last executing test programs: 8m27.820929776s ago: executing program 32 (id=278): socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x88) write$qrtrtun(r2, &(0x7f0000000240)="e853", 0x2) mount_setattr(r1, &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)={0x100004, 0x0, 0x120000, {r2}}, 0x20) 8m0.447303617s ago: executing program 33 (id=947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x29, 0x5, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000001540)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000a001083a4ff9af0e6984900"], 0xc4}}, 0x4c050) syz_emit_ethernet(0xfc0, &(0x7f0000002340)=ANY=[], 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f00000021c0)="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", 0x486}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 7m36.194278575s ago: executing program 34 (id=1488): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x148, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x10c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xa2, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea699403"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x148}}, 0x20004880) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7m28.29261166s ago: executing program 35 (id=1308): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x8000, 0x0, 0x2, 0x80004001, 0x5, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000004c0)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x357, &(0x7f0000000ec0)="$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") 7m21.902330785s ago: executing program 36 (id=1741): r0 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x40000000}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r7}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$xdp(0x2c, 0x3, 0x0) r13 = epoll_create(0x3ff) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r13, 0x3, r14, &(0x7f0000000440)={0x2000000}) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/87, 0x328000, 0x1000, 0x0, 0x2}, 0x20) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) 5m23.597883754s ago: executing program 37 (id=4261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x1f, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 4m53.445403425s ago: executing program 38 (id=4873): r0 = socket(0x15, 0xa, 0x10000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) r1 = socket(0x8, 0x1, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x200000}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x9]}}, 0x5c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000840)="139732c2a62ccc", 0x7}], 0x2) r3 = socket$inet6(0xa, 0x802, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x8c1b5e9789d55504, 0x4, @multicast1, @loopback}, "511588f7f154b4c0"}}}}}, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="63000000ff7fffff00001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) close(r7) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c, 0x80000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) connect$inet6(r3, &(0x7f0000000240)={0xa, 0xffff, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000500)={0x6, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]}) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x5000) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x10, 0x4) 4m33.894626753s ago: executing program 39 (id=5247): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 4m23.789235287s ago: executing program 40 (id=5410): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1, &(0x7f0000000080)=""/11, 0xb}, 0x14023) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c46, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r2 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendfile(r0, r5, 0x0, 0xffffffff000) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="f2008aca4200874693656532b61f8f6c4863729535b6d2cf66ff0112c1ef0c1b07c898361129c3895dcbe36790216433a3f7abf014066ee9611ade4ba3f0f70df458a92b9599b3edd8e62dbfcc49e2559a8a2f3589f478c2f2de56c9c700000000000000", 0x64, 0x44050, &(0x7f0000000100)={0xa, 0x4e21, 0x7fff, @empty, 0x7}, 0x1c) 3m1.714478238s ago: executing program 41 (id=6520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/102, 0x66, 0x1, &(0x7f0000000280)=""/208, 0xd0}, &(0x7f0000000100)=0x40) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x1]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010101, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x7, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) tkill(r0, 0x24) 2m48.689691043s ago: executing program 42 (id=6919): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m24.187107051s ago: executing program 9 (id=7348): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46}, 0x28) 2m24.144160084s ago: executing program 9 (id=7350): r0 = inotify_init() r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) utime(&(0x7f0000000000)='./file0\x00', 0x0) 2m24.092364697s ago: executing program 9 (id=7355): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f00000000000000000700", @ANYRES32=r1, @ANYBLOB="000052000600050001000000", @ANYRES32=r1], 0x2c}}, 0x20008000) 2m24.022400271s ago: executing program 9 (id=7359): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x90149d, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001440)={'vlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 2m23.965650514s ago: executing program 9 (id=7361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880) 2m23.686836911s ago: executing program 9 (id=7363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, &(0x7f00000005c0)=""/104}, 0x20) (fail_nth: 3) 2m23.663764582s ago: executing program 43 (id=7363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, &(0x7f00000005c0)=""/104}, 0x20) (fail_nth: 3) 2m4.767246452s ago: executing program 6 (id=7677): ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000021c0)="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", 0x2e4}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m4.698187775s ago: executing program 6 (id=7679): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m4.667253898s ago: executing program 6 (id=7680): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00030010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2m4.581801593s ago: executing program 6 (id=7681): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f00000027c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000002600)='./file2\x00', &(0x7f0000002640), 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005200)=@newtfilter={0x1568, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x80001, 0x401}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x14d4, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_FW_ACT={0x14ac, 0x4, [@m_vlan={0xf8, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0xcb, 0x6, "c75cc5cd5f3243a822d2823cc51276988e325c1f4c6b8ddf09cc3778a6608f1df25753fa49879826a229a495ae33aeccce60c29bb0413cb82e64adb0dde780da6767257fe7667778502444b48576e0964676d25679de96b9b3b51ac58be94088e5fc0e2582bf48f016b739cbc66e8b8ff030198258500b671d0a0086aadcfe7234188a735ae7cff0b03b1a426c28b67f96cffa15c0723e582e8c5081ffe654e348d6edc640333ea905e5232052d933cd8c3ce2f331dcbb35b6ed97bf4a2156f454191ca292577f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0xd4, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x11666}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xff, 0x8000, 0x8, 0x400, 0x6}, 0x1}}]}, {0x84, 0x6, "59afd41dcbcfdc7fb953e333d2717afd719c8a68ae1a6ba682de6f9b5a71bf93caab606ffbcecdca490db85168c85693b1b84c28220096f49e2f850ed7f5e14271524d4a631e084420779a60b70382402cc9069cc8f7348a3876dd97a84459b8a16296f21c84c0ad7dd9e339e587bc288e77fd3dd4055989be3b8a18cf4300e6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x1084, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x5, 0x8, 0x8000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x8, 0x40}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x6, 0x8, 0xadf, 0x5b}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5b0, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x158, 0x0, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x10000000, 0x10001, 0x2b3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xea, 0x6, "649ea7fe68d33a5a607af18e8e0f961491278866fb27906601a0c676c46cbab24a2a529a63f8383bdd06830ab2ad3f53396fee0e5cd19dae09e7afeb89b61d586f30fc02223f190c005d523edcc03a5e11877d8758749b8250fda408177e415ce9cf69dece52cbba59a30efccd075db487600b4e61485f5e2f8a22ca220fc9e9ae0c8199a3d196c947f1589562b3ce24891349d09f961b8eaed6c32c8a0e2286d31ac5efec95ec01888dc0056b0ec65c75a5d554f2553d7e8b3b8981e85ac0d79b70a5b5444286be59cb5b47f99530eaae25a9215d469fc4a622bddae686a55c626e53f081cb"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0xac, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1, 0x8, 0x0, 0x9}, @private=0xa010100, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x5, 0x2, 0x1ff}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x10}, 0xffffff00, 0x1}}]}, {0x31, 0x6, "e3acec3781f51139e7ff226d3059afb9a3981e3d5598bc3165e92ac430f3ba9af94c57c85d5d61915e1d7c44cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x54, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x15, 0x6, "3490597663bb496c468c8d20d535786d6c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1568}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001400)={0x0, 0x6d, "b51621b4044153765f5a65e022b53aff28c7127a962b5c8e8d9002b3876c38b2a333db43c288979e1527996ac72e4c6f12ffc5864c121d1d0d27b690fa8d61ce1507dddf864ba9db53cb25b98265e35bf9c8d597147e583addfe60e70bce0d3327cbe3064300221c751047ed52"}, &(0x7f00000014c0)=0x75) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703bc000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000001500)={r9, 0x6}, &(0x7f0000001540)=0xc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 2m4.393541604s ago: executing program 6 (id=7686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x880) 2m4.030286195s ago: executing program 6 (id=7695): pipe(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x13c, 0x10, 0x831, 0x870bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x400800}, {}, 0x0, 0x0, 0x2, 0x4, 0x3, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x4050) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000740)={0x3, 0x80, 0x2c, 0xf, 0x1, 0x80, 0x0, 0x8000, 0x10, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x1}, 0x10000, 0xffffffff, 0x2ace, 0x0, 0x4, 0x10, 0x7107, 0x0, 0xff, 0x0, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, 0x0, &(0x7f0000003180)) syz_emit_ethernet(0xf5, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote, @void, {@generic={0x8863, "ccf899d44b3b48ce2e29c30d326c69151b8e04621b9268ad260a253ad0c73dda8652099a51476c4e3cdef4b018771c9bce2b0ce42ee5d9e74fc6d3113df4e833f2cd05973e805d9e9d9738992c1e16c859d0b4b3514a46937d809d9e434cc225aad6b827caaa756064cd44aa86b3d4a6c02dad5596be9182bf35141f651158720dc5d3557f54c2928776cb40d59609c0cf48a4f1baf4a8aad8ffa35f3d7c7152204cc98376ce53d9bcf3fa7db9c4cde988646e9982b19eb8d1a20e4423723506ca3038fb42637d8fa3f930644aa8b113f51c971adcb0d8d305527cc8a40d0f3060c23fcfb6b117"}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") 2m4.018437986s ago: executing program 44 (id=7695): pipe(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x13c, 0x10, 0x831, 0x870bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x400800}, {}, 0x0, 0x0, 0x2, 0x4, 0x3, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x4050) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000740)={0x3, 0x80, 0x2c, 0xf, 0x1, 0x80, 0x0, 0x8000, 0x10, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x1}, 0x10000, 0xffffffff, 0x2ace, 0x0, 0x4, 0x10, 0x7107, 0x0, 0xff, 0x0, 0x8}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, 0x0, &(0x7f0000003180)) syz_emit_ethernet(0xf5, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote, @void, {@generic={0x8863, "ccf899d44b3b48ce2e29c30d326c69151b8e04621b9268ad260a253ad0c73dda8652099a51476c4e3cdef4b018771c9bce2b0ce42ee5d9e74fc6d3113df4e833f2cd05973e805d9e9d9738992c1e16c859d0b4b3514a46937d809d9e434cc225aad6b827caaa756064cd44aa86b3d4a6c02dad5596be9182bf35141f651158720dc5d3557f54c2928776cb40d59609c0cf48a4f1baf4a8aad8ffa35f3d7c7152204cc98376ce53d9bcf3fa7db9c4cde988646e9982b19eb8d1a20e4423723506ca3038fb42637d8fa3f930644aa8b113f51c971adcb0d8d305527cc8a40d0f3060c23fcfb6b117"}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") 1m45.094509247s ago: executing program 3 (id=7985): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000089) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) unshare(0x2060280) 1m45.074117589s ago: executing program 3 (id=7987): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), 0x0}, 0x20) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0xa, 0x81, 0x0, 0x2, 0x20}, 0xe) sendmsg$NFT_BATCH(r2, 0x0, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000dba100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100070c100000000000224e0000", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1m44.972304485s ago: executing program 3 (id=7989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000005800)={0x0, 0x0, &(0x7f00000057c0)={&(0x7f0000005740)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x9080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv6_getnexthop={0x20, 0x6a, 0x337, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x4a, 0x8, 0xfffffffffffffffb}}) lsm_set_self_attr(0x64, &(0x7f0000000340)=ANY=[@ANYBLOB="65000000000000000500000000000000215fe4b7b4edd6614f00000000000000100abd34c71ca8f4e79cb2923c4e8aede10f78b2d8ab56f899bf97b5212420a79e3f5d49b4c3b770b8b5b463d82fced5dea2a2c7bb5b3762ab8c5ceec0cc7b9841cd1da91f538a4618b994ade161270b6264d353f5c6d83c176066d8ffd44aa2acf96e998205000000000000003e96f19274ee508992828fd9fff79a0dec8b8b36f7fba3b5c9347c038f3c9ad9b2ac1ffd97208fec57fbbf78dba28f96e01521a4614c60652eea3b5243cf04a8d7e77a97b594052bcb60bd484d76fd82e1fbe49a6d0bc4f4"], 0x21, 0x0) 1m44.53038968s ago: executing program 3 (id=7992): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f00000003c0)={[{@grpjquota}, {@nouid32}, {@grpquota}, {@quota}, {@nombcache}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0x90a}}, {@dioread_lock}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000140)=0x4, 0x4) open(&(0x7f00000000c0)='./file1\x00', 0x64842, 0x1ae) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000102000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff0300000300000085000000060000009500000000000000cad92b2c99ef1f3f833940f166a54176a626378e34dee223f7281b7190fa3208b7c664a637b801179c1b266718fa1f96924098ae41350952805ed82d38cb63dd08b471cc82a951010f7991c89916bd9a36f349d184dd61bb63be5ee4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c1000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000001ac0)=ANY=[], 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r5 = getpid() tgkill(r5, r1, 0xf) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, &(0x7f00000001c0), 0x4003) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000200)={[0x100]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x2f, 0x800000000004}, 0x0) syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r6, 0x36a9, 0x9, 0x1) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r6, 0x54a6) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r7, 0x0) 1m44.225042328s ago: executing program 3 (id=7994): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080)={0xb6}, 0x1) 1m44.03480923s ago: executing program 3 (id=7997): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 1m44.034158979s ago: executing program 45 (id=7997): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 1m38.996360875s ago: executing program 1 (id=8067): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x11, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m38.810552536s ago: executing program 1 (id=8070): fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x420e, &(0x7f0000003240)=ANY=[], 0x6, 0x364, &(0x7f00000007c0)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x30, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x13, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, r0, 0x24, 0x2, r1, @void, @value=r1, @void, @void, r2}, 0x20) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3) 1m38.40041873s ago: executing program 1 (id=8074): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044010500ac"], 0x1fc}}, 0x0) 1m38.385909931s ago: executing program 1 (id=8075): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x80000a, &(0x7f0000000340)={[{@hide}, {@hide}, {@map_off}, {@map_normal}, {@hide}, {@utf8}]}, 0x2, 0x533, &(0x7f0000000ac0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x8007, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x4d5, 0x33}, @in6=@private0, {0x3}, {}, {0x0, 0x7fffffff, 0x4}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x5, 0x7, {{0x28, 0x4, 0x3, 0x2b, 0xa0, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0x9b, 0x0, 0x6, [0x1, 0x4, 0x2]}, @end, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x6, [{@multicast2, 