last executing test programs: 2m1.86816399s ago: executing program 4 (id=563): prctl$PR_CAPBSET_DROP(0x18, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x18) setuid(0xee00) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x4, 0xffff, 0x1, 0x8af, 0x6, 0x9}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) clock_adjtime(0xfffffff3, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r3, 0x2218, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x2000804}, 0x840) 2m1.765794696s ago: executing program 4 (id=564): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e24, 0x5, @remote, 0xcee}}}, &(0x7f0000000240)=0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) syz_io_uring_setup(0x57f9, &(0x7f0000000400)={0x0, 0xb7bf, 0x80, 0x0, 0xbd7f7fff}, &(0x7f0000000480)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000037c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.265906194s ago: executing program 4 (id=574): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) 1m59.877818514s ago: executing program 4 (id=586): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb7, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, &(0x7f0000000e80)=ANY=[], 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x30, 0x0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xe, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x5, 0x7, 0x4, 0x10, 0x1}, @generic={0x2, 0x0, 0x8, 0x2, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x10001, 0xb, &(0x7f00000001c0)=""/11, 0x41000, 0x33, '\x00', r1, @fallback=0x1b, r0, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x6, 0xc3}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000000600)=[r0, r0, r0, r0], &(0x7f0000000640)=[{0x3, 0x4, 0x0, 0x4}, {0x82, 0x4, 0x10, 0x2}, {0x1, 0x2, 0x9, 0xb}], 0x10, 0x2}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000240)={0xbf2, 0x3d83}, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x9, 0xffffffff) 1m59.490781365s ago: executing program 4 (id=589): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x140a, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x20000000) 1m59.023000073s ago: executing program 4 (id=597): sync() (fail_nth: 2) 1m59.011813993s ago: executing program 32 (id=597): sync() (fail_nth: 2) 1m25.896053974s ago: executing program 5 (id=1073): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x40000100, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") 1m25.45193797s ago: executing program 5 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x80}}, 0x0) 1m25.26426059s ago: executing program 5 (id=1075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x7}, 0x8) 1m25.188395245s ago: executing program 5 (id=1077): ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid={'resgid', 0x3d, r1}}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 1m24.774179818s ago: executing program 5 (id=1090): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) 1m24.238009369s ago: executing program 5 (id=1097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x7ff, 0x8, '9P2000.u'}, 0x15) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040007020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m24.212219781s ago: executing program 33 (id=1097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x7ff, 0x8, '9P2000.u'}, 0x15) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040007020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 18.635053186s ago: executing program 6 (id=2194): mq_open(&(0x7f0000000100)='\x03', 0x40, 0xa, 0x0) 18.634401316s ago: executing program 6 (id=2195): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getpid() process_madvise(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)='?', 0x1}], 0x2, 0x17, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nodioread_nolock}, {@noblock_validity}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="4f85f52178e1b686e3e5cd590eb2b798", 0x10}], 0x1}}], 0x1, 0x0) 18.098687176s ago: executing program 6 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000fcffffff850000000800000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 18.009623682s ago: executing program 6 (id=2209): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3c, 0x800}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r5 = open(0x0, 0x109042, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0xc0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000680)=0x6c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000005a0001000000000000000000fe9047df5062267f4c47197320e40400008008000280cff80291"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x0, @rc={0x1f, @any, 0x5}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, @phonet={0x23, 0x9, 0x7, 0x8f}, 0xfff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)='ipvlan1\x00', 0x1, 0x9f24, 0xcbc}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$int_in(r12, 0x5421, &(0x7f0000000000)=0x100000001) waitid$P_PIDFD(0x3, r12, 0x0, 