last executing test programs: 8m58.650725903s ago: executing program 32 (id=150): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200401, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x1ff, 0x2, 0x9, 0x7}, {0x80, 0x5, 0x1, 0xaa}, {0x6, 0x2, 0x0, 0xfffff7c0}, {0x9, 0x7, 0x4, 0x3}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsetxattr$security_selinux(&(0x7f0000000340)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000200009b"], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf25000000", @ANYRES32, @ANYBLOB], 0xe8}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(0xffffffffffffffff, 0x3, 0x1, 0x8000c62) close(r1) 4m8.615552141s ago: executing program 33 (id=3561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0xfdef) 4m2.123325242s ago: executing program 34 (id=3663): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r1, &(0x7f0000000740), 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8d8861f2b85776a1", "3d09b33a32efde6b75ddfdd6bd4fadca", '\x00', "e75e0db8baa300b4"}, 0x28) readv(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/96, 0x60}, {0x0}], 0x2) 3m58.990867532s ago: executing program 5 (id=3721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="ba92ff08000000006c43540d0732", 0xe, 0x24044085, &(0x7f0000000340)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 3m58.906749066s ago: executing program 5 (id=3723): r0 = socket(0x10, 0x3, 0xc) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 3m58.887652697s ago: executing program 5 (id=3725): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r1, &(0x7f0000000bc0)={@val={0x8, 0x800}, @val={0x2, 0x83, 0x7, 0x2, 0x2}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1c, 0x2c, 0x66, 0x0, 0x8, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x4f20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x3c}}}}, 0x3a) 3m58.785038724s ago: executing program 5 (id=3727): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m58.770131844s ago: executing program 5 (id=3728): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c683ce93d82e931eb9918e6c0c668b4f313e3926c09ec7859d8827686e5920902e02c9210fd802ef04af6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f80854773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed1525ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de7bdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f06000000000000000bc2068bba61896d0c08ced479e3b82d5e4406007d86b4585b2c3f7ab12d261578e440cd3f4734fd37072a78ef479702144522dc0f3014e305525b6edcf7cdc6c257e0b38e488fcc993d9a3d", 0x221}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d61", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739b", 0x62}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d", 0x74}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c9", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000140)="e2bd5c350b5d6f881bd9a6a76616e7d7936c59bd26ba6c3604ac94c6e1122abeef9e0e72870a454657c8c5551f20", 0x2e}, {&(0x7f0000000540)="1681b97916f3c0b8012cc136f37e2d341bc646db0142ac094bd33ef3a2038b45c0c968694174c7691e0378fd5e49ab181b4fac89b7ddda56c3a88e25d0167954829aeb5d6ce79ad35bf9bf84493def28d53a1e52a3f3ab99f6b40c700f1bd2e86427bc41db3b48bf0e03e3cf8d9041e7f737c3885d384b3e8aaa05612bcc31a5f5154b3796d8b63a795d02c84f4c56299845997b92a273be792f73a90176896cf38c70cb346a61c5d00bad93a023f2ab0780f68d2d2affc7d844055300efa7995af507b8d20fc934999f5e069f885a71518860ebb962e61485d2671d90e6312e35", 0xe1}, {&(0x7f0000000640)="b427ffa063ebd693aad5f172601b9c46d8c75860f059a2e3c027e39a9f2df804497a03d514ccdfe5dc225f6a44e4f3c9af64a1a3522c8076babb184152d5e99988184ea018717866d365c40d12e3fb6069ea0eb8a4d5a234246bd1729fc80e6f6d3a1ac52470ce8b149804e2365c224253b77e6f60a285f82094e169065926f6f8e4b427842b85197b45df3ea676c654541ce93e9657a16144f8dda323461f75493d86a5840354681f1807e4a66306202eaa7af8650cd0795505114f2d9c7d6bf872b31028669fa72737f9ff5caf3ac0bcf3a463fcbee6efe9b1a69483100d57ac66be", 0xe3}, {&(0x7f0000000740)="dab1f74117254296fef67a486a72b3e75e3af5a8ca178667d031436f35db8e0ea9fc8278d2af17ec7380f43969a6609763ed901d6b1e96214d7bcc46a8364cd9b5a6c008e07c397b5ef2835ed0299edba67e89be08072d0a6b445a457ef502ca5a633316f1239ec15e03734dbfb5b600480bd32c22ebc77e19000dc8eb4ce39d5db7ac7edfc1250b6bc8975069b72513fb3e38c40d309462205b8724e1cbe1e7348d41bc3fbfb66a3034d0edba39824231bc871dbc852ab25dc1c065bcf63cedcf5e3bc5f5c63d825f59170bad3ed8fa20b889ba1908e7dfffdf2c7315", 0xdd}, {&(0x7f0000000900)="091a2e989fe87834809f447ef5f2cc813425c4f8048f70ee1bd48033c6bc697ef4d11d7fa70d8c4ebb1b4c3970d74a32c1ff3d8ad33b4246a929da8eabb11ff9553654f472e2dedc049816f00ee89de3814d395000e6fc46848a0ef41113f84bc1211553104bfb373b804e00b50f994f4844928c22bdd7cf273618cf111ef4c08ff080c92cad9c85e8fb89980852ce0433a5122b73ed23a18c93f3c2ad1b5d394187757399c541bc4108b0c7c3c26cff78878b5783ac1fe97e85d17a21eaacd685582384333f76da1757d8c557b8f89fbc62c84a3c228aeaacbb3cc27988ae5f21b38b950dba1df00bc26b629cf0392145c841520921fee94a530383c3ec3766eeb84b4ac5d44a3494b20f82030abac998fb64a986f666e5e443bc808108cfcbece73cf8bf6ad90666b43010", 0x12c}], 0x5}}], 0x4, 0x14004) 3m58.715668267s ago: executing program 5 (id=3729): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 3m58.711793847s ago: executing program 35 (id=3729): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 3m57.942027882s ago: executing program 7 (id=3742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0xfffffffe, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x25, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 3m57.941017082s ago: executing program 7 (id=3743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="ba92ff08000000006c43540d0732", 0xe, 0x24044085, &(0x7f0000000340)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 3m57.591543312s ago: executing program 7 (id=3744): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="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", 0x221}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d61", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739b", 0x62}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d", 0x74}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c9", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000140)="e2bd5c350b5d6f881bd9a6a76616e7d7936c59bd26ba6c3604ac94c6e1122abeef9e0e72870a454657c8c5551f20", 0x2e}, {&(0x7f0000000540)="1681b97916f3c0b8012cc136f37e2d341bc646db0142ac094bd33ef3a2038b45c0c968694174c7691e0378fd5e49ab181b4fac89b7ddda56c3a88e25d0167954829aeb5d6ce79ad35bf9bf84493def28d53a1e52a3f3ab99f6b40c700f1bd2e86427bc41db3b48bf0e03e3cf8d9041e7f737c3885d384b3e8aaa05612bcc31a5f5154b3796d8b63a795d02c84f4c56299845997b92a273be792f73a90176896cf38c70cb346a61c5d00bad93a023f2ab0780f68d2d2affc7d844055300efa7995af507b8d20fc934999f5e069f885a71518860ebb962e61485d2671d90e6312e35", 0xe1}, {&(0x7f0000000640)="b427ffa063ebd693aad5f172601b9c46d8c75860f059a2e3c027e39a9f2df804497a03d514ccdfe5dc225f6a44e4f3c9af64a1a3522c8076babb184152d5e99988184ea018717866d365c40d12e3fb6069ea0eb8a4d5a234246bd1729fc80e6f6d3a1ac52470ce8b149804e2365c224253b77e6f60a285f82094e169065926f6f8e4b427842b85197b45df3ea676c654541ce93e9657a16144f8dda323461f75493d86a5840354681f1807e4a66306202eaa7af8650cd0795505114f2d9c7d6bf872b31028669fa72737f9ff5caf3ac0bcf3a463fcbee6efe9b1a69483100d57ac66be", 0xe3}, {&(0x7f0000000740)="dab1f74117254296fef67a486a72b3e75e3af5a8ca178667d031436f35db8e0ea9fc8278d2af17ec7380f43969a6609763ed901d6b1e96214d7bcc46a8364cd9b5a6c008e07c397b5ef2835ed0299edba67e89be08072d0a6b445a457ef502ca5a633316f1239ec15e03734dbfb5b600480bd32c22ebc77e19000dc8eb4ce39d5db7ac7edfc1250b6bc8975069b72513fb3e38c40d309462205b8724e1cbe1e7348d41bc3fbfb66a3034d0edba39824231bc871dbc852ab25dc1c065bcf63cedcf5e3bc5f5c63d825f59170bad3ed8fa20b889ba1908e7dfffdf2c7315", 0xdd}, {&(0x7f0000000900)="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", 0x12c}], 0x5}}], 0x4, 0x14004) 3m57.553903854s ago: executing program 7 (id=3746): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m57.486141718s ago: executing program 7 (id=3748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x18, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x1, 0x101}}}}]}, 0x44}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 3m55.87203596s ago: executing program 7 (id=3783): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020201603752ac9d03851923f701f3133308e71a8bc224292f88"], 0x1c) 3m55.87183653s ago: executing program 36 (id=3783): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020201603752ac9d03851923f701f3133308e71a8bc224292f88"], 0x1c) 3m49.56724869s ago: executing program 0 (id=3950): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 3m49.553628041s ago: executing program 0 (id=3951): chdir(&(0x7f0000000100)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3m49.534791712s ago: executing program 0 (id=3953): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940), 0x0, 0x54004) 3m49.505232404s ago: executing program 0 (id=3954): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m49.504870394s ago: executing program 0 (id=3955): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x401, &(0x7f0000000280)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x9}}], [{@obj_role={'obj_role', 0x3d, '\x03\x00'/11}}]}}) 3m49.477356946s ago: executing program 0 (id=3956): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="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", 0x221}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d61", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739b", 0x62}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d", 0x74}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c9", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000140)="e2bd5c350b5d6f881bd9a6a76616e7d7936c59bd26ba6c3604ac94c6e1122abeef9e0e72870a454657c8c5551f20", 0x2e}, {&(0x7f0000000540)="1681b97916f3c0b8012cc136f37e2d341bc646db0142ac094bd33ef3a2038b45c0c968694174c7691e0378fd5e49ab181b4fac89b7ddda56c3a88e25d0167954829aeb5d6ce79ad35bf9bf84493def28d53a1e52a3f3ab99f6b40c700f1bd2e86427bc41db3b48bf0e03e3cf8d9041e7f737c3885d384b3e8aaa05612bcc31a5f5154b3796d8b63a795d02c84f4c56299845997b92a273be792f73a90176896cf38c70cb346a61c5d00bad93a023f2ab0780f68d2d2affc7d844055300efa7995af507b8d20fc934999f5e069f885a71518860ebb962e61485d2671d90e6312e35", 0xe1}, {&(0x7f0000000640)="b427ffa063ebd693aad5f172601b9c46d8c75860f059a2e3c027e39a9f2df804497a03d514ccdfe5dc225f6a44e4f3c9af64a1a3522c8076babb184152d5e99988184ea018717866d365c40d12e3fb6069ea0eb8a4d5a234246bd1729fc80e6f6d3a1ac52470ce8b149804e2365c224253b77e6f60a285f82094e169065926f6f8e4b427842b85197b45df3ea676c654541ce93e9657a16144f8dda323461f75493d86a5840354681f1807e4a66306202eaa7af8650cd0795505114f2d9c7d6bf872b31028669fa72737f9ff5caf3ac0bcf3a463fcbee6efe9b1a69483100d57ac66be", 0xe3}, {&(0x7f0000000740)="dab1f74117254296fef67a486a72b3e75e3af5a8ca178667d031436f35db8e0ea9fc8278d2af17ec7380f43969a6609763ed901d6b1e96214d7bcc46a8364cd9b5a6c008e07c397b5ef2835ed0299edba67e89be08072d0a6b445a457ef502ca5a633316f1239ec15e03734dbfb5b600480bd32c22ebc77e19000dc8eb4ce39d5db7ac7edfc1250b6bc8975069b72513fb3e38c40d309462205b8724e1cbe1e7348d41bc3fbfb66a3034d0edba39824231bc871dbc852ab25dc1c065bcf63cedcf5e3bc5f5c63d825f59170bad3ed8fa20b889ba1908e7", 0xd7}, {&(0x7f0000000900)="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", 0x12d}], 0x5}}], 0x4, 0x14004) 3m49.477158046s ago: executing program 37 (id=3956): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c683ce93d82e931eb9918e6c0c668b4f313e3926c09ec7859d8827686e5920902e02c9210fd802ef04af6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f80854773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed1525ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de7bdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f06000000000000000bc2068bba61896d0c08ced479e3b82d5e4406007d86b4585b2c3f7ab12d261578e440cd3f4734fd37072a78ef479702144522dc0f3014e305525b6edcf7cdc6c257e0b38e488fcc993d9a3d", 0x221}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d61", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739b", 0x62}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d", 0x74}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c9", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000140)="e2bd5c350b5d6f881bd9a6a76616e7d7936c59bd26ba6c3604ac94c6e1122abeef9e0e72870a454657c8c5551f20", 0x2e}, {&(0x7f0000000540)="1681b97916f3c0b8012cc136f37e2d341bc646db0142ac094bd33ef3a2038b45c0c968694174c7691e0378fd5e49ab181b4fac89b7ddda56c3a88e25d0167954829aeb5d6ce79ad35bf9bf84493def28d53a1e52a3f3ab99f6b40c700f1bd2e86427bc41db3b48bf0e03e3cf8d9041e7f737c3885d384b3e8aaa05612bcc31a5f5154b3796d8b63a795d02c84f4c56299845997b92a273be792f73a90176896cf38c70cb346a61c5d00bad93a023f2ab0780f68d2d2affc7d844055300efa7995af507b8d20fc934999f5e069f885a71518860ebb962e61485d2671d90e6312e35", 0xe1}, {&(0x7f0000000640)="b427ffa063ebd693aad5f172601b9c46d8c75860f059a2e3c027e39a9f2df804497a03d514ccdfe5dc225f6a44e4f3c9af64a1a3522c8076babb184152d5e99988184ea018717866d365c40d12e3fb6069ea0eb8a4d5a234246bd1729fc80e6f6d3a1ac52470ce8b149804e2365c224253b77e6f60a285f82094e169065926f6f8e4b427842b85197b45df3ea676c654541ce93e9657a16144f8dda323461f75493d86a5840354681f1807e4a66306202eaa7af8650cd0795505114f2d9c7d6bf872b31028669fa72737f9ff5caf3ac0bcf3a463fcbee6efe9b1a69483100d57ac66be", 0xe3}, {&(0x7f0000000740)="dab1f74117254296fef67a486a72b3e75e3af5a8ca178667d031436f35db8e0ea9fc8278d2af17ec7380f43969a6609763ed901d6b1e96214d7bcc46a8364cd9b5a6c008e07c397b5ef2835ed0299edba67e89be08072d0a6b445a457ef502ca5a633316f1239ec15e03734dbfb5b600480bd32c22ebc77e19000dc8eb4ce39d5db7ac7edfc1250b6bc8975069b72513fb3e38c40d309462205b8724e1cbe1e7348d41bc3fbfb66a3034d0edba39824231bc871dbc852ab25dc1c065bcf63cedcf5e3bc5f5c63d825f59170bad3ed8fa20b889ba1908e7", 0xd7}, {&(0x7f0000000900)="091a2e989fe87834809f447ef5f2cc813425c4f8048f70ee1bd48033c6bc697ef4d11d7fa70d8c4ebb1b4c3970d74a32c1ff3d8ad33b4246a929da8eabb11ff9553654f472e2dedc049816f00ee89de3814d395000e6fc46848a0ef41113f84bc1211553104bfb373b804e00b50f994f4844928c22bdd7cf273618cf111ef4c08ff080c92cad9c85e8fb89980852ce0433a5122b73ed23a18c93f3c2ad1b5d394187757399c541bc4108b0c7c3c26cff78878b5783ac1fe97e85d17a21eaacd685582384333f76da1757d8c557b8f89fbc62c84a3c228aeaacbb3cc27988ae5f21b38b950dba1df00bc26b629cf0392145c841520921fee94a530383c3ec3766eeb84b4ac5d44a3494b20f82030abac998fb64a986f666e5e443bc808108cfcbece73cf8bf6ad90666b430109f", 0x12d}], 0x5}}], 0x4, 0x14004) 3m43.966182951s ago: executing program 8 (id=4037): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x40101}, 0x40004) 3m43.911066564s ago: executing program 8 (id=4076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x4b) 3m43.795068061s ago: executing program 8 (id=4080): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xfd, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 3m43.591893922s ago: executing program 8 (id=4086): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x10001, 0x0) 3m43.575309833s ago: executing program 8 (id=4087): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) sendmsg$netlink(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x40101}, 0x40004) 3m41.579837127s ago: executing program 8 (id=4140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f0000000140)='./file0\x00') 3m41.576709888s ago: executing program 38 (id=4140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000480)='./file0\x00', &(0x7f0000000140)='./file0\x00') 2m10.634401959s ago: executing program 9 (id=5958): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x24000055) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a00), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba256cdac970100000006db8fe637"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0xa0, r1, 0x425, 0x70bd2a, 0x25dfdb7d, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x53}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2e949cb4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x44000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029b57000fcdbdf251200000008000300", @ANYRES32, @ANYBLOB="0a000600082211000001000005001900010000000600120109"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x40800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0x100000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x40}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r6 = getpid() capget(&(0x7f0000000340)={0x20080522, r6}, &(0x7f00000003c0)={0x101, 0x6, 0x2, 0xe901, 0x8000, 0x3}) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 2m10.487402837s ago: executing program 9 (id=5963): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="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", 0x1de}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b594", 0xc2}], 0x1}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m10.383726633s ago: executing program 9 (id=5964): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x2400c044) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f00000012c0), 0x0}) 2m10.291713988s ago: executing program 9 (id=5967): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) 2m10.268856149s ago: executing program 9 (id=5969): io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x1dd, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 2m10.027728193s ago: executing program 9 (id=5974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002000), 0x0, 0x14004) 2m10.027539913s ago: executing program 39 (id=5974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002000), 0x0, 0x14004) 3.119725641s ago: executing program 4 (id=8431): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 2.287117929s ago: executing program 4 (id=8449): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x1100000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.286489589s ago: executing program 4 (id=8450): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x110}, 