec8d59a758e93559b9929b9af38830fb90e8cd99d707bff122adcfecebcd95db7b09cb566be97d23242e81e99b1738309d5877f4e0bffe915bd71063a6dc1b999ae7adf579fd0af1c7d4a38f014430b922e8f0938432c74dcfc709b455a6f730d2c3d1101202377dd55504cbe0eb97f85fa49621ca06f97fada608fde6a34fe9fa81afee99cf53914220f778a70f76abe4b5185da712d250ec461ce0df02c3c13f40ad53a7b11ce216729c70e379145aac185ac98666761a05be0a", 0xe5}, {&(0x7f0000000000)="73b4c31fcd319c92cfaf43", 0xb}], 0x2, &(0x7f0000000300)=[{0x88, 0x3a, 0x2, "39cbd26fb64961ec8e902e483e32317d4c75fcd7b1d71a1402212bcbe534adcee5bd32e1bae33df48965e05d2c647776107e5454dd04424acac1fb6f9621f2adb17014d078b9e066aa8eca6affe2127ef1d33468973d5b3119d1b8e4bb676ea7eb44ba0b2d3f0284e114b965d6cb7ab524"}], 0x88}, 0x40414) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9}, @hopopts={0x8}]}}}}}}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a"], 0x38}}, 0x0) 2m23.593726217s ago: executing program 3 (id=4453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00330a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 2m13.76515012s ago: executing program 51 (id=4380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x1, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x200000000000000}, 0x0) 2m8.578577722s ago: executing program 52 (id=4453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00330a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 2m4.767382754s ago: executing program 2 (id=4601): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x6, 0x2ed5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x6, 0x2ed5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") (async) 2m3.677485658s ago: executing program 2 (id=4669): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00000a00803300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 2m2.44300097s ago: executing program 2 (id=4703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async, rerun: 64) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f0000000780)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000900)="9457515228e3d0f9bf7a2659fc94effbf98090c89f2112194731b1f62edf134dae06de09db159acdfb643ab7b8674e2eaa21b081453cbb051c3b1b8446c367f5839cd02f1158001dabdc9cbc1ee2a1f0569450977edd2cfc65b66edddba93bfeb5e3ba58f7286536558f2787b82fc086734b47a2458d9cc7c5b9b6a88c4e10a1a948ec64ae4ae4a5e9a2c3fc26df7329ad00ef3234c06a8012816c75824614a1f4dcf7062ad69fc5dd26fea210", 0xad}, {&(0x7f00000007c0)="1dc1927d2388c20051f39ad43d17568b705761464ad0b0c61b1c952c3e8ac2082d0f2805192310d2e3e6206e9d3ac76c23be56774a169e3d730cd77b63481a0ee601a84a91d436a1d0c27c25c227a42c9fac52a672e857341714c7539745ce77c1d1f45aff533d4d3c37a9181ed0ea7f414e19d666081765f9b406f3ea6a2029", 0x80}, {&(0x7f00000009c0)="fbf305f365ca459bad5653d03948d7388193f200614f5657405eae09d1758d96ca44295848596a38275944021fb2f80f528013ee72b70ba00a52d99d1a5080fbf1b4933eda461de460da8d419afc47bec58ca230f318b111f5981e0e99a0dd128c35994c645dd765976201f9b3f5ca1a6014bbfa2cb12e79e8f2c1a9eb1b769dc74bc8aa3ed9bf478b2e76fd9f7a0a154b768b4d8801a3926e", 0x99}], 0x3}, 0xc040) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000070000000900000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000b00)={0x0, 0x4, 0x4}, &(0x7f0000000b40)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000b80)={r6, 0x4, 0x81}, 0x8) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) close(0x3) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r7, &(0x7f0000000080)}, 0x20) (async) readahead(r0, 0x5, 0x100000001) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000440)=""/153, 0x41000, 0x44, '\x00', 0x0, @cgroup_sock=0x2, r2, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x1, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000600)=[r0, r0, r3, r0, r0, r4, r0, r0, r0], &(0x7f0000000640)=[{0x3, 0x2, 0x4, 0x7}, {0x0, 0x5, 0xd, 0xb}, {0x2, 0x2, 0xc, 0x9}, {0x5, 0x5, 0xb, 0x2}, {0x5, 0x2, 0x1}, {0x1, 0x4, 0xc, 0x6}, {0x3, 0x1, 0xe, 0x9}], 0x10, 0xe}, 0x94) read$msr(r1, &(0x7f0000000040)=""/79, 0x4f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r8, 0x11b, 0x9, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2m2.383342993s ago: executing program 53 (id=4703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async, rerun: 64) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f0000000780)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000900)="9457515228e3d0f9bf7a2659fc94effbf98090c89f2112194731b1f62edf134dae06de09db159acdfb643ab7b8674e2eaa21b081453cbb051c3b1b8446c367f5839cd02f1158001dabdc9cbc1ee2a1f0569450977edd2cfc65b66edddba93bfeb5e3ba58f7286536558f2787b82fc086734b47a2458d9cc7c5b9b6a88c4e10a1a948ec64ae4ae4a5e9a2c3fc26df7329ad00ef3234c06a8012816c75824614a1f4dcf7062ad69fc5dd26fea210", 0xad}, {&(0x7f00000007c0)="1dc1927d2388c20051f39ad43d17568b705761464ad0b0c61b1c952c3e8ac2082d0f2805192310d2e3e6206e9d3ac76c23be56774a169e3d730cd77b63481a0ee601a84a91d436a1d0c27c25c227a42c9fac52a672e857341714c7539745ce77c1d1f45aff533d4d3c37a9181ed0ea7f414e19d666081765f9b406f3ea6a2029", 0x80}, {&(0x7f00000009c0)="fbf305f365ca459bad5653d03948d7388193f200614f5657405eae09d1758d96ca44295848596a38275944021fb2f80f528013ee72b70ba00a52d99d1a5080fbf1b4933eda461de460da8d419afc47bec58ca230f318b111f5981e0e99a0dd128c35994c645dd765976201f9b3f5ca1a6014bbfa2cb12e79e8f2c1a9eb1b769dc74bc8aa3ed9bf478b2e76fd9f7a0a154b768b4d8801a3926e", 0x99}], 0x3}, 0xc040) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000070000000900000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000b00)={0x0, 0x4, 0x4}, &(0x7f0000000b40)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000b80)={r6, 0x4, 0x81}, 0x8) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) close(0x3) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r7, &(0x7f0000000080)}, 0x20) (async) readahead(r0, 0x5, 0x100000001) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000440)=""/153, 0x41000, 0x44, '\x00', 0x0, @cgroup_sock=0x2, r2, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x1, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000600)=[r0, r0, r3, r0, r0, r4, r0, r0, r0], &(0x7f0000000640)=[{0x3, 0x2, 0x4, 0x7}, {0x0, 0x5, 0xd, 0xb}, {0x2, 0x2, 0xc, 0x9}, {0x5, 0x5, 0xb, 0x2}, {0x5, 0x2, 0x1}, {0x1, 0x4, 0xc, 0x6}, {0x3, 0x1, 0xe, 0x9}], 0x10, 0xe}, 0x94) read$msr(r1, &(0x7f0000000040)=""/79, 0x4f) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r8, 0x11b, 0x9, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m44.005433095s ago: executing program 6 (id=5089): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x40000000, 0x0, 0x0) 1m43.900970861s ago: executing program 6 (id=5092): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) unshare(0x2c020400) (rerun: 32) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (rerun: 32) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000200)={'\x00', 0x9, 0x0, 0x5}) (async) unshare(0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x80000000}, 0x10) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x1, 0x0, {0xa, 0x8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x10000}]}, 0x55}}, 0x0) 1m43.7443521s ago: executing program 6 (id=5096): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0x9, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd25, 0x3507}, @sadb_address={0x3, 0x5, 0x32, 0x20, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd27}]}, 0x48}, 0x1, 0x7}, 0x64004005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x26020480) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x401, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x1}, 0xe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x2a, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x1, 0x4, 0x1, 0x4, 0x4, 0xffffffffffffffeb}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0x7, 0x4, 0x1, 0x0, 0xfffffffffffffff0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020208b1af8ff03000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r7, &(0x7f00000003c0)=@nl=@unspec, &(0x7f0000000500)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtaction={0x158, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x144, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xf4, 0x22, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x7, 0xc, 0xe9}, @remote, @dev={0xac, 0x14, 0x14, 0x25}, 0xff, 0xfffffffd}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0x8, 0xffffffff}, @empty, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x5, 0x3, 0x1}, @remote, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x4, 0x6, 0x1, 0x1000}, @dev={0xac, 0x14, 0x14, 0x40}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x2, 0x3}, @private=0xa010101, @broadcast, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="0500"], 0x10) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) 1m43.706079062s ago: executing program 6 (id=5097): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() signalfd4(r3, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8, 0x1000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xfffffff9}, {0x1c}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m43.666354975s ago: executing program 6 (id=5099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4a, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}]}, 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x898, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd96f, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x84, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x3, 0x5, 0xffffffff, 0x5, 0x2, 0x9, 0x2, 0xb14f, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x4, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x5, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x6, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0x1, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0x80000d70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x9, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x21eb, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x10003, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x7ffffffd, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x13c5, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000240)="270502001c0014000600002fb96dbcf7babe05000700810005", 0x19}, {&(0x7f0000000140)="e554c6020000f00bd806a5d8eb", 0xd}], 0x2}, 0x30048801) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 1m43.57756065s ago: executing program 6 (id=5105): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8084) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) setfsgid(0x0) 1m43.468024656s ago: executing program 54 (id=5105): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8084) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) setfsgid(0x0) 1m10.581686767s ago: executing program 4 (id=5871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "080200", "3d09b33a32efde0075ddfdd6bd4fadca", '\x00', "e75e0db8baa300b4"}, 0x28) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x2020}, {r0, 0x2018}, {0xffffffffffffffff, 0x9000}, {r0, 0x8000}], 0x5, 0x64) 1m10.574633358s ago: executing program 4 (id=5875): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd14000780080011400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a6900"/100], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x137b02, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) r5 = accept4(r3, 0xfffffffffffffffd, &(0x7f0000000000), 0x80800) getpid() ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000300)={0x0, 0xf5, 0x4, 0x1}) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x81c}, 0x40) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800000}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) keyctl$set_reqkey_keyring(0xf, 0x3) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000840)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000801, r8, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m9.726314937s ago: executing program 4 (id=5890): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01f50000000000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0f50000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 1m9.693881599s ago: executing program 4 (id=5891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x3, 0x8, 0x1, 0x1}}) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) copy_file_range(r1, &(0x7f0000000040)=0x7, r4, 0x0, 0x5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x5, r6, &(0x7f0000000140), 0x200000000001) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m9.589443526s ago: executing program 4 (id=5893): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x29, 0x2, 0x0) socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00'}) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffe01}, 0x0, 0x3, 0x8, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') read$msr(r5, &(0x7f0000000d40)=""/43, 0x2b) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) fcntl$addseals(r4, 0x409, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 1m9.413816866s ago: executing program 4 (id=5896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "080200", "3d09b33a32efde0075ddfdd6bd4fadca", '\x00', "e75e0db8baa300b4"}, 0x28) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x2020}, {r0, 0x2018}, {0xffffffffffffffff, 0x9000}, {r0, 0x8000}], 0x5, 0x64) 1m9.413707046s ago: executing program 55 (id=5896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "080200", "3d09b33a32efde0075ddfdd6bd4fadca", '\x00', "e75e0db8baa300b4"}, 0x28) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x2020}, {r0, 0x2018}, {0xffffffffffffffff, 0x9000}, {r0, 0x8000}], 0x5, 0x64) 1m1.617273812s ago: executing program 0 (id=6015): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[], 0xfdef) socket$inet6_tcp(0xa, 0x1, 0x0) 1m1.400837055s ago: executing program 0 (id=6019): symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m1.281574732s ago: executing program 0 (id=6021): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000000000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/41, 0x29}, {&(0x7f0000000040)="aa1d484ea0f50000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a4", 0x24}], 0x2) 1m1.180062368s ago: executing program 0 (id=6023): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x40a, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4082}, 0x8891) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x0, 0x3, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)=' \t', 0x2}], 0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x200040c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}, {&(0x7f0000000000)="9219cce8138c80a9efb723e68a5e42b82d0eb9a420b040fa71084d2862cf9f6239517ac51b1cc3c5773603a453043706643281608171b491450aa19a3a710e9df2dfe5ed6e97f5bbeb0272d79d1a77c2b7be5c63feec7e995d0d96a6449a7e1d613fdc2e95e44f4a21869e42b79495dbb65ec61cc4daf72e26e512b626e8f5c478532f7697aa73395ce54f4e92e77dfa2d2d987245", 0x95}], 0x2}, 0x20008812) 1m0.989377459s ago: executing program 0 (id=6026): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r2 = syz_open_dev$MSR(&(0x7f0000003080), 0x96, 0x0) readv(r2, &(0x7f0000003340)=[{&(0x7f00000030c0)=""/76, 0x4c}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) getsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0xfd, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@llc={0x4, {@snap={0x1, 0x1, "0001", "c0840b", 0x10, "5a01fdf17eea27e8da1346550366785c016fc6eac1b76c32603a3e74eb0ccd8eb15710acebd39d5fcb1443086b796a29faf72063fefe0327b55b746a381d602b17e7abe3e17e2d35b47a698652fc7897c2988d98bdf8fc835fd066a61e3458cea3f818ab42a8e6c117ba37c2af3b6b8e9123e741f2843115d4ec91a4b24cd310299f431eed6b231531cdac74c58064d92c925aa10fb98962ea0c44bff352b37b168d7b4bfcc78b29cf8fe523a450dc2d34cd7e36c11d4a49ca55a20d7e32244c92941b01d7d33aa0556304a188c6eeaf61c73ca434cff778b3224d719508"}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0xca, 0x0, 0x1000, {[@exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xb, "3a59d7246fd380e012"}, @mptcp=@capable={0x1e, 0xc, 0x8, 0x1, 0x0, 0xfffffffffffffff8}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @md5sig={0x13, 0x12, "cdfa2c9762195d77fc38611f13b8c21e"}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) dup(r0) ioctl$PPPIOCSMRRU(r8, 0x4010744d, &(0x7f0000000080)=0xc) 1m0.708551815s ago: executing program 0 (id=6032): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x101d088, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="fb289a1dd751", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000080)=""/214) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/219, &(0x7f0000000040)=0xdb) 1m0.694697146s ago: executing program 56 (id=6032): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x101d088, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="fb289a1dd751", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000080)=""/214) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/219, &(0x7f0000000040)=0xdb) 2.082617658s ago: executing