0x8, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="2f0000001020000004000000", @ANYRES32, @ANYBLOB="ceef339f6de7439933085ab51ddfb10112101e8d31296d1e40665cd282dc20844486385090bd97bb2ff8184e7b1f84de51c2c0a73a15b33839c09bed10ecda6e4469a84f3bc1dd7f0079352d0e8db80700e2af2763aebf400be4fb74964c817750055af049aab8fcffa8416e271c61a79225dc2aefcc725caa28401591f1aee0373948c93eb8203579135947", @ANYRES64=0x0], 0x20) fsetxattr$security_capability(r8, &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0x9396, 0x3}]}, 0xc, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0) 17.410924246s ago: executing program 6 (id=2218): mq_open(&(0x7f0000000100)='\x03', 0x40, 0xa, 0x0) 16.847822248s ago: executing program 6 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000001000000000000000000000000008955bde8f6cacbf10984141cc97a5c00000000c27506c09ffc89b362b0eae1d1bd28e0bbf89f42e9da1fa2cbdb6954bce4a1cb51c446c1fad3a7146b0d9a7a36ea5d49b3f1a0ccb45aa25d453f13e20714279f99f68f36a2dce09b89eb73", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 16.847458388s ago: executing program 34 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000001000000000000000000000000008955bde8f6cacbf10984141cc97a5c00000000c27506c09ffc89b362b0eae1d1bd28e0bbf89f42e9da1fa2cbdb6954bce4a1cb51c446c1fad3a7146b0d9a7a36ea5d49b3f1a0ccb45aa25d453f13e20714279f99f68f36a2dce09b89eb73", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 2.45948828s ago: executing program 3 (id=2489): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5023f172943e2e560929afe2443841987"], 0x1, 0x52e, &(0x7f0000000600)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2.356559826s ago: executing program 3 (id=2493): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) pselect6(0x0, 0x0, &(0x7f0000000d80)={0x6, 0x4, 0x9, 0x0, 0x4, 0x4, 0x1000, 0x5}, 0x0, 0x0, 0x0) 1.540441942s ago: executing program 2 (id=2507): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xd9a0}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xab2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) syz_emit_ethernet(0x9d, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7b, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/99}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/57, 0x39) gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") 1.502637234s ago: executing program 0 (id=2508): r0 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYBLOB="54c982d16311e779ee0738c1cc8d04ffb5cb9172b1fec3c480d7bad1e3151ef059428431ed1a7f06333ad2b5b06eb1e87e1036d7bc864d95459bf8c317cc41504619991892e3ef507eac8a383fe23210669e271edcd17ec9d16e8462889cf3da8010b705fde5fd589adf29b763e8f3fe16ddf6ad23deffb45547e24a55324fcd618f29a7b2d4abdd179e", @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x400c8e0}, 0xc094) fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x1) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.419735049s ago: executing program 3 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10ffc, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) (async) read(r3, &(0x7f0000000200)=""/209, 0xd1) tkill(r2, 0x7) bind$802154_dgram(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000000c0)=0x1) 1.328411275s ago: executing program 0 (id=2511): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f00000001c0)=0x1, 0x4) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x17, 0x1, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa17}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @local, 0x6}, 0x1c) close(r1) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000100)=""/131, 0x83}) 1.323087565s ago: executing program 1 (id=2512): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x100) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) 1.084280918s ago: executing program 1 (id=2513): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8800000, 0x3, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x7, 0x800}, {0x1, 0x0, 0x1000}], 0x2) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@discard}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x835, 0x0) 1.082388278s ago: executing program 7 (id=2514): socket(0x40000000015, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) 1.013222792s ago: executing program 7 (id=2515): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) 1.012769553s ago: executing program 7 (id=2516): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000002180)="120000001200e7ef007b00000000000000a1", 0x12, 0x40488c4, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 951.806356ms ago: executing program 1 (id=2517): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 951.104266ms ago: executing program 7 (id=2518): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]}) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x259fdc00, 0x100000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1000}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x800) r7 = dup(r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r7, &(0x7f0000000100)=[{{r8, r9/1000+60000}, 0x1, 0x6, 0x1}, {{0x0, 0xea60}, 0x12, 0x1f, 0x8}, {{0x0, 0x2710}, 0x3, 0x6, 0x9}, {{}, 0x17, 0x3, 0x1ff}, {{0x0, 0xea60}, 0x4, 0x3, 0x7}, {{0x77359400}, 0x2, 0x1, 0xbeef}], 0x90) 916.042898ms ago: executing