0x4000000) (async) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async, rerun: 32) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$inet6(r2, &(0x7f0000000840)={0xa, 0x4e21, 0x6, @loopback, 0xae44}, 0x1c) (async) syz_emit_ethernet(0x6c, &(0x7f00000007c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x0, [0x1000, 0x501]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xff2f]}, {}, {0x8, 0x88be, 0x81000004}, {0x8, 0x22eb, 0xfffffffd, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x800) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x20004004) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x26, &(0x7f0000000080)={&(0x7f00000008c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x4d}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x8085) r5 = socket$rds(0x15, 0x5, 0x0) unshare(0x2a020400) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (rerun: 32) 2.062988342s ago: executing program 4 (id=8451): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '/dev/ptp0\x00', 0x3a, '/dev/ptp0\x00', 0x3a, './file1', 0x3a, [0x50, 0x43, 0x50]}, 0x3e) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200006, 0x3, 0x4, 0x7, 0xb0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x1c}}, 0x40) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) open(&(0x7f0000000540)='./file1\x00', 0x84002, 0x67) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYBLOB="acdeda2fbaa4f40bf5164f6945b8f5ac28f08556c2c6cbb24ec6ba43553202e8f8ab1db6ebc3c86fb32348b70f3b44b63b0c7b329d7300bc4d528d7a301db60cceced2e2e23ce549a00e55b8c1bf3567451819c3f091fb6d654969fb1299287bbfd5b573183dfac94731be75438ea979b90f34cf5cf3e50e711ba2cf48524665bd73b41202fbfa960e955cb6abb0baace993d0959601ca1c8f8ea8", @ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000005c0)) 1.458344176s ago: executing program 3 (id=8456): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000290081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.425283988s ago: executing program 3 (id=8457): r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x48) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c3000040000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000080)=""/210}, 0x54) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(0x0, 0xb) 1.379409321s ago: executing program 3 (id=8460): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 1.363438002s ago: executing program 2 (id=8463): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x9f, 0x0, &(0x7f0000000740)="b9ff0300600d698cb89e14f086dd1f243a0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa50af4feb9bf4513a2bce7af26d9d8a7e89207126ffa1118de4c060e850270a8fa85f4bacffa31ba5537f81802c05458834df1f8ad51391a387311e4f65292a187df91769fb13e4ec3bbfabc1f8a91e217660d56947b338641011477c601", 0x0, 0xfffff801, 0x60000000, 0xd4, 0x199, &(0x7f0000000380)="a9e1066e8af849147d6eb88fd69692090c6e7bd7f47dae6b2a51353d5f0cc5f849ba4d6276b594c6eff2dc91903b7c146f175b7195fff68e249fbf4838c5f7f62bbb960585d3f354847022b74d921d4003ad5a61c2193f29290268912dec73c8be247656d50726004797c8d1083185b934903b5f5791e2b692b380c67629c2aa7325ccfc67f9e8c6902febe5128ac3792556075bb55de75ffec1163a7fb9e70b5ffceb1a4edf5929e7c5c47d7465ffa9cc273a884cd824e30eb88593b134f244a3c3bd9ec1b20c9c693406b42dc9113e3e88c6ac", &(0x7f0000000580)="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"}, 0x50) r2 = socket$inet(0x2, 0x3, 0x5) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4602920000f401"], 0x78) r3 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private=0xa010101, @in=@empty, 0x4e20, 0x0, 0x4e21, 0x3, 0x2, 0x0, 0x20, 0x6d, 0x0, r3}, {0x9, 0x7, 0x100000001, 0x8, 0x8, 0x1, 0x9, 0x3}, {0xa03b, 0xffff, 0x5, 0x2}, 0x200, 0x0, 0x1, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x4, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 0x3, 0xff, 0x10001, 0x7fff, 0x1}}, 0xe8) 1.343537913s ago: executing program 2 (id=8464): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="8608119827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @private2, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @loopback, 0x0, 0x0, 0x0, 0xfd}}}}}}, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=0xd3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) ptrace$poke(0x4, r0, &(0x7f0000000040), 0x9) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x101880a, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@quota}, {@mblk_io_submit}, {@usrquota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") 933.642946ms ago: executing program 4 (id=8469): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) 867.17666ms ago: executing program 6 (id=8471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a000100000000000000000081808000000000000000000014000200fc01000000000000000000000000000014000180"], 0x44}}, 0x0) syz_read_part_table(0x5af, &(0x7f0000000000)="$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") r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r1) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x4, 0xff, 0x1, 0xa06, 0x1, 0x3, '\x00', 0x0, r1, 0x3, 0x0, 0x0, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x200000000180, 0x100000}}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000020000000c000000180001801400020067656e65766531000000000000000007000800000000010004000380"], 0x38}}, 0x4004) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_MASTER={0x8, 0x3, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700), &(0x7f00000006c0)=[0x0], 0x0, 0x84, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, [0x0, 0x4]}}) socket$inet6(0xa, 0x3, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 790.844724ms ago: executing program 6 (id=8472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 730.724968ms ago: executing program 6 (id=8473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 724.587579ms ago: executing program 6 (id=8474): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000494, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x1, 0x2ee, &(0x7f0000000f00)="$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") r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3, 0x4) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0x4, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x99, &(0x7f00000000c0)=""/153}, 0x94) unshare(0x60400) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x4, 0x54, 0x0, 0xf7, @broadcast}, 0x10) creat(&(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x151) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x1c4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_setup(0xd6, &(0x7f0000000200)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0x2020}]) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000400000008000000060000000000000084bced8ac741626a5413d537050591933fba7bf98f8b1c22ad09e3855700f74435f529f9f3719477aa2becbfdd6e77e9e6dcf404708ebfb1c80a4eace340bf9704ce9b62a23d3f5511f814c56eafdb8fd4dafd41be07dbab2225a3687ec2850bda81488fc8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2fa, 0xf400, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 563.399718ms ago: executing program 6 (id=8475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) (fail_nth: 1) 335.768601ms ago: executing program 3 (id=8476): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000003c80)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@usrquota}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mblk_io_submit}, {@noauto_da_alloc}, {@stripe}, {@nobh}, {@inlinecrypt}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) fallocate(r1, 0x10, 0x6, 0x10001) 335.508191ms ago: executing program 6 (id=8477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c683ce93d82e931eb9918e6c0c668b4f313e392aaf661be59d8827686e5920902e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c", 0xd6}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b", 0x6a}], 0x1}}], 0x2, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 314.142272ms ago: executing program 3 (id=8478): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 304.167572ms ago: executing program 1 (id=8479): r0 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300840e, &(0x7f00000003c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1e34720a, 0x400008000c65) write$binfmt_elf64(r1, 0x0, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048"], 0x122}}, 0x4008090) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000004000000080002000500000006000b00"], 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) 277.320124ms ago: executing program 2 (id=8480): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x97ff}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}}], 0x2, 0x20000044) 197.565929ms ago: executing program 2 (id=8481): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x25, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") 197.042059ms ago: executing program 1 (id=8482): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, &(0x7f0000000040)) keyctl$chown(0x4, r0, 0xee01, r2) keyctl$setperm(0x5, r0, 0x172831) getgroups(0x6, &(0x7f0000000040)=[r2, r2, r1, r2, r1, r1]) getgroups(0x8, &(0x7f0000000080)=[r2, r3, 0xee01, r1, r1, r2, r1, r2]) setresgid(0xee00, r5, r4) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 194.695309ms ago: executing program 1 (id=8483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="bad330752181510000316f3a277f95", 0xf, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 152.342551ms ago: executing program 2 (id=8484): inotify_init1(0x80000) (async) r0 = inotify_init1(0x80000) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={0x0, 0x7fffffff}) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000001000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x38, r3, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r4 = request_key(&(0x7f0000001180)='.dead\x00', &(0x7f00000011c0)={'syz', 0x0}, &(0x7f0000001200)='l2tp\x00', 0xfffffffffffffffc) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000001240)='wg0\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000001240)='wg0\x00', 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001280)={0x2, "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"}) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001280)={0x2, "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"}) add_key(&(0x7f00000014c0)='ceph\x00', &(0x7f0000001500)={'syz', 0x0}, &(0x7f0000001540)="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", 0x1000, r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000002580), r2) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002580), r2) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0x8c, r5, 0x400, 0x46, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x54) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002840)={0x9, r1, 'id0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002840)={0x9, r1, 'id0\x00'}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000002c00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002900)={0x294, 0x12, 0x4, 0x70bd27, 0x25dfdbfe, {0x2b, 0xb0, 0x80, 0xe, {0x4e20, 0x4e21, [0xa84, 0x7, 0x0, 0x80000001], [0x45fa, 0xd, 0xfff, 0x5], 0x0, [0xffffffff, 0xd5]}, 0x1, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "6ee54d"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "dea767c81c17557f09a2e7007ab720e423c1ca1dffe2937e2d58f7ab31a909ba96c10850359ebed13589efb34acb1af83ddeff173dc09f83c70d3b85c62a4ef10aae5dbc22eac420ed9208b3bd4eafc969233f3b6693f50ad05221f1fdecdfcac3683a5d9af0546299c32f7b114207d0b5645dab15d83fe881aad3d3fcf1d8"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "ddde670e5f508a10153aaeb6d8a0d1d4cbfa5e5e730517e83007e2d22e7695a4595ae0c9ba4cbda958539ea5d7f73044111fd28e43c0407f394617337c3bbc746c260c7ae0316004a5783f24d866f22aaec80ec2e14bac443c4189c3f9588e127911ed1999e4c25dc94c34ec9d44b1df0f464f92eaaaa608cee5d4cea2562ac91c0dafd05c45691e2c927107f25d615f417031126dd10baf96a68bdb5ae2a78a3556ed4d70a79fed2e9580218d31761788976cc2445c9d43bf72091632e1279a395aa6aa36004b59303cab4862c5e93c640bd39d8d58533961e408a27a577c978ab5a3a55a29"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "0e4a8e21829e1395609f8500197cc65298e9ebee2ac2e80ba5c10cd918f4efbd6d3cea6038bb6a819eb34568fde285a3a8b0a202ffb8ad448b65bd789a02ff08de21594dd04d4d867719e86291cf1c9c18e3bd3e6fd4c18f6e9848b76a27d066138c3a6e148b1d2c25174275a7aa66154200df3791389cfaa0473e57cb22f01d7fb31ca840b4e9715197780e868420bd020651bf01bebe9c84861c425cbf6d196c66971b0a2232f3676deac7f29ab45e37d8b7ea2c2a1d5bc818893c00a0e4dd94cc04cbacd0e8935ab3"}]}, 0x294}, 0x1, 0x0, 0x0, 0x4}, 0x20044000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002c80), r7) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x1c, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x1c, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) sendmsg$AUDIT_USER(r7, &(0x7f0000002f00)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0xc8, 0x3ed, 0x800, 0x70bd26, 0x25dfdbfe, "14d5ab32ef970f00b72f6e5eaef51e9315587602217da4be0f40d0612429f8b5324b62ded44d025cc405568974f2e95429da0341179c1324c871904031bf8dc5290266b33becfea7745cc57e8a64de3623de7ddc99ea82771d11d04cea5533a1799fbc383034c0bb6bce9dfbefb6577931866c824d789c3916f8d0acd6b60db010892371c3f68247913d69b1e52162ac14228cb5185752a33bf389c31df3c9ae4a7508c44b1619f92257a8c32328ec86794b600634", ["", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008840) syz_genetlink_get_family_id$ethtool(&(0x7f0000002f80), r7) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002f80), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002fc0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003000)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000003340)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003300)={&(0x7f0000003040)={0x2bc, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x15c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc182ee293cf98363}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x13}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x400c044}, 0x24000800) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003580)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003540)={&(0x7f00000033c0)={0x160, r9, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000003800)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)={0x1a0, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x2, 0x80000000, 0x6481, 0xfffffffb, 0x8, 0x3, 0x9, 0x8]}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x929}, @CTA_NAT_SRC={0xb0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x381ca8c8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8804) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x30, r6, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1c000000, 0x5b}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003940), 0x100040, 0x0) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003940), 0x100040, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0xd204f000) 151.799791ms ago: executing program 2 (id=8485): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) clock_gettime(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100003040000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 144.420711ms ago: executing program 3 (id=8486): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 73.768306ms ago: executing program 1 (id=8487): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '/dev/ptp0\x00', 0x3a, '/dev/ptp0\x00', 0x3a, './file1', 0x3a, [0x50, 0x43, 0x50]}, 0x3e) 72.637556ms ago: executing program 4 (id=8488): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (async) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pS \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='net_prio.prioidx\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) gettid() (async) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x200e41, 0x0) (async) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x200e41, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r11) setfsgid(r11) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=0x0, @ANYBLOB="040000000000000008000400", @ANYRES32=r9, @ANYBLOB="083f7bd290def878635f76e5b928996b28e35c2223ec8ce63ccff8b813c56ea11e23c8680b998fb61d6d1b7f610735e4f28643050b2bd5770c1e3a8af3ad797efcafd9f70545455bdf36cf569b2d388837af899f7965b6d21b86fabdfb87068ebfcbc29b86bb2b430e3a975b057de22e57f75ffaf129786d9d4caaaf752ab0c82daacc2f8e09e225e7cc3f60e074a77ecf77f553970e0cb7d43e8100c94f4e96cc1b7fa922", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000300000000002000050000000000"], 0x54, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=0x0, @ANYBLOB="040000000000000008000400", @ANYRES32=r9, @ANYBLOB="083f7bd290def878635f76e5b928996b28e35c2223ec8ce63ccff8b813c56ea11e23c8680b998fb61d6d1b7f610735e4f28643050b2bd5770c1e3a8af3ad797efcafd9f70545455bdf36cf569b2d388837af899f7965b6d21b86fabdfb87068ebfcbc29b86bb2b430e3a975b057de22e57f75ffaf129786d9d4caaaf752ab0c82daacc2f8e09e225e7cc3f60e074a77ecf77f553970e0cb7d43e8100c94f4e96cc1b7fa922", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000300000000002000050000000000"], 0x54, 0x0) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r14, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) (async) r15 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r15, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="181b0000", @ANYRES32=r2, @ANYBLOB="000000000000000018270000", @ANYRES32=r3, @ANYBLOB="00000000030000001a50c0fffcffffffb7080000000000007b8af8ff00000000b70800007f0000007b8af0ff80000000bfa1000000000000070100b64916a9a3ad0704000000000007040000f0ff2a33c99f5092e230e670351b4c24f947fbffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000cd00000085100000fcffffff"], &(0x7f0000000340)='GPL\x00', 0x6, 0xf7, &(0x7f0000000400)=""/247, 0x41000, 0x2, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xc, 0xcb, 0x3502}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r15], 