program 1 (id=7077): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.809733394s ago: executing program 8 (id=7085): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.428580606s ago: executing program 5 (id=7091): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x576, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000108bffffff00000020"], 0x24, 0x0) 1.309843853s ago: executing program 5 (id=7092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20006005bbbbbbbbbbbb00000000000086dd6a5420bd0000327a000000"], 0x3a) 1.253331186s ago: executing program 9 (id=7093): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x80000000000000, 0x0, 0x0) 1.249092577s ago: executing program 5 (id=7094): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00000056dac57d0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x4040004) 1.168292282s ago: executing program 5 (id=7095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="015e29e8d73d085ca84f89f237f04d59bfbbfb15e3ca837e1ccf84a6ec514807244c65bd7000fcdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24040015}, 0x8004) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000000)={{0x6, 0x8}, {0xff, 0x6}, 0x80000001, 0x1, 0x7}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0xf, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2001c0c5}, 0x4000000) 1.152518872s ago: executing program 1 (id=7096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147142, 0x0) fallocate(r4, 0x0, 0x9, 0x10001) lgetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB], 0x54}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) listen(r6, 0x22e1) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x48a441) ioctl$BLKIOOPT(r7, 0x1279, &(0x7f0000000140)) r8 = io_uring_setup(0x3184, &(0x7f0000000080)={0x0, 0x5e18, 0x400, 0x1, 0x111}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x0, 0x1000004f}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x7, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xf9}]}}]}, 0x44}}, 0x0) r12 = dup(r1) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.093563865s ago: executing program 5 (id=7097): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) mmap(&(0x7f0000d96000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r3, r3, 0x2f}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r3, r4, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x7}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010428bd70000000007acc000003", @ANYRES32=0x0, @ANYBLOB="0000000000040000280012800b00010067656e65766500001800028014000700fe80"], 0x5c}}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xb}, {0xd, 0xa}, {0x5, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0xc840) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) process_mrelease(r1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x12020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(r9, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @private=0xa010102}, 0x1, 0x2, 0x1}}, 0x80, 0x0}, 0x4000000) connect$llc(r9, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10) 1.069766217s ago: executing program 9 (id=7098): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000028000000b70300000000000085000000b400000095"], &(0x7f0000000b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) gettid() fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffdfffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 949.862444ms ago: executing program 8 (id=7100): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@errors_remount}]}, 0xfc, 0x57f, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) chmod(&(0x7f0000000040)='.\x00', 0x35e) 754.769185ms ago: executing program 8 (id=7102): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000002700fdfffffff589fdf1d7ec6b03962fbb", @ANYRES32=r3, @ANYRES32=r2], 0x18}, 0x8800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) unshare(0x600) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000080)={r9, 0x1, 0x0, @multicast}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x40, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="a403000021000100000000000100000000000000000000000000000000000000e0000001000000000000000000000000000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"], 0x3a4}}, 0x0) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$sock_attach_bpf(r11, 0x110, 0x2, 0x0, 0x5392f5b1) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x62) r12 = syz_pidfd_open(r1, 0x0) process_madvise(r12, &(0x7f0000000040)=[{&(0x7f00000008c0)="b4bcdbf2", 0x4}], 0x1, 0xd, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r13, &(0x7f0000000700)={0xa, 0x6e22, 0x0, @loopback}, 0x1c) listen(r13, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r14, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) 754.496045ms ago: executing program 1 (id=7103): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 754.343135ms ago: executing program 7 (id=7104): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async, rerun: 32) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) (async, rerun: 32) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) r4 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x211}, {r0, 0xbe}, {r1, 0x200}, {r0, 0x20}, {r3, 0x7308}, {r0, 0x80}, {r0, 0x4002}, {r0, 0x42}, {r4, 0x5056}], 0x9, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x80000000]}, 0x8) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000048000)=0x1, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78lrR/pDn84FZvXkzu+999+lp3uzo7QRQWtPZQxpxOCIuJRFTTdsmo75xurHfw+/uXM6WJGq1/32bRNLIK/Z/1Pi5P3tIIsYj4tOzEb+vbC13/dbtqwvVWt2rEbMbq2uz67duH19ZXbiydGXp2vyJf548Nfev+ZPzuxJnEde58//901uvvfSP5c+qx5M4HRdHX1mMljh2y3RMx6NGiM35IxFxKku0eV/2miKEZMD1YGcqjd/H0Yg4FFNRydfqpmLlzYFWDuipWiWiBpRUov9DSRXjgOLcvhfnwcPswZn6CdDW+Efqn43EeH5utO9h0nRmVD/fPbAL5Wdl/HznyHvZEh0+hxjZhXI62bwbEX9sF3+S1+1A/ilOFn8aadPzsvRcRIw13ot0h+VPt6z3+/fvWeJvbocs3tONn1n+2R2WP+j4ASin+2caB/LNbO3J8S8bGRbjn2gz/plsc+zaiUEf/zqP/4rj/Xj+GXnaMg7LxjwX2r/kaGvGV2+ce6dT+c3jv2zJyi/Ggv3w4G7EkZb4X88Hc8nj9k/atH+2y6Uuy/jP59+c67Rt0PHX7kUcbXv+8+SKVpaa3VhdK/Jark/OLq9Ul+bqj23L+OiTFz/oVP6g48/aPzrEv137Z3lrXZbx4YV7q522TT41/vTrseRinhpr5Ly8sLFxYz5iLDnf2KUp/8T2dSn2KV4ji//YX9v3/23izxt6s8v41/5/9WE9tfUqadftv+WvSu5Rrcs6dJLFv7jD9n+7yzJ+eOHmn1uyJorEdvFPbH2ppNv3HAAAAAAAAMooza/BJunM43SazszU5/D+Ifal1evrG39bvn7z2mLEsfz/IUfT4kr3VH09ydbnG/8PW6yfaFn/e0QcjIh3KxP5+szl69XFQQcPAAAAAAAAAAAAAAAAAAAAQ2J/Y/5/cZ/q7yv1+f9d2TjU49oBPdfLG8wBw03/h/LK+/9O7+AK7GmO/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMBz6eBf7n+ZRMTmvyfyJTPW2DY60JoBvfbsfXy6J/UA+q/S16cBw+TxpX/T/6F0uhr//9j4csDeVwcYgKRdZj44qG3f+e+3fSYAAAAAAAAAAAAA0ANHD5v/D2WVxseDrgIwIL9iIr/vAIA9zlf/Q3k5xweeNot/vNMG8/8BAAAAAAAAAAAAoG8m8yVJZxq3AJ2MNJ2ZifhtRByI0WR5pbo0FxG/i4gvKqO/ydbnB11pAAAAAAAAAAAAAAAAAAAAeM6s37p9daFaXbrRnPhpS87znSjugjos9WlORNL/QiciYhhi701ipCknidjMWn4oKnZjPYaiGmlejQH/YQIAAAAAAAAAAAAAAAAAgBJqmnvc3pH3+1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi/J/f/33kiecrrDDpGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBv+iUAAP//q+Q5KA==") 653.795401ms ago: executing program 7 (id=7105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20006005bbbbbbbbbbbb00000000000086dd6a5420bd0000327a000000"], 0x3a) 618.606523ms ago: executing program 5 (id=7106): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 609.677025ms ago: executing program 1 (id=7107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1e0001000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a00000000000100000000000000000000000000000001000004d43c"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 560.945357ms ago: executing program 1 (id=7108): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000004000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0f50000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 560.449997ms ago: executing program 7 (id=7109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf7713", 0x1f}], 0x1}}], 0x1, 0x2090) sendto$inet(r4, &(0x7f0000000f00)="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", 0x6ca, 0x4c840, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e000000000000000100010080907f9eed"], 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 485.736972ms ago: executing program 1 (id=7110): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x24008094) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 485.245911ms ago: executing program 8 (id=7111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5023f172943e2e560929afe2443841987"], 0x1, 0x52e, &(0x7f0000000600)="$eJzs2j+LE0EcBuAxd+YOG1OLxYKN1XFaWbpIDg4XhMgWWrlwsdkVYbfZpLpvI/jZ7NJcF7nskrv4rzFx1DwPhHnJm8Bvmt0p5t3DD+XFx+b9sy+fwvHzJAxCCIOrEEar1LnTr4NVHobbLgMA8K+ZTIo09gzsVl2nxfUZ7ui7Jv8cZSAAAAAAAAAAAAB+m/v/ALB/3P///9V1Wgz789sm9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAeK6Wy/vLX3xizwcAbJ/3PwDsn9dv3r5Ms2w8SZLjEBaXbd7m3dr1Z+fZ+DRZGd38a9G2+cG6f9L1yWZ/N9zr+6c/7Ifh8aOuv+5evMq+6Y/Cxe63DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxykqyNbr5dtG1+0PUnP+u7dHaejU/7H2z2h+HB4R/bBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAFzWxeFlU1rQVBENYh9pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpZnNy6KqpnUTexIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G/RzOZlUVXTeoch9h4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L6vAQAA//+aYmE9") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x448, &(0x7f0000000e40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8051}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 466.794163ms ago: executing program 7 (id=7112): r0 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYBLOB], 0x180}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073"], 0xfc}, 0x1, 0x0, 0x300}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, 0x0, 0x4000080) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 414.667436ms ago: executing program 7 (id=7113): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x5}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x5, 0x7, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) (fail_nth: 3) 97.805274ms ago: executing program 9 (id=7114): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 97.532334ms ago: executing program 9 (id=7115): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x28943, 0x1) unshare(0x2c020400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x7ffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x200a}) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='m', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="5165e3b6b55400000000000000000000000000000000fffffffffffffff100", 0x1f}], 0x1}}], 0x2, 0x840) close_range(r0, 0xffffffffffffffff, 0x0) sendto(r2, &(0x7f0000000080)="f27f441369145655a222dce2e4c7155c960797908aecf5946e7aaa9703026bd25d07cc6de9a9469aed2b267cb120b927001f9d19bf6454b6d752c5fb6771e212c488b2300af3bc5e13f29648b663cb6e24893fd17a4145742ab235ccbfce1352cf94873bc2", 0x65, 0x40600d0, &(0x7f0000000180)=@l2={0x1f, 0x100, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x41}, 0x80) 77.157935ms ago: executing program 7 (id=7116): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sched_setscheduler(0x0, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) mmap(&(0x7f0000d96000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_setup(0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r3, r3, 0x2f}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r3, r4, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0x94) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x7}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010428bd70000000007acc000003", @ANYRES32=0x0, @ANYBLOB="0000000000040000280012800b00010067656e65766500001800028014000700fe800000000000000000000000000040140003"], 0x5c}}, 0x0) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xb}, {0xd, 0xa}, {0x5, 0xffff}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0xc840) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) process_mrelease(r1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x12020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(r9, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e20, @private=0xa010102}, 0x1, 0x2, 0x1}}, 0x80, 0x0}, 0x4000000) connect$llc(r9, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10) 71.876996ms ago: executing program 9 (id=7117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1000000) mlock2(&(0x7f0000829000/0x3000)=nil, 0x3000, 0x1) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 45.563897ms ago: executing program 8 (id=7118): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x5}, 0x14105, 0x31, 0xfffffbff, 0x3, 0x5, 0x7, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) 1.02107ms ago: executing program 9 (id=7119): r0 = socket$kcm(0xa, 0x922000000004, 0x11) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000340)="9be7f7b06ec264426c69a1697b5128c2151e29f9a174d721140b3be6e5448c4cb6887425129d3fb134d48577b999a161adb62103c7b67970cba9679730ca40d0b61856e12c4798073a71e888d6d77a978a5b7c74a4981ee42772fd357c9ceb7d6059333680370a3d71bbdcf0d6798b84005cc259cb209107e6c39a081b3ee6f499fa711b5ff1101437b288890c80f5a5952889af09671aacad56d6872702c3118472", &(0x7f00000005c0)=""/230}, 0x20) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170900000000030000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa06001d00930a000014001f"], 0x58}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x20000810) 0s ago: executing program 8 (id=7120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, 0x0, 0x3a) kernel console output (not intermixed with test programs): 323/0x380 [ 388.878651][T29564] mm_release+0xa1/0x190 [ 388.878679][T29564] exit_mm_release+0x25/0x30 [ 388.878748][T29564] exit_mm+0x37/0x180 [ 388.878767][T29564] do_exit+0x3fa/0x1590 [ 388.878789][T29564] ? avc_has_perm+0x101/0x190 [ 388.878837][T29564] do_group_exit+0xfe/0x140 [ 388.878857][T29564] ? get_signal+0xe47/0xf60 [ 388.878879][T29564] get_signal+0xe4f/0xf60 [ 388.879016][T29564] ? __sys_sendto+0x3a2/0x4d0 [ 388.879052][T29564] arch_do_signal_or_restart+0x96/0x450 [ 388.879083][T29564] exit_to_user_mode_loop+0x6a/0x6f0 [ 388.879160][T29564] ? __x64_sys_sendto+0x76/0x90 [ 388.879196][T29564] do_syscall_64+0x1d3/0x2a0 [ 388.879230][T29564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.879255][T29564] RIP: 0033:0x7f0be5dcaeb9 [ 388.879329][T29564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.879351][T29564] RSP: 002b:00007f0be4806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 388.879374][T29564] RAX: fffffffffffffe00 RBX: 00007f0be6046090 RCX: 00007f0be5dcaeb9 [ 388.879391][T29564] RDX: 0000000000300000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 388.879405][T29564] RBP: 00007f0be4806090 R08: 0000000000000000 R09: 0000000000000000 [ 388.879418][T29564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.879494][T29564] R13: 00007f0be6046128 R14: 00007f0be6046090 R15: 00007ffd9cfc6218 [ 388.879517][T29564] [ 389.267632][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.490729][T29600] pim6reg: entered allmulticast mode [ 389.496695][T29600] pim6reg: left allmulticast mode [ 389.652007][T29606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.677855][T29611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.701984][T29606] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6354'. [ 389.803159][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.840359][T29617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=29617 comm=syz.5.6356 [ 389.935371][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.974869][T29628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6359'. [ 389.990291][T29628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6359'. [ 390.045041][T29631] set_capacity_and_notify: 6 callbacks suppressed [ 390.045056][T29631] loop1: detected capacity change from 0 to 512 [ 390.100149][T29631] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.113147][T29631] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.6360: Failed to acquire dquot type 1 [ 390.127679][T29631] EXT4-fs (loop1): 1 truncate cleaned up [ 390.134281][T29631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 390.158766][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 390.205730][T29640] loop1: detected capacity change from 0 to 1024 [ 390.232005][T29640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.238867][T29642] loop7: detected capacity change from 0 to 8192 [ 390.273308][T29640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.343182][T29646] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6365'. [ 390.384482][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.605291][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 390.605384][ T29] audit: type=1326 audit(1770225184.775:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.645176][ T29] audit: type=1326 audit(1770225184.795:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.668610][ T29] audit: type=1326 audit(1770225184.795:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.692116][ T29] audit: type=1326 audit(1770225184.795:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.715655][ T29] audit: type=1326 audit(1770225184.795:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.739079][ T29] audit: type=1326 audit(1770225184.795:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.762634][ T29] audit: type=1326 audit(1770225184.795:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.786142][ T29] audit: type=1326 audit(1770225184.795:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.809647][ T29] audit: type=1326 audit(1770225184.795:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.833135][ T29] audit: type=1326 audit(1770225184.795:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29654 comm="syz.1.