program 1 (id=2519): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x41000}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) fremovexattr(r2, &(0x7f0000000740)=@random={'user.', '\'\x00'}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r4 = syz_clone(0x84004111, 0x0, 0x62, 0x0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x150, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xdc53}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6755}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x20000000, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x2, 0x4e, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "9cd38f5976624e3b"}, 0x3}}]}, 0x14c}}, 0x0) (rerun: 32) syz_open_procfs(r4, &(0x7f0000000100)='fd/4\x00') 860.517731ms ago: executing program 2 (id=2520): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 820.265974ms ago: executing program 7 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="0e14f42abb4d1e9fafbafb", 0xb, 0x0, &(0x7f0000000380)={0x11, 0x8100, r2, 0x1, 0xdb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x633019276041e1cf}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@discard}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 820.103823ms ago: executing program 1 (id=2522): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="b49c"], 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4054) 813.836304ms ago: executing program 2 (id=2523): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x25f, &(0x7f0000000380)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfTSYoSY4M148uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFzZnQ3knyZmNzvifD6w2ZnJm/d7w8z3TQiZbACF1RcRQxFRioj+iKhERLK+wefZq6+5OtO9MBZRq/3yMGm0y9Yza/v1RsR0RHwXEfNpEv+VI6bm/lh+vPjTV8cnK1+em/u9u6MH2bSyvPTz6tmRYxeHv526fvP+SBJDUd1wXO2XbLOtnER8sB/F3hBJOe8RsBujhy/cquf+w4j4opH/SqSRnbwTE+/MV+KbMy/b9+SDGx93cqxA+9Vqlfo9cLoGFE4aEdVI0oGIyJbTdGAg+xn+dqkn/X984lD/v+OTB/7Je6YC2qUasfTj5a5LvZvyf6+U5R94S2W/lFr6dXT2Tn1htZT3gICO+CR7q9//+/868nXIPxSO/ENxyT8Ul/xDcck/FJf8Q3HJPxTE8+Yf+63bJP9QXPIPxbXn/J96tn+DAjpiff4BgGKpde3pqeH2PoQM5CLv+QcAAAAAAAAAAAAAAAAAANhqpnthbO3Vnh7LO7a4ejpi5Yes6db6pcbnEUe82/ja8yjZ0GOyqwqv9udnLXbQovM5P3393t1861/7NNfyjf96N300IgbL5a3XX9K8/vbu/R2+X/m7xQKvKdm0/v1vna2/2dPZfOsPL0Zcqc8/g9vNP2l81Hjffv6p1s9fi/UPPmmxAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrmRQAAAP//bpp05Q==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0x28, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x2, 0x7ffc1ffb}]}) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) 651.803163ms ago: executing program 2 (id=2524): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket(0xa, 0x5, 0x0) listen(r4, 0x100) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) 633.246694ms ago: executing program 7 (id=2525): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x6a040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000700000014000780080011400000008b05001500060000000500010006000000050005000a00000005fc0400020000000900020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) syz_open_dev$hidraw(0x0, 0x4, 0x20000) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x60240, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) 527.82807ms ago: executing program 3 (id=2526): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000640)={[{@bsdgroups}, {@usrjquota}, {@lazytime}, {@norecovery}, {@bsdgroups}, {@grpquota}, {@minixdf}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") statfs(0x0, &(0x7f00000002c0)=""/243) 520.690431ms ago: executing program 1 (id=2527): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0xfff, @ipv4={'\x00', '\xff\xff', @local}, 0xffe}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x1}}, 0x2e) sendto(r5, 0x0, 0x0, 0x4008044, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004880}, 0x800) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x30}}, 0x8000) fallocate(r1, 0x10, 0x37eb, 0x1955) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) 459.463064ms ago: executing program 0 (id=2528): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 4) 287.714304ms ago: executing program 3 (id=2529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 264.417305ms ago: executing program 2 (id=2530): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x402, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3522, 0x100956c, 0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000480)={[{@delalloc}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x9a}}, {@nodioread_nolock}, {@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noinit_itable}, {@nouid32}, {@nobh}, {@noauto_da_alloc}, {@nouid32}, {@sysvgroups}], [{@seclabel}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r5 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x80000000, 0x1, 0x6, 0x5, 0x10, 0x40000800000000b, 0x80000000000000, 0xcc0, 0xffffffffffffffff, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0x7, 0x80001, 0x800000000f64d}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x5000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) 244.745236ms ago: executing