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="181b0000", @ANYRES32=r2, @ANYBLOB="000000000000000018270000", @ANYRES32=r3, @ANYBLOB="00000000030000001a50c0fffcffffffb7080000000000007b8af8ff00000000b70800007f0000007b8af0ff80000000bfa1000000000000070100b64916a9a3ad0704000000000007040000f0ff2a33c99f5092e230e670351b4c24f947fbffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000cd00000085100000fcffffff"], &(0x7f0000000340)='GPL\x00', 0x6, 0xf7, &(0x7f0000000400)=""/247, 0x41000, 0x2, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xc, 0xcb, 0x3502}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r15], 0x0, 0x10, 0x6}, 0x94) 15.812439ms ago: executing program 1 (id=8489): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}}, 0x0) fallocate(r0, 0x8, 0x0, 0x107) 0s ago: executing program 1 (id=8490): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) brk(0x7ff877c47fff) (fail_nth: 3) kernel console output (not intermixed with test programs): 541.181983][T26571] netlink: 'syz.4.7767': attribute type 1 has an invalid length. [ 541.201507][T26570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 541.214861][T26570] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.282392][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.294856][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 541.295945][T26577] loop1: detected capacity change from 0 to 512 [ 541.313405][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.328568][ T1607] bond0 (unregistering): Released all slaves [ 541.335483][T26577] EXT4-fs (loop1): #clusters per group too big: 1000000 [ 541.360866][T26575] bond2 (unregistering): Released all slaves [ 541.401412][ T1607] hsr_slave_0: left promiscuous mode [ 541.480243][ T1607] hsr_slave_1: left promiscuous mode [ 541.492432][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.499928][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.502324][T26592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7772'. [ 541.518981][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.526410][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.537020][T26584] FAULT_INJECTION: forcing a failure. [ 541.537020][T26584] name fail_futex, interval 1, probability 0, space 0, times 1 [ 541.549828][T26584] CPU: 1 UID: 0 PID: 26584 Comm: syz.2.7770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 541.549871][T26584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.549879][T26584] Call Trace: [ 541.549883][T26584] [ 541.549888][T26584] __dump_stack+0x1d/0x30 [ 541.549903][T26584] dump_stack_lvl+0x95/0xd0 [ 541.549915][T26584] dump_stack+0x15/0x1b [ 541.549926][T26584] should_fail_ex+0x263/0x280 [ 541.549964][T26584] should_fail+0xb/0x20 [ 541.549975][T26584] get_futex_key+0x12f/0xbe0 [ 541.549990][T26584] futex_wake+0x84/0x380 [ 541.550078][T26584] ? perf_lock_task_context+0x260/0x2d0 [ 541.550099][T26584] do_futex+0x323/0x380 [ 541.550114][T26584] mm_release+0xa1/0x190 [ 541.550124][T26584] exit_mm_release+0x25/0x30 [ 541.550134][T26584] exit_mm+0x37/0x180 [ 541.550147][T26584] do_exit+0x3fa/0x1590 [ 541.550209][T26584] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 541.550244][T26584] do_group_exit+0xfe/0x140 [ 541.550257][T26584] ? get_signal+0xe47/0xf60 [ 541.550349][T26584] get_signal+0xe4f/0xf60 [ 541.550366][T26584] arch_do_signal_or_restart+0x96/0x450 [ 541.550469][T26584] exit_to_user_mode_loop+0x6a/0x6f0 [ 541.550481][T26584] do_syscall_64+0x1d3/0x2a0 [ 541.550499][T26584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.550512][T26584] RIP: 0033:0x7f1de959acb9 [ 541.550616][T26584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.550628][T26584] RSP: 002b:00007f1de7fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.550660][T26584] RAX: fffffffffffffffb RBX: 00007f1de9816090 RCX: 00007f1de959acb9 [ 541.550668][T26584] RDX: 00000000000000e2 RSI: 00002000000000c0 RDI: 0000000000000006 [ 541.550675][T26584] RBP: 00007f1de7fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 541.550683][T26584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.550690][T26584] R13: 00007f1de9816128 R14: 00007f1de9816090 R15: 00007ffd0332afb8 [ 541.550700][T26584] [ 541.550898][ T1607] veth1_macvtap: left promiscuous mode [ 541.755469][ T1607] veth0_macvtap: left promiscuous mode [ 541.761179][ T1607] veth1_vlan: left promiscuous mode [ 541.769427][ T1607] veth0_vlan: left promiscuous mode [ 541.916265][T26603] loop2: detected capacity change from 0 to 512 [ 541.922849][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 541.931784][T26603] EXT4-fs: Ignoring removed i_version option [ 541.937832][T26603] EXT4-fs: Ignoring removed bh option [ 541.948703][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 542.055171][T26608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7776'. [ 542.177633][T26603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.194364][T26597] geneve2: entered promiscuous mode [ 542.199663][T26597] geneve2: entered allmulticast mode [ 542.274475][T26615] loop3: detected capacity change from 0 to 512 [ 542.299584][ T4380] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.309076][T26603] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.371892][T26615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 542.387893][ T4380] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.487227][ T4380] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.525534][T26615] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.541649][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.559977][ T1607] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.677735][T26631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7786'. [ 542.743537][T26637] EXT4-fs: Ignoring removed orlov option [ 542.772338][T26637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.795586][T26643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7792'. [ 542.913499][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.923926][T23542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 542.959920][T26646] FAULT_INJECTION: forcing a failure. [ 542.959920][T26646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.973046][T26646] CPU: 1 UID: 0 PID: 26646 Comm: syz.2.7785 Not tainted syzkaller #0 PREEMPT(voluntary) [ 542.973072][T26646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.973085][T26646] Call Trace: [ 542.973093][T26646] [ 542.973102][T26646] __dump_stack+0x1d/0x30 [ 542.973123][T26646] dump_stack_lvl+0x95/0xd0 [ 542.973154][T26646] dump_stack+0x15/0x1b [ 542.973169][T26646] should_fail_ex+0x263/0x280 [ 542.973189][T26646] should_fail+0xb/0x20 [ 542.973208][T26646] should_fail_usercopy+0x1a/0x20 [ 542.973306][T26646] _copy_to_user+0x20/0xa0 [ 542.973330][T26646] rng_dev_read+0x3ef/0x740 [ 542.973357][T26646] ? __pfx_rng_dev_read+0x10/0x10 [ 542.973453][T26646] vfs_readv+0x432/0x6e0 [ 542.973480][T26646] __x64_sys_preadv+0xfd/0x1c0 [ 542.973499][T26646] x64_sys_call+0x2805/0x3000 [ 542.973529][T26646] do_syscall_64+0xc0/0x2a0 [ 542.973549][T26646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.973571][T26646] RIP: 0033:0x7f1de959acb9 [ 542.973588][T26646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.973611][T26646] RSP: 002b:00007f1de7ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 542.973696][T26646] RAX: ffffffffffffffda RBX: 00007f1de9815fa0 RCX: 00007f1de959acb9 [ 542.973762][T26646] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 542.973839][T26646] RBP: 00007f1de7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 542.973852][T26646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.973866][T26646] R13: 00007f1de9816038 R14: 00007f1de9815fa0 R15: 00007ffd0332afb8 [ 542.973887][T26646] [ 543.179958][T26650] syzkaller0: entered promiscuous mode [ 543.185457][T26650] syzkaller0: entered allmulticast mode [ 543.427787][T26669] syzkaller0: entered promiscuous mode [ 543.433433][T26669] syzkaller0: entered allmulticast mode [ 543.717157][T26683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7807'. [ 543.743741][T26683] IPVS: Unknown mcast interface: [ 543.798105][T26687] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7808'. [ 543.905457][T26698] FAULT_INJECTION: forcing a failure. [ 543.905457][T26698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.918646][T26698] CPU: 1 UID: 0 PID: 26698 Comm: syz.3.7813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 543.918669][T26698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.918679][T26698] Call Trace: [ 543.918685][T26698] [ 543.918693][T26698] __dump_stack+0x1d/0x30 [ 543.918713][T26698] dump_stack_lvl+0x95/0xd0 [ 543.918778][T26698] dump_stack+0x15/0x1b [ 543.918797][T26698] should_fail_ex+0x263/0x280 [ 543.918863][T26698] should_fail+0xb/0x20 [ 543.918878][T26698] should_fail_usercopy+0x1a/0x20 [ 543.918901][T26698] _copy_from_user+0x1c/0xb0 [ 543.918935][T26698] get_sg_io_hdr+0x81/0x420 [ 543.918968][T26698] ? __rcu_read_unlock+0x4e/0x70 [ 543.918988][T26698] sg_new_write+0xc3/0x8c0 [ 543.919107][T26698] ? do_vfs_ioctl+0x84f/0xe70 [ 543.919138][T26698] sg_ioctl+0xbf8/0x1350 [ 543.919176][T26698] ? __pfx_sg_ioctl+0x10/0x10 [ 543.919224][T26698] __se_sys_ioctl+0xce/0x140 [ 543.919249][T26698] __x64_sys_ioctl+0x43/0x50 [ 543.919274][T26698] x64_sys_call+0x14b0/0x3000 [ 543.919375][T26698] do_syscall_64+0xc0/0x2a0 [ 543.919393][T26698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.919471][T26698] RIP: 0033:0x7f3a14caacb9 [ 543.919488][T26698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.919507][T26698] RSP: 002b:00007f3a13707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.919527][T26698] RAX: ffffffffffffffda RBX: 00007f3a14f25fa0 RCX: 00007f3a14caacb9 [ 543.919598][T26698] RDX: 00002000000000c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 543.919611][T26698] RBP: 00007f3a13707090 R08: 0000000000000000 R09: 0000000000000000 [ 543.919624][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.919637][T26698] R13: 00007f3a14f26038 R14: 00007f3a14f25fa0 R15: 00007ffc8735e458 [ 543.919657][T26698] [ 544.154517][T26700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7814'. [ 544.365503][T26705] set_capacity_and_notify: 1 callbacks suppressed [ 544.365519][T26705] loop3: detected capacity change from 0 to 8192 [ 544.380160][T26711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7816'. [ 544.427062][T26710] loop2: detected capacity change from 0 to 2048 [ 544.497140][T26710] Alternate GPT is invalid, using primary GPT. [ 544.503486][T26710] loop2: p1 p2 p3 [ 544.507275][T26710] loop2: partition table partially beyond EOD, truncated [ 544.755560][T26716] loop3: detected capacity change from 0 to 128 [ 544.806199][T26716] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 544.886695][T26716] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.963198][T26716] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.7820: bg 0: bad block bitmap checksum [ 545.095666][T23542] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 545.182997][T26724] loop1: detected capacity change from 0 to 1024 [ 545.199954][T26724] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 545.226143][T26729] loop3: detected capacity change from 0 to 512 [ 545.233189][T26724] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 545.254464][T26729] EXT4-fs (loop3): #clusters per group too big: 1000000 [ 545.264404][T26724] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #32: comm syz.1.7823: iget: special inode unallocated [ 545.323595][T26724] EXT4-fs (loop1): Remounting filesystem read-only [ 545.404030][T26732] FAULT_INJECTION: forcing a failure. [ 545.404030][T26732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.417243][T26732] CPU: 1 UID: 0 PID: 26732 Comm: syz.4.7826 Not tainted syzkaller #0 PREEMPT(voluntary) [ 545.417267][T26732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.417287][T26732] Call Trace: [ 545.417293][T26732] [ 545.417300][T26732] __dump_stack+0x1d/0x30 [ 545.417320][T26732] dump_stack_lvl+0x95/0xd0 [ 545.417337][T26732] dump_stack+0x15/0x1b [ 545.417418][T26732] should_fail_ex+0x263/0x280 [ 545.417438][T26732] should_fail+0xb/0x20 [ 545.417489][T26732] should_fail_usercopy+0x1a/0x20 [ 545.417535][T26732] _copy_to_user+0x20/0xa0 [ 545.417622][T26732] simple_read_from_buffer+0xb5/0x130 [ 545.417650][T26732] proc_fail_nth_read+0x10e/0x150 [ 545.417677][T26732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.417707][T26732] vfs_read+0x1ab/0x7f0 [ 545.417791][T26732] ? __rcu_read_unlock+0x4e/0x70 [ 545.417811][T26732] ? __fget_files+0x184/0x1c0 [ 545.417831][T26732] ? mutex_lock+0x57/0x90 [ 545.417857][T26732] ksys_read+0xdc/0x1a0 [ 545.417877][T26732] __x64_sys_read+0x40/0x50 [ 545.417892][T26732] x64_sys_call+0x2889/0x3000 [ 545.417911][T26732] do_syscall_64+0xc0/0x2a0 [ 545.417930][T26732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.417952][T26732] RIP: 0033:0x7fc80477b58e [ 545.418022][T26732] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.418041][T26732] RSP: 002b:00007fc803216fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.418067][T26732] RAX: ffffffffffffffda RBX: 00007fc8032176c0 RCX: 00007fc80477b58e [ 545.418159][T26732] RDX: 000000000000000f RSI: 00007fc8032170a0 RDI: 0000000000000004 [ 545.418170][T26732] RBP: 00007fc803217090 R08: 0000000000000000 R09: 0000000000000000 [ 545.418200][T26732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.418271][T26732] R13: 00007fc804a36038 R14: 00007fc804a35fa0 R15: 00007ffd6b935cf8 [ 545.418291][T26732] [ 545.612648][T26724] EXT4-fs (loop1): no journal found [ 545.617888][T26724] EXT4-fs (loop1): can't get journal size [ 545.709327][T26724] EXT4-fs (loop1): filesystem is read-only [ 545.721108][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 545.732113][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 545.742212][T26724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 545.755250][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 546.053834][T26755] loop2: detected capacity change from 0 to 1024 [ 546.075343][T26755] EXT4-fs: Ignoring removed orlov option [ 546.126385][T26755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.168462][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.205442][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7831'. [ 546.215346][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7831'. [ 546.233217][T26766] loop6: detected capacity change from 0 to 1024 [ 546.244458][T26768] loop1: detected capacity change from 0 to 512 [ 546.251982][T26766] EXT4-fs: Ignoring removed orlov option [ 546.258112][ T29] audit: type=1400 audit(1768909969.294:1160): avc: denied { write } for pid=26748 comm="syz.3.7831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 546.291863][T26768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 546.304701][T26768] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.316202][T26766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.332419][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.374360][T26778] loop2: detected capacity change from 0 to 1024 [ 546.386027][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 546.392766][T26778] EXT4-fs: Ignoring removed orlov option [ 546.425478][T26778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.486141][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.496401][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.538304][T26789] loop1: detected capacity change from 0 to 512 [ 546.584221][T26789] EXT4-fs (loop1): #clusters per group too big: 1000000 [ 546.593721][T26785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7843'. [ 546.602758][T26785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7843'. [ 546.763696][T26803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 546.791111][T26803] EXT4-fs (loop6): 1 truncate cleaned up [ 546.803940][T26806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 546.824281][T26803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.838526][T26806] EXT4-fs (loop1): 1 truncate cleaned up [ 546.844756][T26806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.927503][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.957568][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.980837][T26816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 546.993720][T26816] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.015572][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 547.062421][T26822] syzkaller0: entered promiscuous mode [ 547.067906][T26822] syzkaller0: entered allmulticast mode [ 547.095727][T26828] syzkaller0: entered promiscuous mode [ 547.101266][T26828] syzkaller0: entered allmulticast mode [ 547.193143][T26836] syzkaller0: entered promiscuous mode [ 547.198652][T26836] syzkaller0: entered allmulticast mode [ 547.309330][T26838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7862'. [ 547.319108][T26840] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7863'. [ 547.403639][T26840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.481074][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.493980][T26847] FAULT_INJECTION: forcing a failure. [ 547.493980][T26847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.507246][T26847] CPU: 1 UID: 0 PID: 26847 Comm: syz.4.7866 Not tainted syzkaller #0 PREEMPT(voluntary) [ 547.507270][T26847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.507350][T26847] Call Trace: [ 547.507358][T26847] [ 547.507369][T26847] __dump_stack+0x1d/0x30 [ 547.507393][T26847] dump_stack_lvl+0x95/0xd0 [ 547.507495][T26847] dump_stack+0x15/0x1b [ 547.507512][T26847] should_fail_ex+0x263/0x280 [ 547.507531][T26847] should_fail+0xb/0x20 [ 547.507546][T26847] should_fail_usercopy+0x1a/0x20 [ 547.507711][T26847] _copy_from_user+0x1c/0xb0 [ 547.507737][T26847] do_tcp_setsockopt+0x432/0x1630 [ 547.507784][T26847] ? selinux_socket_setsockopt+0x1ce/0x200 [ 547.507820][T26847] tcp_setsockopt+0x51/0xb0 [ 547.507840][T26847] sock_common_setsockopt+0x69/0x80 [ 547.507901][T26847] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 547.507947][T26847] __sys_setsockopt+0x184/0x200 [ 547.507989][T26847] __x64_sys_setsockopt+0x64/0x80 [ 547.508016][T26847] x64_sys_call+0x21d5/0x3000 [ 547.508040][T26847] do_syscall_64+0xc0/0x2a0 [ 547.508109][T26847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.508130][T26847] RIP: 0033:0x7fc8047bacb9 [ 547.508147][T26847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.508165][T26847] RSP: 002b:00007fc803217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.508198][T26847] RAX: ffffffffffffffda RBX: 00007fc804a35fa0 RCX: 00007fc8047bacb9 [ 547.508213][T26847] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 547.508224][T26847] RBP: 00007fc803217090 R08: 0000000000000004 R09: 0000000000000000 [ 547.508236][T26847] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 547.508249][T26847] R13: 00007fc804a36038 R14: 00007fc804a35fa0 R15: 00007ffd6b935cf8 [ 547.508327][T26847] [ 547.723960][T26851] syzkaller0: entered promiscuous mode [ 547.729560][T26851] syzkaller0: entered allmulticast mode [ 547.775369][T26855] syzkaller0: entered promiscuous mode [ 547.780961][T26855] syzkaller0: entered allmulticast mode [ 547.795528][ T29] audit: type=1400 audit(1768909970.834:1161): avc: denied { shutdown } for pid=26856 comm="syz.1.7871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 547.816285][ T29] audit: type=1400 audit(1768909970.834:1162): avc: denied { read } for pid=26856 comm="syz.1.7871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 547.917087][T26862] syz.4.7873: attempt to access beyond end of device [ 547.917087][T26862] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 547.939363][T26862] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 547.947261][T26862] FAT-fs (loop4): Filesystem has been set read-only [ 547.962474][T26866] FAULT_INJECTION: forcing a failure. [ 547.962474][T26866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.975731][T26866] CPU: 1 UID: 0 PID: 26866 Comm: syz.6.7874 Not tainted syzkaller #0 PREEMPT(voluntary) [ 547.975789][T26866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.975801][T26866] Call Trace: [ 547.975809][T26866] [ 547.975818][T26866] __dump_stack+0x1d/0x30 [ 547.975839][T26866] dump_stack_lvl+0x95/0xd0 [ 547.975864][T26866] dump_stack+0x15/0x1b [ 547.975883][T26866] should_fail_ex+0x263/0x280 [ 547.975917][T26866] should_fail+0xb/0x20 [ 547.975938][T26866] should_fail_usercopy+0x1a/0x20 [ 547.975962][T26866] _copy_from_user+0x1c/0xb0 [ 547.976105][T26866] ___sys_recvmsg+0xaa/0x3b0 [ 547.976211][T26866] ? 0xffffffff81000000 [ 547.976227][T26866] ? __rcu_read_unlock+0x4e/0x70 [ 547.976256][T26866] __x64_sys_recvmsg+0xd1/0x160 [ 547.976288][T26866] x64_sys_call+0x2cbf/0x3000 [ 547.976362][T26866] do_syscall_64+0xc0/0x2a0 [ 547.976457][T26866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.976479][T26866] RIP: 0033:0x7fdb4834acb9 [ 547.976495][T26866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.976514][T26866] RSP: 002b:00007fdb46da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 547.976542][T26866] RAX: ffffffffffffffda RBX: 00007fdb485c5fa0 RCX: 00007fdb4834acb9 [ 547.976655][T26866] RDX: 00000000000100e2 RSI: 00002000000001c0 RDI: 0000000000000003 [ 547.976670][T26866] RBP: 00007fdb46da7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.976685][T26866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.976699][T26866] R13: 00007fdb485c6038 R14: 00007fdb485c5fa0 R15: 00007ffd78a5f4f8 [ 547.976720][T26866] [ 547.977581][T26862] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 548.153017][T26862] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 548.308759][T26876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.361932][T26881] FAULT_INJECTION: forcing a failure. [ 548.361932][T26881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.375094][T26881] CPU: 0 UID: 0 PID: 26881 Comm: syz.4.7879 Not tainted syzkaller #0 PREEMPT(voluntary) [ 548.375121][T26881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.375167][T26881] Call Trace: [ 548.375174][T26881] [ 548.375182][T26881] __dump_stack+0x1d/0x30 [ 548.375205][T26881] dump_stack_lvl+0x95/0xd0 [ 548.375226][T26881] dump_stack+0x15/0x1b [ 548.375243][T26881] should_fail_ex+0x263/0x280 [ 548.375342][T26881] should_fail+0xb/0x20 [ 548.375363][T26881] should_fail_usercopy+0x1a/0x20 [ 548.375387][T26881] _copy_from_user+0x1c/0xb0 [ 548.375414][T26881] ___sys_sendmsg+0xc1/0x1e0 [ 548.375515][T26881] __x64_sys_sendmsg+0xd4/0x160 [ 548.375546][T26881] x64_sys_call+0x17ba/0x3000 [ 548.375613][T26881] do_syscall_64+0xc0/0x2a0 [ 548.375636][T26881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.375658][T26881] RIP: 0033:0x7fc8047bacb9 [ 548.375731][T26881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.375755][T26881] RSP: 002b:00007fc803217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.375776][T26881] RAX: ffffffffffffffda RBX: 00007fc804a35fa0 RCX: 00007fc8047bacb9 [ 548.375791][T26881] RDX: 0000000000040800 RSI: 0000200000003500 RDI: 0000000000000004 [ 548.375805][T26881] RBP: 00007fc803217090 R08: 0000000000000000 R09: 0000000000000000 [ 548.375818][T26881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.375870][T26881] R13: 00007fc804a36038 R14: 00007fc804a35fa0 R15: 00007ffd6b935cf8 [ 548.375959][T26881] [ 548.559225][T26883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26883 comm=syz.4.7880 [ 548.617095][T26887] syzkaller0: entered promiscuous mode [ 548.622680][T26887] syzkaller0: entered allmulticast mode [ 548.639949][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.689979][T26891] syzkaller0: entered promiscuous mode [ 548.695490][T26891] syzkaller0: entered allmulticast mode [ 548.774904][T26900] EXT4-fs (loop4): #clusters per group too big: 1000000 [ 548.782672][T26902] __nla_validate_parse: 2 callbacks suppressed [ 548.782740][T26902] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7889'. [ 548.785765][ T29] audit: type=1400 audit(1768909971.824:1163): avc: denied { ioctl } for pid=26901 comm="syz.6.7889" path="socket:[82289]" dev="sockfs" ino=82289 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 548.789000][T26903] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7889'. [ 548.851493][T26902] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7889'. [ 548.851712][T26904] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7889'. [ 549.201346][T26913] program syz.4.7891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.257397][T26917] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7894'. [ 549.293421][T26919] sctp: [Deprecated]: syz.6.7892 (pid 26919) Use of int in max_burst socket option. [ 549.293421][T26919] Use struct sctp_assoc_value instead [ 549.324060][T26921] program syz.3.7895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.333425][T26921] FAULT_INJECTION: forcing a failure. [ 549.333425][T26921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.346521][T26921] CPU: 1 UID: 0 PID: 26921 Comm: syz.3.7895 Not tainted syzkaller #0 PREEMPT(voluntary) [ 549.346590][T26921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.346603][T26921] Call Trace: [ 549.346611][T26921] [ 549.346620][T26921] __dump_stack+0x1d/0x30 [ 549.346647][T26921] dump_stack_lvl+0x95/0xd0 [ 549.346664][T26921] dump_stack+0x15/0x1b [ 549.346753][T26921] should_fail_ex+0x263/0x280 [ 549.346774][T26921] should_fail+0xb/0x20 [ 549.346791][T26921] should_fail_usercopy+0x1a/0x20 [ 549.346814][T26921] _copy_from_user+0x1c/0xb0 [ 549.346917][T26921] scsi_ioctl+0x139c/0x1750 [ 549.346943][T26921] ? avc_has_perm+0x101/0x190 [ 549.346980][T26921] ? file_has_perm+0x36a/0x3b0 [ 549.347004][T26921] ? do_vfs_ioctl+0x84f/0xe70 [ 549.347099][T26921] sg_ioctl+0xebf/0x1350 [ 549.347119][T26921] ? mutex_lock+0x57/0x90 [ 549.347191][T26921] ? __pfx_sg_ioctl+0x10/0x10 [ 549.347212][T26921] __se_sys_ioctl+0xce/0x140 [ 549.347238][T26921] __x64_sys_ioctl+0x43/0x50 [ 549.347264][T26921] x64_sys_call+0x14b0/0x3000 [ 549.347339][T26921] do_syscall_64+0xc0/0x2a0 [ 549.347357][T26921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.347453][T26921] RIP: 0033:0x7f3a14caacb9 [ 549.347467][T26921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.347483][T26921] RSP: 002b:00007f3a13707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.347553][T26921] RAX: ffffffffffffffda RBX: 00007f3a14f25fa0 RCX: 00007f3a14caacb9 [ 549.347568][T26921] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000003 [ 549.347582][T26921] RBP: 00007f3a13707090 R08: 0000000000000000 R09: 0000000000000000 [ 549.347595][T26921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.347608][T26921] R13: 00007f3a14f26038 R14: 00007f3a14f25fa0 R15: 00007ffc8735e458 [ 549.347635][T26921] [ 549.351181][T26917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.412332][T26929] program syz.3.7897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.603001][T20965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.615539][T26932] syzkaller0: entered promiscuous mode [ 549.621114][T26932] syzkaller0: entered allmulticast mode [ 549.671853][T26939] set_capacity_and_notify: 9 callbacks suppressed [ 549.671869][T26939] loop4: detected capacity change from 0 to 1024 [ 549.695462][T26942] sctp: [Deprecated]: syz.1.7903 (pid 26942) Use of int in maxseg socket option. [ 549.695462][T26942] Use struct sctp_assoc_value instead [ 549.710755][T26939] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.725146][T26939] EXT4-fs: Ignoring removed nobh option [ 549.772024][T26939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.807031][T26961] loop3: detected capacity change from 0 to 1024 [ 549.817662][T26960] loop1: detected capacity change from 0 to 1024 [ 549.824255][T26957] loop2: detected capacity change from 0 to 8192 [ 549.838507][T26961] EXT4-fs: Ignoring removed orlov option [ 549.847610][T26960] EXT4-fs: Ignoring removed orlov option [ 549.924411][T26960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.956857][T26961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.971243][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.038039][T26968] FAULT_INJECTION: forcing a failure. [ 550.038039][T26968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.051176][T26968] CPU: 0 UID: 0 PID: 26968 Comm: syz.1.7911 Not tainted syzkaller #0 PREEMPT(voluntary) [ 550.051199][T26968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.051212][T26968] Call Trace: [ 550.051219][T26968] [ 550.051227][T26968] __dump_stack+0x1d/0x30 [ 550.051249][T26968] dump_stack_lvl+0x95/0xd0 [ 550.051302][T26968] dump_stack+0x15/0x1b [ 550.051317][T26968] should_fail_ex+0x263/0x280 [ 550.051337][T26968] should_fail+0xb/0x20 [ 550.051361][T26968] should_fail_usercopy+0x1a/0x20 [ 550.051460][T26968] _copy_from_user+0x1c/0xb0 [ 550.051477][T26968] __sys_sendto+0x1ca/0x380 [ 550.051506][T26968] __x64_sys_sendto+0x76/0x90 [ 550.051520][T26968] x64_sys_call+0x29a7/0x3000 [ 550.051628][T26968] do_syscall_64+0xc0/0x2a0 [ 550.051641][T26968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.051653][T26968] RIP: 0033:0x7f059127acb9 [ 550.051663][T26968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.051674][T26968] RSP: 002b:00007f058fcd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 550.051754][T26968] RAX: ffffffffffffffda RBX: 00007f05914f5fa0 RCX: 00007f059127acb9 [ 550.051762][T26968] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 550.051836][T26968] RBP: 00007f058fcd7090 R08: 0000200000000200 R09: 0000000000000014 [ 550.051844][T26968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.051851][T26968] R13: 00007f05914f6038 R14: 00007f05914f5fa0 R15: 00007fff673f3238 [ 550.051862][T26968] [ 550.286643][T26976] syzkaller0: entered promiscuous mode [ 550.292224][T26976] syzkaller0: entered allmulticast mode [ 550.342928][T26981] program syz.6.7917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.410591][T26988] loop6: detected capacity change from 0 to 512 [ 550.450933][T26991] syzkaller0: entered promiscuous mode [ 550.456433][T26991] syzkaller0: entered allmulticast mode [ 550.463342][T26988] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.551021][ T29] audit: type=1326 audit(1768909973.594:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26995 comm="syz.6.7923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb4834acb9 code=0x0 [ 550.673672][T27009] loop3: detected capacity change from 0 to 512 [ 550.683392][T27009] vfat: Unknown parameter '01777777777777777777777' [ 550.704748][T27009] loop3: detected capacity change from 0 to 1024 [ 550.733452][T27009] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7928: bad orphan inode 134217728 [ 550.824864][T27017] syzkaller0: entered promiscuous mode [ 550.830415][T27017] syzkaller0: entered allmulticast mode [ 551.013721][T27022] loop2: detected capacity change from 0 to 512 [ 551.020782][T27022] EXT4-fs (loop2): #clusters per group too big: 1000000 [ 551.064361][T27024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27024 comm=syz.2.7934 [ 551.137570][T27026] FAULT_INJECTION: forcing a failure. [ 551.137570][T27026] name failslab, interval 1, probability 0, space 0, times 0 [ 551.150266][T27026] CPU: 1 UID: 0 PID: 27026 Comm: syz.2.7935 Not tainted syzkaller #0 PREEMPT(voluntary) [ 551.150282][T27026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.150290][T27026] Call Trace: [ 551.150294][T27026] [ 551.150348][T27026] __dump_stack+0x1d/0x30 [ 551.150362][T27026] dump_stack_lvl+0x95/0xd0 [ 551.150374][T27026] dump_stack+0x15/0x1b [ 551.150385][T27026] should_fail_ex+0x263/0x280 [ 551.150399][T27026] ? __pfx_sock_alloc_inode+0x10/0x10 [ 551.150490][T27026] should_failslab+0x8c/0xb0 [ 551.150508][T27026] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 551.150532][T27026] ? sock_alloc_inode+0x34/0xa0 [ 551.150602][T27026] ? __pfx_sock_alloc_inode+0x10/0x10 [ 551.150654][T27026] sock_alloc_inode+0x34/0xa0 [ 551.150687][T27026] alloc_inode+0x40/0x170 [ 551.150768][T27026] do_accept+0xa0/0x390 [ 551.150800][T27026] ? _raw_spin_lock+0x52/0xa0 [ 551.150816][T27026] __sys_accept4+0xbe/0x170 [ 551.150832][T27026] __x64_sys_accept4+0x51/0x60 [ 551.150913][T27026] x64_sys_call+0x2b3e/0x3000 [ 551.150926][T27026] do_syscall_64+0xc0/0x2a0 [ 551.150938][T27026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.150997][T27026] RIP: 0033:0x7f1de959acb9 [ 551.151007][T27026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.151017][T27026] RSP: 002b:00007f1de7ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 551.151106][T27026] RAX: ffffffffffffffda RBX: 00007f1de9815fa0 RCX: 00007f1de959acb9 [ 551.151114][T27026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 551.151121][T27026] RBP: 00007f1de7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 551.151128][T27026] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 551.151177][T27026] R13: 00007f1de9816038 R14: 00007f1de9815fa0 R15: 00007ffd0332afb8 [ 551.151188][T27026] [ 551.430341][T27042] FAULT_INJECTION: forcing a failure. [ 551.430341][T27042] name failslab, interval 1, probability 0, space 0, times 0 [ 551.443019][T27042] CPU: 0 UID: 0 PID: 27042 Comm: syz.2.7943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 551.443087][T27042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.443101][T27042] Call Trace: [ 551.443108][T27042] [ 551.443116][T27042] __dump_stack+0x1d/0x30 [ 551.443137][T27042] dump_stack_lvl+0x95/0xd0 [ 551.443219][T27042] dump_stack+0x15/0x1b [ 551.443309][T27042] should_fail_ex+0x263/0x280 [ 551.443331][T27042] should_failslab+0x8c/0xb0 [ 551.443354][T27042] __kmalloc_noprof+0xb8/0x580 [ 551.443375][T27042] ? kernfs_fop_write_iter+0xe2/0x300 [ 551.443406][T27042] ? avc_policy_seqno+0x15/0x30 [ 551.443421][T27042] ? selinux_file_permission+0x1e1/0x320 [ 551.443483][T27042] kernfs_fop_write_iter+0xe2/0x300 [ 551.443515][T27042] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 551.443558][T27042] vfs_write+0x5a6/0x9f0 [ 551.443578][T27042] ksys_write+0xdc/0x1a0 [ 551.443594][T27042] __x64_sys_write+0x40/0x50 [ 551.443609][T27042] x64_sys_call+0x2847/0x3000 [ 551.443676][T27042] do_syscall_64+0xc0/0x2a0 [ 551.443774][T27042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.443804][T27042] RIP: 0033:0x7f1de959acb9 [ 551.443818][T27042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.443861][T27042] RSP: 002b:00007f1de7ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 551.443880][T27042] RAX: ffffffffffffffda RBX: 00007f1de9815fa0 RCX: 00007f1de959acb9 [ 551.443894][T27042] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000005 [ 551.443905][T27042] RBP: 00007f1de7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 551.443916][T27042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.443926][T27042] R13: 00007f1de9816038 R14: 00007f1de9815fa0 R15: 00007ffd0332afb8 [ 551.443950][T27042] [ 551.465628][T27045] loop1: detected capacity change from 0 to 1024 [ 551.532693][T27047] loop2: detected capacity change from 0 to 8192 [ 551.613673][T27049] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.774299][T27057] FAULT_INJECTION: forcing a failure. [ 551.774299][T27057] name failslab, interval 1, probability 0, space 0, times 0 [ 551.786982][T27057] CPU: 0 UID: 0 PID: 27057 Comm: syz.3.7949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 551.787059][T27057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.787069][T27057] Call Trace: [ 551.787076][T27057] [ 551.787084][T27057] __dump_stack+0x1d/0x30 [ 551.787109][T27057] dump_stack_lvl+0x95/0xd0 [ 551.787233][T27057] dump_stack+0x15/0x1b [ 551.787319][T27057] should_fail_ex+0x263/0x280 [ 551.787408][T27057] should_failslab+0x8c/0xb0 [ 