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 390.839961][T29660] 9p: Bad value for 'rfdno' [ 391.188526][T29675] netlink: 'syz.7.6374': attribute type 1 has an invalid length. [ 391.205129][T29675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.297772][T29674] xt_hashlimit: size too large, truncated to 1048576 [ 391.323652][T29678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29678 comm=syz.7.6374 [ 391.345662][T29679] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6371'. [ 391.734230][T29693] loop1: detected capacity change from 0 to 128 [ 391.777212][T29695] loop7: detected capacity change from 0 to 1024 [ 391.811907][T29695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.874864][T29695] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6379'. [ 392.072482][T29719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6389'. [ 392.081395][T29719] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6389'. [ 392.090450][T29719] netlink: 'syz.9.6389': attribute type 12 has an invalid length. [ 392.096231][T29707] loop1: detected capacity change from 0 to 8192 [ 392.098310][T29719] netlink: 'syz.9.6389': attribute type 11 has an invalid length. [ 392.297825][T29726] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 392.297825][T29726] program syz.8.6390 not setting count and/or reply_len properly [ 392.347953][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.420048][T29728] loop7: detected capacity change from 0 to 128 [ 392.491685][T29730] FAULT_INJECTION: forcing a failure. [ 392.491685][T29730] name failslab, interval 1, probability 0, space 0, times 0 [ 392.504413][T29730] CPU: 1 UID: 0 PID: 29730 Comm: syz.8.6393 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 392.504449][T29730] Tainted: [W]=WARN [ 392.504457][T29730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.504471][T29730] Call Trace: [ 392.504479][T29730] [ 392.504489][T29730] __dump_stack+0x1d/0x30 [ 392.504517][T29730] dump_stack_lvl+0x95/0xd0 [ 392.504559][T29730] dump_stack+0x15/0x1b [ 392.504582][T29730] should_fail_ex+0x263/0x280 [ 392.504684][T29730] should_failslab+0x8c/0xb0 [ 392.504706][T29730] __kmalloc_cache_noprof+0x64/0x4a0 [ 392.504752][T29730] ? io_drain_req+0x67/0x340 [ 392.504776][T29730] ? __rcu_read_unlock+0x4e/0x70 [ 392.504847][T29730] io_drain_req+0x67/0x340 [ 392.504876][T29730] ? io_queue_sqe_fallback+0x12a/0x140 [ 392.504907][T29730] io_queue_sqe_fallback+0x132/0x140 [ 392.504936][T29730] io_submit_sqes+0xd8c/0x11b0 [ 392.505033][T29730] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 392.505070][T29730] ? __rcu_read_unlock+0x4e/0x70 [ 392.505129][T29730] ? get_pid_task+0x96/0xd0 [ 392.505154][T29730] ? proc_fail_nth_write+0x13b/0x160 [ 392.505331][T29730] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 392.505363][T29730] ? vfs_write+0x86e/0x9f0 [ 392.505384][T29730] ? __rcu_read_unlock+0x4e/0x70 [ 392.505506][T29730] ? __fget_files+0x184/0x1c0 [ 392.505532][T29730] ? mutex_lock+0x57/0x90 [ 392.505618][T29730] ? mutex_unlock+0x4e/0x90 [ 392.505642][T29730] ? fput+0x8f/0xc0 [ 392.505671][T29730] __x64_sys_io_uring_enter+0x78/0x90 [ 392.505697][T29730] x64_sys_call+0x27e4/0x3000 [ 392.505792][T29730] do_syscall_64+0xc0/0x2a0 [ 392.505825][T29730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.505874][T29730] RIP: 0033:0x7f0be5dcaeb9 [ 392.505891][T29730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.505910][T29730] RSP: 002b:00007f0be4827028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 392.505930][T29730] RAX: ffffffffffffffda RBX: 00007f0be6045fa0 RCX: 00007f0be5dcaeb9 [ 392.506010][T29730] RDX: 0000000000000217 RSI: 00000000000040f9 RDI: 0000000000000003 [ 392.506080][T29730] RBP: 00007f0be4827090 R08: 0000000000000000 R09: 0000000000000000 [ 392.506095][T29730] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000002 [ 392.506109][T29730] R13: 00007f0be6046038 R14: 00007f0be6045fa0 R15: 00007ffd9cfc6218 [ 392.506157][T29730] [ 392.809397][T29743] FAULT_INJECTION: forcing a failure. [ 392.809397][T29743] name failslab, interval 1, probability 0, space 0, times 0 [ 392.822077][T29743] CPU: 1 UID: 0 PID: 29743 Comm: syz.8.6397 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 392.822108][T29743] Tainted: [W]=WARN [ 392.822178][T29743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.822219][T29743] Call Trace: [ 392.822228][T29743] [ 392.822236][T29743] __dump_stack+0x1d/0x30 [ 392.822310][T29743] dump_stack_lvl+0x95/0xd0 [ 392.822371][T29743] dump_stack+0x15/0x1b [ 392.822395][T29743] should_fail_ex+0x263/0x280 [ 392.822464][T29743] should_failslab+0x8c/0xb0 [ 392.822486][T29743] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 392.822532][T29743] ? sidtab_sid2str_get+0xa0/0x130 [ 392.822564][T29743] kmemdup_noprof+0x2b/0x70 [ 392.822649][T29743] sidtab_sid2str_get+0xa0/0x130 [ 392.822673][T29743] security_sid_to_context_core+0x1eb/0x2e0 [ 392.822699][T29743] security_sid_to_context+0x27/0x40 [ 392.822738][T29743] selinux_lsmprop_to_secctx+0x67/0xf0 [ 392.822766][T29743] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 392.822831][T29743] audit_log_subj_ctx+0xa4/0x3e0 [ 392.822870][T29743] ? skb_put+0xa9/0xf0 [ 392.822907][T29743] audit_log_task_context+0x48/0x70 [ 392.822935][T29743] audit_log_task+0xf3/0x250 [ 392.822964][T29743] ? kstrtouint+0x76/0xc0 [ 392.822990][T29743] audit_seccomp+0x60/0x100 [ 392.823086][T29743] ? __seccomp_filter+0x8db/0x1350 [ 392.823105][T29743] __seccomp_filter+0x8ec/0x1350 [ 392.823135][T29743] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 392.823167][T29743] ? vfs_write+0x86e/0x9f0 [ 392.823189][T29743] ? __rcu_read_unlock+0x4e/0x70 [ 392.823338][T29743] ? __fget_files+0x184/0x1c0 [ 392.823362][T29743] __secure_computing+0x81/0x150 [ 392.823382][T29743] syscall_trace_enter+0xce/0x1e0 [ 392.823416][T29743] do_syscall_64+0x9a/0x2a0 [ 392.823513][T29743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.823538][T29743] RIP: 0033:0x7f0be5dcaeb9 [ 392.823554][T29743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.823678][T29743] RSP: 002b:00007f0be4827028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.823699][T29743] RAX: ffffffffffffffda RBX: 00007f0be6045fa0 RCX: 00007f0be5dcaeb9 [ 392.823716][T29743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.823731][T29743] RBP: 00007f0be4827090 R08: 0000000000000000 R09: 0000000000000000 [ 392.823747][T29743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.823763][T29743] R13: 00007f0be6046038 R14: 00007f0be6045fa0 R15: 00007ffd9cfc6218 [ 392.823828][T29743] [ 393.241680][T29761] loop8: detected capacity change from 0 to 128 [ 393.340288][T29765] loop8: detected capacity change from 0 to 1024 [ 393.361123][T29765] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 393.371450][T29765] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 393.441662][T29771] 9p: Bad value for 'rfdno' [ 393.441680][T29765] __nla_validate_parse: 1 callbacks suppressed [ 393.441693][T29765] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6405'. [ 393.450015][T29771] loop1: detected capacity change from 0 to 512 [ 393.468395][T29771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.483197][T29771] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 393.491218][T29771] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 393.503368][T29771] EXT4-fs (loop1): orphan cleanup on readonly fs [ 393.509850][T29771] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 393.524536][T29771] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 393.570573][T29771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6407: bg 0: block 40: padding at end of block bitmap is not set [ 393.598441][T29771] EXT4-fs (loop1): Remounting filesystem read-only [ 393.612111][T29771] EXT4-fs (loop1): 1 truncate cleaned up [ 393.633730][T29771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.690206][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.102478][T29812] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.250331][T29819] tipc: MTU too low for tipc bearer [ 394.626179][T29840] FAULT_INJECTION: forcing a failure. [ 394.626179][T29840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.639423][T29840] CPU: 1 UID: 0 PID: 29840 Comm: syz.5.6432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.639484][T29840] Tainted: [W]=WARN [ 394.639491][T29840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.639545][T29840] Call Trace: [ 394.639551][T29840] [ 394.639559][T29840] __dump_stack+0x1d/0x30 [ 394.639606][T29840] dump_stack_lvl+0x95/0xd0 [ 394.639652][T29840] dump_stack+0x15/0x1b [ 394.639670][T29840] should_fail_ex+0x263/0x280 [ 394.639702][T29840] should_fail+0xb/0x20 [ 394.639832][T29840] should_fail_usercopy+0x1a/0x20 [ 394.639899][T29840] _copy_from_iter+0xcf/0xea0 [ 394.640010][T29840] ? skb_set_owner_w+0x19b/0x200 [ 394.640049][T29840] ? sock_alloc_send_pskb+0x469/0x500 [ 394.640069][T29840] skb_copy_datagram_from_iter+0xb2/0x480 [ 394.640161][T29840] ? skb_put+0xa9/0xf0 [ 394.640187][T29840] tun_get_user+0x90b/0x27c0 [ 394.640213][T29840] ? ref_tracker_alloc+0x1f2/0x2f0 [ 394.640329][T29840] tun_chr_write_iter+0x15e/0x210 [ 394.640353][T29840] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 394.640442][T29840] vfs_write+0x5a6/0x9f0 [ 394.640532][T29840] ksys_write+0xdc/0x1a0 [ 394.640632][T29840] __x64_sys_write+0x40/0x50 [ 394.640651][T29840] x64_sys_call+0x2847/0x3000 [ 394.640677][T29840] do_syscall_64+0xc0/0x2a0 [ 394.640725][T29840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.640750][T29840] RIP: 0033:0x7f79acfaaeb9 [ 394.640765][T29840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.640827][T29840] RSP: 002b:00007f79aba07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.640873][T29840] RAX: ffffffffffffffda RBX: 00007f79ad225fa0 RCX: 00007f79acfaaeb9 [ 394.640889][T29840] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005 [ 394.640905][T29840] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 394.640920][T29840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.640936][T29840] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 394.640983][T29840] [ 394.888796][T29844] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6434'. [ 394.974116][T29854] tipc: Started in network mode [ 394.979027][T29854] tipc: Node identity fffffffe, cluster identity 4711 [ 394.985920][T29854] tipc: Node number set to 4294967294 [ 395.028803][T29846] tipc: Enabling of bearer rejected, media not registered [ 395.055062][T29861] set_capacity_and_notify: 2 callbacks suppressed [ 395.055080][T29861] loop8: detected capacity change from 0 to 256 [ 395.188768][T29877] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6444'. [ 395.196124][T29879] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6445'. [ 395.285140][T29885] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 395.285140][T29885] program syz.8.6447 not setting count and/or reply_len properly [ 395.421282][T29900] loop8: detected capacity change from 0 to 128 [ 395.474305][T29902] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.565768][T29912] loop7: detected capacity change from 0 to 512 [ 395.588586][T29912] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 395.610964][T29912] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 395.619957][T29914] FAULT_INJECTION: forcing a failure. [ 395.619957][T29914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.633104][T29914] CPU: 1 UID: 0 PID: 29914 Comm: syz.8.6461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 395.633232][T29914] Tainted: [W]=WARN [ 395.633240][T29914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.633255][T29914] Call Trace: [ 395.633262][T29914] [ 395.633273][T29914] __dump_stack+0x1d/0x30 [ 395.633301][T29914] dump_stack_lvl+0x95/0xd0 [ 395.633327][T29914] dump_stack+0x15/0x1b [ 395.633350][T29914] should_fail_ex+0x263/0x280 [ 395.633385][T29914] should_fail+0xb/0x20 [ 395.633455][T29914] should_fail_usercopy+0x1a/0x20 [ 395.633492][T29914] _copy_from_iter+0xcf/0xea0 [ 395.633609][T29914] ? _copy_from_iter+0x13e/0xea0 [ 395.633649][T29914] copy_page_from_iter+0x178/0x2a0 [ 395.633672][T29914] skb_copy_datagram_from_iter+0x22d/0x480 [ 395.633700][T29914] tun_get_user+0x90b/0x27c0 [ 395.633807][T29914] ? ref_tracker_alloc+0x1f2/0x2f0 [ 395.633926][T29914] tun_chr_write_iter+0x15e/0x210 [ 395.633953][T29914] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 395.633975][T29914] vfs_write+0x5a6/0x9f0 [ 395.634003][T29914] ksys_write+0xdc/0x1a0 [ 395.634106][T29914] __x64_sys_write+0x40/0x50 [ 395.634138][T29914] x64_sys_call+0x2847/0x3000 [ 395.634226][T29914] do_syscall_64+0xc0/0x2a0 [ 395.634261][T29914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.634376][T29914] RIP: 0033:0x7f0be5dcaeb9 [ 395.634394][T29914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.634415][T29914] RSP: 002b:00007f0be4827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.634439][T29914] RAX: ffffffffffffffda RBX: 00007f0be6045fa0 RCX: 00007f0be5dcaeb9 [ 395.634517][T29914] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005 [ 395.634533][T29914] RBP: 00007f0be4827090 R08: 0000000000000000 R09: 0000000000000000 [ 395.634550][T29914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.634632][T29914] R13: 00007f0be6046038 R14: 00007f0be6045fa0 R15: 00007ffd9cfc6218 [ 395.634655][T29914] [ 395.714586][T29912] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -16 [ 395.868298][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 395.868315][ T29] audit: type=1326 audit(1770225190.033:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29911 comm="syz.7.6460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe186c1aeb9 code=0x0 [ 395.923129][ T29] audit: type=1326 audit(1770225190.083:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 395.946707][ T29] audit: type=1326 audit(1770225190.083:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 395.977346][ T29] audit: type=1326 audit(1770225190.083:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.000905][ T29] audit: type=1326 audit(1770225190.083:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.010765][T29924] loop5: detected capacity change from 0 to 512 [ 396.024584][ T29] audit: type=1326 audit(1770225190.083:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.054312][ T29] audit: type=1326 audit(1770225190.143:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.077942][ T29] audit: type=1326 audit(1770225190.143:8221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.082482][T29924] ext4: Unknown parameter 'smackfshat' [ 396.101494][ T29] audit: type=1326 audit(1770225190.143:8222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.101523][ T29] audit: type=1326 audit(1770225190.143:8223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29917 comm="syz.5.6462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 396.249256][T29930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29930 comm=syz.8.6466 [ 396.352342][T29942] loop5: detected capacity change from 0 to 128 [ 396.463777][T29950] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 396.463777][T29950] program syz.7.6474 not setting count and/or reply_len properly [ 396.493339][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6425'. [ 396.513250][T29953] loop7: detected capacity change from 0 to 1024 [ 396.606164][T29958] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6472'. [ 396.606463][T29954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6473'. [ 396.641623][T29953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.657274][T29954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6473'. [ 396.669282][T29953] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6475'. [ 396.751437][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.825171][T29968] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.950487][T29972] netlink: 'syz.9.6480': attribute type 1 has an invalid length. [ 