program 0 (id=2531): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 191.797429ms ago: executing program 3 (id=2532): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x3fc, 0xffffffff, 0x0, 0xfffffff8}, 0x10) socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r3, &(0x7f0000000e80)=ANY=[], 0x78) sendfile(r3, r3, &(0x7f0000000000)=0x9, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x440c0) 23.745629ms ago: executing program 0 (id=2533): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X'], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002000100000005000000000000008000000002"], 0x48}}, 0x44010) 22.883728ms ago: executing program 2 (id=2534): setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), 0x0, 0x835, 0x0) 0s ago: executing program 0 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="0e14f42abb4d1e9fafbafb", 0xb, 0x0, &(0x7f0000000380)={0x11, 0x8100, r2, 0x1, 0xdb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x633019276041e1cf}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {}, {@sysvgroups}, {@norecovery}, {@discard}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): a_isize 64870 [ 161.889391][ T29] audit: type=1326 audit(1769871658.399:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 161.913646][ T29] audit: type=1326 audit(1769871658.399:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 161.946093][T10091] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 161.946093][T10091] Q׿2:[kz' to dns_resolver key: bad/missing value [ 161.973008][ T29] audit: type=1326 audit(1769871658.459:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 161.996936][ T29] audit: type=1326 audit(1769871658.459:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 162.021766][ T29] audit: type=1326 audit(1769871658.459:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 162.045845][ T29] audit: type=1326 audit(1769871658.459:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 162.069766][ T29] audit: type=1326 audit(1769871658.479:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 162.094097][ T29] audit: type=1326 audit(1769871658.479:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 162.117572][ T29] audit: type=1326 audit(1769871658.479:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.1.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 162.177701][T10096] netlink: 'syz.1.1964': attribute type 2 has an invalid length. [ 162.397918][T10120] loop3: detected capacity change from 0 to 512 [ 162.409067][T10121] loop6: detected capacity change from 0 to 2048 [ 162.416963][T10117] netlink: 'syz.2.1972': attribute type 2 has an invalid length. [ 162.425515][T10121] ext4: Unknown parameter 'smackfsroot' [ 162.506343][T10120] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1973: corrupted inode contents [ 162.550144][T10120] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.1973: mark_inode_dirty error [ 162.578894][T10133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.631841][T10120] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1973: corrupted inode contents [ 162.654097][T10120] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1973: mark_inode_dirty error [ 162.664059][T10133] EXT4-fs (loop2): 1 truncate cleaned up [ 162.676867][T10133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.689607][T10120] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1973: Failed to acquire dquot type 0 [ 162.715448][T10120] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1973: corrupted inode contents [ 162.747304][T10120] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.1973: mark_inode_dirty error [ 162.777780][T10120] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1973: corrupted inode contents [ 162.803816][T10120] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1973: mark_inode_dirty error [ 162.817659][T10120] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1973: corrupted inode contents [ 162.854343][T10120] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 162.883294][T10120] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1973: corrupted inode contents [ 162.908877][T10120] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.1973: mark_inode_dirty error [ 162.928101][T10120] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 162.939217][T10120] EXT4-fs (loop3): 1 truncate cleaned up [ 162.948622][T10120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.952090][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.001038][T10120] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.072511][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.141066][T10178] FAULT_INJECTION: forcing a failure. [ 163.141066][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.154835][T10178] CPU: 1 UID: 0 PID: 10178 Comm: syz.1.1989 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.154940][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.154954][T10178] Call Trace: [ 163.154978][T10178] [ 163.154987][T10178] __dump_stack+0x1d/0x30 [ 163.155017][T10178] dump_stack_lvl+0x95/0xd0 [ 