551.787425][T27057] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 551.787444][T27057] ? __alloc_skb+0x2f0/0x4b0 [ 551.787465][T27057] __alloc_skb+0x2f0/0x4b0 [ 551.787508][T27057] tcp_stream_alloc_skb+0x2d/0x1d0 [ 551.787534][T27057] tcp_sendmsg_locked+0xce1/0x2c40 [ 551.787652][T27057] ? __pfx_tcp_sendmsg+0x10/0x10 [ 551.787723][T27057] tcp_sendmsg+0x2f/0x50 [ 551.787819][T27057] inet_sendmsg+0x76/0xd0 [ 551.787839][T27057] __sock_sendmsg+0x102/0x170 [ 551.787885][T27057] __sys_sendto+0x2b2/0x380 [ 551.787912][T27057] __x64_sys_sendto+0x76/0x90 [ 551.787934][T27057] x64_sys_call+0x29a7/0x3000 [ 551.787957][T27057] do_syscall_64+0xc0/0x2a0 [ 551.787997][T27057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.788019][T27057] RIP: 0033:0x7f3a14caacb9 [ 551.788036][T27057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.788052][T27057] RSP: 002b:00007f3a13707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 551.788068][T27057] RAX: ffffffffffffffda RBX: 00007f3a14f25fa0 RCX: 00007f3a14caacb9 [ 551.788137][T27057] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 551.788181][T27057] RBP: 00007f3a13707090 R08: 0000000000000000 R09: 0000000000000012 [ 551.788194][T27057] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 551.788205][T27057] R13: 00007f3a14f26038 R14: 00007f3a14f25fa0 R15: 00007ffc8735e458 [ 551.788225][T27057] [ 552.243833][T27065] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 552.254833][T27065] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 552.265418][T27065] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 552.272055][T27065] EXT4-fs (loop6): mount failed [ 552.347017][T27076] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 552.407863][T15338] IPVS: starting estimator thread 0... [ 552.499219][T27078] IPVS: using max 3744 ests per chain, 187200 per kthread [ 552.529486][ T4465] Bluetooth: hci0: command 0x1003 tx timeout [ 552.533452][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 552.613645][T27082] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.736349][T27093] EXT4-fs: Ignoring removed orlov option [ 553.498431][T27118] FAULT_INJECTION: forcing a failure. [ 553.498431][T27118] name failslab, interval 1, probability 0, space 0, times 0 [ 553.511198][T27118] CPU: 0 UID: 0 PID: 27118 Comm: syz.3.7971 Not tainted syzkaller #0 PREEMPT(voluntary) [ 553.511284][T27118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.511295][T27118] Call Trace: [ 553.511301][T27118] [ 553.511309][T27118] __dump_stack+0x1d/0x30 [ 553.511329][T27118] dump_stack_lvl+0x95/0xd0 [ 553.511349][T27118] dump_stack+0x15/0x1b [ 553.511418][T27118] should_fail_ex+0x263/0x280 [ 553.511489][T27118] should_failslab+0x8c/0xb0 [ 553.511506][T27118] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 553.511529][T27118] ? __alloc_skb+0x2f0/0x4b0 [ 553.511550][T27118] __alloc_skb+0x2f0/0x4b0 [ 553.511586][T27118] tcp_stream_alloc_skb+0x2d/0x1d0 [ 553.511614][T27118] tcp_sendmsg_locked+0xce1/0x2c40 [ 553.511702][T27118] ? __pfx_tcp_sendmsg+0x10/0x10 [ 553.511730][T27118] tcp_sendmsg+0x2f/0x50 [ 553.511755][T27118] inet_sendmsg+0x76/0xd0 [ 553.511818][T27118] __sock_sendmsg+0x102/0x170 [ 553.511839][T27118] __sys_sendto+0x2b2/0x380 [ 553.511910][T27118] __x64_sys_sendto+0x76/0x90 [ 553.511993][T27118] x64_sys_call+0x29a7/0x3000 [ 553.512008][T27118] do_syscall_64+0xc0/0x2a0 [ 553.512133][T27118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.512159][T27118] RIP: 0033:0x7f3a14caacb9 [ 553.512170][T27118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.512181][T27118] RSP: 002b:00007f3a13707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 553.512193][T27118] RAX: ffffffffffffffda RBX: 00007f3a14f25fa0 RCX: 00007f3a14caacb9 [ 553.512252][T27118] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 553.512290][T27118] RBP: 00007f3a13707090 R08: 0000000000000000 R09: 0000000000000000 [ 553.512298][T27118] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 553.512305][T27118] R13: 00007f3a14f26038 R14: 00007f3a14f25fa0 R15: 00007ffc8735e458 [ 553.512316][T27118] [ 553.771408][T27122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 553.779189][T27120] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.790152][T27122] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 553.800672][T27122] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 553.815584][T27122] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 553.822909][T27122] EXT4-fs error (device loop4): __ext4_iget:5426: inode #14: block 1886221359: comm syz.4.7973: invalid block [ 553.835890][T27122] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7973: couldn't read orphan inode 14 (err -117) [ 553.848063][T27122] EXT4-fs (loop4): 1 truncate cleaned up [ 553.979796][T27137] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.060998][T27148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7983'. [ 554.099665][T27148] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.106887][T27148] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.151112][T27152] netlink: 'syz.1.7983': attribute type 10 has an invalid length. [ 554.166195][T27152] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.173320][T27152] bridge0: port 2(bridge_slave_1) entered listening state [ 554.180552][T27152] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.187753][T27152] bridge0: port 1(bridge_slave_0) entered listening state [ 554.212149][T27152] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 554.269672][ T29] audit: type=1400 audit(1768909977.314:1165): avc: denied { append } for pid=27158 comm="syz.6.7988" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.297630][ T29] audit: type=1400 audit(1768909977.314:1166): avc: denied { write } for pid=27149 comm="syz.4.7984" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:lvm_control_t:s0" [ 554.341343][T27160] ieee802154 phy0 wpan0: encryption failed: -22 [ 554.349872][ T4376] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.362693][ T4376] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.516832][T27173] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.640576][T27182] FAULT_INJECTION: forcing a failure. [ 554.640576][T27182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.653719][T27182] CPU: 0 UID: 0 PID: 27182 Comm: syz.1.7995 Not tainted syzkaller #0 PREEMPT(voluntary) [ 554.653750][T27182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.653757][T27182] Call Trace: [ 554.653762][T27182] [ 554.653767][T27182] __dump_stack+0x1d/0x30 [ 554.653782][T27182] dump_stack_lvl+0x95/0xd0 [ 554.653918][T27182] dump_stack+0x15/0x1b [ 554.653929][T27182] should_fail_ex+0x263/0x280 [ 554.653943][T27182] should_fail+0xb/0x20 [ 554.653953][T27182] should_fail_usercopy+0x1a/0x20 [ 554.653967][T27182] _copy_from_user+0x1c/0xb0 [ 554.653990][T27182] ___sys_sendmsg+0xc1/0x1e0 [ 554.654013][T27182] __x64_sys_sendmsg+0xd4/0x160 [ 554.654073][T27182] x64_sys_call+0x17ba/0x3000 [ 554.654086][T27182] do_syscall_64+0xc0/0x2a0 [ 554.654098][T27182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.654112][T27182] RIP: 0033:0x7f059127acb9 [ 554.654123][T27182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.654133][T27182] RSP: 002b:00007f058fcd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.654145][T27182] RAX: ffffffffffffffda RBX: 00007f05914f5fa0 RCX: 00007f059127acb9 [ 554.654169][T27182] RDX: 0000000004004000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 554.654177][T27182] RBP: 00007f058fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 554.654185][T27182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.654192][T27182] R13: 00007f05914f6038 R14: 00007f05914f5fa0 R15: 00007fff673f3238 [ 554.654202][T27182] [ 554.656953][T27180] Alternate GPT is invalid, using primary GPT. [ 554.821576][T27180] loop2: p1 p2 p3 [ 554.825409][T27180] loop2: partition table partially beyond EOD, truncated [ 554.838807][T27189] syzkaller0: entered promiscuous mode [ 554.844340][T27189] syzkaller0: entered allmulticast mode [ 554.948598][T27195] syz_tun: entered allmulticast mode [ 555.098400][T27203] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.203298][T27216] set_capacity_and_notify: 10 callbacks suppressed [ 555.203314][T27216] loop1: detected capacity change from 0 to 512 [ 555.230943][T27216] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.367211][T27231] FAULT_INJECTION: forcing a failure. [ 555.367211][T27231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.380365][T27231] CPU: 1 UID: 0 PID: 27231 Comm: syz.2.8010 Not tainted syzkaller #0 PREEMPT(voluntary) [ 555.380418][T27231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.380431][T27231] Call Trace: [ 555.380439][T27231] [ 555.380494][T27231] __dump_stack+0x1d/0x30 [ 555.380523][T27231] dump_stack_lvl+0x95/0xd0 [ 555.380588][T27231] dump_stack+0x15/0x1b [ 555.380603][T27231] should_fail_ex+0x263/0x280 [ 555.380623][T27231] should_fail+0xb/0x20 [ 555.380638][T27231] should_fail_usercopy+0x1a/0x20 [ 555.380711][T27231] _copy_from_user+0x1c/0xb0 [ 555.380760][T27231] do_sock_getsockopt+0xf1/0x210 [ 555.380849][T27231] __x64_sys_getsockopt+0x11d/0x1a0 [ 555.380895][T27231] x64_sys_call+0x2dc7/0x3000 [ 555.380955][T27231] do_syscall_64+0xc0/0x2a0 [ 555.381024][T27231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.381115][T27231] RIP: 0033:0x7f1de959acb9 [ 555.381131][T27231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.381222][T27231] RSP: 002b:00007f1de7fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 555.381238][T27231] RAX: ffffffffffffffda RBX: 00007f1de9816180 RCX: 00007f1de959acb9 [ 555.381322][T27231] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 555.381332][T27231] RBP: 00007f1de7fb5090 R08: 00002000000001c0 R09: 0000000000000000 [ 555.381343][T27231] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 555.381353][T27231] R13: 00007f1de9816218 R14: 00007f1de9816180 R15: 00007ffd0332afb8 [ 555.381367][T27231] [ 555.381543][T27228] loop6: detected capacity change from 0 to 8192 [ 555.845079][T27245] syzkaller0: entered promiscuous mode [ 555.850681][T27245] syzkaller0: entered allmulticast mode [ 555.870568][T27250] loop3: detected capacity change from 0 to 1024 [ 555.880436][T27250] EXT4-fs: Ignoring removed orlov option [ 555.946174][T27258] syzkaller0: entered promiscuous mode [ 555.951717][T27258] syzkaller0: entered allmulticast mode [ 555.968955][T27259] loop3: detected capacity change from 0 to 8192 [ 556.026908][T27265] FAULT_INJECTION: forcing a failure. [ 556.026908][T27265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.042750][T27265] CPU: 1 UID: 0 PID: 27265 Comm: syz.3.8028 Not tainted syzkaller #0 PREEMPT(voluntary) [ 556.042773][T27265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.042784][T27265] Call Trace: [ 556.042790][T27265] [ 556.042798][T27265] __dump_stack+0x1d/0x30 [ 556.042870][T27265] dump_stack_lvl+0x95/0xd0 [ 556.042892][T27265] dump_stack+0x15/0x1b [ 556.042912][T27265] should_fail_ex+0x263/0x280 [ 556.042956][T27265] should_fail+0xb/0x20 [ 556.042976][T27265] should_fail_usercopy+0x1a/0x20 [ 556.043005][T27265] _copy_from_user+0x1c/0xb0 [ 556.043043][T27265] ___sys_sendmsg+0xc1/0x1e0 [ 556.043074][T27265] __x64_sys_sendmsg+0xd4/0x160 [ 556.043137][T27265] x64_sys_call+0x17ba/0x3000 [ 556.043160][T27265] do_syscall_64+0xc0/0x2a0 [ 556.043238][T27265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.043256][T27265] RIP: 0033:0x7f3a14caacb9 [ 556.043269][T27265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.043333][T27265] RSP: 002b:00007f3a13707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.043351][T27265] RAX: ffffffffffffffda RBX: 00007f3a14f25fa0 RCX: 00007f3a14caacb9 [ 556.043367][T27265] RDX: 00000000240000c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 556.043380][T27265] RBP: 00007f3a13707090 R08: 0000000000000000 R09: 0000000000000000 [ 556.043391][T27265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.043405][T27265] R13: 00007f3a14f26038 R14: 00007f3a14f25fa0 R15: 00007ffc8735e458 [ 556.043421][T27265] [ 556.277184][T27271] loop2: detected capacity change from 0 to 512 [ 556.357088][T27271] EXT4-fs (loop2): 1 orphan inode deleted [ 556.363606][T27271] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.374461][T20213] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 556.384228][T20213] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 556.399634][T27271] openvswitch: netlink: EtherType 0 is less than min 600 [ 556.408985][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 556.409305][ T4465] Bluetooth: hci0: command 0x1003 tx timeout [ 556.480725][T27284] loop6: detected capacity change from 0 to 1024 [ 556.499490][T27284] EXT4-fs: Ignoring removed orlov option [ 556.551870][T27286] syzkaller0: entered promiscuous mode [ 556.557374][T27286] syzkaller0: entered allmulticast mode [ 556.593913][T27290] loop4: detected capacity change from 0 to 128 [ 556.625198][T27290] syz.4.8037: attempt to access beyond end of device [ 556.625198][T27290] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 556.637629][T27292] loop6: detected capacity change from 0 to 8192 [ 556.638752][T27290] syz.4.8037: attempt to access beyond end of device [ 556.638752][T27290] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 556.658752][T27290] syz.4.8037: attempt to access beyond end of device [ 556.658752][T27290] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 556.672592][T27290] syz.4.8037: attempt to access beyond end of device [ 556.672592][T27290] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 556.729873][T27290] syz.4.8037: attempt to access beyond end of device [ 556.729873][T27290] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 556.747086][T27298] syz.4.8037: attempt to access beyond end of device [ 556.747086][T27298] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 556.747604][T27290] syz.4.8037: attempt to access beyond end of device [ 556.747604][T27290] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 556.765197][T27298] syz.4.8037: attempt to access beyond end of device [ 556.765197][T27298] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 556.788715][T27299] loop2: detected capacity change from 0 to 1024 [ 556.795516][T27298] syz.4.8037: attempt to access beyond end of device [ 556.795516][T27298] loop4: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 556.818396][T27298] syz.4.8037: attempt to access beyond end of device [ 556.818396][T27298] loop4: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 556.832431][T27299] EXT4-fs: Ignoring removed orlov option [ 556.882939][T27306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27306 comm=syz.1.8043 [ 556.905976][T27306] ip6gre1: entered promiscuous mode [ 556.911243][T27306] ip6gre1: entered allmulticast mode [ 556.975783][T27316] FAULT_INJECTION: forcing a failure. [ 556.975783][T27316] name failslab, interval 1, probability 0, space 0, times 0 [ 556.988660][T27316] CPU: 1 UID: 0 PID: 27316 Comm: syz.4.8047 Not tainted syzkaller #0 PREEMPT(voluntary) [ 556.988686][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.988736][T27316] Call Trace: [ 556.988743][T27316] [ 556.988749][T27316] __dump_stack+0x1d/0x30 [ 556.988770][T27316] dump_stack_lvl+0x95/0xd0 [ 556.988794][T27316] dump_stack+0x15/0x1b [ 556.988813][T27316] should_fail_ex+0x263/0x280 [ 556.988838][T27316] should_failslab+0x8c/0xb0 [ 556.988860][T27316] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 556.988888][T27316] ? __alloc_skb+0x2f0/0x4b0 [ 556.988963][T27316] __alloc_skb+0x2f0/0x4b0 [ 556.988989][T27316] tcp_stream_alloc_skb+0x2d/0x1d0 [ 556.989016][T27316] tcp_sendmsg_locked+0xce1/0x2c40 [ 556.989124][T27316] ? __pfx_tcp_sendmsg+0x10/0x10 [ 556.989209][T27316] tcp_sendmsg+0x2f/0x50 [ 556.989232][T27316] inet_sendmsg+0x76/0xd0 [ 556.989255][T27316] __sock_sendmsg+0x102/0x170 [ 556.989302][T27316] __sys_sendto+0x2b2/0x380 [ 556.989373][T27316] __x64_sys_sendto+0x76/0x90 [ 556.989398][T27316] x64_sys_call+0x29a7/0x3000 [ 556.989419][T27316] do_syscall_64+0xc0/0x2a0 [ 556.989438][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.989480][T27316] RIP: 0033:0x7fc8047bacb9 [ 556.989502][T27316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.989524][T27316] RSP: 002b:00007fc803217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 556.989544][T27316] RAX: ffffffffffffffda RBX: 00007fc804a35fa0 RCX: 00007fc8047bacb9 [ 556.989558][T27316] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 556.989570][T27316] RBP: 00007fc803217090 R08: 0000000000000000 R09: 0000000000000000 [ 556.989583][T27316] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 556.989597][T27316] R13: 00007fc804a36038 R14: 00007fc804a35fa0 R15: 00007ffd6b935cf8 [ 556.989696][T27316] [ 557.015772][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8049'. [ 557.190163][T27320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8049'. [ 557.240236][T27328] FAULT_INJECTION: forcing a failure. [ 557.240236][T27328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.253382][T27328] CPU: 0 UID: 0 PID: 27328 Comm: syz.1.8051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 557.253459][T27328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.253469][T27328] Call Trace: [ 557.253476][T27328] [ 557.253482][T27328] __dump_stack+0x1d/0x30 [ 557.253574][T27328] dump_stack_lvl+0x95/0xd0 [ 557.253611][T27328] dump_stack+0x15/0x1b [ 557.253627][T27328] should_fail_ex+0x263/0x280 [ 557.253709][T27328] should_fail+0xb/0x20 [ 557.253729][T27328] should_fail_usercopy+0x1a/0x20 [ 557.253753][T27328] _copy_from_iter+0xcf/0xea0 [ 557.253777][T27328] ? __rcu_read_unlock+0x4e/0x70 [ 557.253796][T27328] tun_get_user+0x15f/0x27c0 [ 557.253895][T27328] ? ref_tracker_alloc+0x1f2/0x2f0 [ 557.253915][T27328] ? selinux_file_permission+0x1e1/0x320 [ 557.254043][T27328] tun_chr_write_iter+0x15e/0x210 [ 557.254062][T27328] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 557.254126][T27328] vfs_write+0x5a6/0x9f0 [ 557.254149][T27328] ksys_write+0xdc/0x1a0 [ 557.254240][T27328] __x64_sys_write+0x40/0x50 [ 557.254287][T27328] x64_sys_call+0x2847/0x3000 [ 557.254310][T27328] do_syscall_64+0xc0/0x2a0 [ 557.254351][T27328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.254369][T27328] RIP: 0033:0x7f059127acb9 [ 557.254411][T27328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.254428][T27328] RSP: 002b:00007f058fcd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.254462][T27328] RAX: ffffffffffffffda RBX: 00007f05914f5fa0 RCX: 00007f059127acb9 [ 557.254477][T27328] RDX: 000000000000003b RSI: 0000200000000080 RDI: 0000000000000003 [ 557.254491][T27328] RBP: 00007f058fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 557.254505][T27328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.254518][T27328] R13: 00007f05914f6038 R14: 00007f05914f5fa0 R15: 00007fff673f3238 [ 557.254538][T27328] [ 557.304407][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810e70fc00: rx timeout, send abort [ 557.458558][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810e70f000: rx timeout, send abort [ 557.467039][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810e70fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.481299][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810e70f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.509069][T27331] loop3: detected capacity change from 0 to 256 [ 557.516064][T27331] /dev/loop3: Can't open blockdev [ 557.591568][T27338] EXT4-fs: Ignoring removed orlov option [ 557.704443][ T29] audit: type=1400 audit(1768909980.744:1167): avc: denied { accept } for pid=27351 comm="syz.6.8059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 557.725037][ T29] audit: type=1400 audit(1768909980.744:1168): avc: denied { getattr } for pid=27351 comm="syz.6.8059" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 557.765511][T27353] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 557.776248][T27353] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 557.808758][T27353] Symlink component flag not implemented [ 557.814580][T27353] Symlink component flag not implemented [ 557.822766][T27353] Symlink component flag not implemented (7) [ 557.828768][T27353] Symlink component flag not implemented (116) [ 557.839564][T27359] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8062'. [ 557.907846][T27363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8063'. [ 557.921418][T27364] syzkaller0: entered promiscuous mode [ 557.926901][T27364] syzkaller0: entered allmulticast mode [ 558.241772][T27373] Buffer I/O error on dev loop4, logical block 305, async page read [ 558.251117][T27373] Buffer I/O error on dev loop4, logical block 306, async page read [ 558.259104][T27373] Buffer I/O error on dev loop4, logical block 307, async page read [ 558.267310][T27373] Buffer I/O error on dev loop4, logical block 308, async page read [ 558.275434][T27373] Buffer I/O error on dev loop4, logical block 309, async page read [ 558.286894][T27373] Buffer I/O error on dev loop4, logical block 310, async page read [ 558.296129][T27373] Buffer I/O error on dev loop4, logical block 311, async page read [ 558.304279][T27373] Buffer I/O error on dev loop4, logical block 312, async page read [ 558.312421][T27373] Buffer I/O error on dev loop4, logical block 305, async page read [ 558.320679][T27373] Buffer I/O error on dev loop4, logical block 306, async page read [ 558.337961][T27388] FAULT_INJECTION: forcing a failure. [ 558.337961][T27388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.351132][T27388] CPU: 0 UID: 0 PID: 27388 Comm: syz.2.8073 Not tainted syzkaller #0 PREEMPT(voluntary) [ 558.351159][T27388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.351171][T27388] Call Trace: [ 558.351177][T27388] [ 558.351184][T27388] __dump_stack+0x1d/0x30 [ 558.351203][T27388] dump_stack_lvl+0x95/0xd0 [ 558.351285][T27388] dump_stack+0x15/0x1b [ 558.351305][T27388] should_fail_ex+0x263/0x280 [ 558.351329][T27388] should_fail+0xb/0x20 [ 558.351349][T27388] should_fail_usercopy+0x1a/0x20 [ 558.351490][T27388] _copy_from_user+0x1c/0xb0 [ 558.351519][T27388] ___sys_sendmsg+0xc1/0x1e0 [ 558.351594][T27388] __x64_sys_sendmsg+0xd4/0x160 [ 558.351631][T27388] x64_sys_call+0x17ba/0x3000 [ 558.351707][T27388] do_syscall_64+0xc0/0x2a0 [ 558.351730][T27388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.351755][T27388] RIP: 0033:0x7f1de959acb9 [ 558.351772][T27388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.351855][T27388] RSP: 002b:00007f1de7fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.351874][T27388] RAX: ffffffffffffffda RBX: 00007f1de9816090 RCX: 00007f1de959acb9 [ 558.351886][T27388] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 558.351897][T27388] RBP: 00007f1de7fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 558.351908][T27388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.351918][T27388] R13: 00007f1de9816128 R14: 00007f1de9816090 R15: 00007ffd0332afb8 [ 558.351934][T27388] [ 558.545669][T27390] netlink: 'syz.3.8074': attribute type 1 has an invalid length. [ 558.561293][T27390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.575076][T27390] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 558.583896][T27390] bond1: (slave batadv1): making interface the new active one [ 558.592919][T27390] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 558.868756][T27402] syzkaller0: entered promiscuous mode [ 558.874315][T27402] syzkaller0: entered allmulticast mode [ 559.106561][T27435] FAULT_INJECTION: forcing a failure. [ 559.106561][T27435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.119679][T27435] CPU: 0 UID: 0 PID: 27435 Comm: syz.6.8084 Not tainted syzkaller #0 PREEMPT(voluntary) [ 559.119737][T27435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.119748][T27435] Call Trace: [ 559.119754][T27435] [ 559.119761][T27435] __dump_stack+0x1d/0x30 [ 559.119784][T27435] dump_stack_lvl+0x95/0xd0 [ 559.119872][T27435] dump_stack+0x15/0x1b [ 559.119890][T27435] should_fail_ex+0x263/0x280 [ 559.119911][T27435] should_fail+0xb/0x20 [ 559.119936][T27435] should_fail_usercopy+0x1a/0x20 [ 559.119955][T27435] _copy_to_user+0x20/0xa0 [ 559.119978][T27435] simple_read_from_buffer+0xb5/0x130 [ 559.120070][T27435] proc_fail_nth_read+0x10e/0x150 [ 559.120092][T27435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.120118][T27435] vfs_read+0x1ab/0x7f0 [ 559.120145][T27435] ? __rcu_read_unlock+0x4e/0x70 [ 559.120241][T27435] ? __fget_files+0x184/0x1c0 [ 559.120263][T27435] ? mutex_lock+0x57/0x90 [ 559.120338][T27435] ksys_read+0xdc/0x1a0 [ 559.120413][T27435] __x64_sys_read+0x40/0x50 [ 559.120509][T27435] x64_sys_call+0x2889/0x3000 [ 559.120532][T27435] do_syscall_64+0xc0/0x2a0 [ 559.120551][T27435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.120607][T27435] RIP: 0033:0x7fdb4830b58e [ 559.120621][T27435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 559.120649][T27435] RSP: 002b:00007fdb46d85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.120669][T27435] RAX: ffffffffffffffda RBX: 00007fdb46d866c0 RCX: 00007fdb4830b58e [ 559.120684][T27435] RDX: 000000000000000f RSI: 00007fdb46d860a0 RDI: 0000000000000004 [ 559.120704][T27435] RBP: 00007fdb46d86090 R08: 0000000000000000 R09: 0000000000000000 [ 559.120716][T27435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.120793][T27435] R13: 00007fdb485c6128 R14: 00007fdb485c6090 R15: 00007ffd78a5f4f8 [ 559.120809][T27435] [ 559.526091][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.534959][T27459] FAT-fs (loop6): Filesystem has been set read-only [ 559.542904][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.551633][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.560845][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.569657][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.578431][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.579687][T27458] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.587306][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.596190][T27458] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.604867][T27459] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 559.703415][T27466] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 559.713061][T27466] SELinux: failed to load policy [ 559.782613][T27473] syzkaller0: entered promiscuous mode [ 559.788117][T27473] syzkaller0: entered allmulticast mode [ 559.860361][T27480] EXT4-fs: Ignoring removed orlov option [ 559.913387][ T29] audit: type=1326 audit(1768909982.954:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 559.936981][ T29] audit: type=1326 audit(1768909982.954:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 559.943789][T27487] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.960617][ T29] audit: type=1326 audit(1768909982.954:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 559.978885][T27487] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.8105: No space for directory leaf checksum. Please run e2fsck -D. [ 560.001440][T27490] FAULT_INJECTION: forcing a failure. [ 560.001440][T27490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.009965][T27487] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.8105: checksumming directory block 0 [ 560.023001][T27490] CPU: 1 UID: 0 PID: 27490 Comm: syz.1.8106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 560.023026][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.023036][T27490] Call Trace: [ 560.023043][T27490] [ 560.023050][T27490] __dump_stack+0x1d/0x30 [ 560.023109][T27490] dump_stack_lvl+0x95/0xd0 [ 560.023130][T27490] dump_stack+0x15/0x1b [ 560.023148][T27490] should_fail_ex+0x263/0x280 [ 560.023170][T27490] should_fail+0xb/0x20 [ 560.023189][T27490] should_fail_usercopy+0x1a/0x20 [ 560.023322][T27490] _copy_from_user+0x1c/0xb0 [ 560.023346][T27490] ___sys_sendmsg+0xc1/0x1e0 [ 560.023411][T27490] __x64_sys_sendmsg+0xd4/0x160 [ 560.023441][T27490] x64_sys_call+0x17ba/0x3000 [ 560.023482][T27490] do_syscall_64+0xc0/0x2a0 [ 560.023577][T27490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.023598][T27490] RIP: 0033:0x7f059127acb9 [ 560.023620][T27490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.023703][T27490] RSP: 002b:00007f058fcd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.023723][T27490] RAX: ffffffffffffffda RBX: 00007f05914f5fa0 RCX: 00007f059127acb9 [ 560.023737][T27490] RDX: 0000000020000080 RSI: 0000200000002380 RDI: 0000000000000004 [ 560.023750][T27490] RBP: 00007f058fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 560.023763][T27490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.023776][T27490] R13: 00007f05914f6038 R14: 00007f05914f5fa0 R15: 00007fff673f3238 [ 560.023826][T27490] [ 560.143372][ T29] audit: type=1326 audit(1768909982.954:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.216811][ T29] audit: type=1326 audit(1768909982.954:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.240475][ T29] audit: type=1326 audit(1768909982.954:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.264082][ T29] audit: type=1326 audit(1768909982.954:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.287607][ T29] audit: type=1326 audit(1768909982.954:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.291860][T27498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8109'. [ 560.311181][ T29] audit: type=1326 audit(1768909982.954:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.329090][T27498] netem: invalid attributes len -10 [ 560.343513][ T29] audit: type=1326 audit(1768909982.954:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27486 comm="syz.3.8105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3a14caacb9 code=0x7ffc0000 [ 560.372185][T27498] netem: change failed [ 560.420014][T27502] set_capacity_and_notify: 9 callbacks suppressed [ 560.420030][T27502] loop2: detected capacity change from 0 to 2048 [ 560.460256][T27502] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.478610][T27502] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8110: bg 0: block 345: padding at end of block bitmap is not set [ 560.494027][T27513] loop4: detected capacity change from 0 to 512 [ 560.499343][T27502] EXT4-fs (loop2): Remounting filesystem read-only [ 560.511104][T27513] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.8113: error while reading EA inode 32 err=-116 [ 560.544196][T27513] EXT4-fs (loop4): Remounting filesystem read-only [ 560.553959][T27513] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 560.590963][T27513] EXT4-fs (loop4): 1 orphan inode deleted [ 560.607596][T27513] EXT4-fs mount: 35 callbacks suppressed [ 560.607612][T27513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.626290][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.626719][T27523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8118'. [ 560.698371][T20965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.727506][T27535] syzkaller0: entered promiscuous mode [ 560.733069][T27535] syzkaller0: entered allmulticast mode [ 560.755212][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8124'. [ 560.824726][T27543] loop4: detected capacity change from 0 to 128 [ 560.845440][T27543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.865565][T27546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8127'. [ 560.897555][T27552] loop2: detected capacity change from 0 to 1024 [ 560.898260][T27543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.909306][T27552] EXT4-fs: Ignoring removed orlov option [ 560.934676][T27552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.961809][T27558] loop1: detected capacity change from 0 to 2048 [ 560.969428][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.982610][T27543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.002556][T27558] Alternate GPT is invalid, using primary GPT. [ 561.008840][T27558] loop1: p1 p2 p3 [ 561.012610][T27558] loop1: partition table partially beyond EOD, truncated [ 561.046640][T27543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.091008][T20213] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.101830][T20213] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.114706][ T4376] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.125761][ T4376] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.162429][T27570] loop1: detected capacity change from 0 to 512 [ 561.171011][T27570] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 561.179403][T27570] EXT4-fs (loop1): orphan cleanup on readonly fs [ 561.186119][T27570] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.8134: error while reading EA inode 32 err=-116 [ 561.198702][T27570] EXT4-fs (loop1): Remounting filesystem read-only [ 561.205461][T27570] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 561.218482][T27570] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 561.229041][T27570] EXT4-fs (loop1): 1 orphan inode deleted [ 561.235420][T27570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 561.254460][T27573] syzkaller0: entered promiscuous mode [ 561.259997][T27573] syzkaller0: entered allmulticast mode [ 561.274973][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.293104][T27575] FAULT_INJECTION: forcing a failure. [ 561.293104][T27575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.306268][T27575] CPU: 1 UID: 0 PID: 27575 Comm: syz.1.8136 Not tainted syzkaller #0 PREEMPT(voluntary) [ 561.306285][T27575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.306326][T27575] Call Trace: [ 561.306330][T27575] [ 561.306335][T27575] __dump_stack+0x1d/0x30 [ 561.306389][T27575] dump_stack_lvl+0x95/0xd0 [ 561.306401][T27575] dump_stack+0x15/0x1b [ 561.306425][T27575] should_fail_ex+0x263/0x280 [ 561.306438][T27575] should_fail+0xb/0x20 [ 561.306501][T27575] should_fail_usercopy+0x1a/0x20 [ 561.306514][T27575] _copy_to_user+0x20/0xa0 [ 561.306530][T27575] simple_read_from_buffer+0xb5/0x130 [ 561.306558][T27575] proc_fail_nth_read+0x10e/0x150 [ 561.306573][T27575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.306587][T27575] vfs_read+0x1ab/0x7f0 [ 561.306684][T27575] ? __rcu_read_unlock+0x4e/0x70 [ 561.306696][T27575] ? __fget_files+0x184/0x1c0 [ 561.306777][T27575] ? mutex_lock+0x57/0x90 [ 561.306851][T27575] ksys_read+0xdc/0x1a0 [ 561.306862][T27575] __x64_sys_read+0x40/0x50 [ 561.306872][T27575] x64_sys_call+0x2889/0x3000 [ 561.306885][T27575] do_syscall_64+0xc0/0x2a0 [ 561.306963][T27575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.306975][T27575] RIP: 0033:0x7f059123b58e [ 561.307056][T27575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.307066][T27575] RSP: 002b:00007f058fcd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.307078][T27575] RAX: ffffffffffffffda RBX: 00007f058fcd76c0 RCX: 00007f059123b58e [ 561.307086][T27575] RDX: 000000000000000f RSI: 00007f058fcd70a0 RDI: 0000000000000005 [ 561.307094][T27575] RBP: 00007f058fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 561.307178][T27575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.307185][T27575] R13: 00007f05914f6038 R14: 00007f05914f5fa0 R15: 00007fff673f3238 [ 561.307196][T27575] [ 561.545055][T27581] 9p: Bad value for 'wfdno' [ 562.495577][T27594] loop6: detected capacity change from 0 to 1024 [ 562.498350][T27590] loop1: detected capacity change from 0 to 2048 [ 562.519592][T27594] EXT4-fs: Ignoring removed orlov option [ 562.541168][T27594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.560844][ T3312] Alternate GPT is invalid, using primary GPT. [ 562.567143][ T3312] loop1: p1 p2 p3 [ 562.570899][ T3312] loop1: partition table partially beyond EOD, truncated [ 