396.989099][T29974] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6481'. [ 397.176555][T29995] 9p: Bad value for 'rfdno' [ 397.184514][T29995] loop7: detected capacity change from 0 to 512 [ 397.191404][T29995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.199657][T29995] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 397.207628][T29995] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 397.216688][T29995] EXT4-fs (loop7): orphan cleanup on readonly fs [ 397.223106][T29995] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 397.237717][T29995] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 397.265300][T29995] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6489: bg 0: block 40: padding at end of block bitmap is not set [ 397.285316][T29995] EXT4-fs (loop7): Remounting filesystem read-only [ 397.297928][T29995] EXT4-fs (loop7): 1 truncate cleaned up [ 397.304426][T29995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.350271][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.538057][T30028] loop5: detected capacity change from 0 to 1024 [ 397.557742][T30028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.593945][T30028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.596758][T30030] loop7: detected capacity change from 0 to 8192 [ 397.629188][T30036] 9p: Bad value for 'rfdno' [ 397.676321][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.949719][T30068] 9p: Bad value for 'rfdno' [ 398.038915][T30072] loop8: detected capacity change from 0 to 1024 [ 398.136297][T30072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.173343][T30071] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 398.209805][T30071] EXT4-fs (loop8): Remounting filesystem read-only [ 398.222740][T30071] EXT4-fs warning (device loop8): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.8.6516: cleanup dec ref error -28 [ 398.332287][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.391242][T30098] netlink: 'syz.9.6524': attribute type 21 has an invalid length. [ 398.406923][T30098] netlink: 'syz.9.6524': attribute type 21 has an invalid length. [ 398.440171][T30105] 9p: Bad value for 'rfdno' [ 398.448713][T30105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.462957][T30105] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 398.471018][T30105] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 398.480394][T30105] EXT4-fs (loop8): orphan cleanup on readonly fs [ 398.487075][T30105] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 398.501746][T30105] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 398.509194][T30105] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6527: bg 0: block 40: padding at end of block bitmap is not set [ 398.524129][T30105] EXT4-fs (loop8): Remounting filesystem read-only [ 398.530854][T30105] EXT4-fs (loop8): 1 truncate cleaned up [ 398.537141][T30105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.562368][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.607392][T30122] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.652656][T30128] __nla_validate_parse: 2 callbacks suppressed [ 398.652692][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 398.670062][T30128] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6536'. [ 398.884471][T30146] 9p: Bad value for 'rfdno' [ 398.897198][T30146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.905199][T30146] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 398.913206][T30146] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 398.921755][T30146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 398.928521][T30146] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 398.943112][T30146] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 398.950149][T30146] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6543: bg 0: block 40: padding at end of block bitmap is not set [ 398.964764][T30146] EXT4-fs (loop5): Remounting filesystem read-only [ 398.971384][T30146] EXT4-fs (loop5): 1 truncate cleaned up [ 398.977627][T30146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.012847][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.042695][T30153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6547'. [ 399.110474][T30160] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 399.147571][T30160] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 399.183092][T30160] EXT4-fs (loop7): 1 truncate cleaned up [ 399.206731][T30160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.252243][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.339334][T30174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6554'. [ 399.349491][T30174] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6554'. [ 399.400044][T30177] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6555'. [ 399.400097][T30178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6555'. [ 399.598560][T30186] 9p: Bad value for 'rfdno' [ 399.674452][T30192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.764461][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.811258][T30204] macvlan1: entered promiscuous mode [ 399.834787][T30204] dummy0: entered promiscuous mode [ 399.851450][T30204] hsr1: entered promiscuous mode [ 399.856617][T30204] hsr1: entered allmulticast mode [ 399.861703][T30204] macvlan1: entered allmulticast mode [ 399.867144][T30204] veth1_vlan: entered allmulticast mode [ 399.874324][T30204] dummy0: entered allmulticast mode [ 399.965823][T30213] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 399.965823][T30213] program syz.7.6568 not setting count and/or reply_len properly [ 400.028416][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6572'. [ 400.038195][T30221] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6572'. [ 400.117518][T30234] netlink: 'syz.9.6577': attribute type 15 has an invalid length. [ 400.125382][T30234] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6577'. [ 400.166802][T30238] program syz.5.6579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.186543][T30237] program syz.5.6579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.210279][T30243] Invalid ELF header magic: != ELF [ 400.335847][T28764] IPVS: starting estimator thread 0... [ 400.456727][T30248] IPVS: using max 2256 ests per chain, 112800 per kthread [ 400.457569][T30249] xt_policy: too many policy elements [ 400.547589][T30254] set_capacity_and_notify: 9 callbacks suppressed [ 400.547608][T30254] loop5: detected capacity change from 0 to 1024 [ 400.569196][T30254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.901321][T30263] loop1: detected capacity change from 0 to 1024 [ 400.908299][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.073173][T30263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.092391][T30271] loop5: detected capacity change from 0 to 2048 [ 401.169749][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.190980][ T3449] IPVS: stop unused estimator thread 0... [ 401.264613][T30292] loop7: detected capacity change from 0 to 736 [ 401.282260][T30294] FAULT_INJECTION: forcing a failure. [ 401.282260][T30294] name failslab, interval 1, probability 0, space 0, times 0 [ 401.295137][T30294] CPU: 0 UID: 0 PID: 30294 Comm: syz.5.6598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.295225][T30294] Tainted: [W]=WARN [ 401.295232][T30294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.295244][T30294] Call Trace: [ 401.295251][T30294] [ 401.295260][T30294] __dump_stack+0x1d/0x30 [ 401.295291][T30294] dump_stack_lvl+0x95/0xd0 [ 401.295312][T30294] dump_stack+0x15/0x1b [ 401.295372][T30294] should_fail_ex+0x263/0x280 [ 401.295441][T30294] should_failslab+0x8c/0xb0 [ 401.295465][T30294] __kmalloc_cache_noprof+0x64/0x4a0 [ 401.295490][T30294] ? io_drain_req+0x67/0x340 [ 401.295514][T30294] ? __rcu_read_unlock+0x4e/0x70 [ 401.295577][T30294] io_drain_req+0x67/0x340 [ 401.295621][T30294] ? io_queue_sqe_fallback+0x12a/0x140 [ 401.295657][T30294] io_queue_sqe_fallback+0x132/0x140 [ 401.295690][T30294] io_submit_sqes+0xd8c/0x11b0 [ 401.295785][T30294] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 401.295858][T30294] ? __rcu_read_unlock+0x4e/0x70 [ 401.295888][T30294] ? get_pid_task+0x96/0xd0 [ 401.295914][T30294] ? proc_fail_nth_write+0x13b/0x160 [ 401.295971][T30294] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.295996][T30294] ? vfs_write+0x86e/0x9f0 [ 401.296012][T30294] ? __rcu_read_unlock+0x4e/0x70 [ 401.296102][T30294] ? __fget_files+0x184/0x1c0 [ 401.296116][T30294] ? mutex_lock+0x57/0x90 [ 401.296129][T30294] ? mutex_unlock+0x4e/0x90 [ 401.296164][T30294] ? fput+0x8f/0xc0 [ 401.296180][T30294] __x64_sys_io_uring_enter+0x78/0x90 [ 401.296197][T30294] x64_sys_call+0x27e4/0x3000 [ 401.296212][T30294] do_syscall_64+0xc0/0x2a0 [ 401.296234][T30294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.296248][T30294] RIP: 0033:0x7f79acfaaeb9 [ 401.296259][T30294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.296271][T30294] RSP: 002b:00007f79aba07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 401.296356][T30294] RAX: ffffffffffffffda RBX: 00007f79ad225fa0 RCX: 00007f79acfaaeb9 [ 401.296365][T30294] RDX: 0000000000000217 RSI: 00000000000040f9 RDI: 0000000000000003 [ 401.296374][T30294] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 401.296382][T30294] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000002 [ 401.296390][T30294] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 401.296402][T30294] [ 401.586039][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 401.586055][ T29] audit: type=1326 audit(1770225195.740:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30299 comm="syz.9.6601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x0 [ 401.620835][T30302] netlink: 'syz.8.6600': attribute type 29 has an invalid length. [ 401.635737][T30302] netlink: 'syz.8.6600': attribute type 29 has an invalid length. [ 401.640867][T30308] loop7: detected capacity change from 0 to 1024 [ 401.673437][T30308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.694643][T30315] loop8: detected capacity change from 0 to 1024 [ 401.706513][T30309] xt_policy: too many policy elements [ 401.715937][T30318] FAULT_INJECTION: forcing a failure. [ 401.715937][T30318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.717849][T30315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.729494][T30318] CPU: 1 UID: 0 PID: 30318 Comm: syz.5.6606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.729533][T30318] Tainted: [W]=WARN [ 401.729541][T30318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.729554][T30318] Call Trace: [ 401.729562][T30318] [ 401.729571][T30318] __dump_stack+0x1d/0x30 [ 401.729598][T30318] dump_stack_lvl+0x95/0xd0 [ 401.729622][T30318] dump_stack+0x15/0x1b [ 401.729694][T30318] should_fail_ex+0x263/0x280 [ 401.729727][T30318] should_fail+0xb/0x20 [ 401.729756][T30318] should_fail_usercopy+0x1a/0x20 [ 401.729821][T30318] _copy_from_user+0x1c/0xb0 [ 401.729889][T30318] ___sys_sendmsg+0xc1/0x1e0 [ 401.729923][T30318] __x64_sys_sendmsg+0xd4/0x160 [ 401.729991][T30318] x64_sys_call+0x17ba/0x3000 [ 401.730024][T30318] do_syscall_64+0xc0/0x2a0 [ 401.730057][T30318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.730155][T30318] RIP: 0033:0x7f79acfaaeb9 [ 401.730172][T30318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.730193][T30318] RSP: 002b:00007f79aba07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.730214][T30318] RAX: ffffffffffffffda RBX: 00007f79ad225fa0 RCX: 00007f79acfaaeb9 [ 401.730230][T30318] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 401.730244][T30318] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 401.730259][T30318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.730282][T30318] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 401.730303][T30318] [ 401.828722][T30322] xt_CT: No such helper "syz0" [ 401.907218][T30315] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.911173][T30324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.928906][T30324] bond0: (slave bond3): Enslaving as an active interface with an up link [ 401.939015][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.959421][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.002412][T30333] loop5: detected capacity change from 0 to 512 [ 402.019563][T30333] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 402.039964][T30333] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6611: invalid indirect mapped block 2683928664 (level 1) [ 402.054327][T30333] EXT4-fs (loop5): Remounting filesystem read-only [ 402.061954][T30333] EXT4-fs (loop5): 1 truncate cleaned up [ 402.068328][T30333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.105330][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.139939][T30346] loop5: detected capacity change from 0 to 128 [ 402.161902][T30346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30346 comm=syz.5.6616 [ 402.184672][T30348] loop8: detected capacity change from 0 to 512 [ 402.191657][T30348] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 402.224241][ T29] audit: type=1326 audit(1770225196.380:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.8.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be5dcaeb9 code=0x7ffc0000 [ 402.248194][ T29] audit: type=1326 audit(1770225196.380:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.8.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be5dcaeb9 code=0x7ffc0000 [ 402.271691][ T29] audit: type=1326 audit(1770225196.380:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30347 comm="syz.8.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f0be5dcaeb9 code=0x7ffc0000 [ 402.459050][ T29] audit: type=1400 audit(1770225196.620:8413): avc: denied { append } for pid=30356 comm="syz.1.6622" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 402.484411][T30358] loop1: detected capacity change from 0 to 512 [ 402.496801][T30357] 9p: Bad value for 'rfdno' [ 402.506046][T30358] EXT4-fs (loop1): 1 orphan inode deleted [ 402.537992][ T29] audit: type=1326 audit(1770225196.699:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30365 comm="syz.9.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 402.582991][ T29] audit: type=1326 audit(1770225196.729:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30365 comm="syz.9.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 402.606640][ T29] audit: type=1326 audit(1770225196.729:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30365 comm="syz.9.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 402.630417][ T29] audit: type=1326 audit(1770225196.729:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30365 comm="syz.9.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 402.661417][ T29] audit: type=1326 audit(1770225196.769:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30365 comm="syz.9.