0xe16}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x4}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x54, 0x9, 0x3, 0x3, [{@local, 0x40}, {@private=0xa010100, 0x6}, {@broadcast, 0x8}, {@empty, 0x6}, {@loopback, 0x5}, {@broadcast, 0x6}, {@local, 0x6}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010101, 0x8}, {@multicast2, 0x5}]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r2, 0x11, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)}, 0x40) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f00000003c0)=0x40) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m38.034513312s ago: executing program 1 (id=8082): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000fcffffffffff"], 0xc4}}, 0x4c050) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0x0, 0x84, 0x22, 0x100}, {0x100, 0x4, 0x2, 0x7}, {0x2, 0x10, 0x80, 0x75e}, {0xe, 0x0, 0x2f, 0xffff41a7}, {0x8, 0x7, 0x9, 0x3c}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1m37.286826186s ago: executing program 1 (id=8098): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x5000, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100"], 0x0) 1m37.264235697s ago: executing program 46 (id=8098): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x5000, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100"], 0x0) 48.563700717s ago: executing program 7 (id=9008): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000580)=0x4, 0x4) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="deaa00000000000061105c000000000095000000000000006890316c76785f3e901ea6b7cac213ddf93233c7777e3d6c34d193b527e2482b653d5d22f7129895047f35cc8682bb75e81a070d1473654800b4f927a304ff063aad01a6d12b92b2acb05d70f4a11f5a3c2a59d753c4c039692fe77e4b60cf1b755cfbc17c240d9bae45c776443c17efb2290a54b924ccb68a7b8bf72e7f"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 48.415543736s ago: executing program 7 (id=9011): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0xd3, 0x0) 48.128724843s ago: executing program 7 (id=9016): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@abort}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {}, {@errors_remount}]}, 0x1, 0x586, &(0x7f0000000b00)="$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") 47.808773192s ago: executing program 7 (id=9020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') clock_nanosleep(0xfcfdffff, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0}) rt_tgsigqueueinfo(r3, r4, 0xf, &(0x7f00000000c0)={0xa, 0x8, 0x10000}) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 47.579074715s ago: executing program 7 (id=9022): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 47.534860998s ago: executing program 7 (id=9023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x800000000, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, &(0x7f0000004380)=""/246, 0xf6, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x800000000, 0x13}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x46) r3 = memfd_secret(0x80000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) write$evdev(r5, 0x0, 0x0) 47.515829739s ago: executing program 47 (id=9023): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x800000000, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(0xffffffffffffffff, &(0x7f0000004380)=""/246, 0xf6, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x800000000, 0x13}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x46) r3 = memfd_secret(0x80000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) write$evdev(r5, 0x0, 0x0) 1.392266658s ago: executing program 8 (id=9980): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 1.336410061s ago: executing program 8 (id=9982): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$llc(r2, &(0x7f00000004c0)="af7d5a74cbe299d27a8236b1634403149e1c2d5c7e562a9ed683e19530bc1790ebb965e29610099688c5605c745d7688d873f9a0b4a6ac8d214d507cd03240b47de3b71172fd0f76fae5961e5927548c9b72006eb2436d151bca21f4b9e1c19d9f0244fd592230af6f4f7f670fc6ab47c21e0660072bfa2e2e3771cd969755987cf1b036518c48fe2e3968fc72a3c5a774699e3e136fcae798da1629e339749ca595e11e61ab279e", 0xa8, 0x10004000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.335924041s ago: executing program 8 (id=9983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="400000457ae5ce1d81590000830000000000", 0x12}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) 1.123313704s ago: executing program 0 (id=9995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) 1.056674148s ago: executing program 0 (id=10001): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1", 0x54, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001780)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 1.01536966s ago: executing program 0 (id=10005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80002}, {0xc, 0x90, 0x80000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r4, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6a, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0}) 983.325342ms ago: executing program 0 (id=10008): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f00000005c0)="238beccb6a", 0x5}, {&(0x7f00000008c0)="7a7c7e298e4bdf50", 0x8}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0, 0x11}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0xffffff2c}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x3}}], 0x3, 0x4000000) 940.664074ms ago: executing program 4 (id=10010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 940.070724ms ago: executing program 4 (id=10012): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 900.702317ms ago: executing program 4 (id=10013): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$llc(r2, &(0x7f00000004c0)="af7d5a74cbe299d27a8236b1634403149e1c2d5c7e562a9ed683e19530bc1790ebb965e29610099688c5605c745d7688d873f9a0b4a6ac8d214d507cd03240b47de3b71172fd0f76fae5961e5927548c9b72006eb2436d151bca21f4b9e1c19d9f0244fd592230af6f4f7f670fc6ab47c21e0660072bfa2e2e3771cd969755987cf1b036518c48fe2e3968fc72a3c5a774699e3e136fcae798da1629e339749ca595e11e61ab279e", 0xa8, 0x10004000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 849.36405ms ago: executing program 4 (id=10017): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) 825.411481ms ago: executing program 4 (id=10018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 797.333663ms ago: executing program 4 (id=10019): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_route\x00') select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x100000000000000, 0x7}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000340)="0002b7bb4dd424cac30bda8b37dccc7e7ad999e4d29928e445eddd", 0x1b) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) sendmsg$nl_route(r2, 0x0, 0x4004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 571.379716ms ago: executing program 5 (id=10026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 556.609667ms ago: executing program 5 (id=10027): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 511.73324ms ago: executing program 5 (id=10028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) 415.044805ms ago: executing program 8 (id=10030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 414.722386ms ago: executing program 8 (id=10031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x400, 0x7, 0x8}, {0xf8, 0x1, 0x7ff, 0x0, 0x3}, 0x6045, 0xbc84, 0x11c0}}, @TCA_TBF_RATE64={0xc, 0x4, 0xc9bce17fae9afdc2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) socket(0x10, 0x80002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4810) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 274.745313ms ago: executing program 8 (id=10034): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_route\x00') select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x100000000000000, 0x7}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000340)="0002b7bb4dd424cac30bda8b37dccc7e7ad999e4d29928e445eddd", 0x1b) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) sendmsg$nl_route(r2, 0x0, 0x4004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 235.483976ms ago: executing program 5 (id=10036): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 234.747646ms ago: executing program 5 (id=10038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xd}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) socket(0x10, 0x803, 0x0) 215.224817ms ago: executing program 2 (id=10039): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x7, 0x6, 0x80, 0xc028, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 214.818857ms ago: executing program 5 (id=10040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="400000457ae5ce1d81590000830000000000", 0x12}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) 154.90358ms ago: executing program 2 (id=10041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 154.525781ms ago: executing program 2 (id=10042): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x86dd, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) 132.277042ms ago: executing program 2 (id=10043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) 110.072613ms ago: executing program 0 (id=10044): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000"], 0x57) 100.492774ms ago: executing program 2 (id=10045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x400, 0x7, 0x8}, {0xf8, 0x1, 0x7ff, 0x0, 0x3}, 0x6045, 0xbc84, 0x11c0}}, @TCA_TBF_RATE64={0xc, 0x4, 0xc9bce17fae9afdc2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) socket(0x10, 0x80002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4810) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 23.051849ms ago: executing program 0 (id=10046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 0s ago: executing program 2 (id=10047): socket(0x15, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): fc2ffd576c0 RCX: 00007fc3012bb58e [ 507.702362][ T1440] RDX: 000000000000000f RSI: 00007fc2ffd570a0 RDI: 0000000000000004 [ 507.702369][ T1440] RBP: 00007fc2ffd57090 R08: 0000000000000000 R09: 0000000000000000 [ 507.702377][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.702384][ T1440] R13: 00007fc301576038 R14: 00007fc301575fa0 R15: 00007ffca2551258 [ 507.702437][ T1440] [ 507.913385][ T1442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1442 comm=syz.0.9148 [ 508.010617][ T1444] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.9149: Bad quota inum: 1, type: 2 [ 508.022125][ T1444] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 508.037190][ T1444] EXT4-fs (loop4): mount failed [ 508.045085][ T1444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1444 comm=syz.4.9149 [ 508.102141][ T1454] FAULT_INJECTION: forcing a failure. [ 508.102141][ T1454] name failslab, interval 1, probability 0, space 0, times 0 [ 508.115616][ T1454] CPU: 0 UID: 0 PID: 1454 Comm: syz.8.9153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 508.115702][ T1454] Tainted: [W]=WARN [ 508.115710][ T1454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.115723][ T1454] Call Trace: [ 508.115730][ T1454] [ 508.115739][ T1454] __dump_stack+0x1d/0x30 [ 508.115764][ T1454] dump_stack_lvl+0x95/0xd0 [ 508.115786][ T1454] dump_stack+0x15/0x1b [ 508.115851][ T1454] should_fail_ex+0x263/0x280 [ 508.115872][ T1454] should_failslab+0x8c/0xb0 [ 508.115939][ T1454] kmem_cache_alloc_noprof+0x68/0x490 [ 508.115957][ T1454] ? getname_flags+0x7f/0x3b0 [ 508.115977][ T1454] getname_flags+0x7f/0x3b0 [ 508.115998][ T1454] do_sys_openat2+0x60/0x150 [ 508.116102][ T1454] __x64_sys_openat+0xf2/0x120 [ 508.116200][ T1454] x64_sys_call+0x2b07/0x3000 [ 508.116221][ T1454] do_syscall_64+0xc0/0x2a0 [ 508.116248][ T1454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.116314][ T1454] RIP: 0033:0x7f636e59b58e [ 508.116331][ T1454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 508.116349][ T1454] RSP: 002b:00007f636d036b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.116367][ T1454] RAX: ffffffffffffffda RBX: 00007f636d0376c0 RCX: 00007f636e59b58e [ 508.116383][ T1454] RDX: 0000000000000002 RSI: 00007f636d036c00 RDI: ffffffffffffff9c [ 508.116395][ T1454] RBP: 00007f636d037090 R08: 0000000000000000 R09: 0000000000000000 [ 508.116431][ T1454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.116445][ T1454] R13: 00007f636e856038 R14: 00007f636e855fa0 R15: 00007ffe930bc208 [ 508.116461][ T1454] [ 508.340962][ T1460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9157'. [ 508.389591][ T1452] EXT4-fs: inline encryption not supported [ 508.404482][ T1452] EXT4-fs: Ignoring removed bh option [ 508.410844][ T1452] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.433965][ T1460] set_capacity_and_notify: 8 callbacks suppressed [ 508.433981][ T1460] loop0: detected capacity change from 0 to 8192 [ 508.450132][ T1476] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 508.464987][ T1460] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 508.477622][ T1452] EXT4-fs (loop4): orphan cleanup on readonly fs [ 508.479844][ T29] audit: type=1400 audit(2000000958.587:18673): avc: denied { ioctl } for pid=1458 comm="syz.0.9157" path="socket:[117938]" dev="sockfs" ino=117938 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 508.509598][ T1452] EXT4-fs error (device loop4): ext4_quota_enable:7177: comm syz.4.9152: inode #2304: comm syz.4.9152: iget: illegal inode # [ 508.532118][ T1452] EXT4-fs (loop4): Remounting filesystem read-only [ 508.538892][ T1452] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 508.547372][ T1481] loop8: detected capacity change from 0 to 136 [ 508.554498][ T1452] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 508.576279][ T1452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.596532][ T1452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.607527][ T29] audit: type=1326 audit(2000000958.717:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.631116][ T29] audit: type=1326 audit(2000000958.717:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.654743][ T29] audit: type=1326 audit(2000000958.717:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.700891][ T29] audit: type=1326 audit(2000000958.737:18677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.724568][ T29] audit: type=1326 audit(2000000958.737:18678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.748088][ T29] audit: type=1326 audit(2000000958.737:18679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.771618][ T29] audit: type=1326 audit(2000000958.767:18680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.795225][ T29] audit: type=1326 audit(2000000958.787:18681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.0.9164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x7ffc0000 [ 508.925399][ T1490] loop0: detected capacity change from 0 to 1024 [ 508.938813][ T1490] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9168: Failed to acquire dquot type 0 [ 508.956199][ T1490] EXT4-fs (loop0): 1 truncate cleaned up [ 508.960455][ T1502] ip6gre1: entered promiscuous mode [ 508.965162][ T1490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.967768][ T1502] ip6gre1: entered allmulticast mode [ 508.986520][T23037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.994247][T23037] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.015770][ T3429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.021799][ T1502] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.032187][ T873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.093006][ T1511] netlink: 'syz.5.9174': attribute type 10 has an invalid length. [ 509.116397][ T1511] veth0_vlan: entered allmulticast mode [ 509.122428][ T1512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1512 comm=syz.0.9173 [ 509.125401][ T1511] veth0_vlan: left promiscuous mode [ 509.140970][ T1511] veth0_vlan: entered promiscuous mode [ 509.146348][ T1512] loop0: detected capacity change from 0 to 2048 [ 509.148327][ T1511] team0: Device veth0_vlan failed to register rx_handler [ 509.170050][ T1512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.202963][ T1512] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 509.262928][ T1534] FAULT_INJECTION: forcing a failure. [ 509.262928][ T1534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.276676][ T1534] CPU: 0 UID: 0 PID: 1534 Comm: syz.5.9180 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 509.276744][ T1534] Tainted: [W]=WARN [ 509.276776][ T1534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.276851][ T1534] Call Trace: [ 509.276858][ T1534] [ 509.276866][ T1534] __dump_stack+0x1d/0x30 [ 509.276887][ T1534] dump_stack_lvl+0x95/0xd0 [ 509.276905][ T1534] dump_stack+0x15/0x1b [ 509.276922][ T1534] should_fail_ex+0x263/0x280 [ 509.277039][ T1534] should_fail+0xb/0x20 [ 509.277056][ T1534] should_fail_usercopy+0x1a/0x20 [ 509.277086][ T1534] _copy_from_user+0x1c/0xb0 [ 509.277107][ T1534] ___sys_sendmsg+0xc1/0x1e0 [ 509.277142][ T1534] __x64_sys_sendmsg+0xd4/0x160 [ 509.277204][ T1534] x64_sys_call+0x17ba/0x3000 [ 509.277228][ T1534] do_syscall_64+0xc0/0x2a0 [ 509.277255][ T1534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.277314][ T1534] RIP: 0033:0x7fe01d3cacb9 [ 509.277330][ T1534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.277349][ T1534] RSP: 002b:00007fe01be27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.277371][ T1534] RAX: ffffffffffffffda RBX: 00007fe01d645fa0 RCX: 00007fe01d3cacb9 [ 509.277387][ T1534] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 509.277414][ T1534] RBP: 00007fe01be27090 R08: 0000000000000000 R09: 0000000000000000 [ 509.277426][ T1534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.277437][ T1534] R13: 00007fe01d646038 R14: 00007fe01d645fa0 R15: 00007fff8e441148 [ 509.277453][ T1534] [ 509.277719][ T1527] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 509.425850][ T3429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.461781][ T1566] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9181'. [ 509.470407][ T1512] tipc: Started in network mode [ 509.480570][ T1512] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711 [ 509.495131][ T1512] tipc: Enabled bearer , priority 10 [ 509.545415][ T1570] loop8: detected capacity change from 0 to 1024 [ 509.565051][ T1570] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9182: Failed to acquire dquot type 0 [ 509.587867][ T1570] EXT4-fs (loop8): 1 truncate cleaned up [ 509.594191][ T1570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.609623][ T1570] FAULT_INJECTION: forcing a failure. [ 509.609623][ T1570] name failslab, interval 1, probability 0, space 0, times 0 [ 509.622366][ T1570] CPU: 1 UID: 0 PID: 1570 Comm: syz.8.9182 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 509.622462][ T1570] Tainted: [W]=WARN [ 509.622468][ T1570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.622579][ T1570] Call Trace: [ 509.622585][ T1570] [ 509.622659][ T1570] __dump_stack+0x1d/0x30 [ 509.622682][ T1570] dump_stack_lvl+0x95/0xd0 [ 509.622699][ T1570] dump_stack+0x15/0x1b [ 509.622715][ T1570] should_fail_ex+0x263/0x280 [ 509.622733][ T1570] should_failslab+0x8c/0xb0 [ 509.622792][ T1570] __kmalloc_cache_noprof+0x64/0x4a0 [ 509.622813][ T1570] ? audit_log_d_path+0x8d/0x150 [ 509.622830][ T1570] audit_log_d_path+0x8d/0x150 [ 509.622918][ T1570] audit_log_d_path_exe+0x42/0x70 [ 509.622935][ T1570] audit_log_task+0x1e8/0x250 [ 509.622960][ T1570] ? kstrtouint+0x76/0xc0 [ 509.622990][ T1570] audit_seccomp+0x60/0x100 [ 509.623014][ T1570] ? __seccomp_filter+0x8db/0x1350 [ 509.623034][ T1570] __seccomp_filter+0x8ec/0x1350 [ 509.623056][ T1570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 509.623105][ T1570] ? vfs_write+0x86e/0x9f0 [ 509.623130][ T1570] ? __rcu_read_unlock+0x4e/0x70 [ 509.623146][ T1570] ? __fget_files+0x184/0x1c0 [ 509.623215][ T1570] __secure_computing+0x81/0x150 [ 509.623235][ T1570] syscall_trace_enter+0xce/0x1e0 [ 509.623254][ T1570] do_syscall_64+0x9a/0x2a0 [ 509.623337][ T1570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.623446][ T1570] RIP: 0033:0x7f636e5dacb9 [ 509.623461][ T1570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.623476][ T1570] RSP: 002b:00007f636d037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 509.623572][ T1570] RAX: ffffffffffffffda RBX: 00007f636e855fa0 RCX: 00007f636e5dacb9 [ 509.623583][ T1570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 509.623631][ T1570] RBP: 00007f636d037090 R08: 0000000000000000 R09: 0000000000000000 [ 509.623642][ T1570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.623652][ T1570] R13: 00007f636e856038 R14: 00007f636e855fa0 R15: 00007ffe930bc208 [ 509.623666][ T1570] [ 509.838863][ T3429] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.871158][ T1586] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 509.915202][T24757] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.006241][ T1598] FAULT_INJECTION: forcing a failure. [ 510.006241][ T1598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.019396][ T1598] CPU: 1 UID: 0 PID: 1598 Comm: syz.8.9187 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 510.019431][ T1598] Tainted: [W]=WARN [ 510.019439][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.019453][ T1598] Call Trace: [ 510.019460][ T1598] [ 510.019469][ T1598] __dump_stack+0x1d/0x30 [ 510.019498][ T1598] dump_stack_lvl+0x95/0xd0 [ 510.019521][ T1598] dump_stack+0x15/0x1b [ 510.019599][ T1598] should_fail_ex+0x263/0x280 [ 510.019621][ T1598] should_fail+0xb/0x20 [ 510.019639][ T1598] should_fail_usercopy+0x1a/0x20 [ 510.019662][ T1598] _copy_from_user+0x1c/0xb0 [ 510.019703][ T1598] sctp_getsockopt_peer_addr_info+0x73/0x320 [ 510.019733][ T1598] sctp_getsockopt+0xa1b/0xaa0 [ 510.019756][ T1598] sock_common_getsockopt+0x60/0x70 [ 510.019820][ T1598] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 510.019846][ T1598] do_sock_getsockopt+0x1c4/0x210 [ 510.019930][ T1598] __x64_sys_getsockopt+0x11d/0x1a0 [ 510.019951][ T1598] x64_sys_call+0x2dc7/0x3000 [ 510.019971][ T1598] do_syscall_64+0xc0/0x2a0 [ 510.019994][ T1598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.020049][ T1598] RIP: 0033:0x7f636e5dacb9 [ 510.020137][ T1598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.020154][ T1598] RSP: 002b:00007f636d037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 510.020173][ T1598] RAX: ffffffffffffffda RBX: 00007f636e855fa0 RCX: 00007f636e5dacb9 [ 510.020187][ T1598] RDX: 000000000000000f RSI: 0000000000000084 RDI: 0000000000000003 [ 510.020199][ T1598] RBP: 00007f636d037090 R08: 0000200000000140 R09: 0000000000000000 [ 510.020211][ T1598] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 510.020236][ T1598] R13: 00007f636e856038 R14: 00007f636e855fa0 R15: 00007ffe930bc208 [ 510.020253][ T1598] [ 510.024567][ T873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.255716][ T1612] loop8: detected capacity change from 0 to 256 [ 510.300645][ T1612] FAT-fs (loop8): Directory bread(block 64) failed [ 510.312544][ T1612] FAT-fs (loop8): Directory bread(block 65) failed [ 510.319348][ T1612] FAT-fs (loop8): Directory bread(block 66) failed [ 510.334934][ T1612] FAT-fs (loop8): Directory bread(block 67) failed [ 510.341797][ T1612] FAT-fs (loop8): Directory bread(block 68) failed [ 510.348389][ T1612] FAT-fs (loop8): Directory bread(block 69) failed [ 510.355011][ T1612] FAT-fs (loop8): Directory bread(block 70) failed [ 510.361939][ T1612] FAT-fs (loop8): Directory bread(block 71) failed [ 510.368715][ T1612] FAT-fs (loop8): Directory bread(block 72) failed [ 510.387120][ T1612] FAT-fs (loop8): Directory bread(block 73) failed [ 510.394581][ T1617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9195'. [ 510.415288][ T1612] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 510.423904][ T1612] FAT-fs (loop8): Filesystem has been set read-only [ 510.430822][ T1612] bio_check_eod: 27 callbacks suppressed [ 510.430837][ T1612] syz.8.9193: attempt to access beyond end of device [ 510.430837][ T1612] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 510.450649][ T1612] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 510.464782][ T1622] can0: slcan on ttyS3. [ 510.473286][ T1620] loop2: detected capacity change from 0 to 8192 [ 510.480966][ T1620] vfat: Unknown parameter 'syzkaller' [ 510.487668][ T1612] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 510.506412][ T1612] syz.8.9193: attempt to access beyond end of device [ 510.506412][ T1612] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 510.544011][ T1621] can0 (unregistered): slcan off ttyS3. [ 510.552457][ T1626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1626 comm=syz.4.9198 [ 510.564947][ T3429] tipc: Node number set to 4269801489 [ 510.570783][ T1612] syz.8.9193: attempt to access beyond end of device [ 510.570783][ T1612] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 510.592859][ T1626] loop4: detected capacity change from 0 to 2048 [ 510.605395][ T1612] syz.8.9193: attempt to access beyond end of device [ 510.605395][ T1612] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 510.638652][ T1638] netlink: 'syz.2.9199': attribute type 27 has an invalid length. [ 510.664386][ T1626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.665794][ T1612] syz.8.9193: attempt to access beyond end of device [ 510.665794][ T1612] loop8: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 510.691289][ T1640] loop5: detected capacity change from 0 to 512 [ 510.721762][ T1626] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 510.749330][ T1640] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 510.775917][ T1640] EXT4-fs (loop5): mount failed [ 510.798117][ T1626] tipc: Enabling of bearer rejected, already enabled [ 510.873529][ T1653] loop2: detected capacity change from 0 to 1024 [ 510.906499][ T1653] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 510.928250][ T1653] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 510.936373][ T1653] EXT4-fs (loop2): orphan cleanup on readonly fs [ 510.959542][ T1653] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9201: Failed to acquire dquot type 0 [ 510.971460][ T1653] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9201: Failed to acquire dquot type 0 [ 510.984133][ T1653] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.9201: Freeing blocks not in datazone - block = 0, count = 4096 [ 510.992531][ T1679] Process accounting resumed [ 511.006513][ T1653] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9201: Failed to acquire dquot type 0 [ 511.020266][ T1653] EXT4-fs (loop2): 1 orphan inode deleted [ 511.026703][ T1653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.039670][ T1653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.087097][ T1685] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 511.216448][ T1696] lo speed is unknown, defaulting to 1000 [ 511.243167][ T416] Bluetooth: hci0: Frame reassembly failed (-84) [ 511.290111][ T1696] lo speed is unknown, defaulting to 1000 [ 511.364097][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.475756][ T1713] Process accounting resumed [ 511.502154][ T1718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9220'. [ 511.506255][ T1716] lo speed is unknown, defaulting to 1000 [ 511.532910][ T181] Bluetooth: hci1: Frame reassembly failed (-84) [ 511.560177][ T1716] lo speed is unknown, defaulting to 1000 [ 511.720393][ T1732] EXT4-fs error (device loop2): __ext4_fill_super:5553: inode #2: comm syz.2.9225: casefold flag without casefold feature [ 511.734290][ T1732] EXT4-fs (loop2): get root inode failed [ 511.740383][ T1732] EXT4-fs (loop2): mount failed [ 512.004189][ T1746] Process accounting resumed [ 512.042229][ T1750] EXT4-fs: Ignoring removed oldalloc option [ 512.048419][ T1750] EXT4-fs: Ignoring removed bh option [ 512.059129][ T1750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.253838][ T1757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9229'. [ 512.279396][ T1749] binfmt_misc: register: failed to install interpreter file ./file0 [ 512.323471][ T1750] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9229: Allocating blocks 1-17 which overlap fs metadata [ 512.337977][ T1754] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9229: Allocating blocks 1-17 which overlap fs metadata [ 512.447301][ T1760] __quota_error: 214 callbacks suppressed [ 512.447319][ T1760] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 512.484111][ T1760] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 512.499812][ T1760] EXT4-fs (loop0): mount failed [ 512.528280][ T1764] netlink: 'syz.0.9233': attribute type 27 has an invalid length. [ 512.563080][ T1764] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.570346][ T1764] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.612640][ T1764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.623416][ T1764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.656088][T23758] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.665102][T23758] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.674257][T23758] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.683325][T23758] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.792209][ T1770] EXT4-fs: Ignoring removed nobh option [ 512.834541][ T1770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.847479][ T1770] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.859853][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.865692][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.877335][ T29] audit: type=1400 audit(2000000962.987:18885): avc: denied { setopt } for pid=1769 comm="syz.2.9234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 512.908202][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.915751][ T29] audit: type=1326 audit(2000000963.017:18886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 512.940646][ T29] audit: type=1326 audit(2000000963.017:18887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 512.964361][ T29] audit: type=1326 audit(2000000963.017:18888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 512.988061][ T29] audit: type=1326 audit(2000000963.017:18889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 513.011579][ T29] audit: type=1326 audit(2000000963.017:18890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 513.035344][ T29] audit: type=1326 audit(2000000963.017:18891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 513.058879][ T29] audit: type=1326 audit(2000000963.017:18892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 513.082461][ T29] audit: type=1326 audit(2000000963.017:18893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1776 comm="syz.5.9237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 513.160855][ T1782] Process accounting resumed [ 513.191062][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9242'. [ 513.255662][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 513.257462][ T4431] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 513.289784][ T1795] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 513.309609][ T1795] EXT4-fs (loop5): mount failed [ 513.379863][ T1793] binfmt_misc: register: failed to install interpreter file ./file0 [ 513.386878][ T1802] lo speed is unknown, defaulting to 1000 [ 513.446726][ T1802] lo speed is unknown, defaulting to 1000 [ 513.511990][ T1805] set_capacity_and_notify: 10 callbacks suppressed [ 513.512006][ T1805] loop8: detected capacity change from 0 to 512 [ 513.539235][ T1805] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 513.575728][ T4431] Bluetooth: hci1: command 0x1003 tx timeout [ 513.585704][T25366] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 513.592591][ T1805] EXT4-fs (loop8): mount failed [ 513.772926][ T1819] Process accounting resumed [ 513.785391][ T1821] 9pnet_fd: Insufficient options for proto=fd [ 513.808954][ T1823] loop5: detected capacity change from 0 to 1024 [ 513.815956][ T1823] EXT4-fs: inline encryption not supported [ 513.821907][ T1823] EXT4-fs: Ignoring removed bh option [ 513.846872][ T1823] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.863639][ T1823] EXT4-fs (loop5): orphan cleanup on readonly fs [ 513.870715][ T1823] EXT4-fs error (device loop5): ext4_quota_enable:7177: comm syz.5.9254: inode #2304: comm syz.5.9254: iget: illegal inode # [ 513.884971][ T1823] EXT4-fs (loop5): Remounting filesystem read-only [ 513.891524][ T1823] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 513.916418][ T1823] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 513.932067][ T1823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 513.946034][ T1823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.043953][ T1837] loop5: detected capacity change from 0 to 256 [ 514.061179][ T1839] loop2: detected capacity change from 0 to 512 [ 514.148249][ T1842] netlink: 'syz.8.9260': attribute type 9 has an invalid length. [ 514.178774][ T1839] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 514.194076][ T1839] EXT4-fs (loop2): mount failed [ 514.247641][ T1846] loop8: detected capacity change from 0 to 512 [ 514.256576][ T1848] netlink: 'syz.2.9262': attribute type 9 has an invalid length. [ 514.284579][ T1846] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 514.350479][ T1857] Process accounting resumed [ 514.360002][ T1846] EXT4-fs (loop8): mount failed [ 514.389411][ T1864] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 514.496062][ T1837] binfmt_misc: register: failed to install interpreter file ./file0 [ 514.542557][ T1876] loop8: detected capacity change from 0 to 512 [ 514.567159][ T1876] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 514.584919][ T1876] EXT4-fs (loop8): mount failed [ 514.617803][ T1880] lo speed is unknown, defaulting to 1000 [ 514.640644][ T1883] FAULT_INJECTION: forcing a failure. [ 514.640644][ T1883] name failslab, interval 1, probability 0, space 0, times 0 [ 514.653309][ T1883] CPU: 1 UID: 0 PID: 1883 Comm: syz.8.9274 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 514.653340][ T1883] Tainted: [W]=WARN [ 514.653348][ T1883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.653361][ T1883] Call Trace: [ 514.653444][ T1883] [ 514.653453][ T1883] __dump_stack+0x1d/0x30 [ 514.653480][ T1883] dump_stack_lvl+0x95/0xd0 [ 514.653499][ T1883] dump_stack+0x15/0x1b [ 514.653520][ T1883] should_fail_ex+0x263/0x280 [ 514.653538][ T1883] should_failslab+0x8c/0xb0 [ 514.653615][ T1883] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 514.653640][ T1883] ? sidtab_sid2str_get+0xa0/0x130 [ 514.653671][ T1883] kmemdup_noprof+0x2b/0x70 [ 514.653746][ T1883] sidtab_sid2str_get+0xa0/0x130 [ 514.653803][ T1883] security_sid_to_context_core+0x1eb/0x2e0 [ 514.653829][ T1883] security_sid_to_context+0x27/0x40 [ 514.653895][ T1883] selinux_lsmprop_to_secctx+0x67/0xf0 [ 514.653925][ T1883] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 514.653982][ T1883] audit_log_subj_ctx+0xa4/0x3e0 [ 514.653999][ T1883] ? skb_put+0xa9/0xf0 [ 514.654039][ T1883] audit_log_task_context+0x48/0x70 [ 514.654060][ T1883] audit_log_task+0xf3/0x250 [ 514.654091][ T1883] ? kstrtouint+0x76/0xc0 [ 514.654182][ T1883] audit_seccomp+0x60/0x100 [ 514.654208][ T1883] ? __seccomp_filter+0x8db/0x1350 [ 514.654299][ T1883] __seccomp_filter+0x8ec/0x1350 [ 514.654330][ T1883] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 514.654356][ T1883] ? vfs_write+0x86e/0x9f0 [ 514.654390][ T1883] __secure_computing+0x81/0x150 [ 514.654432][ T1883] syscall_trace_enter+0xce/0x1e0 [ 514.654461][ T1883] do_syscall_64+0x9a/0x2a0 [ 514.654489][ T1883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.654512][ T1883] RIP: 0033:0x7f636e5dacb9 [ 514.654528][ T1883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.654545][ T1883] RSP: 002b:00007f636d037028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ac [ 514.654562][ T1883] RAX: ffffffffffffffda RBX: 00007f636e855fa0 RCX: 00007f636e5dacb9 [ 514.654634][ T1883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 514.654695][ T1883] RBP: 00007f636d037090 R08: 0000000000000000 R09: 0000000000000000 [ 514.654781][ T1883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.654795][ T1883] R13: 00007f636e856038 R14: 00007f636e855fa0 R15: 00007ffe930bc208 [ 514.654814][ T1883] [ 514.953712][ T1880] lo speed is unknown, defaulting to 1000 [ 514.974041][ T1885] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9275'. [ 514.983432][ T1885] netlink: get zone limit has 8 unknown bytes [ 515.036797][ T1888] netlink: 'syz.8.9276': attribute type 27 has an invalid length. [ 515.045006][ T1888] hsr0: left allmulticast mode [ 515.049861][ T1888] hsr_slave_0: left allmulticast mode [ 515.055367][ T1888] hsr_slave_1: left allmulticast mode [ 515.061604][ T1888] vlan0: left allmulticast mode [ 515.066491][ T1888] bond_slave_1: left allmulticast mode [ 515.072189][ T1888] ip6gre1: left promiscuous mode [ 515.077296][ T1888] ip6gre1: left allmulticast mode [ 515.079305][ T1890] Process accounting resumed [ 515.226850][ T1905] loop4: detected capacity change from 0 to 512 [ 515.248858][ T1905] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 515.286540][ T1905] EXT4-fs (loop4): mount failed [ 515.337757][ T1910] Process accounting resumed [ 515.342625][ T1915] loop4: detected capacity change from 0 to 764 [ 515.352033][ T1913] loop0: detected capacity change from 0 to 1024 [ 515.362305][ T1907] loop2: detected capacity change from 0 to 8192 [ 515.369854][ T1915] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 515.379262][ T1913] EXT4-fs: inline encryption not supported [ 515.385157][ T1913] EXT4-fs: Ignoring removed bh option [ 515.391705][ T1913] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.399546][ T1919] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 515.402870][ T1913] EXT4-fs (loop0): orphan cleanup on readonly fs [ 515.423682][ T1917] netlink: 'syz.8.9290': attribute type 27 has an invalid length. [ 515.429029][ T1913] EXT4-fs error (device loop0): ext4_quota_enable:7177: comm syz.0.9287: inode #2304: comm syz.0.9287: iget: illegal inode # [ 515.452212][ T1913] EXT4-fs (loop0): Remounting filesystem read-only [ 515.458988][ T1913] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 515.487459][ T1913] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 515.494655][ T1913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.594304][ T873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.653116][ T1938] lo speed is unknown, defaulting to 1000 [ 515.720612][ T1944] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 515.743789][ T1938] lo speed is unknown, defaulting to 1000 [ 515.782970][ T1944] EXT4-fs (loop0): mount failed [ 515.866192][ T1951] Process accounting resumed [ 515.914764][ T1961] netlink: 'syz.5.9304': attribute type 27 has an invalid length. [ 515.923506][ T1961] veth0_vlan: left allmulticast mode [ 516.090029][ T1975] EXT4-fs: Ignoring removed oldalloc option [ 516.096006][ T1975] EXT4-fs: Ignoring removed bh option [ 516.109231][ T1975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.269813][ T1967] binfmt_misc: register: failed to install interpreter file ./file0 [ 516.302853][ T1975] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9309: Allocating blocks 1-17 which overlap fs metadata [ 516.377690][ T1984] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 516.392617][ T1984] EXT4-fs (loop4): mount failed [ 516.495182][ T1991] EXT4-fs: Ignoring removed oldalloc option [ 516.501801][ T1991] EXT4-fs: Ignoring removed bh option [ 516.522089][ T1991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.568172][ T1995] netlink: 'syz.4.9314': attribute type 1 has an invalid length. [ 516.576244][ T1995] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9314'. [ 516.657564][ T1999] netlink: 'syz.4.9316': attribute type 27 has an invalid length. [ 516.751304][ T1991] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9312: Allocating blocks 1-17 which overlap fs metadata [ 516.819641][ T2001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2001 comm=syz.4.9318 [ 516.879800][ T2001] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 516.915615][ T2015] EXT4-fs: Ignoring removed oldalloc option [ 516.922224][ T2015] EXT4-fs: Ignoring removed bh option [ 516.929030][ T2001] tipc: Enabling of bearer rejected, already enabled [ 516.956942][ T2016] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 516.972196][ T2016] EXT4-fs (loop2): mount failed [ 517.150301][ T2015] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9321: Allocating blocks 1-17 which overlap fs metadata [ 517.165161][ T2022] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9321: Allocating blocks 1-17 which overlap fs metadata [ 517.260061][ T2030] netlink: 'syz.2.9326': attribute type 1 has an invalid length. [ 517.268042][ T2030] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9326'. [ 517.494940][ T2032] binfmt_misc: register: failed to install interpreter file ./file0 [ 517.766717][ T2045] __quota_error: 440 callbacks suppressed [ 517.766732][ T2045] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 517.802589][ T2045] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 517.845586][ T2052] Process accounting resumed [ 517.850623][ T2045] EXT4-fs (loop4): mount failed [ 517.958292][ T2065] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 517.975880][ T2065] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 517.976713][ T2067] EXT4-fs: inline encryption not supported [ 518.005487][ T2067] EXT4-fs: Ignoring removed bh option [ 518.012123][ T2067] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.020045][ T2065] EXT4-fs (loop2): mount failed [ 518.051638][ T2067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 518.066040][ T2067] EXT4-fs error (device loop4): ext4_quota_enable:7177: comm syz.4.9342: inode #2304: comm syz.4.9342: iget: illegal inode # [ 518.079617][ T2067] EXT4-fs (loop4): Remounting filesystem read-only [ 518.086198][ T2067] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 518.131986][ T2067] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 518.156396][ T2071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2071 comm=syz.0.9343 [ 518.207678][ T2071] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 518.231811][ T2085] Process accounting resumed [ 518.263329][ T2071] tipc: Enabling of bearer rejected, already enabled [ 518.645842][ T2106] geneve2: entered promiscuous mode [ 518.651333][ T2106] geneve2: entered allmulticast mode [ 518.778046][ T2114] set_capacity_and_notify: 16 callbacks suppressed [ 518.778063][ T2114] loop8: detected capacity change from 0 to 1024 [ 518.791403][ T2114] EXT4-fs: Ignoring removed oldalloc option [ 518.797342][ T2114] EXT4-fs: Ignoring removed bh option [ 518.853839][ T2115] Process accounting resumed [ 518.884312][ T2120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9361'. [ 519.103630][ T2140] loop5: detected capacity change from 0 to 512 [ 519.127455][ T2140] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 519.139308][ T2140] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 519.157900][ T2140] EXT4-fs (loop5): mount failed [ 519.183162][ T2114] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9359: Allocating blocks 1-17 which overlap fs metadata [ 519.203185][ T2123] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9359: Allocating blocks 1-17 which overlap fs metadata [ 519.251585][ T2155] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9376'. [ 519.271080][ T2153] Process accounting resumed [ 519.362668][ T2170] loop5: detected capacity change from 0 to 512 [ 519.387788][ T2170] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.401108][ T2176] loop4: detected capacity change from 0 to 256 [ 519.403111][ T2170] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.9382: lblock 23 mapped to illegal pblock 18 (length 1) [ 519.427801][ T2176] FAT-fs (loop4): Directory bread(block 64) failed [ 519.440214][ T2176] FAT-fs (loop4): Directory bread(block 65) failed [ 519.447094][ T2176] FAT-fs (loop4): Directory bread(block 66) failed [ 519.453758][ T2176] FAT-fs (loop4): Directory bread(block 67) failed [ 519.460835][ T2176] FAT-fs (loop4): Directory bread(block 68) failed [ 519.468493][ T2176] FAT-fs (loop4): Directory bread(block 69) failed [ 519.475109][ T2176] FAT-fs (loop4): Directory bread(block 70) failed [ 519.477467][ T2178] loop5: detected capacity change from 0 to 512 [ 519.481730][ T2176] FAT-fs (loop4): Directory bread(block 71) failed [ 519.494626][ T2176] FAT-fs (loop4): Directory bread(block 72) failed [ 519.503042][ T2176] FAT-fs (loop4): Directory bread(block 73) failed [ 519.510717][ T2178] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 519.530867][ T2178] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 519.546062][ T2178] EXT4-fs (loop5): mount failed [ 519.610930][ T2187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9388'. [ 519.745833][ T2195] Process accounting resumed [ 519.804399][ T2205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9394'. [ 519.813570][ T2206] loop5: detected capacity change from 0 to 1024 [ 519.826256][ T2208] loop4: detected capacity change from 0 to 256 [ 519.837738][ T2206] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 519.848163][ T2206] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 519.857656][ T2206] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.9395: Failed to acquire dquot type 0 [ 519.878335][ T2206] EXT4-fs (loop5): 1 truncate cleaned up [ 519.885415][ T2206] FAULT_INJECTION: forcing a failure. [ 519.885415][ T2206] name failslab, interval 1, probability 0, space 0, times 0 [ 519.890522][ T2210] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9394'. [ 519.898697][ T2206] CPU: 0 UID: 0 PID: 2206 Comm: syz.5.9395 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.898766][ T2206] Tainted: [W]=WARN [ 519.898773][ T2206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.898785][ T2206] Call Trace: [ 519.898792][ T2206] [ 519.898800][ T2206] __dump_stack+0x1d/0x30 [ 519.898825][ T2206] dump_stack_lvl+0x95/0xd0 [ 519.898911][ T2206] dump_stack+0x15/0x1b [ 519.898928][ T2206] should_fail_ex+0x263/0x280 [ 519.898946][ T2206] should_failslab+0x8c/0xb0 [ 519.898966][ T2206] kmem_cache_alloc_noprof+0x68/0x490 [ 519.899050][ T2206] ? __es_insert_extent+0x508/0xee0 [ 519.899079][ T2206] __es_insert_extent+0x508/0xee0 [ 519.899111][ T2206] ext4_es_insert_extent+0x467/0x1c70 [ 519.899189][ T2206] ext4_map_query_blocks+0x38e/0x550 [ 519.899218][ T2206] ? ext4_es_lookup_extent+0x3ac/0x540 [ 519.899248][ T2206] ext4_map_blocks+0x398/0xd70 [ 519.899338][ T2206] ext4_getblk+0x128/0x530 [ 519.899366][ T2206] ext4_bread_batch+0x5c/0x320 [ 519.899402][ T2206] __ext4_find_entry+0x852/0xdf0 [ 519.899426][ T2206] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 519.899451][ T2206] ? __rcu_read_unlock+0x4e/0x70 [ 519.899625][ T2206] ? d_alloc_parallel+0xc01/0xce0 [ 519.899654][ T2206] ext4_lookup+0xcd/0x3a0 [ 519.899683][ T2206] __lookup_slow+0x19d/0x260 [ 519.899729][ T2206] lookup_slow+0x3c/0x60 [ 519.899753][ T2206] path_lookupat+0x2f7/0x500 [ 519.899779][ T2206] filename_lookup+0x190/0x390 [ 519.899811][ T2206] kern_path+0x3b/0x130 [ 519.899990][ T2206] bpf_uprobe_multi_link_attach+0x232/0x910 [ 519.900021][ T2206] ? kstrtouint+0x76/0xc0 [ 519.900109][ T2206] ? __rcu_read_unlock+0x4e/0x70 [ 519.900128][ T2206] ? __fget_files+0x184/0x1c0 [ 519.900224][ T2206] link_create+0x639/0x690 [ 519.900246][ T2206] __sys_bpf+0x628/0x7b0 [ 519.900270][ T2206] __x64_sys_bpf+0x41/0x50 [ 519.900369][ T2206] x64_sys_call+0x28e1/0x3000 [ 519.900397][ T2206] do_syscall_64+0xc0/0x2a0 [ 519.900423][ T2206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.900445][ T2206] RIP: 0033:0x7fe01d3cacb9 [ 519.900462][ T2206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.900481][ T2206] RSP: 002b:00007fe01be27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.900502][ T2206] RAX: ffffffffffffffda RBX: 00007fe01d645fa0 RCX: 00007fe01d3cacb9 [ 519.900517][ T2206] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 519.900531][ T2206] RBP: 00007fe01be27090 R08: 0000000000000000 R09: 0000000000000000 [ 519.900544][ T2206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.900669][ T2206] R13: 00007fe01d646038 R14: 00007fe01d645fa0 R15: 00007fff8e441148 [ 519.900690][ T2206] [ 519.930392][ T2208] FAT-fs (loop4): Directory bread(block 64) failed [ 520.189613][ T2208] FAT-fs (loop4): Directory bread(block 65) failed [ 520.196879][ T2208] FAT-fs (loop4): Directory bread(block 66) failed [ 520.203529][ T2208] FAT-fs (loop4): Directory bread(block 67) failed [ 520.210955][ T2208] FAT-fs (loop4): Directory bread(block 68) failed [ 520.218125][ T2208] FAT-fs (loop4): Directory bread(block 69) failed [ 520.224650][ T2208] FAT-fs (loop4): Directory bread(block 70) failed [ 520.240304][ T2218] loop5: detected capacity change from 0 to 512 [ 520.249285][ T2217] loop0: detected capacity change from 0 to 512 [ 520.267179][ T2221] loop8: detected capacity change from 0 to 1024 [ 520.273914][ T2221] EXT4-fs: Ignoring removed oldalloc option [ 520.273982][ T2208] FAT-fs (loop4): Directory bread(block 71) failed [ 520.279871][ T2221] EXT4-fs: Ignoring removed bh option [ 520.293624][ T2218] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 520.300370][ T2208] FAT-fs (loop4): Directory bread(block 72) failed [ 520.310541][ T2218] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.321279][ T2208] FAT-fs (loop4): Directory bread(block 73) failed [ 520.327458][ T2218] EXT4-fs (loop5): mount failed [ 520.342611][ T2217] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 520.387439][ T2217] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.387981][ T2217] EXT4-fs (loop0): mount failed [ 520.505484][ T2236] Process accounting resumed [ 520.546809][ T2246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9408'. [ 520.636409][ T2230] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9397: Allocating blocks 1-17 which overlap fs metadata [ 520.654281][ T2246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9408: bg 0: block 248: padding at end of block bitmap is not set [ 520.671283][ T2221] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9397: Allocating blocks 1-17 which overlap fs metadata [ 520.672020][ T2246] Quota error (device loop0): write_blk: dquota write failed [ 520.692397][ T2246] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 520.717764][ T2246] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9408: Failed to acquire dquot type 1 [ 520.730389][ T2246] EXT4-fs (loop0): 1 truncate cleaned up [ 520.736749][ T2246] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.819135][ T52] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 521.106152][ T2268] EXT4-fs: Ignoring removed oldalloc option [ 521.112154][ T2268] EXT4-fs: Ignoring removed bh option [ 521.200153][ T2274] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.345709][ T2268] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9412: Allocating blocks 1-17 which overlap fs metadata [ 521.352148][ T2277] Process accounting resumed [ 521.364062][ T2275] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9412: Allocating blocks 1-17 which overlap fs metadata [ 521.575014][ T2292] lo speed is unknown, defaulting to 1000 [ 521.604078][ T2292] lo speed is unknown, defaulting to 1000 [ 521.777002][ T2302] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 521.787692][ T2302] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 521.795886][ T2302] EXT4-fs (loop0): orphan cleanup on readonly fs [ 521.802476][ T2302] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 521.817051][ T2302] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 521.824267][ T2302] EXT4-fs (loop0): 1 truncate cleaned up [ 521.843322][ T2302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9425'. [ 521.852380][ T2302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9425'. [ 521.864127][ T123] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.873083][ T123] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.882489][ T123] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.891541][ T123] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.967978][ T2308] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.983443][ T2308] EXT4-fs (loop0): mount failed [ 522.028190][ T2312] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 522.049406][ T2312] EXT4-fs (loop0): mount failed [ 522.093867][ T2306] binfmt_misc: register: failed to install interpreter file ./file0 [ 522.145234][ T2318] EXT4-fs (loop0): unsupported inode size: 84 [ 522.152356][ T2318] EXT4-fs (loop0): blocksize: 4096 [ 522.596028][ T2339] EXT4-fs: Ignoring removed oldalloc option [ 522.602060][ T2339] EXT4-fs: Ignoring removed bh option [ 522.774697][ T2345] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9436'. [ 522.785224][ T2339] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9436: Allocating blocks 1-17 which overlap fs metadata [ 522.800083][ T2343] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9436: Allocating blocks 1-17 which overlap fs metadata [ 523.071310][ T2350] netlink: 'syz.2.9438': attribute type 1 has an invalid length. [ 523.079090][ T2350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9438'. [ 523.257830][ T2361] geneve2: entered promiscuous mode [ 523.263820][ T2361] geneve2: entered allmulticast mode [ 523.389688][ T2373] EXT4-fs: Ignoring removed mblk_io_submit option [ 523.412474][ T2373] EXT4-fs mount: 31 callbacks suppressed [ 523.412550][ T2373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.432358][T24757] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.470798][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.594946][ T2389] FAULT_INJECTION: forcing a failure. [ 523.594946][ T2389] name failslab, interval 1, probability 0, space 0, times 0 [ 523.607674][ T2389] CPU: 1 UID: 0 PID: 2389 Comm: syz.4.9451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 523.607758][ T2389] Tainted: [W]=WARN [ 523.607764][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.607776][ T2389] Call Trace: [ 523.607782][ T2389] [ 523.607789][ T2389] __dump_stack+0x1d/0x30 [ 523.607812][ T2389] dump_stack_lvl+0x95/0xd0 [ 523.607908][ T2389] dump_stack+0x15/0x1b [ 523.607932][ T2389] should_fail_ex+0x263/0x280 [ 523.607998][ T2389] should_failslab+0x8c/0xb0 [ 523.608017][ T2389] __kvmalloc_node_noprof+0x148/0x680 [ 523.608038][ T2389] ? __do_semtimedop+0x7c2/0x10d0 [ 523.608142][ T2389] __do_semtimedop+0x7c2/0x10d0 [ 523.608180][ T2389] do_semtimedop+0x18e/0x220 [ 523.608214][ T2389] __x64_sys_semtimedop+0xc8/0xf0 [ 523.608235][ T2389] x64_sys_call+0x24cc/0x3000 [ 523.608270][ T2389] do_syscall_64+0xc0/0x2a0 [ 523.608300][ T2389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.608356][ T2389] RIP: 0033:0x7fd35cf1acb9 [ 523.608373][ T2389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.608393][ T2389] RSP: 002b:00007fd35b977028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 523.608473][ T2389] RAX: ffffffffffffffda RBX: 00007fd35d195fa0 RCX: 00007fd35cf1acb9 [ 523.608516][ T2389] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000000 [ 523.608530][ T2389] RBP: 00007fd35b977090 R08: 0000000000000000 R09: 0000000000000000 [ 523.608544][ T2389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.608556][ T2389] R13: 00007fd35d196038 R14: 00007fd35d195fa0 R15: 00007ffcfde4e5c8 [ 523.608573][ T2389] [ 523.785136][ T2384] geneve2: entered promiscuous mode [ 523.797877][ T2384] geneve2: entered allmulticast mode [ 523.821672][ T2395] set_capacity_and_notify: 13 callbacks suppressed [ 523.821688][ T2395] loop2: detected capacity change from 0 to 512 [ 523.853307][ T2395] __quota_error: 4 callbacks suppressed [ 523.853322][ T2395] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 523.881582][ T2387] geneve2: entered promiscuous mode [ 523.888270][ T2387] geneve2: entered allmulticast mode [ 523.894758][ T2395] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 523.925704][ T2395] EXT4-fs (loop2): mount failed [ 523.932696][ T29] audit: type=1400 audit(2000000974.037:19324): avc: denied { accept } for pid=2392 comm="syz.4.9453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 524.027430][ T2401] loop5: detected capacity change from 0 to 8192 [ 524.180541][ T2415] loop2: detected capacity change from 0 to 512 [ 524.190687][ T2417] loop5: detected capacity change from 0 to 512 [ 524.199245][ T2417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.210646][ T2415] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 524.222435][ T2415] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 524.223954][ T2417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.251424][ T2417] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.269681][ T2415] EXT4-fs (loop2): mount failed [ 524.271566][ T2417] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9463: bg 0: block 217: padding at end of block bitmap is not set [ 524.293947][ T2417] EXT4-fs (loop5): Remounting filesystem read-only [ 524.396892][ T2426] netlink: 'syz.8.9465': attribute type 1 has an invalid length. [ 524.404890][ T2426] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9465'. [ 524.421169][ T2432] loop2: detected capacity change from 0 to 512 [ 524.429059][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.438755][ T416] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 524.452785][ T2430] netlink: 'syz.0.9467': attribute type 10 has an invalid length. [ 524.454275][ T416] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 524.471226][ T2430] vlan1: entered allmulticast mode [ 524.478109][ T2430] veth0_vlan: entered allmulticast mode [ 524.485310][ T2432] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 524.506762][ T2437] loop8: detected capacity change from 0 to 8192 [ 524.513770][ T2432] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 524.528794][ T2432] EXT4-fs (loop2): mount failed [ 524.601489][ T2447] loop5: detected capacity change from 0 to 1024 [ 524.608249][ T2447] EXT4-fs: Ignoring removed oldalloc option [ 524.614205][ T2447] EXT4-fs: Ignoring removed bh option [ 524.624784][ T2448] loop2: detected capacity change from 0 to 1024 [ 524.631556][ T2448] EXT4-fs: Ignoring removed oldalloc option [ 524.637517][ T2448] EXT4-fs: Ignoring removed bh option [ 524.685029][ T2448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.710671][ T2447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.901324][ T2464] geneve2: entered promiscuous mode [ 524.906613][ T2464] geneve2: entered allmulticast mode [ 524.943277][ T2468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9471'. [ 524.975427][ T2467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9472'. [ 525.322939][ T29] audit: type=1326 audit(2000000975.417:19325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.4.9479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35cf1acb9 code=0x7ffc0000 [ 525.346451][ T29] audit: type=1326 audit(2000000975.417:19326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.4.9479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd35cf1acb9 code=0x7ffc0000 [ 525.370013][ T29] audit: type=1326 audit(2000000975.417:19327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.4.9479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35cf1acb9 code=0x7ffc0000 [ 525.393550][ T29] audit: type=1326 audit(2000000975.417:19328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2472 comm="syz.4.9479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd35cf1acb9 code=0x7ffc0000 [ 525.413941][ T2448] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9472: Allocating blocks 1-17 which overlap fs metadata [ 525.431955][ T2460] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9472: Allocating blocks 1-17 which overlap fs metadata [ 525.480793][ T2447] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9471: Allocating blocks 1-17 which overlap fs metadata [ 525.508462][ T2478] loop8: detected capacity change from 0 to 256 [ 525.515802][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.529100][ T2478] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 525.548179][ T2480] loop0: detected capacity change from 0 to 512 [ 525.588988][ T2480] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 525.614514][ T2480] EXT4-fs (loop0): mount failed [ 525.626832][ T2482] netlink: 'syz.5.9481': attribute type 1 has an invalid length. [ 525.639373][ T2482] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9481'. [ 525.664973][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.704968][ T2490] 9pnet_fd: Insufficient options for proto=fd [ 525.813607][ T2486] x_tables: unsorted entry at hook 2 [ 525.868405][ T2505] EXT4-fs: Ignoring removed oldalloc option [ 525.874401][ T2505] EXT4-fs: Ignoring removed bh option [ 525.887137][ T2505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.059405][ T2510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9491'. [ 526.075340][ T2505] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9491: Allocating blocks 1-17 which overlap fs metadata [ 526.090685][ T2508] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9491: Allocating blocks 1-17 which overlap fs metadata [ 526.298505][ T2517] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 526.313516][ T2517] EXT4-fs (loop8): mount failed [ 526.335592][ T2521] FAULT_INJECTION: forcing a failure. [ 526.335592][ T2521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.348750][ T2521] CPU: 0 UID: 0 PID: 2521 Comm: syz.8.9495 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 526.348769][ T2521] Tainted: [W]=WARN [ 526.348774][ T2521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.348781][ T2521] Call Trace: [ 526.348785][ T2521] [ 526.348790][ T2521] __dump_stack+0x1d/0x30 [ 526.348807][ T2521] dump_stack_lvl+0x95/0xd0 [ 526.348852][ T2521] dump_stack+0x15/0x1b [ 526.348863][ T2521] should_fail_ex+0x263/0x280 [ 526.348875][ T2521] should_fail+0xb/0x20 [ 526.348899][ T2521] should_fail_usercopy+0x1a/0x20 [ 526.348912][ T2521] _copy_from_iter+0x21c/0xea0 [ 526.348998][ T2521] ? __alloc_skb+0x397/0x4b0 [ 526.349051][ T2521] ? __alloc_skb+0x219/0x4b0 [ 526.349062][ T2521] netlink_sendmsg+0x4ae/0x6f0 [ 526.349078][ T2521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.349099][ T2521] __sock_sendmsg+0x145/0x170 [ 526.349151][ T2521] ____sys_sendmsg+0x31e/0x4a0 [ 526.349216][ T2521] ___sys_sendmsg+0x195/0x1e0 [ 526.349252][ T2521] __x64_sys_sendmsg+0xd4/0x160 [ 526.349314][ T2521] x64_sys_call+0x17ba/0x3000 [ 526.349372][ T2521] do_syscall_64+0xc0/0x2a0 [ 526.349399][ T2521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.349413][ T2521] RIP: 0033:0x7f636e5dacb9 [ 526.349422][ T2521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.349433][ T2521] RSP: 002b:00007f636d037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.349471][ T2521] RAX: ffffffffffffffda RBX: 00007f636e855fa0 RCX: 00007f636e5dacb9 [ 526.349551][ T2521] RDX: 0000000000044000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 526.349581][ T2521] RBP: 00007f636d037090 R08: 0000000000000000 R09: 0000000000000000 [ 526.349589][ T2521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.349596][ T2521] R13: 00007f636e856038 R14: 00007f636e855fa0 R15: 00007ffe930bc208 [ 526.349611][ T2521] [ 526.552463][ T2523] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9496'. [ 526.719132][ T2539] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 526.729017][ T2539] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 526.748572][ T2539] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 526.761589][ T2539] EXT4-fs error (device loop8): ext4_get_journal_inode:5849: inode #5: comm syz.8.9504: unexpected bad inode w/o EXT4_IGET_BAD [ 526.762225][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.784374][ T2539] EXT4-fs (loop8): no journal found [ 526.790351][ T2539] EXT4-fs (loop8): can't get journal size [ 526.802368][ T2542] EXT4-fs: Ignoring removed oldalloc option [ 526.808439][ T2542] EXT4-fs: Ignoring removed bh option [ 526.808900][ T2539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.841639][ T2542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.875259][ T2547] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 526.990971][ T2552] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.8.9504: path /577/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 527.017364][ T2556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9502'. [ 527.104428][ T2551] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.9502: Allocating blocks 1-17 which overlap fs metadata [ 527.119913][ T2542] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.9502: Allocating blocks 1-17 which overlap fs metadata [ 527.150834][T24757] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.217085][ T2549] binfmt_misc: register: failed to install interpreter file ./file0 [ 527.598176][ T873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.630864][ T2575] geneve2: entered promiscuous mode [ 527.636189][ T2575] geneve2: entered allmulticast mode [ 528.060410][ T2601] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 528.068334][ T2601] FAT-fs (loop4): Filesystem has been set read-only [ 528.106293][ T2604] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 528.112821][ T2604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 528.121507][ T2604] vhci_hcd vhci_hcd.0: Device attached [ 528.133180][ T2610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9523'. [ 528.144546][ T2605] vhci_hcd: connection closed [ 528.144799][T23758] vhci_hcd vhci_hcd.8: stop threads [ 528.155339][T23758] vhci_hcd vhci_hcd.8: release socket [ 528.157244][ T2610] erspan1: entered allmulticast mode [ 528.160833][T23758] vhci_hcd vhci_hcd.8: disconnect device [ 528.212981][ T2615] netlink: 'syz.0.9523': attribute type 1 has an invalid length. [ 528.221214][ T2615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9523'. [ 528.221866][ T2617] Process accounting resumed [ 528.272590][ T2619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.330670][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.405357][ T2635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9532'. [ 528.428927][ T2635] netlink: 'syz.4.9532': attribute type 1 has an invalid length. [ 528.438007][ T2635] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9532'. [ 528.484772][ T2643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9535'. [ 528.624636][ T2655] EXT4-fs: Ignoring removed oldalloc option [ 528.631061][ T2655] EXT4-fs: Ignoring removed bh option [ 528.647488][ T2655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.665195][ T2658] EXT4-fs: Ignoring removed oldalloc option [ 528.671233][ T2658] EXT4-fs: Ignoring removed bh option [ 528.697334][ T2658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.887783][ T2667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9538'. [ 528.935153][ T2655] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9538: Allocating blocks 1-17 which overlap fs metadata [ 528.951171][ T2661] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9538: Allocating blocks 1-17 which overlap fs metadata [ 529.202047][ T2662] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9540: Allocating blocks 1-17 which overlap fs metadata [ 529.246510][ T2658] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9540: Allocating blocks 1-17 which overlap fs metadata [ 529.428056][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.467078][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.507278][ T2678] set_capacity_and_notify: 10 callbacks suppressed [ 529.507294][ T2678] loop8: detected capacity change from 0 to 256 [ 529.529575][ T2685] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 529.690118][ T2690] loop4: detected capacity change from 0 to 1024 [ 529.707531][ T2678] binfmt_misc: register: failed to install interpreter file ./file0 [ 529.707943][ T2690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.738623][ T2690] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.9548: inode #1869229157: comm syz.4.9548: iget: illegal inode # [ 529.752698][ T2690] EXT4-fs (loop4): Remounting filesystem read-only [ 529.759283][ T2690] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.9548: cleanup dec ref error -30 [ 529.773225][ T2690] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.9548: dec ref error=-30 [ 529.815525][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.840588][ T2694] FAULT_INJECTION: forcing a failure. [ 529.840588][ T2694] name failslab, interval 1, probability 0, space 0, times 0 [ 529.853351][ T2694] CPU: 0 UID: 0 PID: 2694 Comm: syz.4.9549 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 529.853442][ T2694] Tainted: [W]=WARN [ 529.853450][ T2694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.853464][ T2694] Call Trace: [ 529.853471][ T2694] [ 529.853479][ T2694] __dump_stack+0x1d/0x30 [ 529.853527][ T2694] dump_stack_lvl+0x95/0xd0 [ 529.853549][ T2694] dump_stack+0x15/0x1b [ 529.853609][ T2694] should_fail_ex+0x263/0x280 [ 529.853631][ T2694] should_failslab+0x8c/0xb0 [ 529.853650][ T2694] __kvmalloc_node_noprof+0x148/0x680 [ 529.853736][ T2694] ? seq_read_iter+0x143/0x940 [ 529.853786][ T2694] seq_read_iter+0x143/0x940 [ 529.853873][ T2694] kernfs_fop_read_iter+0xc1/0x330 [ 529.853933][ T2694] ? iov_iter_bvec+0xa4/0xd0 [ 529.853954][ T2694] copy_splice_read+0x471/0x6c0 [ 529.853985][ T2694] ? __pfx_copy_splice_read+0x10/0x10 [ 529.854075][ T2694] splice_direct_to_actor+0x26e/0x670 [ 529.854104][ T2694] ? __pfx_direct_splice_actor+0x10/0x10 [ 529.854230][ T2694] do_splice_direct+0x119/0x1a0 [ 529.854259][ T2694] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 529.854280][ T2694] do_sendfile+0x380/0x650 [ 529.854422][ T2694] __x64_sys_sendfile64+0x105/0x150 [ 529.854443][ T2694] x64_sys_call+0x2db1/0x3000 [ 529.854463][ T2694] do_syscall_64+0xc0/0x2a0 [ 529.854490][ T2694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.854563][ T2694] RIP: 0033:0x7fd35cf1acb9 [ 529.854580][ T2694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.854598][ T2694] RSP: 002b:00007fd35b977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 529.854661][ T2694] RAX: ffffffffffffffda RBX: 00007fd35d195fa0 RCX: 00007fd35cf1acb9 [ 529.854676][ T2694] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 529.854687][ T2694] RBP: 00007fd35b977090 R08: 0000000000000000 R09: 0000000000000000 [ 529.854698][ T2694] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 529.854710][ T2694] R13: 00007fd35d196038 R14: 00007fd35d195fa0 R15: 00007ffcfde4e5c8 [ 529.854727][ T2694] [ 530.092258][ T2699] netlink: 'syz.4.9551': attribute type 27 has an invalid length. [ 530.306559][ T2708] FAULT_INJECTION: forcing a failure. [ 530.306559][ T2708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.319689][ T2708] CPU: 0 UID: 0 PID: 2708 Comm: syz.0.9555 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 530.319773][ T2708] Tainted: [W]=WARN [ 530.319781][ T2708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.319824][ T2708] Call Trace: [ 530.319831][ T2708] [ 530.319839][ T2708] __dump_stack+0x1d/0x30 [ 530.319865][ T2708] dump_stack_lvl+0x95/0xd0 [ 530.319947][ T2708] dump_stack+0x15/0x1b [ 530.319967][ T2708] should_fail_ex+0x263/0x280 [ 530.320063][ T2708] should_fail+0xb/0x20 [ 530.320080][ T2708] should_fail_usercopy+0x1a/0x20 [ 530.320102][ T2708] _copy_from_iter+0xcf/0xea0 [ 530.320133][ T2708] ? __alloc_skb+0x397/0x4b0 [ 530.320151][ T2708] ? __alloc_skb+0x219/0x4b0 [ 530.320171][ T2708] netlink_sendmsg+0x4ae/0x6f0 [ 530.320194][ T2708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.320223][ T2708] __sock_sendmsg+0x145/0x170 [ 530.320247][ T2708] ____sys_sendmsg+0x31e/0x4a0 [ 530.320269][ T2708] ___sys_sendmsg+0x195/0x1e0 [ 530.320304][ T2708] __x64_sys_sendmsg+0xd4/0x160 [ 530.320329][ T2708] x64_sys_call+0x17ba/0x3000 [ 530.320385][ T2708] do_syscall_64+0xc0/0x2a0 [ 530.320408][ T2708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.320426][ T2708] RIP: 0033:0x7fc3012facb9 [ 530.320440][ T2708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.320538][ T2708] RSP: 002b:00007fc2ffd57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.320558][ T2708] RAX: ffffffffffffffda RBX: 00007fc301575fa0 RCX: 00007fc3012facb9 [ 530.320570][ T2708] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000009 [ 530.320581][ T2708] RBP: 00007fc2ffd57090 R08: 0000000000000000 R09: 0000000000000000 [ 530.320592][ T2708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.320603][ T2708] R13: 00007fc301576038 R14: 00007fc301575fa0 R15: 00007ffca2551258 [ 530.320634][ T2708] [ 530.516553][ T2711] loop8: detected capacity change from 0 to 1024 [ 530.523225][ T2711] EXT4-fs: Ignoring removed oldalloc option [ 530.529263][ T2711] EXT4-fs: Ignoring removed bh option [ 530.578574][ T2711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.634410][ T2719] loop2: detected capacity change from 0 to 512 [ 530.688277][ T2720] geneve2: entered promiscuous mode [ 530.693565][ T2720] geneve2: entered allmulticast mode [ 530.710224][ T2719] __quota_error: 25 callbacks suppressed [ 530.710237][ T2719] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 530.774353][ T2719] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 530.793388][ T2727] __nla_validate_parse: 1 callbacks suppressed [ 530.793402][ T2727] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9554'. [ 530.854297][ T29] audit: type=1326 audit(2000000980.957:19352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.0.9561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x0 [ 530.854480][ T2719] EXT4-fs (loop2): mount failed [ 531.006500][ T29] audit: type=1326 audit(2000000980.987:19353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2729 comm="syz.0.9561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3012facb9 code=0x0 [ 531.071455][ T2711] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9554: Allocating blocks 1-17 which overlap fs metadata [ 531.098060][ T2722] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9554: Allocating blocks 1-17 which overlap fs metadata [ 531.135748][ T29] audit: type=1400 audit(2000000981.177:19354): avc: denied { getopt } for pid=2735 comm="syz.4.9564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.197428][T24757] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.259651][ T2743] geneve2: entered promiscuous mode [ 531.264885][ T2743] geneve2: entered allmulticast mode [ 531.346666][ T2751] loop8: detected capacity change from 0 to 1024 [ 531.353402][ T2751] EXT4-fs: Ignoring removed oldalloc option [ 531.359346][ T2751] EXT4-fs: Ignoring removed bh option [ 531.377877][ T2751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.444334][ T29] audit: type=1400 audit(2000000981.547:19355): avc: denied { create } for pid=2757 comm="syz.4.9572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 531.501560][ T29] audit: type=1400 audit(2000000981.607:19356): avc: denied { setopt } for pid=2757 comm="syz.4.9572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 531.583906][ T2766] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9569'. [ 531.641415][ T2760] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9569: Allocating blocks 1-17 which overlap fs metadata [ 531.665394][ T2751] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9569: Allocating blocks 1-17 which overlap fs metadata [ 531.727367][ T2770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2770 comm=syz.4.9575 [ 531.758256][ T2770] loop4: detected capacity change from 0 to 2048 [ 531.777705][ T2770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.797503][ T2770] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 531.823820][ T2770] tipc: Enabling of bearer rejected, already enabled [ 532.004969][ T2776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9577'. [ 532.066784][ T2776] netlink: 'syz.2.9577': attribute type 1 has an invalid length. [ 532.074635][ T2776] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9577'. [ 532.105389][ T2779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9578'. [ 532.133698][T24757] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.226414][ T2788] geneve2: entered promiscuous mode [ 532.231656][ T2788] geneve2: entered allmulticast mode [ 532.242769][ T2792] loop2: detected capacity change from 0 to 1024 [ 532.249497][ T2792] EXT4-fs: Ignoring removed oldalloc option [ 532.255486][ T2792] EXT4-fs: Ignoring removed bh option [ 532.302392][ T2792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.338185][ T2797] loop5: detected capacity change from 0 to 1024 [ 532.344868][ T2797] EXT4-fs: Ignoring removed oldalloc option [ 532.350871][ T2797] EXT4-fs: Ignoring removed bh option [ 532.367606][ T2797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.480949][ T29] audit: type=1400 audit(2000000982.587:19357): avc: denied { ioctl } for pid=2805 comm="syz.8.9585" path="socket:[122089]" dev="sockfs" ino=122089 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 532.531169][ T2811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9581'. [ 532.628407][ T2792] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9581: Allocating blocks 1-17 which overlap fs metadata [ 532.642410][ T2801] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9581: Allocating blocks 1-17 which overlap fs metadata [ 532.670096][ T29] audit: type=1400 audit(2000000982.767:19358): avc: denied { create } for pid=2814 comm="syz.8.9587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 532.683923][ T2803] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9584: Allocating blocks 1-17 which overlap fs metadata [ 532.715608][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.728397][ T2797] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.9584: Allocating blocks 1-17 which overlap fs metadata [ 533.029798][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.067304][ T2826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9592'. [ 533.099113][ T2828] .1!€ÿ: renamed from bond_slave_0 [ 533.127206][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.160492][ T2832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.177366][ T2832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.258494][ T2832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9593'. [ 533.268195][ T2832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9593'. [ 533.278316][ T2839] FAULT_INJECTION: forcing a failure. [ 533.278316][ T2839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.292232][ T2839] CPU: 0 UID: 0 PID: 2839 Comm: syz.5.9597 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 533.292260][ T2839] Tainted: [W]=WARN [ 533.292268][ T2839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.292281][ T2839] Call Trace: [ 533.292289][ T2839] [ 533.292298][ T2839] __dump_stack+0x1d/0x30 [ 533.292321][ T2839] dump_stack_lvl+0x95/0xd0 [ 533.292362][ T2839] dump_stack+0x15/0x1b [ 533.292424][ T2839] should_fail_ex+0x263/0x280 [ 533.292443][ T2839] should_fail+0xb/0x20 [ 533.292479][ T2839] should_fail_usercopy+0x1a/0x20 [ 533.292572][ T2839] _copy_to_user+0x20/0xa0 [ 533.292594][ T2839] simple_read_from_buffer+0xb5/0x130 [ 533.292627][ T2839] proc_fail_nth_read+0x10e/0x150 [ 533.292702][ T2839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.292729][ T2839] vfs_read+0x1ab/0x7f0 [ 533.292760][ T2839] ? __rcu_read_unlock+0x4e/0x70 [ 533.292800][ T2839] ? __fget_files+0x184/0x1c0 [ 533.292861][ T2839] ? fpu__clear_user_states+0x62/0x250 [ 533.292879][ T2839] ? mutex_lock+0x57/0x90 [ 533.292900][ T2839] ksys_read+0xdc/0x1a0 [ 533.292994][ T2839] __x64_sys_read+0x40/0x50 [ 533.293020][ T2839] x64_sys_call+0x2889/0x3000 [ 533.293049][ T2839] do_syscall_64+0xc0/0x2a0 [ 533.293073][ T2839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.293092][ T2839] RIP: 0033:0x7fe01d38b58e [ 533.293105][ T2839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.293168][ T2839] RSP: 002b:00007fe01be26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.293193][ T2839] RAX: ffffffffffffffda RBX: 00007fe01be276c0 RCX: 00007fe01d38b58e [ 533.293208][ T2839] RDX: 000000000000000f RSI: 00007fe01be270a0 RDI: 0000000000000004 [ 533.293221][ T2839] RBP: 00007fe01be27090 R08: 0000000000000000 R09: 0000000000000000 [ 533.293234][ T2839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.293247][ T2839] R13: 00007fe01d646038 R14: 00007fe01d645fa0 R15: 00007fff8e441148 [ 533.293268][ T2839] [ 533.544991][ T2844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2844 comm=syz.8.9599 [ 533.558386][ T2848] @0Ù: renamed from dummy0 [ 533.589091][ T2844] loop8: detected capacity change from 0 to 2048 [ 533.617923][ T2844] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.677177][ T2857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9603'. [ 533.696551][ T2844] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 533.740401][ T2844] tipc: Enabling of bearer rejected, already enabled [ 533.762227][ T2859] loop4: detected capacity change from 0 to 1024 [ 533.787702][ T2859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.809206][ T2859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.9604: inode #1869229157: comm syz.4.9604: iget: illegal inode # [ 533.823462][ T2859] EXT4-fs (loop4): Remounting filesystem read-only [ 533.831344][ T2859] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.9604: cleanup dec ref error -30 [ 533.844373][ T2859] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.9604: dec ref error=-30 [ 533.916950][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.991069][ T2870] EXT4-fs: Ignoring removed oldalloc option [ 533.997095][ T2870] EXT4-fs: Ignoring removed bh option [ 534.008754][ T2870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.217006][ T2870] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.9606: Allocating blocks 1-17 which overlap fs metadata [ 534.231894][ T2874] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.9606: Allocating blocks 1-17 which overlap fs metadata [ 534.308210][ T29] audit: type=1400 audit(2000000984.417:19359): avc: denied { setopt } for pid=2877 comm="syz.4.9608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 534.418127][T24757] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.751717][ T2899] lo speed is unknown, defaulting to 1000 [ 534.779650][ T873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.783074][ T2899] lo speed is unknown, defaulting to 1000 [ 534.817003][ T2909] set_capacity_and_notify: 1 callbacks suppressed [ 534.817019][ T2909] loop0: detected capacity change from 0 to 512 [ 534.840365][ T2909] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 534.852038][ T2909] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 534.867505][ T2909] EXT4-fs (loop0): mount failed [ 534.875219][ T2899] chnl_net:caif_netlink_parms(): no params data found [ 534.921562][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.928983][ T2899] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.936571][ T2899] bridge_slave_0: entered allmulticast mode [ 534.943287][ T2899] bridge_slave_0: entered promiscuous mode [ 534.950125][ T2899] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.957252][ T2899] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.964565][ T2899] bridge_slave_1: entered allmulticast mode [ 534.971661][ T2899] bridge_slave_1: entered promiscuous mode [ 535.000943][ T2923] loop0: detected capacity change from 0 to 1024 [ 535.007693][ T2923] EXT4-fs: Ignoring removed oldalloc option [ 535.013723][ T2923] EXT4-fs: Ignoring removed bh option [ 535.024697][ T2899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.035515][ T2899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.046989][ T2923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.056916][ T2899] team0: Port device team_slave_0 added [ 535.078789][ T2899] team0: Port device team_slave_1 added [ 535.099191][ T2899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.106262][ T2899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.133033][ T2899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.169811][ T181] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface [ 535.190328][ T181] bond3 (unregistering): (slave erspan1): Releasing active interface [ 535.204186][ T181] dvmrp6 (unregistering): left allmulticast mode [ 535.293014][ T2923] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.9620: Allocating blocks 1-17 which overlap fs metadata [ 535.306988][ T2926] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.9620: Allocating blocks 1-17 which overlap fs metadata [ 535.327346][ T181] bond0 (unregistering): Released all slaves [ 535.334887][ T181] bond1 (unregistering): Released all slaves [ 535.344136][ T181] bond2 (unregistering): Released all slaves [ 535.353485][ T181] bond3 (unregistering): Released all slaves [ 535.368563][ T181] bond4 (unregistering): Released all slaves [ 535.377568][ T181] bond5 (unregistering): Released all slaves [ 535.386748][ T181] bond6 (unregistering): Released all slaves [ 535.398945][ T181] bond7 (unregistering): Released all slaves [ 535.408615][ T181] bond8 (unregistering): Released all slaves [ 535.417735][ T181] bond9 (unregistering): Released all slaves [ 535.426266][ T181] bond10 (unregistering): Released all slaves [ 535.434507][ T181] bond11 (unregistering): Released all slaves [ 535.442896][ T181] bond12 (unregistering): Released all slaves [ 535.450927][ T181] bond13 (unregistering): Released all slaves [ 535.460135][ T2899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.467173][ T2899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.493091][ T2899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.534097][ T2937] bond4: entered promiscuous mode [ 535.539152][ T2937] bond4: entered allmulticast mode [ 535.544355][ T2937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.552196][ T181] tipc: Disabling bearer [ 535.557447][ T181] tipc: Left network mode [ 535.563920][ T2899] hsr_slave_0: entered promiscuous mode [ 535.570672][ T2899] hsr_slave_1: entered promiscuous mode [ 535.577127][ T2899] debugfs: 'hsr0' already exists in 'hsr' [ 535.582839][ T2899] Cannot create hsr debugfs directory [ 535.605414][ T2937] netlink: 'syz.5.9624': attribute type 1 has an invalid length. [ 535.613506][ T2942] bond2: entered promiscuous mode [ 535.613523][ T2942] bond2: entered allmulticast mode [ 535.613685][ T2942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.644121][ T181] hsr_slave_0: left promiscuous mode [ 535.650792][ T181] hsr_slave_1: left promiscuous mode [ 535.721993][ T2942] netlink: 'syz.4.9625': attribute type 1 has an invalid length. [ 535.788817][ T2954] loop5: detected capacity change from 0 to 1024 [ 535.799894][ T873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.816707][ T2954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.836505][ T2954] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.9627: inode #1869229157: comm syz.5.9627: iget: illegal inode # [ 535.850901][ T2954] EXT4-fs (loop5): Remounting filesystem read-only [ 535.857489][ T2954] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.5.9627: cleanup dec ref error -30 [ 535.870562][ T2954] EXT4-fs warning (device loop5): ext4_xattr_block_set:2200: inode #19: comm syz.5.9627: dec ref error=-30 [ 535.935876][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.049508][ T181] IPVS: stop unused estimator thread 0... [ 536.095152][ T2899] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 536.116093][ T2899] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 536.125006][ T2899] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 536.135266][ T2899] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 536.173442][ T2899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.186404][ T2899] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.197611][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.204688][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.217304][T23236] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.224391][T23236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.259505][ T3040] loop2: detected capacity change from 0 to 512 [ 536.269455][ T3040] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 536.285429][T16283] udevd[16283]: incorrect ext4 checksum on /dev/loop2 [ 536.294018][ T3040] random: crng reseeded on system resumption [ 536.302775][ T3040] FAULT_INJECTION: forcing a failure. [ 536.302775][ T3040] name failslab, interval 1, probability 0, space 0, times 0 [ 536.316085][ T3040] CPU: 0 UID: 0 PID: 3040 Comm: syz.2.9634 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 536.316163][ T3040] Tainted: [W]=WARN [ 536.316171][ T3040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.316184][ T3040] Call Trace: [ 536.316191][ T3040] [ 536.316199][ T3040] __dump_stack+0x1d/0x30 [ 536.316239][ T3040] dump_stack_lvl+0x95/0xd0 [ 536.316259][ T3040] dump_stack+0x15/0x1b [ 536.316279][ T3040] should_fail_ex+0x263/0x280 [ 536.316301][ T3040] should_failslab+0x8c/0xb0 [ 536.316363][ T3040] __kmalloc_cache_noprof+0x64/0x4a0 [ 536.316383][ T3040] ? create_basic_memory_bitmaps+0x8f/0x450 [ 536.316410][ T3040] create_basic_memory_bitmaps+0x8f/0x450 [ 536.316451][ T3040] snapshot_open+0x1b4/0x270 [ 536.316475][ T3040] ? __pfx_snapshot_open+0x10/0x10 [ 536.316542][ T3040] misc_open+0x1df/0x220 [ 536.316628][ T3040] chrdev_open+0x2eb/0x3a0 [ 536.316713][ T3040] ? __pfx_chrdev_open+0x10/0x10 [ 536.316735][ T3040] do_dentry_open+0x54b/0xa60 [ 536.316769][ T3040] vfs_open+0x37/0x1e0 [ 536.316790][ T3040] path_openat+0x1de9/0x23c0 [ 536.316815][ T3040] ? _parse_integer_limit+0x170/0x190 [ 536.316848][ T3040] ? kstrtouint+0x76/0xc0 [ 536.316941][ T3040] do_filp_open+0x15d/0x280 [ 536.317026][ T3040] do_sys_openat2+0xa6/0x150 [ 536.317054][ T3040] __x64_sys_openat+0xf2/0x120 [ 536.317141][ T3040] x64_sys_call+0x2b07/0x3000 [ 536.317166][ T3040] do_syscall_64+0xc0/0x2a0 [ 536.317194][ T3040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.317279][ T3040] RIP: 0033:0x7efd90c2acb9 [ 536.317350][ T3040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.317371][ T3040] RSP: 002b:00007efd8f687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 536.317393][ T3040] RAX: ffffffffffffffda RBX: 00007efd90ea5fa0 RCX: 00007efd90c2acb9 [ 536.317408][ T3040] RDX: 00000000000c8601 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 536.317423][ T3040] RBP: 00007efd8f687090 R08: 0000000000000000 R09: 0000000000000000 [ 536.317497][ T3040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.317511][ T3040] R13: 00007efd90ea6038 R14: 00007efd90ea5fa0 R15: 00007fffa4d870b8 [ 536.317530][ T3040] [ 536.324296][ T2899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.418735][ T3052] loop2: detected capacity change from 0 to 1024 [ 536.549778][ T2899] veth0_vlan: entered promiscuous mode [ 536.556920][ T3052] EXT4-fs: Ignoring removed oldalloc option [ 536.573684][ T3052] EXT4-fs: Ignoring removed bh option [ 536.582745][ T2899] veth1_vlan: entered promiscuous mode [ 536.590073][ T3052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.599997][ T2899] veth0_macvtap: entered promiscuous mode [ 536.609901][ T2899] veth1_macvtap: entered promiscuous mode [ 536.621323][ T2899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.634531][ T2899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.646720][T23253] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.657957][T23253] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.667263][T23253] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.677231][T23253] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.801267][ T3075] bond3: entered promiscuous mode [ 536.806444][ T3075] bond3: entered allmulticast mode [ 536.811912][ T3075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.847719][ T3075] netlink: 'syz.4.9636': attribute type 1 has an invalid length. [ 536.855562][ T3075] __nla_validate_parse: 8 callbacks suppressed [ 536.855589][ T3075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9636'. [ 536.858685][ T3052] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9635: Allocating blocks 1-17 which overlap fs metadata [ 536.872595][ T3067] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9635: Allocating blocks 1-17 which overlap fs metadata [ 536.913713][ T3079] bridge1: entered allmulticast mode [ 537.067780][ T3088] loop5: detected capacity change from 0 to 1024 [ 537.078229][ T3088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.096413][ T3087] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.9641: inode #1869229157: comm syz.5.9641: iget: illegal inode # [ 537.110476][ T3087] EXT4-fs (loop5): Remounting filesystem read-only [ 537.117016][ T3087] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.5.9641: cleanup dec ref error -30 [ 537.129867][ T3087] EXT4-fs warning (device loop5): ext4_xattr_block_set:2200: inode #19: comm syz.5.9641: dec ref error=-30 [ 537.215394][ T3099] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 537.222326][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.247147][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.261409][ T3100] loop8: detected capacity change from 0 to 1024 [ 537.268173][ T3100] EXT4-fs: Ignoring removed oldalloc option [ 537.274082][ T3100] EXT4-fs: Ignoring removed bh option [ 537.292409][ T3100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.307774][ T3107] loop5: detected capacity change from 0 to 256 [ 537.323586][ T3107] FAT-fs (loop5): Directory bread(block 64) failed [ 537.333495][ T3107] FAT-fs (loop5): Directory bread(block 65) failed [ 537.346141][ T3108] loop2: detected capacity change from 0 to 1024 [ 537.352848][ T3108] EXT4-fs: Ignoring removed oldalloc option [ 537.358802][ T3108] EXT4-fs: Ignoring removed bh option [ 537.365929][ T3107] FAT-fs (loop5): Directory bread(block 66) failed [ 537.373551][ T3107] FAT-fs (loop5): Directory bread(block 67) failed [ 537.373893][ T3108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.393189][ T3107] FAT-fs (loop5): Directory bread(block 68) failed [ 537.419763][ T3107] FAT-fs (loop5): Directory bread(block 69) failed [ 537.429036][ T3114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9644'. [ 537.438901][ T3107] FAT-fs (loop5): Directory bread(block 70) failed [ 537.445418][ T3107] FAT-fs (loop5): Directory bread(block 71) failed [ 537.452669][ T3107] FAT-fs (loop5): Directory bread(block 72) failed [ 537.459423][ T3107] FAT-fs (loop5): Directory bread(block 73) failed [ 537.483466][ T3107] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 537.492048][ T3107] FAT-fs (loop5): Filesystem has been set read-only [ 537.499128][ T3107] syz.5.9647: attempt to access beyond end of device [ 537.499128][ T3107] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 537.513553][ T3107] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 537.524057][ T3107] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 537.533002][ T3107] syz.5.9647: attempt to access beyond end of device [ 537.533002][ T3107] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.547331][ T3107] syz.5.9647: attempt to access beyond end of device [ 537.547331][ T3107] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.555613][ T3100] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9644: Allocating blocks 1-17 which overlap fs metadata [ 537.561969][ T3117] syz.5.9647: attempt to access beyond end of device [ 537.561969][ T3117] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.575796][ T3113] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9644: Allocating blocks 1-17 which overlap fs metadata [ 537.603248][ T3107] syz.5.9647: attempt to access beyond end of device [ 537.603248][ T3107] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.618617][ T3113] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9644: Allocating blocks 1-17 which overlap fs metadata [ 537.632943][ T3107] syz.5.9647: attempt to access beyond end of device [ 537.632943][ T3107] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.670375][ T3117] syz.5.9647: attempt to access beyond end of device [ 537.670375][ T3117] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.685572][ T3117] syz.5.9647: attempt to access beyond end of device [ 537.685572][ T3117] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.700990][ T3117] syz.5.9647: attempt to access beyond end of device [ 537.700990][ T3117] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.714863][ T3107] syz.5.9647: attempt to access beyond end of device [ 537.714863][ T3107] loop5: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 537.722151][ T3108] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9646: Allocating blocks 1-17 which overlap fs metadata [ 537.743243][ T3115] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9646: Allocating blocks 1-17 which overlap fs metadata [ 537.871937][ T3124] netlink: 'syz.5.9649': attribute type 1 has an invalid length. [ 537.879755][ T3124] netlink: 'syz.5.9649': attribute type 2 has an invalid length. [ 537.892917][ T3126] bond1: entered promiscuous mode [ 537.898016][ T3126] bond1: entered allmulticast mode [ 537.903273][ T3126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.914625][ T3126] erspan1: entered allmulticast mode [ 537.921789][ T3126] erspan1: entered promiscuous mode [ 537.927706][ T3126] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 537.945278][ T3126] netlink: 'syz.0.9650': attribute type 1 has an invalid length. [ 537.953279][ T3126] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9650'. [ 537.997426][ T3134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9652'. [ 538.044065][ T3139] geneve2: entered promiscuous mode [ 538.046637][ T2899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.049428][ T3139] geneve2: entered allmulticast mode [ 538.121204][ T3145] loop8: detected capacity change from 0 to 1024 [ 538.149135][ T3145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.159512][T28516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.177240][ T3145] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: comm syz.8.9657: inode #1869229157: comm syz.8.9657: iget: illegal inode # [ 538.191827][ T3145] EXT4-fs (loop8): Remounting filesystem read-only [ 538.198427][ T3145] EXT4-fs warning (device loop8): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.8.9657: cleanup dec ref error -30 [ 538.211362][ T3145] EXT4-fs warning (device loop8): ext4_xattr_block_set:2200: inode #19: comm syz.8.9657: dec ref error=-30 [ 538.248998][ T3154] FAULT_INJECTION: forcing a failure. [ 538.248998][ T3154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.262107][ T3154] CPU: 0 UID: 0 PID: 3154 Comm: syz.2.9660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 538.262142][ T3154] Tainted: [W]=WARN [ 538.262150][ T3154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.262190][ T3154] Call Trace: [ 538.262194][ T3154] [ 538.262199][ T3154] __dump_stack+0x1d/0x30 [ 538.262214][ T3154] dump_stack_lvl+0x95/0xd0 [ 538.262227][ T3154] dump_stack+0x15/0x1b [ 538.262281][ T3154] should_fail_ex+0x263/0x280 [ 538.262350][ T3154] should_fail+0xb/0x20 [ 538.262360][ T3154] should_fail_usercopy+0x1a/0x20 [ 538.262373][ T3154] _copy_from_user+0x1c/0xb0 [ 538.262394][ T3154] ___sys_sendmsg+0xc1/0x1e0 [ 538.262449][ T3154] __x64_sys_sendmsg+0xd4/0x160 [ 538.262464][ T3154] x64_sys_call+0x17ba/0x3000 [ 538.262478][ T3154] do_syscall_64+0xc0/0x2a0 [ 538.262529][ T3154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.262558][ T3154] RIP: 0033:0x7efd90c2acb9 [ 538.262629][ T3154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.262640][ T3154] RSP: 002b:00007efd8f687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.262665][ T3154] RAX: ffffffffffffffda RBX: 00007efd90ea5fa0 RCX: 00007efd90c2acb9 [ 538.262673][ T3154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 538.262681][ T3154] RBP: 00007efd8f687090 R08: 0000000000000000 R09: 0000000000000000 [ 538.262715][ T3154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.262722][ T3154] R13: 00007efd90ea6038 R14: 00007efd90ea5fa0 R15: 00007fffa4d870b8 [ 538.262733][ T3154] [ 538.454151][ T2899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.549502][ T3166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9664'. [ 538.680960][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 538.680973][ T29] audit: type=1400 audit(2000000988.787:19370): avc: denied { create } for pid=3174 comm="syz.5.9667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 538.741144][ T3178] EXT4-fs: Ignoring removed oldalloc option [ 538.747360][ T3178] EXT4-fs: Ignoring removed bh option [ 538.784210][ T3178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.887493][ T29] audit: type=1400 audit(2000000988.817:19371): avc: denied { create } for pid=3174 comm="syz.5.9667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 538.908378][ T29] audit: type=1400 audit(2000000988.817:19372): avc: denied { ioctl } for pid=3174 comm="syz.5.9667" path="socket:[122743]" dev="sockfs" ino=122743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 538.933962][ T29] audit: type=1400 audit(2000000988.817:19373): avc: denied { connect } for pid=3174 comm="syz.5.9667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 538.954797][ T29] audit: type=1400 audit(2000000988.817:19374): avc: denied { write } for pid=3174 comm="syz.5.9667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 538.974848][ T29] audit: type=1400 audit(2000000988.817:19375): avc: denied { create } for pid=3174 comm="syz.5.9667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=iucv_socket permissive=1 [ 539.034272][ T3192] lo speed is unknown, defaulting to 1000 [ 539.046558][ T29] audit: type=1400 audit(2000000989.157:19376): avc: denied { read write } for pid=3193 comm="syz.2.9672" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 