562.589310][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.600421][T27590] Alternate GPT is invalid, using primary GPT. [ 562.606714][T27590] loop1: p1 p2 p3 [ 562.610502][T27590] loop1: partition table partially beyond EOD, truncated [ 562.756592][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 562.757141][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 562.770868][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 562.823894][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 562.823894][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 562.824271][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 562.870324][T27619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27619 comm=syz.6.8154 [ 563.207399][T27640] loop2: detected capacity change from 0 to 2048 [ 563.251047][ T3312] Alternate GPT is invalid, using primary GPT. [ 563.257330][ T3312] loop2: p1 p2 p3 [ 563.261094][ T3312] loop2: partition table partially beyond EOD, truncated [ 563.278197][T27640] Alternate GPT is invalid, using primary GPT. [ 563.284487][T27640] loop2: p1 p2 p3 [ 563.284871][T27648] openvswitch: netlink: Missing key (keys=40, expected=100) [ 563.288198][T27640] loop2: partition table partially beyond EOD, truncated [ 563.313061][ T3008] Alternate GPT is invalid, using primary GPT. [ 563.319416][ T3008] loop2: p1 p2 p3 [ 563.323137][ T3008] loop2: partition table partially beyond EOD, truncated [ 563.391127][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 563.402449][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 563.404568][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 563.427047][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 563.775532][T27685] loop2: detected capacity change from 0 to 1024 [ 563.782352][T27685] EXT4-fs: Ignoring removed orlov option [ 563.790943][T27685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.857565][T27690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.885164][T23542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.903870][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.980303][ T3308] Alternate GPT is invalid, using primary GPT. [ 563.986539][ T3308] loop3: p1 p2 p3 [ 563.990330][ T3308] loop3: partition table partially beyond EOD, truncated [ 564.006734][T27693] Alternate GPT is invalid, using primary GPT. [ 564.013026][T27693] loop3: p1 p2 p3 [ 564.016742][T27693] loop3: partition table partially beyond EOD, truncated [ 564.106288][T27704] SELinux: failed to load policy [ 564.165466][T27717] EXT4-fs: Ignoring removed orlov option [ 564.188625][T27717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.214825][T27726] EXT4-fs: Ignoring removed orlov option [ 564.232358][T27726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.260571][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.282462][T27734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8190'. [ 564.295624][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.396925][T27741] Alternate GPT is invalid, using primary GPT. [ 564.403183][T27741] loop1: p1 p2 p3 [ 564.406906][T27741] loop1: partition table partially beyond EOD, truncated [ 564.475817][T27751] SELinux: failed to load policy [ 564.544485][T27761] EXT4-fs: Ignoring removed orlov option [ 564.560802][T27761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.583322][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.606153][T27767] EXT4-fs: Ignoring removed orlov option [ 564.621188][T27767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.643414][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.821578][T27781] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.874654][T27784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=27784 comm=syz.2.8208 [ 564.887533][T27784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=27784 comm=syz.2.8208 [ 564.900355][T27784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=27784 comm=syz.2.8208 [ 565.181764][T27799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.228166][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.246702][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 565.246714][ T29] audit: type=1400 audit(1768909988.284:1227): avc: denied { getopt } for pid=27804 comm="syz.6.8215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 565.284572][T27805] bond2: option primary_reselect: invalid value (4) [ 565.289503][T27812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8212'. [ 565.301107][T27805] bond2 (unregistering): Released all slaves [ 565.311519][T27811] serio: Serial port ptm1 [ 565.391849][T27817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 565.407146][T27817] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.472563][T27811] serio: Serial port ptm1 [ 565.645332][T27830] set_capacity_and_notify: 10 callbacks suppressed [ 565.645347][T27830] loop1: detected capacity change from 0 to 8192 [ 565.681228][T27840] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.743517][T27840] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.837325][T27840] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.885694][ T29] audit: type=1326 audit(1768909988.924:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 565.909248][ T29] audit: type=1326 audit(1768909988.924:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 565.932790][ T29] audit: type=1326 audit(1768909988.924:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 565.956194][ T29] audit: type=1326 audit(1768909988.924:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 565.979740][ T29] audit: type=1326 audit(1768909988.924:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 566.003236][ T29] audit: type=1326 audit(1768909988.924:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 566.025062][T27850] program syz.1.8227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.026778][ T29] audit: type=1326 audit(1768909988.924:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 566.059407][ T29] audit: type=1326 audit(1768909988.924:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 566.082961][ T29] audit: type=1326 audit(1768909988.924:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27844 comm="syz.2.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 566.235502][ T1607] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 6) [ 566.265168][T27840] netdevsim netdevsim6 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.294256][ T1607] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 566.306596][ T1607] EXT4-fs (loop3): This should not happen!! Data will be lost [ 566.306596][ T1607] [ 566.323794][T27859] loop2: detected capacity change from 0 to 1024 [ 566.346997][ T4363] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.369036][ T1607] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 566.392013][T27859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 566.409397][T27859] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.422176][T18842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=18842 comm=kworker/1:22 [ 566.424673][ T3522] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.437518][ T1607] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 566.449628][ T3522] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.455689][ T1607] EXT4-fs (loop3): This should not happen!! Data will be lost [ 566.455689][ T1607] [ 566.494307][ T3522] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.505201][T27859] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 566.518758][ T1607] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 112: padding at end of block bitmap is not set [ 566.530640][T27867] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 566.559015][ T1607] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 566.571804][ T1607] EXT4-fs (loop3): This should not happen!! Data will be lost [ 566.571804][ T1607] [ 566.581484][ T1607] EXT4-fs (loop3): Total free blocks count 0 [ 566.587463][ T1607] EXT4-fs (loop3): Free/Dirty block details [ 566.593399][ T1607] EXT4-fs (loop3): free_blocks=0 [ 566.601030][ T4363] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm kworker/u8:15: lblock 0 mapped to illegal pblock 0 (length 4) [ 566.615025][ T4363] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 566.627351][ T4363] EXT4-fs (loop2): This should not happen!! Data will be lost [ 566.627351][ T4363] [ 566.687348][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 566.862529][T27881] loop2: detected capacity change from 0 to 8192 [ 566.922377][T27884] loop3: detected capacity change from 0 to 4096 [ 566.951541][T27884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.965069][T27886] loop6: detected capacity change from 0 to 1024 [ 566.989599][T27886] EXT4-fs: Ignoring removed orlov option [ 567.018570][T27889] loop2: detected capacity change from 0 to 1024 [ 567.065066][T27889] EXT4-fs: Ignoring removed orlov option [ 567.081675][T23542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.112307][T27889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.125128][T27886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.157957][T27895] loop3: detected capacity change from 0 to 256 [ 567.192212][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.223557][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.238622][T27899] syzkaller0: entered promiscuous mode [ 567.244189][T27899] syzkaller0: entered allmulticast mode [ 567.485511][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8249'. [ 567.494564][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8249'. [ 567.505894][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8249'. [ 567.556541][T27917] loop6: detected capacity change from 0 to 1024 [ 567.571158][T27917] EXT4-fs: Ignoring removed orlov option [ 567.594330][T27917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.665993][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.697383][T27847] syz.1.8227 (27847) used greatest stack depth: 7352 bytes left [ 567.718934][T27929] syzkaller0: entered promiscuous mode [ 567.724598][T27929] syzkaller0: entered allmulticast mode [ 568.028578][T27975] loop1: detected capacity change from 0 to 1024 [ 568.035573][T27975] EXT4-fs: Ignoring removed orlov option [ 568.050995][T27975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.117979][T27979] loop2: detected capacity change from 0 to 512 [ 568.124651][T27979] EXT4-fs: Ignoring removed orlov option [ 568.130385][T27979] EXT4-fs: Ignoring removed i_version option [ 568.137607][T27979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 568.138399][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.153682][T27979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.168912][T27979] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.242035][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.247177][T27988] syzkaller0: entered promiscuous mode [ 568.256493][T27988] syzkaller0: entered allmulticast mode [ 568.273844][T27993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8261'. [ 568.283620][T27992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8261'. [ 568.294951][T27994] ext4: Unknown parameter 'subj_user' [ 568.597947][T28014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8266'. [ 569.249214][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 569.256329][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 569.327384][T28016] EXT4-fs: Ignoring removed orlov option [ 569.360910][T28016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.448053][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.855513][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8276'. [ 570.094596][T28044] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 570.107597][T28044] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.127610][T28044] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.8279: No space for directory leaf checksum. Please run e2fsck -D. [ 570.142983][T28044] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.8279: checksumming directory block 0 [ 570.240091][T28044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 570.759085][T28063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=28063 comm=syz.2.8286 [ 571.263631][T28072] set_capacity_and_notify: 4 callbacks suppressed [ 571.263648][T28072] loop3: detected capacity change from 0 to 1024 [ 571.382748][T28077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8287'. [ 571.444536][T28079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8289'. [ 571.453693][T28079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8289'. [ 571.588727][T28083] loop3: detected capacity change from 0 to 1024 [ 571.595700][T28081] loop2: detected capacity change from 0 to 1024 [ 571.624277][T28081] EXT4-fs: Ignoring removed orlov option [ 571.670845][T28083] EXT4-fs: Ignoring removed orlov option [ 571.681664][T28081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.719366][T28083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.824892][T28094] loop6: detected capacity change from 0 to 1024 [ 571.831789][T28094] EXT4-fs: inline encryption not supported [ 571.837627][T28094] EXT4-fs: Ignoring removed oldalloc option [ 571.870593][T23542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.880794][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.959259][T28094] EXT4-fs: inline encryption not supported [ 571.969484][T28094] EXT4-fs: Ignoring removed orlov option [ 572.094168][T28094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.127203][T28094] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:16384 [ 572.141585][T28099] syzkaller0: entered promiscuous mode [ 572.147099][T28099] syzkaller0: entered allmulticast mode [ 572.170337][T28094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.662919][T28124] loop3: detected capacity change from 0 to 1024 [ 572.699520][T28124] EXT4-fs: Ignoring removed orlov option [ 572.718263][T28128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 572.740798][T28124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.766775][T23542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.864151][T28137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28137 comm=syz.3.8307 [ 572.880133][T28136] loop3: detected capacity change from 0 to 256 [ 572.886627][T28136] msdos: Bad value for 'uid' [ 572.891301][T28136] msdos: Bad value for 'uid' [ 572.962972][T28145] syzkaller0: entered promiscuous mode [ 572.968447][T28145] syzkaller0: entered allmulticast mode [ 573.049455][T28147] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8310'. [ 573.091800][T28151] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8312'. [ 573.215799][T28158] loop2: detected capacity change from 0 to 1024 [ 573.240275][T28158] EXT4-fs: Ignoring removed orlov option [ 573.271714][T28158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.303858][T28162] loop3: detected capacity change from 0 to 1024 [ 573.324774][T28162] EXT4-fs: Ignoring removed orlov option [ 573.333912][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.376798][T28162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.438402][T23542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.569463][T28169] SELinux: failed to load policy [ 573.605933][T28174] loop1: detected capacity change from 0 to 1024 [ 573.622316][T28174] EXT4-fs: Ignoring removed orlov option [ 573.633562][T28174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.718125][T28179] loop3: detected capacity change from 0 to 2048 [ 573.723667][T28180] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.733264][T21457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.781032][ T3312] Alternate GPT is invalid, using primary GPT. [ 573.787347][ T3312] loop3: p1 p2 p3 [ 573.791184][ T3312] loop3: partition table partially beyond EOD, truncated [ 573.821740][T28179] Alternate GPT is invalid, using primary GPT. [ 573.828070][T28179] loop3: p1 p2 p3 [ 573.831807][T28179] loop3: partition table partially beyond EOD, truncated [ 573.892243][T28193] syzkaller0: entered promiscuous mode [ 573.897774][T28193] syzkaller0: entered allmulticast mode [ 573.915735][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 573.920250][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 573.926283][ T3541] udevd[3541]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 574.029677][T28201] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 574.041587][T28201] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 574.116902][ T3312] Alternate GPT is invalid, using primary GPT. [ 574.123340][ T3312] loop6: p1 p2 p3 [ 574.127050][ T3312] loop6: partition table partially beyond EOD, truncated [ 574.148057][T28203] Alternate GPT is invalid, using primary GPT. [ 574.154496][T28203] loop6: p1 p2 p3 [ 574.158228][T28203] loop6: partition table partially beyond EOD, truncated [ 574.160870][T28208] EXT4-fs: Ignoring removed orlov option [ 574.197373][T28208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.213453][ T3008] Alternate GPT is invalid, using primary GPT. [ 574.219812][ T3008] loop6: p1 p2 p3 [ 574.223554][ T3008] loop6: partition table partially beyond EOD, truncated [ 574.255720][T20965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.880146][T28232] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 574.966209][T28232] EXT4-fs (loop2): orphan cleanup on readonly fs [ 575.207840][T28232] __quota_error: 217 callbacks suppressed [ 575.207931][T28232] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 575.223842][T28232] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 575.233307][T28232] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.8341: Failed to acquire dquot type 1 [ 575.650629][T28232] EXT4-fs (loop2): Remounting filesystem read-only [ 576.036250][T28232] EXT4-fs (loop2): 1 truncate cleaned up [ 576.487099][T28232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 