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 402.892404][T30387] xt_policy: too many policy elements [ 402.951812][T30398] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 402.962727][T30398] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 402.972781][T30398] EXT4-fs (loop7): group descriptors corrupted! [ 403.058523][T30407] Invalid ELF header magic: != ELF [ 403.131810][T30413] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 403.148307][T30413] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6641: invalid indirect mapped block 2683928664 (level 1) [ 403.176210][T30413] EXT4-fs (loop8): Remounting filesystem read-only [ 403.187978][T30413] EXT4-fs (loop8): 1 truncate cleaned up [ 403.257306][T30420] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.300581][T30424] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 403.336232][T30424] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6643: invalid indirect mapped block 256 (level 1) [ 403.355012][T30420] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6642: bg 0: block 112: padding at end of block bitmap is not set [ 403.369961][T30424] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6643: invalid indirect mapped block 2683928664 (level 1) [ 403.409511][T28763] IPVS: starting estimator thread 0... [ 403.415165][T30424] EXT4-fs (loop8): 1 truncate cleaned up [ 403.427753][T30424] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz.8.6643: invalid fast symlink length 39 [ 403.498137][T30429] IPVS: using max 2352 ests per chain, 117600 per kthread [ 403.545433][T30420] netlink: 'syz.5.6642': attribute type 2 has an invalid length. [ 403.806349][T30448] __nla_validate_parse: 18 callbacks suppressed [ 403.806420][T30448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6653'. [ 403.848088][T30448] Invalid ELF header magic: != ELF [ 403.874182][T30454] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6654'. [ 403.884435][T30454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30454 comm=syz.9.6654 [ 403.907334][T30456] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6656'. [ 403.920738][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6654'. [ 403.938847][T30454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30454 comm=syz.9.6654 [ 403.970724][ T3449] IPVS: stop unused estimator thread 0... [ 404.009431][T30457] xt_policy: too many policy elements [ 404.020231][T30457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6655'. [ 404.156797][T30466] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 404.156797][T30466] program syz.7.6658 not setting count and/or reply_len properly [ 404.256561][T30478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.260814][T30479] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6666'. [ 404.273707][T30479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6666'. [ 404.313426][T30482] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.6667'. [ 404.829218][T30490] xt_hashlimit: size too large, truncated to 1048576 [ 404.877398][T30512] netlink: 80 bytes leftover after parsing attributes in process `syz.8.6669'. [ 404.892277][T30511] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 404.948327][T30511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6677'. [ 405.425107][T30547] xt_policy: too many policy elements [ 405.804897][T30557] set_capacity_and_notify: 9 callbacks suppressed [ 405.804917][T30557] loop7: detected capacity change from 0 to 1024 [ 405.818599][T30557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.875880][T30561] loop1: detected capacity change from 0 to 512 [ 405.902223][T30563] netlink: 'syz.7.6694': attribute type 3 has an invalid length. [ 405.969725][T30569] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 405.969725][T30569] program syz.1.6697 not setting count and/or reply_len properly [ 406.208304][T30581] 9p: Bad value for 'rfdno' [ 406.276751][T30581] loop5: detected capacity change from 0 to 512 [ 406.332661][T30581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.360592][T30581] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 406.368538][T30581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 406.377136][T30581] EXT4-fs (loop5): orphan cleanup on readonly fs [ 406.384961][T30581] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 406.399631][T30581] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 406.426321][T30581] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6702: bg 0: block 40: padding at end of block bitmap is not set [ 406.479278][T30581] EXT4-fs (loop5): Remounting filesystem read-only [ 406.504262][T30581] EXT4-fs (loop5): 1 truncate cleaned up [ 406.600981][T28763] IPVS: starting estimator thread 0... [ 406.611363][T30605] loop5: detected capacity change from 0 to 512 [ 406.660188][T30611] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.670614][T30611] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.683469][T30605] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 406.692562][T30605] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.6710: invalid indirect mapped block 2683928664 (level 1) [ 406.699802][T30607] IPVS: using max 2304 ests per chain, 115200 per kthread [ 406.708251][T30605] EXT4-fs (loop5): Remounting filesystem read-only [ 406.722350][T30605] EXT4-fs (loop5): 1 truncate cleaned up [ 406.740613][T30611] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.751122][T30611] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.819795][T30611] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.830139][T30611] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.858770][T30617] loop5: detected capacity change from 0 to 512 [ 406.867012][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 406.867025][ T29] audit: type=1326 audit(1770225201.017:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 406.908232][T30611] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.918681][T30611] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.938586][ T29] audit: type=1326 audit(1770225201.047:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 406.962253][ T29] audit: type=1326 audit(1770225201.047:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 406.985835][ T29] audit: type=1326 audit(1770225201.047:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.009237][ T29] audit: type=1326 audit(1770225201.047:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.032773][ T29] audit: type=1326 audit(1770225201.047:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.056268][ T29] audit: type=1326 audit(1770225201.047:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.079840][ T29] audit: type=1326 audit(1770225201.047:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.103362][ T29] audit: type=1326 audit(1770225201.047:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.126931][ T29] audit: type=1326 audit(1770225201.047:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30616 comm="syz.5.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79acfaaeb9 code=0x7ffc0000 [ 407.155424][T30622] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 407.155424][T30622] program syz.1.6715 not setting count and/or reply_len properly [ 407.244870][T19014] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.253260][T19014] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.266018][T19014] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.274523][T19014] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.296095][T19014] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.304537][T19014] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.316891][T30630] loop7: detected capacity change from 0 to 128 [ 407.332436][T26163] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.340896][T26163] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.357324][T30626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 407.363874][T30626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.371487][T30626] vhci_hcd vhci_hcd.0: Device attached [ 407.379394][T30635] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 407.387216][ T3449] vhci_hcd vhci_hcd.1: stop threads [ 407.392557][ T3449] vhci_hcd vhci_hcd.1: release socket [ 407.397958][ T3449] vhci_hcd vhci_hcd.1: disconnect device [ 407.438838][T26158] IPVS: stop unused estimator thread 0... [ 407.501370][T30645] loop7: detected capacity change from 0 to 128 [ 407.603469][T30648] lo speed is unknown, defaulting to 1000 [ 407.623212][T30648] lo speed is unknown, defaulting to 1000 [ 407.635819][T30648] lo speed is unknown, defaulting to 1000 [ 407.701881][T30648] infiniband sz1: set active [ 407.706592][T30648] infiniband sz1: added lo [ 407.711148][ T4735] lo speed is unknown, defaulting to 1000 [ 407.742123][T30648] RDS/IB: sz1: added [ 407.746346][T30648] smc: adding ib device sz1 with port count 1 [ 407.752790][T30648] smc: ib device sz1 port 1 has no pnetid [ 407.759037][ T4735] lo speed is unknown, defaulting to 1000 [ 407.765420][T30648] lo speed is unknown, defaulting to 1000 [ 407.818892][T30648] lo speed is unknown, defaulting to 1000 [ 407.859589][T30646] xt_hashlimit: size too large, truncated to 1048576 [ 408.012946][T30648] lo speed is unknown, defaulting to 1000 [ 408.194049][T30648] lo speed is unknown, defaulting to 1000 [ 408.297317][T30648] lo speed is unknown, defaulting to 1000 [ 408.409865][T30648] lo speed is unknown, defaulting to 1000 [ 408.426735][T30666] hsr_slave_1 (unregistering): left promiscuous mode [ 408.545957][T28762] IPVS: starting estimator thread 0... [ 408.554643][T30668] loop7: detected capacity change from 0 to 8192 [ 408.564100][T30648] lo speed is unknown, defaulting to 1000 [ 408.628392][T30648] lo speed is unknown, defaulting to 1000 [ 408.640994][T30673] IPVS: using max 2304 ests per chain, 115200 per kthread [ 408.708717][T30648] lo speed is unknown, defaulting to 1000 [ 408.723632][ T3449] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 408.776063][T30678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.856226][T30691] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 408.856226][T30691] program syz.5.6736 not setting count and/or reply_len properly [ 408.885870][T30695] __nla_validate_parse: 5 callbacks suppressed [ 408.885885][T30695] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6737'. [ 408.993689][T30706] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 408.993689][T30706] program syz.7.6741 not setting count and/or reply_len properly [ 409.156645][T30713] loop7: detected capacity change from 0 to 1024 [ 409.860284][T30730] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 409.860284][T30730] program syz.5.6750 not setting count and/or reply_len properly [ 409.897694][T30736] rdma_rxe: rxe_newlink: failed to add lo [ 409.908499][T30736] loop7: detected capacity change from 0 to 512 [ 410.087778][T30748] EXT4-fs: Ignoring removed oldalloc option [ 410.098931][T30748] EXT4-fs (loop7): 1 truncate cleaned up [ 410.184892][T30748] EXT4-fs mount: 20 callbacks suppressed [ 410.184907][T30748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.203424][T30741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.262501][T30748] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.383995][T30765] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6760'. [ 410.432023][T30742] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6752'. [ 410.458567][T30767] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.521922][T30767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.564537][T30767] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6771: bg 0: block 234: padding at end of block bitmap is not set [ 410.585256][T30777] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6763'. [ 410.599796][T30767] EXT4-fs (loop5): Remounting filesystem read-only [ 410.619072][T30764] lo speed is unknown, defaulting to 1000 [ 410.642308][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.733436][T30785] FAULT_INJECTION: forcing a failure. [ 410.733436][T30785] name failslab, interval 1, probability 0, space 0, times 0 [ 410.746816][T30785] CPU: 1 UID: 0 PID: 30785 Comm: syz.5.6764 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 410.746850][T30785] Tainted: [W]=WARN [ 410.746857][T30785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.746869][T30785] Call Trace: [ 410.746876][T30785] [ 410.746883][T30785] __dump_stack+0x1d/0x30 [ 410.746979][T30785] dump_stack_lvl+0x95/0xd0 [ 410.747018][T30785] dump_stack+0x15/0x1b [ 410.747040][T30785] should_fail_ex+0x263/0x280 [ 410.747076][T30785] should_failslab+0x8c/0xb0 [ 410.747103][T30785] __kmalloc_noprof+0xb8/0x580 [ 410.747144][T30785] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 410.747206][T30785] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 410.747324][T30785] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 410.747348][T30785] ? selinux_capable+0x31/0x40 [ 410.747373][T30785] ? security_capable+0x7b/0x90 [ 410.747401][T30785] ? ns_capable+0x7c/0xb0 [ 410.747470][T30785] genl_rcv_msg+0x432/0x470 [ 410.747492][T30785] ? __pfx_tcp_metrics_nl_cmd_del+0x10/0x10 [ 410.747519][T30785] netlink_rcv_skb+0x123/0x220 [ 410.747549][T30785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.747634][T30785] genl_rcv+0x28/0x40 [ 410.747654][T30785] netlink_unicast+0x5c0/0x690 [ 410.747684][T30785] netlink_sendmsg+0x5c8/0x6f0 [ 410.747726][T30785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.747748][T30785] ____sys_sendmsg+0x5af/0x600 [ 410.747775][T30785] ___sys_sendmsg+0x195/0x1e0 [ 410.747858][T30785] __x64_sys_sendmsg+0xd4/0x160 [ 410.747880][T30785] x64_sys_call+0x17ba/0x3000 [ 410.747905][T30785] do_syscall_64+0xc0/0x2a0 [ 410.748001][T30785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.748071][T30785] RIP: 0033:0x7f79acfaaeb9 [ 410.748086][T30785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.748107][T30785] RSP: 002b:00007f79aba07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.748129][T30785] RAX: ffffffffffffffda RBX: 00007f79ad225fa0 RCX: 00007f79acfaaeb9 [ 410.748146][T30785] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 410.748161][T30785] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 410.748201][T30785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.748216][T30785] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 410.748249][T30785] [ 411.015181][T28762] IPVS: starting estimator thread 0... [ 411.111989][T30791] IPVS: using max 2592 ests per chain, 129600 per kthread [ 411.131798][T30804] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6769'. [ 411.210906][T30812] set_capacity_and_notify: 5 callbacks suppressed [ 411.210926][T30812] loop7: detected capacity change from 0 to 512 [ 411.228608][T30800] lo speed is unknown, defaulting to 1000 [ 411.235027][T30812] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 411.267587][T30812] EXT4-fs (loop7): orphan cleanup on readonly fs [ 411.294522][T30812] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.6777: Allocating blocks 41-42 which overlap fs metadata [ 411.296167][T30818] loop5: detected capacity change from 0 to 1024 [ 411.315057][T30812] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.6777: Allocating blocks 41-42 which overlap fs metadata [ 411.335609][T30812] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.6777: Failed to acquire dquot type 1 [ 411.352239][T30812] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 411.367075][T30812] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6777: corrupted inode contents [ 411.379298][T30812] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.6777: mark_inode_dirty error [ 411.390972][T30812] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6777: corrupted inode contents [ 411.412086][T30812] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6777: mark_inode_dirty error [ 411.425080][T30818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.432230][T30812] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6777: corrupted inode contents [ 411.449752][T30812] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 411.469080][T30818] FAULT_INJECTION: forcing a failure. [ 411.469080][T30818] name failslab, interval 1, probability 0, space 0, times 0 [ 411.481868][T30818] CPU: 0 UID: 0 PID: 30818 Comm: syz.5.6779 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.481975][T30818] Tainted: [W]=WARN [ 411.482062][T30818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.482075][T30818] Call Trace: [ 411.482084][T30818] [ 411.482092][T30818] __dump_stack+0x1d/0x30 [ 411.482120][T30818] dump_stack_lvl+0x95/0xd0 [ 411.482190][T30818] dump_stack+0x15/0x1b [ 411.482209][T30818] should_fail_ex+0x263/0x280 [ 411.482237][T30818] should_failslab+0x8c/0xb0 [ 411.482260][T30818] kmem_cache_alloc_noprof+0x68/0x490 [ 411.482316][T30818] ? getname_flags+0x7f/0x3b0 [ 411.482340][T30818] getname_flags+0x7f/0x3b0 [ 411.482363][T30818] user_path_at+0x28/0x130 [ 411.482462][T30812] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6777: corrupted inode contents [ 411.482406][T30818] do_fchmodat+0x77/0x150 [ 411.482509][T30818] __x64_sys_chmod+0x38/0x50 [ 411.482532][T30818] x64_sys_call+0x2aaf/0x3000 [ 411.482560][T30818] do_syscall_64+0xc0/0x2a0 [ 411.482713][T30818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.482738][T30818] RIP: 0033:0x7f79acfaaeb9 [ 411.482755][T30818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.482775][T30818] RSP: 002b:00007f79aba07028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 411.482797][T30818] RAX: ffffffffffffffda RBX: 00007f79ad225fa0 RCX: 00007f79acfaaeb9 [ 411.482813][T30818] RDX: 0000000000000000 RSI: 000000000000035e RDI: 0000200000000040 [ 411.482833][T30818] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 411.482847][T30818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.482861][T30818] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 411.482943][T30818] [ 411.519068][T30823] loop1: detected capacity change from 0 to 1024 [ 411.542325][T30812] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.6777: mark_inode_dirty error [ 411.684450][T30812] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 411.694230][T30823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.706502][T30812] EXT4-fs (loop7): 1 truncate cleaned up [ 411.712714][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.736829][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.747762][T30812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.784494][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.822658][T30816] lo speed is unknown, defaulting to 1000 [ 411.865542][T30821] xt_hashlimit: size too large, truncated to 1048576 [ 411.981737][T30833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6785'. [ 412.002939][T30835] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6778'. [ 