539.051054][ T3194] netlink: 'syz.2.9672': attribute type 3 has an invalid length. [ 539.076401][ T29] audit: type=1400 audit(2000000989.157:19377): avc: denied { open } for pid=3193 comm="syz.2.9672" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 539.104900][ T3195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9666'. [ 539.228076][ T3178] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9666: Allocating blocks 1-17 which overlap fs metadata [ 539.267167][ T3201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3201 comm=syz.5.9673 [ 539.294834][ T3189] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9666: Allocating blocks 1-17 which overlap fs metadata [ 539.355574][ T3189] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9666: Allocating blocks 1-17 which overlap fs metadata [ 539.380910][ T3198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.441950][ T3198] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 539.471163][ T3198] tipc: Started in network mode [ 539.476166][ T3198] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711 [ 539.485049][ T3198] tipc: Enabling of bearer rejected, failed to enable media [ 539.494434][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.532631][ T3212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9676'. [ 539.583935][ T3218] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9679'. [ 539.620808][ T3220] netlink: 'syz.4.9680': attribute type 1 has an invalid length. [ 539.628660][ T3220] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9680'. [ 539.738265][ T29] audit: type=1400 audit(2000000989.847:19378): avc: denied { shutdown } for pid=3221 comm="syz.8.9681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 539.768695][ T3231] netlink: 'syz.4.9683': attribute type 12 has an invalid length. [ 539.776564][ T3231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9683'. [ 539.797184][ T3231] lo speed is unknown, defaulting to 1000 [ 540.018534][ T29] audit: type=1400 audit(2000000990.127:19379): avc: denied { read } for pid=3241 comm="syz.2.9687" path="socket:[124037]" dev="sockfs" ino=124037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 540.052380][T27267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.076159][ T3242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.211540][ T3264] syzkaller0: entered promiscuous mode [ 540.217181][ T3264] syzkaller0: entered allmulticast mode [ 540.225127][ T3264] tipc: Enabled bearer , priority 0 [ 540.233842][ T3264] tipc: Resetting bearer [ 540.241034][ T3263] tipc: Resetting bearer [ 540.254650][ T3263] tipc: Disabling bearer [ 540.421643][ T3293] xt_CT: No such helper "snmp" [ 541.121863][ T3429] IPVS: starting estimator thread 0... [ 541.122937][ T3409] syzkaller0: entered promiscuous mode [ 541.132891][ T3409] syzkaller0: entered allmulticast mode [ 541.190991][ T3409] tipc: Enabled bearer , priority 0 [ 541.216705][ T3408] tipc: Resetting bearer [ 541.225797][ T3415] IPVS: using max 2208 ests per chain, 110400 per kthread [ 541.248169][ T3408] tipc: Disabling bearer [ 541.327669][ T3455] xt_recent: Unsupported userspace flags (000000b1) [ 541.383676][ T3468] lo speed is unknown, defaulting to 1000 [ 541.474948][ T3486] netlink: 'syz.5.9758': attribute type 10 has an invalid length. [ 541.557901][ T3486] team0: Port device 4@0Ù added [ 541.584751][ T3486] netlink: 'syz.5.9758': attribute type 10 has an invalid length. [ 541.637897][ T3486] team0: Port device 4@0Ù removed [ 541.646797][ T3486] bond0: (slave 4@0Ù): Enslaving as an active interface with an up link [ 541.710292][ T3528] geneve2: entered promiscuous mode [ 541.724463][ T3528] geneve2: entered allmulticast mode [ 541.760788][ T3533] tipc: Enabling of bearer rejected, failed to enable media [ 541.892138][ T3558] __nla_validate_parse: 7 callbacks suppressed [ 541.892156][ T3558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9779'. [ 541.924054][ T3564] xt_CT: No such helper "snmp" [ 542.042579][ T3577] bridge1: entered allmulticast mode [ 542.109535][ T3588] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9792'. [ 542.222537][ T3593] netlink: 'syz.8.9794': attribute type 39 has an invalid length. [ 542.312836][ T3605] vlan3: entered promiscuous mode [ 542.317982][ T3605] geneve1: entered promiscuous mode [ 542.323337][ T3605] vlan3: entered allmulticast mode [ 542.328470][ T3605] geneve1: entered allmulticast mode [ 542.429738][ T3613] tipc: Enabling of bearer rejected, failed to enable media [ 542.439173][ T3615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9804'. [ 542.722720][ T3635] lo speed is unknown, defaulting to 1000 [ 542.770760][ T3612] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 542.782457][ T3612] bond6 (unregistering): Released all slaves [ 542.822031][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9819'. [ 542.833658][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9819'. [ 542.842625][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9819'. [ 542.907792][ T3658] set_capacity_and_notify: 2 callbacks suppressed [ 542.907809][ T3658] loop8: detected capacity change from 0 to 1024 [ 542.921922][ T3658] EXT4-fs: Ignoring removed oldalloc option [ 542.927925][ T3658] EXT4-fs: Ignoring removed bh option [ 542.959325][ T3658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.059456][ T3670] syzkaller0: entered promiscuous mode [ 543.064958][ T3670] syzkaller0: entered allmulticast mode [ 543.097888][ T3676] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9821'. [ 543.123401][ T4201] IPVS: starting estimator thread 0... [ 543.225829][ T3681] IPVS: using max 2064 ests per chain, 103200 per kthread [ 543.265440][ T3658] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9821: Allocating blocks 1-17 which overlap fs metadata [ 543.280184][ T3673] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9821: Allocating blocks 1-17 which overlap fs metadata [ 543.353791][ T3700] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9839'. [ 543.587740][ T3731] syzkaller0: entered promiscuous mode [ 543.593236][ T3731] syzkaller0: entered allmulticast mode [ 543.600531][ T3732] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9855'. [ 543.610229][ T3731] tipc: Enabled bearer , priority 0 [ 543.631447][ T3731] tipc: Resetting bearer [ 543.638195][ T3729] tipc: Resetting bearer [ 543.644691][ T3729] tipc: Disabling bearer [ 543.687342][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 543.687356][ T29] audit: type=1326 audit(2000000993.797:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.5.9856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 543.717037][ T29] audit: type=1326 audit(2000000993.807:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.5.9856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe01d3cacb9 code=0x7ffc0000 [ 543.720714][ T2899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.889556][ T3761] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9867'. [ 543.953846][ T3774] syzkaller0: entered promiscuous mode [ 543.959507][ T3774] syzkaller0: entered allmulticast mode [ 544.013112][ T3774] tipc: Enabled bearer , priority 0 [ 544.031688][ T3774] tipc: Resetting bearer [ 544.038852][ T3773] tipc: Resetting bearer [ 544.055002][ T3773] tipc: Disabling bearer [ 544.877819][ T3971] loop5: detected capacity change from 0 to 256 [ 545.056986][ T4000] syzkaller0: entered promiscuous mode [ 545.062568][ T4000] syzkaller0: entered allmulticast mode [ 545.079672][ T4000] tipc: Enabled bearer , priority 0 [ 545.098512][ T3999] tipc: Resetting bearer [ 545.124566][ T3999] tipc: Disabling bearer [ 545.232722][ T3971] binfmt_misc: register: failed to install interpreter file ./file0 [ 545.488186][ T4070] loop8: detected capacity change from 0 to 512 [ 545.520984][ T4070] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 545.551283][ T4070] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 545.582861][ T4070] EXT4-fs (loop8): mount failed [ 545.631483][ T4097] syzkaller0: entered promiscuous mode [ 545.637013][ T4097] syzkaller0: entered allmulticast mode [ 545.663343][ T4097] tipc: Started in network mode [ 545.668387][ T4097] tipc: Node identity 1a9fb0de39e2, cluster identity 4711 [ 545.675659][ T4097] tipc: Enabled bearer , priority 0 [ 545.746329][ T4125] tipc: Resetting bearer [ 545.770172][ T4130] sctp: [Deprecated]: syz.2.9935 (pid 4130) Use of int in max_burst socket option. [ 545.770172][ T4130] Use struct sctp_assoc_value instead [ 545.785037][ T4096] tipc: Resetting bearer [ 545.804238][ T4096] tipc: Disabling bearer [ 545.910212][ T4152] netlink: 'syz.2.9942': attribute type 39 has an invalid length. [ 545.984721][ T29] audit: type=1400 audit(2000000996.087:19413): avc: denied { append } for pid=4161 comm="syz.8.9945" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 546.059385][ T4174] syzkaller0: entered promiscuous mode [ 546.064895][ T4174] syzkaller0: entered allmulticast mode [ 546.072173][ T4174] tipc: Enabled bearer , priority 0 [ 546.080977][ T4174] tipc: Resetting bearer [ 546.088004][ T4173] tipc: Resetting bearer [ 546.094517][ T4173] tipc: Disabling bearer [ 546.206704][ T4189] netlink: 'syz.0.9956': attribute type 39 has an invalid length. [ 546.233798][ T4193] syzkaller1: entered promiscuous mode [ 546.239444][ T4193] syzkaller1: entered allmulticast mode [ 546.297632][ T4199] xt_hashlimit: size too large, truncated to 1048576 [ 546.355384][ T4202] ¾x9ÿ: renamed from bridge_slave_0 [ 546.428244][ T4206] ieee802154 phy1 wpan1: encryption failed: -22 [ 546.469273][ T4209] syzkaller0: entered promiscuous mode [ 546.474762][ T4209] syzkaller0: entered allmulticast mode [ 546.540804][ T4211] syzkaller0: entered promiscuous mode [ 546.546371][ T4211] syzkaller0: entered allmulticast mode [ 546.687365][ T4219] syzkaller0: entered promiscuous mode [ 546.692940][ T4219] syzkaller0: entered allmulticast mode [ 546.699353][ T4221] @0Ù: renamed from dummy0 [ 546.705503][ T4219] tipc: Enabled bearer , priority 0 [ 546.714076][ T4219] tipc: Resetting bearer [ 546.720512][ T4218] tipc: Resetting bearer [ 546.727199][ T4218] tipc: Disabling bearer [ 546.740141][ T4223] netlink: 'syz.2.9970': attribute type 39 has an invalid length. [ 546.783681][ T4229] syzkaller0: entered promiscuous mode [ 546.789212][ T4229] syzkaller0: entered allmulticast mode [ 546.797262][ T4229] tipc: Enabled bearer , priority 0 [ 546.804392][ T4228] tipc: Resetting bearer [ 546.819170][ T4228] tipc: Disabling bearer [ 546.840353][ T4231] syzkaller1: entered promiscuous mode [ 546.845855][ T4231] syzkaller1: entered allmulticast mode [ 546.931316][ T4243] loop4: detected capacity change from 0 to 512 [ 546.942289][ T4247] netlink: 'syz.8.9982': attribute type 39 has an invalid length. [ 546.951377][ T4243] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 546.961580][ T4243] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 546.980058][ T4243] EXT4-fs (loop4): mount failed [ 547.018021][ T4255] syzkaller0: entered promiscuous mode [ 547.023504][ T4255] syzkaller0: entered allmulticast mode [ 547.030825][ T4255] tipc: Enabled bearer , priority 0 [ 547.039391][ T4255] tipc: Resetting bearer [ 547.046087][ T4254] tipc: Resetting bearer [ 547.056036][ T4254] tipc: Disabling bearer [ 547.256400][ T4290] bridge1: entered allmulticast mode [ 547.383797][ T4315] netlink: 'syz.4.10013': attribute type 39 has an invalid length. [ 547.432806][ T4321] tipc: Enabled bearer , priority 0 [ 547.441761][ T4320] tipc: Disabling bearer [ 547.456809][ T4324] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.523012][ T4332] bond6: entered promiscuous mode [ 547.528089][ T4332] bond6: entered allmulticast mode [ 547.533372][ T4332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.551250][ T4334] loop4: detected capacity change from 0 to 1024 [ 547.558129][ T4334] EXT4-fs: Ignoring removed oldalloc option [ 547.564048][ T4334] EXT4-fs: Ignoring removed bh option [ 547.571488][ T4332] netlink: 'syz.2.10021': attribute type 1 has an invalid length. [ 547.577623][ T4334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.579623][ T4332] __nla_validate_parse: 4 callbacks suppressed [ 547.579649][ T4332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10021'. [ 547.790982][ T4334] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10019: Allocating blocks 1-17 which overlap fs metadata [ 547.808055][ T4343] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.10019: Allocating blocks 1-17 which overlap fs metadata [ 547.847804][ T4355] syzkaller0: entered promiscuous mode [ 547.853357][ T4355] syzkaller0: entered allmulticast mode [ 547.953763][ T4366] tipc: Enabled bearer , priority 0 [ 547.962688][ T4365] tipc: Disabling bearer [ 548.043436][ T4376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10036'. [ 548.099221][ T4387] loop8: detected capacity change from 0 to 1024 [ 548.105924][ T4387] EXT4-fs: Ignoring removed oldalloc option [ 548.111851][ T4387] EXT4-fs: Ignoring removed bh option [ 548.128500][ T4387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.173468][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10043'. [ 548.228766][ T4405] tipc: Enabled bearer , priority 0 [ 548.246895][ T4404] tipc: Disabling bearer [ 548.305975][ T4403] ================================================================== [ 548.314075][ T4403] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 548.322161][ T4403] [ 548.324488][ T4403] write to 0xffff8881079ca164 of 4 bytes by task 4387 on cpu 1: [ 548.332112][ T4403] xas_set_mark+0x12b/0x140 [ 548.336627][ T4403] __folio_start_writeback+0x17b/0x370 [ 548.342097][ T4403] ext4_bio_write_folio+0x5ad/0x9f0 [ 548.345999][ T4387] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.10034: Allocating blocks 1-17 which overlap fs metadata [ 548.347305][ T4403] mpage_process_page_bufs+0x4a1/0x620 [ 548.366366][ T4403] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 548.369369][ T4410] tipc: Enabled bearer , priority 0 [ 548.372179][ T4403] ext4_do_writepages+0x9f6/0x2800 [ 548.383855][ T4403] ext4_writepages+0x18f/0x320 [ 548.388626][ T4403] do_writepages+0x1c6/0x310 [ 548.389180][ T4410] syzkaller0: entered promiscuous mode [ 548.393234][ T4403] file_write_and_wait_range+0x178/0x2f0 [ 548.398713][ T4410] syzkaller0: entered allmulticast mode [ 548.404303][ T4403] generic_buffers_fsync_noflush+0x45/0x130 [ 548.404329][ T4403] ext4_sync_file+0x1aa/0x680 [ 548.420371][ T4403] vfs_fsync_range+0x10d/0x130 [ 548.425142][ T4403] ext4_buffered_write_iter+0x34f/0x3c0 [ 548.430707][ T4403] ext4_file_write_iter+0x380/0xf70 [ 548.435923][ T4403] iter_file_splice_write+0x6bc/0xa80 [ 548.441308][ T4403] direct_splice_actor+0x156/0x2a0 [ 548.446430][ T4403] splice_direct_to_actor+0x311/0x670 [ 548.451802][ T4403] do_splice_direct+0x119/0x1a0 [ 548.456656][ T4403] do_sendfile+0x380/0x650 [ 548.461073][ T4403] __x64_sys_sendfile64+0x105/0x150 [ 548.466263][ T4403] x64_sys_call+0x2db1/0x3000 [ 548.470938][ T4403] do_syscall_64+0xc0/0x2a0 [ 548.475433][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.481314][ T4403] [ 548.483624][ T4403] read to 0xffff8881079ca164 of 4 bytes by task 4403 on cpu 0: [ 548.491155][ T4403] file_write_and_wait_range+0x130/0x2f0 [ 548.496804][ T4403] generic_buffers_fsync_noflush+0x45/0x130 [ 548.503044][ T4403] ext4_sync_file+0x1aa/0x680 [ 548.507720][ T4403] vfs_fsync_range+0x10d/0x130 [ 548.512472][ T4403] ext4_buffered_write_iter+0x34f/0x3c0 [ 548.518016][ T4403] ext4_file_write_iter+0x380/0xf70 [ 548.523213][ T4403] iter_file_splice_write+0x6bc/0xa80 [ 548.528585][ T4403] direct_splice_actor+0x156/0x2a0 [ 548.533695][ T4403] splice_direct_to_actor+0x311/0x670 [ 548.539067][ T4403] do_splice_direct+0x119/0x1a0 [ 548.543914][ T4403] do_sendfile+0x380/0x650 [ 548.548322][ T4403] __x64_sys_sendfile64+0x105/0x150 [ 548.553511][ T4403] x64_sys_call+0x2db1/0x3000 [ 548.558180][ T4403] do_syscall_64+0xc0/0x2a0 [ 548.562677][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.568558][ T4403] [ 548.570869][ T4403] value changed: 0x0a000021 -> 0x04000021 [ 548.576571][ T4403] [ 548.578878][ T4403] Reported by Kernel Concurrency Sanitizer on: [ 548.585010][ T4403] CPU: 0 UID: 0 PID: 4403 Comm: syz.8.10034 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 548.596368][ T4403] Tainted: [W]=WARN [ 548.600154][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.610193][ T4403] ================================================================== [ 548.621621][ T4403] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.10034: Allocating blocks 1-17 which overlap fs metadata [ 548.636318][ T4403] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.10034: Allocating blocks 1-17 which overlap fs metadata [ 548.645371][ T4410] tipc: Resetting bearer [ 548.659157][T28904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.668250][ T4409] tipc: Resetting bearer [ 548.681435][ T4409] tipc: Disabling bearer [ 548.883861][ T2899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.