576.499942][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8344'. [ 576.811778][T28271] set_capacity_and_notify: 4 callbacks suppressed [ 576.811794][T28271] loop3: detected capacity change from 0 to 1024 [ 576.831671][T28271] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 576.842996][T28271] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 576.860320][T28271] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 576.866813][T28271] EXT4-fs (loop3): mount failed [ 576.887683][T28270] syzkaller0: entered promiscuous mode [ 576.893215][T28270] syzkaller0: entered allmulticast mode [ 576.906049][T24597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.672583][T28314] loop6: detected capacity change from 0 to 1024 [ 577.695723][T28314] EXT4-fs: Ignoring removed orlov option [ 577.722462][T28314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.787043][T22491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.815375][T28327] loop6: detected capacity change from 0 to 1024 [ 577.823782][T28327] EXT4-fs: Ignoring removed bh option [ 577.903708][T28327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 578.356050][T28337] syzkaller0: entered promiscuous mode [ 578.361666][T28337] syzkaller0: entered allmulticast mode [ 578.563199][T28353] netlink: 'syz.3.8371': attribute type 2 has an invalid length. [ 578.620034][ T29] audit: type=1326 audit(1768910001.664:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.651342][T28356] FAULT_INJECTION: forcing a failure. [ 578.651342][T28356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.654701][T28358] loop3: detected capacity change from 0 to 1024 [ 578.664562][T28356] CPU: 0 UID: 0 PID: 28356 Comm: syz.2.8372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 578.664588][T28356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.664600][T28356] Call Trace: [ 578.664606][T28356] [ 578.664612][T28356] __dump_stack+0x1d/0x30 [ 578.664769][T28356] dump_stack_lvl+0x95/0xd0 [ 578.664789][T28356] dump_stack+0x15/0x1b [ 578.664807][T28356] should_fail_ex+0x263/0x280 [ 578.664833][T28356] should_fail+0xb/0x20 [ 578.664851][T28356] should_fail_usercopy+0x1a/0x20 [ 578.664874][T28356] _copy_from_iter+0xcf/0xea0 [ 578.664899][T28356] ? alloc_pages_mpol+0x217/0x260 [ 578.664936][T28356] copy_page_from_iter+0x178/0x2a0 [ 578.665024][T28356] tun_get_user+0xbbd/0x27c0 [ 578.665120][T28356] ? ref_tracker_alloc+0x1f2/0x2f0 [ 578.665145][T28356] tun_chr_write_iter+0x15e/0x210 [ 578.665212][T28356] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 578.665233][T28356] vfs_write+0x5a6/0x9f0 [ 578.665257][T28356] ksys_write+0xdc/0x1a0 [ 578.665273][T28356] __x64_sys_write+0x40/0x50 [ 578.665288][T28356] x64_sys_call+0x2847/0x3000 [ 578.665307][T28356] do_syscall_64+0xc0/0x2a0 [ 578.665382][T28356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.665403][T28356] RIP: 0033:0x7f1de955b58e [ 578.665432][T28356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 578.665453][T28356] RSP: 002b:00007f1de7ff6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 578.665498][T28356] RAX: ffffffffffffffda RBX: 00007f1de7ff76c0 RCX: 00007f1de955b58e [ 578.665512][T28356] RDX: 0000000000000046 RSI: 0000200000000880 RDI: 00000000000000c8 [ 578.665525][T28356] RBP: 00007f1de7ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 578.665538][T28356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.665550][T28356] R13: 00007f1de9816038 R14: 00007f1de9815fa0 R15: 00007ffd0332afb8 [ 578.665653][T28356] [ 578.680834][ T29] audit: type=1326 audit(1768910001.694:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.680860][ T29] audit: type=1326 audit(1768910001.694:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.780194][T28360] loop4: detected capacity change from 0 to 2048 [ 578.781798][ T29] audit: type=1326 audit(1768910001.694:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.788195][T28360] EXT4-fs: Ignoring removed bh option [ 578.792093][ T29] audit: type=1326 audit(1768910001.694:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.792119][ T29] audit: type=1326 audit(1768910001.694:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.904145][T28363] loop3: detected capacity change from 0 to 1024 [ 578.910695][ T29] audit: type=1326 audit(1768910001.694:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.931786][T28363] EXT4-fs: Ignoring removed orlov option [ 578.940421][ T29] audit: type=1326 audit(1768910001.694:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28354 comm="syz.2.8372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de959acb9 code=0x7ffc0000 [ 578.971642][T28360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 579.066667][T28360] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 579.079097][T28360] EXT4-fs (loop4): This should not happen!! Data will be lost [ 579.079097][T28360] [ 579.088763][T28360] EXT4-fs (loop4): Total free blocks count 0 [ 579.094764][T28360] EXT4-fs (loop4): Free/Dirty block details [ 579.100664][T28360] EXT4-fs (loop4): free_blocks=2415919104 [ 579.106367][T28360] EXT4-fs (loop4): dirty_blocks=32 [ 579.111489][T28360] EXT4-fs (loop4): Block reservation details [ 579.117489][T28360] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 579.304830][T28348] FAULT_INJECTION: forcing a failure. [ 579.304830][T28348] name fail_futex, interval 1, probability 0, space 0, times 0 [ 579.317759][T28348] CPU: 1 UID: 0 PID: 28348 Comm: syz.6.8368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 579.317812][T28348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.317819][T28348] Call Trace: [ 579.317824][T28348] [ 579.317829][T28348] __dump_stack+0x1d/0x30 [ 579.317866][T28348] dump_stack_lvl+0x95/0xd0 [ 579.317878][T28348] dump_stack+0x15/0x1b [ 579.317888][T28348] should_fail_ex+0x263/0x280 [ 579.317902][T28348] should_fail+0xb/0x20 [ 579.317972][T28348] get_futex_key+0x12f/0xbe0 [ 579.317987][T28348] futex_wake+0x84/0x380 [ 579.318003][T28348] ? perf_lock_task_context+0x260/0x2d0 [ 579.318019][T28348] do_futex+0x323/0x380 [ 579.318099][T28348] mm_release+0xa1/0x190 [ 579.318109][T28348] exit_mm_release+0x25/0x30 [ 579.318190][T28348] exit_mm+0x37/0x180 [ 579.318203][T28348] do_exit+0x3fa/0x1590 [ 579.318217][T28348] do_group_exit+0xfe/0x140 [ 579.318229][T28348] ? get_signal+0xe47/0xf60 [ 579.318257][T28348] get_signal+0xe4f/0xf60 [ 579.318274][T28348] ? __sys_sendto+0x309/0x380 [ 579.318290][T28348] arch_do_signal_or_restart+0x96/0x450 [ 579.318380][T28348] exit_to_user_mode_loop+0x6a/0x6f0 [ 579.318471][T28348] ? __x64_sys_sendto+0x76/0x90 [ 579.318486][T28348] do_syscall_64+0x1d3/0x2a0 [ 579.318498][T28348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.318511][T28348] RIP: 0033:0x7fdb4834acb9 [ 579.318526][T28348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.318537][T28348] RSP: 002b:00007fdb46d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 579.318549][T28348] RAX: fffffffffffffe00 RBX: 00007fdb485c6090 RCX: 00007fdb4834acb9 [ 579.318557][T28348] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 579.318565][T28348] RBP: 00007fdb46d86090 R08: 0000000000000000 R09: 0000000000000000 [ 579.318572][T28348] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 579.318580][T28348] R13: 00007fdb485c6128 R14: 00007fdb485c6090 R15: 00007ffd78a5f4f8 [ 579.318656][T28348] [ 579.648317][T28401] loop6: detected capacity change from 0 to 512 [ 579.663021][T28401] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.719230][T28405] loop1: detected capacity change from 0 to 1024 [ 579.726131][T28405] EXT4-fs: Ignoring removed orlov option [ 579.752235][T28407] syzkaller0: entered promiscuous mode [ 579.757866][T28407] syzkaller0: entered allmulticast mode [ 579.844580][T28415] loop6: detected capacity change from 0 to 512 [ 579.851692][T28415] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 579.862677][T28415] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 580.003560][T28424] loop3: detected capacity change from 0 to 1024 [ 580.206173][T28447] syzkaller0: entered promiscuous mode [ 580.211746][T28447] syzkaller0: entered allmulticast mode [ 580.771717][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 580.771732][ T29] audit: type=1400 audit(1768910003.814:2187): avc: denied { accept } for pid=28464 comm="syz.1.8410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 580.785261][ T3312] Alternate GPT is invalid, using primary GPT. [ 580.804308][ T3312] loop3: p1 p2 p3 [ 580.808036][ T3312] loop3: partition table partially beyond EOD, truncated [ 580.824852][T28461] Alternate GPT is invalid, using primary GPT. [ 580.831385][T28461] loop3: p1 p2 p3 [ 580.835111][T28461] loop3: partition table partially beyond EOD, truncated [ 580.895572][T28471] random: crng reseeded on system resumption [ 580.931377][T28475] syzkaller0: entered promiscuous mode [ 580.937049][T28475] syzkaller0: entered allmulticast mode [ 580.944732][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 580.947642][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 580.962050][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 580.974758][T28474] syzkaller0: entered promiscuous mode [ 580.980310][T28474] syzkaller0: entered allmulticast mode [ 581.024309][T28477] EXT4-fs: Ignoring removed bh option [ 581.281809][T28492] netlink: 'syz.4.8422': attribute type 39 has an invalid length. [ 581.553867][ T29] audit: type=1326 audit(1768910004.594:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.721782][ T29] audit: type=1326 audit(1768910004.614:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.745446][ T29] audit: type=1326 audit(1768910004.614:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.769163][ T29] audit: type=1326 audit(1768910004.614:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.792658][ T29] audit: type=1326 audit(1768910004.614:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.816156][ T29] audit: type=1326 audit(1768910004.614:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.839736][ T29] audit: type=1326 audit(1768910004.614:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8047bacb9 code=0x7ffc0000 [ 581.863316][ T29] audit: type=1326 audit(1768910004.614:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc80477b58e code=0x7ffc0000 [ 581.886866][ T29] audit: type=1326 audit(1768910004.624:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28490 comm="syz.4.8422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc80477b58e code=0x7ffc0000 [ 581.931955][T28514] set_capacity_and_notify: 5 callbacks suppressed [ 581.931970][T28514] loop6: detected capacity change from 0 to 256 [ 581.959244][T28514] FAT-fs (loop6): codepage cp1251 not found [ 582.024946][T28526] syzkaller0: entered promiscuous mode [ 582.030525][T28526] syzkaller0: entered allmulticast mode [ 582.044429][T28528] loop3: detected capacity change from 0 to 1024 [ 582.054312][T28528] EXT4-fs: Ignoring removed orlov option [ 582.139916][T28536] loop6: detected capacity change from 0 to 1024 [ 582.146783][T28536] EXT4-fs: Ignoring removed bh option [ 582.176985][T28536] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 582.193164][T28536] EXT4-fs (loop6): Remounting filesystem read-only [ 582.200783][T28536] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 582.203090][T28540] loop2: detected capacity change from 0 to 1024 [ 582.641363][T28570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.651769][T28570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.688992][T28574] loop3: detected capacity change from 0 to 1024 [ 582.702496][T28574] EXT4-fs: Ignoring removed orlov option [ 582.703174][T28570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.718564][T28570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.757522][T28570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.767863][T28570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.830048][T28570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.840499][T28570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 582.939728][T28585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28585 comm=syz.4.8450 [ 582.954157][T28585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28585 comm=syz.4.8450 [ 583.062742][ T4363] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 583.071223][ T4363] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.199582][ T4363] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 583.207883][ T4363] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.268349][ T4363] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 583.276694][ T4363] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.305242][ T4363] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 583.313638][ T4363] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 583.326241][T28592] loop4: detected capacity change from 0 to 128 [ 583.374443][T28592] ext4 filesystem being mounted at /519/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 583.390081][T28599] loop1: detected capacity change from 0 to 128 [ 583.513286][T28599] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.530879][T28601] netlink: 'syz.2.8454': attribute type 6 has an invalid length. [ 583.531640][T28599] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.8453: No space for directory leaf checksum. Please run e2fsck -D. [ 583.553997][T28599] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.8453: checksumming directory block 0 [ 583.671726][T28606] SELinux: failed to load policy [ 583.995786][T28631] loop2: detected capacity change from 0 to 1024 [ 584.002704][T28631] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.211630][T28640] SELinux: failed to load policy [ 584.255981][T28646] loop6: detected capacity change from 0 to 2048 [ 584.299365][ T3312] loop6: p1 p2 [ 584.305336][T28646] loop6: p1 p2 [ 584.423446][T28656] loop6: detected capacity change from 0 to 128 [ 584.430531][T28656] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 584.442954][T28656] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0xb4417272 (sector = 1) [ 584.562505][T28658] FAULT_INJECTION: forcing a failure. [ 584.562505][T28658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.575737][T28658] CPU: 1 UID: 0 PID: 28658 Comm: syz.6.8475 Not tainted syzkaller #0 PREEMPT(voluntary) [ 584.575754][T28658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.575765][T28658] Call Trace: [ 584.575830][T28658] [ 584.575838][T28658] __dump_stack+0x1d/0x30 [ 584.575899][T28658] dump_stack_lvl+0x95/0xd0 [ 584.575917][T28658] dump_stack+0x15/0x1b [ 584.575928][T28658] should_fail_ex+0x263/0x280 [ 584.575946][T28658] should_fail+0xb/0x20 [ 584.575957][T28658] should_fail_usercopy+0x1a/0x20 [ 584.575970][T28658] _copy_from_user+0x1c/0xb0 [ 584.576003][T28658] ___sys_sendmsg+0xc1/0x1e0 [ 584.576026][T28658] __x64_sys_sendmsg+0xd4/0x160 [ 584.576043][T28658] x64_sys_call+0x17ba/0x3000 [ 584.576146][T28658] do_syscall_64+0xc0/0x2a0 [ 584.576164][T28658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.576176][T28658] RIP: 0033:0x7fdb4834acb9 [ 584.576265][T28658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.576276][T28658] RSP: 002b:00007fdb46da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.576288][T28658] RAX: ffffffffffffffda RBX: 00007fdb485c5fa0 RCX: 00007fdb4834acb9 [ 584.576296][T28658] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 584.576304][T28658] RBP: 00007fdb46da7090 R08: 0000000000000000 R09: 0000000000000000 [ 584.576311][T28658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.576346][T28658] R13: 00007fdb485c6038 R14: 00007fdb485c5fa0 R15: 00007ffd78a5f4f8 [ 584.576357][T28658] [ 584.736074][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.743290][ C1] bridge0: topology change detected, propagating [ 584.749689][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.756891][ C1] bridge0: topology change detected, propagating [ 584.783500][T28660] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.790576][T28660] EXT4-fs: Ignoring removed nobh option [ 584.796235][T28660] EXT4-fs: inline encryption not supported [ 584.866504][T28667] EXT4-fs: Ignoring removed orlov option [ 584.890086][T28668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8479'. [ 585.140147][T28693] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8485'. [ 585.165936][T28695] ================================================================== [ 585.174040][T28695] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 585.181408][T28695] [ 585.183721][T28695] write to 0xffff888152ea7000 of 4096 bytes by task 28694 on cpu 1: [ 585.191682][T28695] _copy_from_iter+0x106/0xea0 [ 585.196443][T28695] copy_page_from_iter+0x178/0x2a0 [ 585.201541][T28695] process_vm_rw+0x6ad/0x9c0 [ 585.206113][T28695] __x64_sys_process_vm_writev+0x78/0x90 [ 585.211735][T28695] x64_sys_call+0x27ef/0x3000 [ 585.216398][T28695] do_syscall_64+0xc0/0x2a0 [ 585.220885][T28695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.226760][T28695] [ 585.229069][T28695] write to 0xffff888152ea7000 of 4096 bytes by task 28695 on cpu 0: [ 585.237026][T28695] _copy_from_iter+0x106/0xea0 [ 585.241774][T28695] copy_page_from_iter+0x178/0x2a0 [ 585.246873][T28695] process_vm_rw+0x6ad/0x9c0 [ 585.251443][T28695] __x64_sys_process_vm_writev+0x78/0x90 [ 585.257058][T28695] x64_sys_call+0x27ef/0x3000 [ 585.261718][T28695] do_syscall_64+0xc0/0x2a0 [ 585.266204][T28695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.272253][T28695] [ 585.274554][T28695] Reported by Kernel Concurrency Sanitizer on: [ 585.280682][T28695] CPU: 0 UID: 0 PID: 28695 Comm: syz.4.8488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 585.290468][T28695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.300506][T28695] ==================================================================