412.025495][T26158] IPVS: stop unused estimator thread 0... [ 412.058171][T30837] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6785'. [ 412.136463][T30836] loop5: detected capacity change from 0 to 2048 [ 412.213534][T12133] loop5: p1 p2 < > p3 p4 < p5 > [ 412.218506][T12133] loop5: partition table partially beyond EOD, truncated [ 412.256028][T12133] loop5: p1 start 8388607 is beyond EOD, truncated [ 412.262618][T12133] loop5: p2 start 4294902784 is beyond EOD, truncated [ 412.269388][T12133] loop5: p3 start 3724543488 is beyond EOD, truncated [ 412.332630][T30840] loop8: detected capacity change from 0 to 8192 [ 412.392826][T12133] loop5: p5 start 8388607 is beyond EOD, truncated [ 412.770045][T30836] loop5: p1 p2 < > p3 p4 < p5 > [ 412.775072][T30836] loop5: partition table partially beyond EOD, truncated [ 412.792764][T30847] tmpfs: Bad value for 'mpol' [ 412.842137][T30836] loop5: p1 start 8388607 is beyond EOD, truncated [ 412.848767][T30836] loop5: p2 start 4294902784 is beyond EOD, truncated [ 412.855600][T30836] loop5: p3 start 3724543488 is beyond EOD, truncated [ 412.893762][T30852] loop1: detected capacity change from 0 to 128 [ 412.917943][T30836] loop5: p5 start 8388607 is beyond EOD, truncated [ 412.943855][T30852] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 412.997653][T12133] udevd[12133]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 413.024703][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 413.024718][ T29] audit: type=1400 audit(1770225207.184:8587): avc: denied { watch_reads } for pid=30851 comm="syz.1.6787" path="/477/file0/file0" dev="loop1" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 413.066137][T30857] loop5: detected capacity change from 0 to 1024 [ 413.111308][T30857] SELinux: security_context_str_to_sid () failed with errno=-22 [ 413.144334][T12133] udevd[12133]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 413.288820][T30866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6790'. [ 413.345713][T30875] loop5: detected capacity change from 0 to 512 [ 413.363830][T30875] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.389332][T30875] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 413.402050][T30875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 413.410112][T30875] EXT4-fs (loop5): orphan cleanup on readonly fs [ 413.416854][T30875] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6789: bg 0: block 361: padding at end of block bitmap is not set [ 413.431461][T30875] EXT4-fs (loop5): Remounting filesystem read-only [ 413.441936][T30875] EXT4-fs (loop5): 1 truncate cleaned up [ 413.464090][T30875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 413.580118][T30890] lo speed is unknown, defaulting to 1000 [ 413.670533][T30894] serio: Serial port ttyS3 [ 413.769634][T30867] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.6789: dx entry: limit 0 != root limit 125 [ 413.781531][T30867] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.6789: Corrupt directory, running e2fsck is recommended [ 413.867132][T30892] xt_hashlimit: size too large, truncated to 1048576 [ 413.908797][T30901] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6802'. [ 413.991310][T30908] rtc_cmos 00:00: Alarms can be up to one day in the future [ 414.115915][T30912] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.6807'. [ 414.244303][ T29] audit: type=1400 audit(1770225208.404:8588): avc: denied { search } for pid=30915 comm="syz.1.6809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 414.286385][T30916] lo speed is unknown, defaulting to 1000 [ 414.302091][T30916] lo speed is unknown, defaulting to 1000 [ 414.310645][T30916] lo speed is unknown, defaulting to 1000 [ 414.334328][T30916] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 414.345113][T30916] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 414.368480][T30916] lo speed is unknown, defaulting to 1000 [ 414.375273][T30916] lo speed is unknown, defaulting to 1000 [ 414.381321][T30916] lo speed is unknown, defaulting to 1000 [ 414.523981][T30916] lo speed is unknown, defaulting to 1000 [ 414.530106][T30916] lo speed is unknown, defaulting to 1000 [ 414.536327][T30916] lo speed is unknown, defaulting to 1000 [ 414.551219][T30916] lo speed is unknown, defaulting to 1000 [ 414.572348][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 414.603440][T30924] loop8: detected capacity change from 0 to 1024 [ 414.651379][T30927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6812'. [ 414.661730][T30926] loop1: detected capacity change from 0 to 512 [ 414.681689][T28764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 414.685668][T30926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.689338][T28764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 414.703110][T28764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 414.710800][T28764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 414.718184][T28764] rtc rtc0: __rtc_set_alarm: err=-22 [ 414.729490][T30926] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 414.737564][T30926] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 414.750966][T30924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.763604][T30926] EXT4-fs (loop1): orphan cleanup on readonly fs [ 414.771542][T30926] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 414.789979][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.822548][T30937] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6816'. [ 414.838241][T30939] bridge5: entered allmulticast mode [ 414.855614][T30926] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 414.870362][T30926] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 414.893301][T30942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.908230][T30926] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6814: bg 0: block 40: padding at end of block bitmap is not set [ 414.918544][T30942] FAULT_INJECTION: forcing a failure. [ 414.918544][T30942] name failslab, interval 1, probability 0, space 0, times 0 [ 414.935374][T30942] CPU: 0 UID: 0 PID: 30942 Comm: syz.8.6817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 414.935409][T30942] Tainted: [W]=WARN [ 414.935415][T30942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.935429][T30942] Call Trace: [ 414.935436][T30942] [ 414.935446][T30942] __dump_stack+0x1d/0x30 [ 414.935475][T30942] dump_stack_lvl+0x95/0xd0 [ 414.935563][T30942] dump_stack+0x15/0x1b [ 414.935624][T30942] should_fail_ex+0x263/0x280 [ 414.935658][T30942] should_failslab+0x8c/0xb0 [ 414.935680][T30942] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 414.935757][T30942] ? __d_alloc+0x37/0x340 [ 414.935808][T30942] __d_alloc+0x37/0x340 [ 414.935912][T30942] d_alloc_parallel+0x54/0xce0 [ 414.935948][T30942] ? lockref_get_not_dead+0x120/0x1c0 [ 414.935972][T30942] ? __rcu_read_unlock+0x4e/0x70 [ 414.936032][T30942] ? try_to_unlazy+0x3c0/0x5b0 [ 414.936064][T30942] __lookup_slow+0x96/0x260 [ 414.936097][T30942] lookup_slow+0x3c/0x60 [ 414.936131][T30942] path_lookupat+0x2f7/0x500 [ 414.936158][T30942] filename_lookup+0x190/0x390 [ 414.936208][T30942] user_path_at+0x3e/0x130 [ 414.936234][T30942] do_fchmodat+0x77/0x150 [ 414.936304][T30942] __x64_sys_chmod+0x38/0x50 [ 414.936332][T30942] x64_sys_call+0x2aaf/0x3000 [ 414.936400][T30942] do_syscall_64+0xc0/0x2a0 [ 414.936475][T30942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.936566][T30942] RIP: 0033:0x7f0be5dcaeb9 [ 414.936582][T30942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.936603][T30942] RSP: 002b:00007f0be4827028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 414.936627][T30942] RAX: ffffffffffffffda RBX: 00007f0be6045fa0 RCX: 00007f0be5dcaeb9 [ 414.936717][T30942] RDX: 0000000000000000 RSI: 000000000000035e RDI: 0000200000000040 [ 414.936730][T30942] RBP: 00007f0be4827090 R08: 0000000000000000 R09: 0000000000000000 [ 414.936748][T30942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.936809][T30942] R13: 00007f0be6046038 R14: 00007f0be6045fa0 R15: 00007ffd9cfc6218 [ 414.936827][T30942] [ 414.938131][T30926] EXT4-fs (loop1): Remounting filesystem read-only [ 415.154654][T30926] EXT4-fs (loop1): 1 truncate cleaned up [ 415.155100][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.160776][T30926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.196502][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.231708][T30949] netlink: 'syz.1.6821': attribute type 11 has an invalid length. [ 415.254735][T30950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.322221][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.331874][T30956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.365702][T30956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.406067][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.519340][ T29] audit: type=1326 audit(1770225209.673:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 415.549214][ T29] audit: type=1326 audit(1770225209.673:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 415.572863][ T29] audit: type=1326 audit(1770225209.673:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 415.596603][ T29] audit: type=1326 audit(1770225209.673:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 415.620406][ T29] audit: type=1326 audit(1770225209.673:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30963 comm="syz.1.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737da9aeb9 code=0x7ffc0000 [ 415.662537][T30973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6830'. [ 415.681074][T30975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.708281][T30975] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 415.716261][T30975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 415.724747][T30975] EXT4-fs (loop8): orphan cleanup on readonly fs [ 415.731209][T30975] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 415.789976][T30975] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 415.804601][T30975] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 415.824615][T30975] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6831: bg 0: block 40: padding at end of block bitmap is not set [ 415.828186][T30981] netlink: 'syz.5.6833': attribute type 11 has an invalid length. [ 415.849441][T30975] EXT4-fs (loop8): Remounting filesystem read-only [ 415.878191][T30975] EXT4-fs (loop8): 1 truncate cleaned up [ 415.884766][T30975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.935733][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.965371][T30986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6834'. [ 415.997954][T30986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.005404][T30986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.013529][T30986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.021042][T30986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.049197][T30988] syzkaller0: entered promiscuous mode [ 416.054857][T30988] syzkaller0: entered allmulticast mode [ 416.062898][T30988] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 416.072981][ T29] audit: type=1400 audit(1770225210.233:8594): avc: denied { read } for pid=30987 comm="syz.8.6836" path="socket:[94743]" dev="sockfs" ino=94743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.354842][T31003] set_capacity_and_notify: 5 callbacks suppressed [ 416.354861][T31003] loop1: detected capacity change from 0 to 128 [ 416.521606][T31030] loop1: detected capacity change from 0 to 512 [ 416.596092][T31036] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6854'. [ 416.605735][T31036] netlink: 'syz.9.6854': attribute type 39 has an invalid length. [ 416.662565][T31045] loop7: detected capacity change from 0 to 1024 [ 416.669408][T31045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.706409][T31045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.727742][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.927588][T31066] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6865'. [ 417.112609][T31094] FAULT_INJECTION: forcing a failure. [ 417.112609][T31094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.125822][T31094] CPU: 0 UID: 0 PID: 31094 Comm: syz.7.6877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 417.125855][T31094] Tainted: [W]=WARN [ 417.125862][T31094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.125947][T31094] Call Trace: [ 417.125954][T31094] [ 417.125961][T31094] __dump_stack+0x1d/0x30 [ 417.125988][T31094] dump_stack_lvl+0x95/0xd0 [ 417.126012][T31094] dump_stack+0x15/0x1b [ 417.126049][T31094] should_fail_ex+0x263/0x280 [ 417.126081][T31094] should_fail+0xb/0x20 [ 417.126108][T31094] should_fail_usercopy+0x1a/0x20 [ 417.126196][T31094] _copy_from_user+0x1c/0xb0 [ 417.126276][T31094] autofs_dev_ioctl+0xdd/0x6a0 [ 417.126331][T31094] ? mutex_lock+0x57/0x90 [ 417.126357][T31094] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 417.126387][T31094] __se_sys_ioctl+0xce/0x140 [ 417.126496][T31094] __x64_sys_ioctl+0x43/0x50 [ 417.126531][T31094] x64_sys_call+0x14b0/0x3000 [ 417.126554][T31094] do_syscall_64+0xc0/0x2a0 [ 417.126650][T31094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.126675][T31094] RIP: 0033:0x7fe186c1aeb9 [ 417.126693][T31094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.126714][T31094] RSP: 002b:00007fe185677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.126735][T31094] RAX: ffffffffffffffda RBX: 00007fe186e95fa0 RCX: 00007fe186c1aeb9 [ 417.126790][T31094] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003 [ 417.126805][T31094] RBP: 00007fe185677090 R08: 0000000000000000 R09: 0000000000000000 [ 417.126821][T31094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.126833][T31094] R13: 00007fe186e96038 R14: 00007fe186e95fa0 R15: 00007fffc3358898 [ 417.126852][T31094] [ 417.162381][T31076] batadv_slave_0: entered promiscuous mode [ 417.215661][T31098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6874'. [ 417.337293][T31105] loop7: detected capacity change from 0 to 512 [ 417.371957][T31105] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 417.383533][T31105] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 417.393666][T31105] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6881: Corrupt directory, running e2fsck is recommended [ 417.412164][T31105] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 417.420433][T31105] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.6881: corrupted in-inode xattr: e_name out of bounds [ 417.435145][T31105] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6881: couldn't read orphan inode 15 (err -117) [ 417.453343][T31076] batadv_slave_0: left promiscuous mode [ 417.460898][T31105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.462232][T31114] netlink: 'syz.9.6884': attribute type 3 has an invalid length. [ 417.511093][T31119] loop8: detected capacity change from 0 to 512 [ 417.525026][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.526612][T31119] EXT4-fs: dax option not supported [ 417.592230][T31128] loop7: detected capacity change from 0 to 2048 [ 417.643224][T31130] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.6891'. [ 417.710370][T31139] loop8: detected capacity change from 0 to 2048 [ 417.788044][T31134] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 417.827975][T31136] lo speed is unknown, defaulting to 1000 [ 417.896339][T31136] lo speed is unknown, defaulting to 1000 [ 417.964345][T31156] loop7: detected capacity change from 0 to 512 [ 417.975190][T31156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.993017][T31156] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 418.001450][T31156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 418.018986][T31156] EXT4-fs (loop7): orphan cleanup on readonly fs [ 418.045848][T31156] __quota_error: 98 callbacks suppressed [ 418.045859][T31156] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 418.068484][T31159] loop5: detected capacity change from 0 to 2048 [ 418.109981][T31156] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 418.124631][T31156] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 418.156449][T31156] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6901: bg 0: block 40: padding at end of block bitmap is not set [ 418.205961][T31156] EXT4-fs (loop7): Remounting filesystem read-only [ 418.212604][T31156] EXT4-fs (loop7): 1 truncate cleaned up [ 418.221945][T31156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.269488][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.326200][T31163] loop7: detected capacity change from 0 to 128 [ 418.405176][ T29] audit: type=1326 audit(1770225212.552:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.457493][ T29] audit: type=1326 audit(1770225212.602:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.506329][ T29] audit: type=1326 audit(1770225212.662:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.537638][ T29] audit: type=1326 audit(1770225212.691:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.561290][ T29] audit: type=1326 audit(1770225212.691:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.584845][ T29] audit: type=1326 audit(1770225212.691:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.608307][ T29] audit: type=1326 audit(1770225212.691:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.631986][ T29] audit: type=1326 audit(1770225212.691:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.655520][ T29] audit: type=1326 audit(1770225212.691:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31151 comm="syz.9.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 418.758502][T31180] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 418.766144][T31180] FAT-fs (loop7): Filesystem has been set read-only [ 418.860371][T31190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.884925][T31190] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 418.892903][T31190] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 418.916126][T31190] EXT4-fs (loop1): orphan cleanup on readonly fs [ 418.926136][T31190] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 418.940690][T31190] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 418.956729][T31190] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6913: bg 0: block 40: padding at end of block bitmap is not set [ 418.971719][T31190] EXT4-fs (loop1): Remounting filesystem read-only [ 418.978421][T31190] EXT4-fs (loop1): 1 truncate cleaned up [ 418.984541][T31190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.035435][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.094316][T31202] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.122811][T31199] lo speed is unknown, defaulting to 1000 [ 419.158357][T21885] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 419.173453][T31199] lo speed is unknown, defaulting to 1000 [ 419.194123][T28763] IPVS: starting estimator thread 0... [ 419.245727][T31209] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 419.245727][T31209] program syz.5.6920 not setting count and/or reply_len properly [ 419.286123][T31207] IPVS: using max 2400 ests per chain, 120000 per kthread [ 419.375483][T31230] __nla_validate_parse: 2 callbacks suppressed [ 419.375501][T31230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6928'. [ 419.400742][T31233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.414586][T31233] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 419.422606][T31233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 419.443062][T31233] EXT4-fs (loop7): orphan cleanup on readonly fs [ 419.452568][T31233] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 419.467204][T31233] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 419.478091][T31233] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6927: bg 0: block 40: padding at end of block bitmap is not set [ 419.492799][T31233] EXT4-fs (loop7): Remounting filesystem read-only [ 419.499708][T31233] EXT4-fs (loop7): 1 truncate cleaned up [ 419.505820][T31233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.542475][T31240] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6931'. [ 419.579866][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.614866][T31244] netlink: 'syz.7.6933': attribute type 10 has an invalid length. [ 419.625963][T31242] FAULT_INJECTION: forcing a failure. [ 419.625963][T31242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.635870][T31246] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 419.635870][T31246] program syz.1.6934 not setting count and/or reply_len properly [ 419.639127][T31242] CPU: 1 UID: 0 PID: 31242 Comm: syz.5.6932 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 419.639162][T31242] Tainted: [W]=WARN [ 419.639170][T31242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.639190][T31242] Call Trace: [ 419.639198][T31242] [ 419.639208][T31242] __dump_stack+0x1d/0x30 [ 419.639297][T31242] dump_stack_lvl+0x95/0xd0 [ 419.639321][T31242] dump_stack+0x15/0x1b [ 419.639342][T31242] should_fail_ex+0x263/0x280 [ 419.639375][T31242] should_fail+0xb/0x20 [ 419.639470][T31242] should_fail_usercopy+0x1a/0x20 [ 419.639504][T31242] _copy_from_user+0x1c/0xb0 [ 419.639600][T31242] memdup_user+0x5e/0xd0 [ 419.639622][T31242] autofs_dev_ioctl+0x171/0x6a0 [ 419.639733][T31242] ? mutex_lock+0x57/0x90 [ 419.639759][T31242] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 419.639797][T31242] __se_sys_ioctl+0xce/0x140 [ 419.639830][T31242] __x64_sys_ioctl+0x43/0x50 [ 419.639873][T31242] x64_sys_call+0x14b0/0x3000 [ 419.639901][T31242] do_syscall_64+0xc0/0x2a0 [ 419.639932][T31242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.639956][T31242] RIP: 0033:0x7f79acfaaeb9 [ 419.640022][T31242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.640042][T31242] RSP: 002b:00007f79aba07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.640064][T31242] RAX: ffffffffffffffda RBX: 00007f79ad225fa0 RCX: 00007f79acfaaeb9 [ 419.640151][T31242] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000004 [ 419.640166][T31242] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 419.640194][T31242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.640207][T31242] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 419.640229][T31242] [ 419.640796][T31244] veth0_vlan: entered allmulticast mode [ 419.913838][T31244] veth0_vlan: left promiscuous mode [ 419.935184][T31244] veth0_vlan: entered promiscuous mode [ 419.953840][T31244] team0: Device veth0_vlan failed to register rx_handler [ 419.968193][T31253] tipc: MTU too low for tipc bearer [ 419.988899][T31261] netlink: 'syz.5.6940': attribute type 12 has an invalid length. [ 420.022208][T31267] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6942'. [ 420.071146][T31270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.082839][T31270] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 420.090892][T31270] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 420.100234][T31270] EXT4-fs (loop5): orphan cleanup on readonly fs [ 420.116579][T31270] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 420.131402][T31270] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 420.162327][T31270] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6943: bg 0: block 40: padding at end of block bitmap is not set [ 420.180269][T31270] EXT4-fs (loop5): Remounting filesystem read-only [ 420.186935][T31270] EXT4-fs (loop5): 1 truncate cleaned up [ 420.192907][T31270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.206284][T31280] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6946'. [ 420.223017][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.631734][T31303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6955'. [ 420.662339][T31305] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 420.662339][T31305] program syz.1.6956 not setting count and/or reply_len properly [ 420.708433][T31309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.718224][T31309] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 420.726177][T31309] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 420.734450][T31309] EXT4-fs (loop1): orphan cleanup on readonly fs [ 420.741095][T31309] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 420.755711][T31309] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 420.762759][T31309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6958: bg 0: block 40: padding at end of block bitmap is not set [ 420.777041][T31309] EXT4-fs (loop1): Remounting filesystem read-only [ 420.783565][T31309] EXT4-fs (loop1): 1 truncate cleaned up [ 420.789662][T31309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.811450][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.844424][T31315] FAULT_INJECTION: forcing a failure. [ 420.844424][T31315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.857607][T31315] CPU: 1 UID: 0 PID: 31315 Comm: syz.8.6960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 420.857639][T31315] Tainted: [W]=WARN [ 420.857645][T31315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.857671][T31315] Call Trace: [ 420.857678][T31315] [ 420.857687][T31315] __dump_stack+0x1d/0x30 [ 420.857775][T31315] dump_stack_lvl+0x95/0xd0 [ 420.857799][T31315] dump_stack+0x15/0x1b [ 420.857819][T31315] should_fail_ex+0x263/0x280 [ 420.857850][T31315] should_fail+0xb/0x20 [ 420.857917][T31315] should_fail_usercopy+0x1a/0x20 [ 420.857977][T31315] _copy_from_user+0x1c/0xb0 [ 420.857999][T31315] memdup_user+0x5e/0xd0 [ 420.858018][T31315] autofs_dev_ioctl+0x171/0x6a0 [ 420.858068][T31315] ? mutex_lock+0x57/0x90 [ 420.858114][T31315] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 420.858145][T31315] __se_sys_ioctl+0xce/0x140 [ 420.858175][T31315] __x64_sys_ioctl+0x43/0x50 [ 420.858255][T31315] x64_sys_call+0x14b0/0x3000 [ 420.858278][T31315] do_syscall_64+0xc0/0x2a0 [ 420.858309][T31315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.858404][T31315] RIP: 0033:0x7f0be5dcaeb9 [ 420.858419][T31315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.858439][T31315] RSP: 002b:00007f0be4827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.858463][T31315] RAX: ffffffffffffffda RBX: 00007f0be6045fa0 RCX: 00007f0be5dcaeb9 [ 420.858525][T31315] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003 [ 420.858538][T31315] RBP: 00007f0be4827090 R08: 0000000000000000 R09: 0000000000000000 [ 420.858551][T31315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.858563][T31315] R13: 00007f0be6046038 R14: 00007f0be6045fa0 R15: 00007ffd9cfc6218 [ 420.858669][T31315] [ 421.132963][T31328] No such timeout policy "syz1" [ 421.146109][T31329] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 421.169620][T31331] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6967'. [ 421.289466][T31337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.316185][T31337] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 421.324231][T31337] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 421.347392][T31343] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 421.347392][T31343] program syz.5.6968 not setting count and/or reply_len properly [ 421.373635][T31341] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6961'. [ 421.387376][T31337] EXT4-fs (loop7): orphan cleanup on readonly fs [ 421.420504][T31337] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 421.435178][T31337] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 421.467721][T31337] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6969: bg 0: block 40: padding at end of block bitmap is not set [ 421.483185][T31337] EXT4-fs (loop7): Remounting filesystem read-only [ 421.537214][T31337] EXT4-fs (loop7): 1 truncate cleaned up [ 421.553456][T31337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.581372][T31352] set_capacity_and_notify: 12 callbacks suppressed [ 421.581390][T31352] loop8: detected capacity change from 0 to 512 [ 421.604974][T31352] EXT4-fs: Ignoring removed orlov option [ 421.616054][T31352] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 421.630150][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.644156][T31352] loop8: detected capacity change from 0 to 512 [ 421.741579][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6973'. [ 421.751266][T31352] EXT4-fs (loop8): orphan cleanup on readonly fs [ 421.762681][T31352] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 421.778532][T31352] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 421.785880][T31352] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.6972: bad orphan inode 14 [ 421.799832][T31352] ext4_test_bit(bit=13, block=18) = 1 [ 421.805210][T31352] is_bad_inode(inode)=0 [ 421.809378][T31352] NEXT_ORPHAN(inode)=0 [ 421.813437][T31352] max_ino=32 [ 421.816609][T31352] i_nlink=1 [ 421.844796][T31352] EXT4-fs (loop8): 1 truncate cleaned up [ 421.855320][T31352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.906803][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.943958][T31358] loop8: detected capacity change from 0 to 512 [ 422.072909][T31362] loop1: detected capacity change from 0 to 736 [ 422.208524][T31370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6980'. [ 422.217506][T31370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6980'. [ 422.264661][T31371] xt_TPROXY: Can be used only with -p tcp or -p udp [ 422.301384][T31374] loop5: detected capacity change from 0 to 8192 [ 422.350871][T31376] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 422.350871][T31376] program syz.1.6982 not setting count and/or reply_len properly [ 422.420983][T31379] loop1: detected capacity change from 0 to 512 [ 422.427988][T31379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.454155][T31379] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 422.462199][T31379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 422.471091][T31379] EXT4-fs (loop1): orphan cleanup on readonly fs [ 422.487673][T31379] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 422.502302][T31379] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 422.509381][T31379] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6983: bg 0: block 40: padding at end of block bitmap is not set [ 422.524690][T31379] EXT4-fs (loop1): Remounting filesystem read-only [ 422.531477][T31379] EXT4-fs (loop1): 1 truncate cleaned up [ 422.538133][T31379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 422.568259][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.577588][T31382] loop7: detected capacity change from 0 to 512 [ 422.615119][T31382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.640059][T31382] ext4 filesystem being mounted at /203/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.654435][T31389] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 422.657552][T31390] netlink: 'syz.1.6986': attribute type 12 has an invalid length. [ 422.674083][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.696396][T31390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 422.723634][T31394] loop7: detected capacity change from 0 to 128 [ 422.790148][T31396] loop7: detected capacity change from 0 to 736 [ 422.894717][T31404] loop7: detected capacity change from 0 to 1024 [ 422.902292][T31404] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 422.915369][T31404] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.6992: lblock 2 mapped to illegal pblock 2 (length 1) [ 422.931994][T31404] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.6992: lblock 0 mapped to illegal pblock 48 (length 1) [ 422.946671][T31404] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.6992: Failed to acquire dquot type 0 [ 422.958281][T31404] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 422.980591][T31404] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.6992: mark_inode_dirty error [ 423.007558][T31404] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 423.017927][T31404] EXT4-fs (loop7): 1 orphan inode deleted [ 423.024279][T31404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.090970][T31409] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.6992: Invalid inode table block 1 in block_group 0 [ 423.103791][T31409] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 423.128008][T31409] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.6992: mark_inode_dirty error [ 423.232503][T31413] 8021q: VLANs not supported on ipvlan1 [ 423.289151][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 423.289166][ T29] audit: type=1326 audit(1770225217.439:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.319594][ T29] audit: type=1326 audit(1770225217.439:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.348369][ T29] audit: type=1326 audit(1770225217.469:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.371799][ T29] audit: type=1326 audit(1770225217.469:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.395363][ T29] audit: type=1326 audit(1770225217.469:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.418870][ T29] audit: type=1326 audit(1770225217.499:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.442410][ T29] audit: type=1326 audit(1770225217.499:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.465920][ T29] audit: type=1326 audit(1770225217.499:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.489656][ T29] audit: type=1326 audit(1770225217.499:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.513049][ T29] audit: type=1326 audit(1770225217.499:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31414 comm="syz.9.6994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efceec6aeb9 code=0x7ffc0000 [ 423.734689][T19013] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm kworker/u8:24: Invalid inode table block 1 in block_group 0 [ 423.760230][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.770150][T31434] FAULT_INJECTION: forcing a failure. [ 423.770150][T31434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.783329][T31434] CPU: 0 UID: 0 PID: 31434 Comm: syz.1.7005 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 423.783375][T31434] Tainted: [W]=WARN [ 423.783382][T31434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.783401][T31434] Call Trace: [ 423.783476][T31434] [ 423.783485][T31434] __dump_stack+0x1d/0x30 [ 423.783568][T31434] dump_stack_lvl+0x95/0xd0 [ 423.783652][T31434] dump_stack+0x15/0x1b [ 423.783676][T31434] should_fail_ex+0x263/0x280 [ 423.783716][T31434] should_fail+0xb/0x20 [ 423.783747][T31434] should_fail_usercopy+0x1a/0x20 [ 423.783781][T31434] _copy_from_user+0x1c/0xb0 [ 423.783803][T31434] ___sys_sendmsg+0xc1/0x1e0 [ 423.783896][T31434] __x64_sys_sendmsg+0xd4/0x160 [ 423.783924][T31434] x64_sys_call+0x17ba/0x3000 [ 423.783947][T31434] do_syscall_64+0xc0/0x2a0 [ 423.784047][T31434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.784086][T31434] RIP: 0033:0x7f737da9aeb9 [ 423.784103][T31434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.784187][T31434] RSP: 002b:00007f737c4f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.784207][T31434] RAX: ffffffffffffffda RBX: 00007f737dd15fa0 RCX: 00007f737da9aeb9 [ 423.784235][T31434] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004 [ 423.784256][T31434] RBP: 00007f737c4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 423.784271][T31434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.784284][T31434] R13: 00007f737dd16038 R14: 00007f737dd15fa0 R15: 00007ffd39236d88 [ 423.784310][T31434] [ 423.784368][T19013] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 423.862135][T31444] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 423.872050][T19013] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 423.929303][T31447] tmpfs: Bad value for 'mpol' [ 423.937153][T27615] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 423.998773][T27615] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 424.040743][T31447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.056375][T27615] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 424.070481][T31442] netlink: 'syz.8.7004': attribute type 4 has an invalid length. [ 424.209352][T31471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.229315][T31471] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 424.237370][T31471] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 424.265198][T31471] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.275114][T31471] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 424.289727][T31471] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 424.304325][T31471] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7017: bg 0: block 40: padding at end of block bitmap is not set [ 424.319117][T31471] EXT4-fs (loop7): Remounting filesystem read-only [ 424.325736][T31471] EXT4-fs (loop7): 1 truncate cleaned up [ 424.331794][T31471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.397902][T27615] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.530027][T31504] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.536594][T31504] FAULT_INJECTION: forcing a failure. [ 424.536594][T31504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.549858][T31504] CPU: 1 UID: 0 PID: 31504 Comm: syz.5.7030 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 424.549896][T31504] Tainted: [W]=WARN [ 424.549904][T31504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.549934][T31504] Call Trace: [ 424.549942][T31504] [ 424.549950][T31504] __dump_stack+0x1d/0x30 [ 424.549975][T31504] dump_stack_lvl+0x95/0xd0 [ 424.550001][T31504] dump_stack+0x15/0x1b [ 424.550024][T31504] should_fail_ex+0x263/0x280 [ 424.550080][T31504] should_fail+0xb/0x20 [ 424.550109][T31504] should_fail_usercopy+0x1a/0x20 [ 424.550158][T31504] _copy_from_user+0x1c/0xb0 [ 424.550182][T31504] kstrtouint_from_user+0x69/0xf0 [ 424.550217][T31504] proc_fail_nth_write+0x50/0x160 [ 424.550263][T31504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 424.550292][T31504] vfs_write+0x269/0x9f0 [ 424.550361][T31504] ? __rcu_read_unlock+0x4e/0x70 [ 424.550392][T31504] ? __fget_files+0x184/0x1c0 [ 424.550418][T31504] ? mutex_lock+0x57/0x90 [ 424.550507][T31504] ksys_write+0xdc/0x1a0 [ 424.550529][T31504] __x64_sys_write+0x40/0x50 [ 424.550555][T31504] x64_sys_call+0x2847/0x3000 [ 424.550582][T31504] do_syscall_64+0xc0/0x2a0 [ 424.550614][T31504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.550715][T31504] RIP: 0033:0x7f79acf6b78e [ 424.550735][T31504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.550787][T31504] RSP: 002b:00007f79aba06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 424.550806][T31504] RAX: ffffffffffffffda RBX: 00007f79aba076c0 RCX: 00007f79acf6b78e [ 424.550821][T31504] RDX: 0000000000000001 RSI: 00007f79aba070a0 RDI: 0000000000000003 [ 424.550835][T31504] RBP: 00007f79aba07090 R08: 0000000000000000 R09: 0000000000000000 [ 424.550849][T31504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.550935][T31504] R13: 00007f79ad226038 R14: 00007f79ad225fa0 R15: 00007fff6af58138 [ 424.550958][T31504] [ 424.812808][T31508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.845624][T31517] __nla_validate_parse: 3 callbacks suppressed [ 424.845696][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7034'. [ 425.043547][T31530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7039'. [ 425.415872][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.430412][T31551] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7046'. [ 425.458787][T31553] ieee802154 phy1 wpan1: encryption failed: -22 [ 425.821226][T31583] dummy0: entered promiscuous mode [ 425.826747][T31583] vlan2: entered promiscuous mode [ 425.993658][T31595] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 425.993658][T31595] program syz.5.7061 not setting count and/or reply_len properly [ 426.201683][T31604] EXT4-fs: Ignoring removed orlov option [ 426.211978][T31604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.358765][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.445840][T31624] caif0: entered promiscuous mode [ 426.526966][T31626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7067'. [ 426.680018][T31637] FAULT_INJECTION: forcing a failure. [ 426.680018][T31637] name failslab, interval 1, probability 0, space 0, times 0 [ 426.692802][T31637] CPU: 0 UID: 0 PID: 31637 Comm: syz.8.7070 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 426.692840][T31637] Tainted: [W]=WARN [ 426.692848][T31637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.692995][T31637] Call Trace: [ 426.693003][T31637] [ 426.693012][T31637] __dump_stack+0x1d/0x30 [ 426.693072][T31637] dump_stack_lvl+0x95/0xd0 [ 426.693097][T31637] dump_stack+0x15/0x1b [ 426.693120][T31637] should_fail_ex+0x263/0x280 [ 426.693209][T31637] should_failslab+0x8c/0xb0 [ 426.693231][T31637] kmem_cache_alloc_noprof+0x68/0x490 [ 426.693334][T31637] ? getname_flags+0x7f/0x3b0 [ 426.693356][T31637] ? fput+0x8f/0xc0 [ 426.693439][T31637] getname_flags+0x7f/0x3b0 [ 426.693467][T31637] __x64_sys_mkdirat+0x40/0x60 [ 426.693487][T31637] x64_sys_call+0x30c/0x3000 [ 426.693511][T31637] do_syscall_64+0xc0/0x2a0 [ 426.693618][T31637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.693646][T31637] RIP: 0033:0x7f0be5dcaeb9 [ 426.693682][T31637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.693702][T31637] RSP: 002b:00007f0be4806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 426.693725][T31637] RAX: ffffffffffffffda RBX: 00007f0be6046090 RCX: 00007f0be5dcaeb9 [ 426.693740][T31637] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 426.693792][T31637] RBP: 00007f0be4806090 R08: 0000000000000000 R09: 0000000000000000 [ 426.693806][T31637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.693850][T31637] R13: 00007f0be6046128 R14: 00007f0be6046090 R15: 00007ffd9cfc6218 [ 426.693893][T31637] [ 426.992313][T31651] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7080'. [ 427.114457][T31652] lo speed is unknown, defaulting to 1000 [ 427.243122][T31652] lo speed is unknown, defaulting to 1000 [ 427.314343][T31670] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7087'. [ 427.329936][T31670] set_capacity_and_notify: 10 callbacks suppressed [ 427.329952][T31670] loop5: detected capacity change from 0 to 512 [ 427.343788][T31670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.351009][T31670] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 427.362307][T31670] EXT4-fs (loop5): 1 truncate cleaned up [ 427.368251][T31670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.381383][T31670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.588625][T31684] loop5: detected capacity change from 0 to 1024 [ 427.595702][T31684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.620701][T31684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.669522][T23649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.788715][T31690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7094'. [ 427.886792][T31695] loop1: detected capacity change from 0 to 1024 [ 427.916655][T31695] EXT4-fs: Ignoring removed bh option [ 427.949478][T31695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.970647][T31695] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7096'. [ 427.981542][T31697] loop5: detected capacity change from 0 to 8192 [ 428.033329][T31707] loop8: detected capacity change from 0 to 1024 [ 428.055431][T31705] IPVS: length: 56 != 8 [ 428.077813][T31707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.123635][T31713] FAULT_INJECTION: forcing a failure. [ 428.123635][T31713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.136757][T31713] CPU: 0 UID: 0 PID: 31713 Comm: syz.7.7101 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 428.136798][T31713] Tainted: [W]=WARN [ 428.136806][T31713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.136818][T31713] Call Trace: [ 428.136825][T31713] [ 428.136949][T31713] __dump_stack+0x1d/0x30 [ 428.136975][T31713] dump_stack_lvl+0x95/0xd0 [ 428.137025][T31713] dump_stack+0x15/0x1b [ 428.137091][T31713] should_fail_ex+0x263/0x280 [ 428.137126][T31713] should_fail+0xb/0x20 [ 428.137153][T31713] should_fail_usercopy+0x1a/0x20 [ 428.137186][T31713] _copy_to_user+0x20/0xa0 [ 428.137289][T31713] simple_read_from_buffer+0xb5/0x130 [ 428.137394][T31713] proc_fail_nth_read+0x10e/0x150 [ 428.137419][T31713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.137444][T31713] vfs_read+0x1ab/0x7f0 [ 428.137498][T31713] ? kfree+0x10a/0x3b0 [ 428.137532][T31713] ? __rcu_read_unlock+0x4e/0x70 [ 428.137560][T31713] ? __fget_files+0x184/0x1c0 [ 428.137586][T31713] ? mutex_lock+0x57/0x90 [ 428.137643][T31713] ksys_read+0xdc/0x1a0 [ 428.137665][T31713] __x64_sys_read+0x40/0x50 [ 428.137683][T31713] x64_sys_call+0x2889/0x3000 [ 428.137738][T31713] do_syscall_64+0xc0/0x2a0 [ 428.137773][T31713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.137798][T31713] RIP: 0033:0x7fe186bdb78e [ 428.137856][T31713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.137877][T31713] RSP: 002b:00007fe185676fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.137900][T31713] RAX: ffffffffffffffda RBX: 00007fe1856776c0 RCX: 00007fe186bdb78e [ 428.137918][T31713] RDX: 000000000000000f RSI: 00007fe1856770a0 RDI: 0000000000000004 [ 428.137934][T31713] RBP: 00007fe185677090 R08: 0000000000000000 R09: 0000000000000000 [ 428.137949][T31713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.137972][T31713] R13: 00007fe186e96038 R14: 00007fe186e95fa0 R15: 00007fffc3358898 [ 428.137998][T31713] [ 428.138498][T31709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7097'. [ 428.349078][T28275] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.359299][T21885] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.400066][T31725] netlink: 'syz.8.7102': attribute type 10 has an invalid length. [ 428.418960][T31729] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 428.418960][T31729] program syz.1.7108 not setting count and/or reply_len properly [ 428.455512][T31734] netlink: 'syz.8.7102': attribute type 10 has an invalid length. [ 428.487668][T31725] netlink: 136 bytes leftover after parsing attributes in process `syz.8.7102'. [ 428.544060][T31740] loop8: detected capacity change from 0 to 2048 [ 428.574291][T31738] lo speed is unknown, defaulting to 1000 [ 428.609618][T31746] FAULT_INJECTION: forcing a failure. [ 428.609618][T31746] name failslab, interval 1, probability 0, space 0, times 0 [ 428.622397][T31746] CPU: 0 UID: 0 PID: 31746 Comm: syz.7.7113 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 428.622434][T31746] Tainted: [W]=WARN [ 428.622473][T31746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.622487][T31746] Call Trace: [ 428.622495][T31746] [ 428.622503][T31746] __dump_stack+0x1d/0x30 [ 428.622528][T31746] dump_stack_lvl+0x95/0xd0 [ 428.622553][T31746] dump_stack+0x15/0x1b [ 428.622576][T31746] should_fail_ex+0x263/0x280 [ 428.622681][T31746] should_failslab+0x8c/0xb0 [ 428.622780][T31746] kmem_cache_alloc_noprof+0x68/0x490 [ 428.622809][T31746] ? sctp_get_port_local+0x438/0xae0 [ 428.622837][T31746] sctp_get_port_local+0x438/0xae0 [ 428.622867][T31746] sctp_do_bind+0x398/0x4b0 [ 428.622891][T31746] sctp_connect_new_asoc+0x153/0x3a0 [ 428.622916][T31746] sctp_sendmsg+0xfff/0x1d60 [ 428.622942][T31746] ? selinux_socket_sendmsg+0x192/0x1c0 [ 428.622969][T31746] ? __pfx_sctp_sendmsg+0x10/0x10 [ 428.623016][T31746] inet_sendmsg+0xc5/0xd0 [ 428.623038][T31746] ____sys_sendmsg+0x53a/0x600 [ 428.623061][T31746] ___sys_sendmsg+0x195/0x1e0 [ 428.623095][T31746] __x64_sys_sendmsg+0xd4/0x160 [ 428.623123][T31746] x64_sys_call+0x17ba/0x3000 [ 428.623229][T31746] do_syscall_64+0xc0/0x2a0 [ 428.623259][T31746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.623320][T31746] RIP: 0033:0x7fe186c1aeb9 [ 428.623338][T31746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.623400][T31746] RSP: 002b:00007fe185677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.623424][T31746] RAX: ffffffffffffffda RBX: 00007fe186e95fa0 RCX: 00007fe186c1aeb9 [ 428.623441][T31746] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004 [ 428.623458][T31746] RBP: 00007fe185677090 R08: 0000000000000000 R09: 0000000000000000 [ 428.623472][T31746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.623486][T31746] R13: 00007fe186e96038 R14: 00007fe186e95fa0 R15: 00007fffc3358898 [ 428.623509][T31746] [ 428.844886][ T4735] IPVS: starting estimator thread 0... [ 428.855673][T31738] lo speed is unknown, defaulting to 1000 [ 428.939800][T31748] IPVS: using max 2592 ests per chain, 129600 per kthread [ 429.006058][T31756] loop7: detected capacity change from 0 to 8192 [ 429.040805][T26158] ================================================================== [ 429.048916][T26158] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 429.056219][T26158] [ 429.058535][T26158] read to 0xffff8881686826b8 of 4 bytes by task 19014 on cpu 1: [ 429.066174][T26158] atime_needs_update+0x25f/0x3e0 [ 429.071206][T26158] touch_atime+0x4a/0x340 [ 429.075541][T26158] shmem_file_read_iter+0x477/0x540 [ 429.080754][T26158] lo_rw_aio+0x67d/0x730 [ 429.084994][T26158] loop_process_work+0x56c/0xac0 [ 429.089922][T26158] loop_workfn+0x31/0x40 [ 429.094151][T26158] process_scheduled_works+0x4cd/0x9d0 [ 429.099600][T26158] worker_thread+0x6bc/0x8b0 [ 429.104184][T26158] kthread+0x488/0x510 [ 429.108254][T26158] ret_from_fork+0x148/0x280 [ 429.112834][T26158] ret_from_fork_asm+0x1a/0x30 [ 429.117593][T26158] [ 429.119899][T26158] write to 0xffff8881686826b8 of 4 bytes by task 26158 on cpu 0: [ 429.127605][T26158] touch_atime+0x1e8/0x340 [ 429.132019][T26158] shmem_file_read_iter+0x477/0x540 [ 429.137215][T26158] lo_rw_aio+0x67d/0x730 [ 429.141442][T26158] loop_process_work+0x56c/0xac0 [ 429.146367][T26158] loop_rootcg_workfn+0x22/0x30 [ 429.151215][T26158] process_scheduled_works+0x4cd/0x9d0 [ 429.156663][T26158] worker_thread+0x6bc/0x8b0 [ 429.161251][T26158] kthread+0x488/0x510 [ 429.165313][T26158] ret_from_fork+0x148/0x280 [ 429.169894][T26158] ret_from_fork_asm+0x1a/0x30 [ 429.174651][T26158] [ 429.176955][T26158] value changed: 0x0d6af648 -> 0x0e04a6dd [ 429.182655][T26158] [ 429.184963][T26158] Reported by Kernel Concurrency Sanitizer on: [ 429.191188][T26158] CPU: 0 UID: 0 PID: 26158 Comm: kworker/u8:26 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 429.202810][T26158] Tainted: [W]=WARN [ 429.206595][T26158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.216641][T26158] Workqueue: loop7 loop_rootcg_workfn [ 429.222022][T26158] ==================================================================