163.155043][T10178] dump_stack+0x15/0x1b [ 163.155063][T10178] should_fail_ex+0x263/0x280 [ 163.155114][T10178] should_fail+0xb/0x20 [ 163.155145][T10178] should_fail_usercopy+0x1a/0x20 [ 163.155241][T10178] _copy_from_user+0x1c/0xb0 [ 163.155262][T10178] kstrtouint_from_user+0x69/0xf0 [ 163.155299][T10178] proc_fail_nth_write+0x50/0x160 [ 163.155371][T10178] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.155430][T10178] vfs_write+0x269/0x9f0 [ 163.155454][T10178] ? __rcu_read_unlock+0x4e/0x70 [ 163.155488][T10178] ? __fget_files+0x184/0x1c0 [ 163.155512][T10178] ? mutex_lock+0x57/0x90 [ 163.155558][T10178] ksys_write+0xdc/0x1a0 [ 163.155578][T10178] __x64_sys_write+0x40/0x50 [ 163.155675][T10178] x64_sys_call+0x2847/0x3000 [ 163.155702][T10178] do_syscall_64+0xc0/0x2a0 [ 163.155745][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.155767][T10178] RIP: 0033:0x7fba1b45b78e [ 163.155787][T10178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.155810][T10178] RSP: 002b:00007fba19ef6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.155836][T10178] RAX: ffffffffffffffda RBX: 00007fba19ef76c0 RCX: 00007fba1b45b78e [ 163.155949][T10178] RDX: 0000000000000001 RSI: 00007fba19ef70a0 RDI: 0000000000000003 [ 163.155966][T10178] RBP: 00007fba19ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.155980][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.155992][T10178] R13: 00007fba1b716038 R14: 00007fba1b715fa0 R15: 00007ffc377bfa78 [ 163.156010][T10178] [ 163.397985][T10183] ip6tnl2: entered promiscuous mode [ 163.693439][T10195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.716662][T10195] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.915552][T10203] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1998: corrupted inode contents [ 163.966821][T10203] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.1998: mark_inode_dirty error [ 164.019630][T10203] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1998: corrupted inode contents [ 164.084835][T10203] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1998: mark_inode_dirty error [ 164.112671][T10203] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1998: Failed to acquire dquot type 0 [ 164.134502][T10203] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1998: corrupted inode contents [ 164.175285][T10203] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.1998: mark_inode_dirty error [ 164.216378][T10203] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1998: corrupted inode contents [ 164.242264][T10203] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1998: mark_inode_dirty error [ 164.275617][T10203] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1998: corrupted inode contents [ 164.315543][T10203] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 164.332033][T10203] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1998: corrupted inode contents [ 164.384537][T10203] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.1998: mark_inode_dirty error [ 164.418318][T10203] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 164.429875][T10203] EXT4-fs (loop3): 1 truncate cleaned up [ 164.436341][T10203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.463593][T10203] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.642501][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.659004][ T52] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 164.672884][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 164.685415][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.685415][ T52] [ 164.698010][ T52] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 164.726144][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 164.738566][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 164.738566][ T52] [ 164.773893][T10229] set_capacity_and_notify: 4 callbacks suppressed [ 164.773979][T10229] loop0: detected capacity change from 0 to 164 [ 164.811246][T10231] loop3: detected capacity change from 0 to 164 [ 164.875476][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.898973][T10224] __nla_validate_parse: 12 callbacks suppressed [ 164.898991][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2007'. [ 164.914919][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2007'. [ 164.979735][T10240] netlink: 'syz.2.2012': attribute type 2 has an invalid length. [ 164.987649][T10240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'. [ 165.059681][T10249] FAULT_INJECTION: forcing a failure. [ 165.059681][T10249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.072956][T10249] CPU: 1 UID: 0 PID: 10249 Comm: syz.6.2015 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.073019][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.073032][T10249] Call Trace: [ 165.073039][T10249] [ 165.073048][T10249] __dump_stack+0x1d/0x30 [ 165.073091][T10249] dump_stack_lvl+0x95/0xd0 [ 165.073117][T10249] dump_stack+0x15/0x1b [ 165.073220][T10249] should_fail_ex+0x263/0x280 [ 165.073263][T10249] should_fail+0xb/0x20 [ 165.073290][T10249] should_fail_usercopy+0x1a/0x20 [ 165.073370][T10249] _copy_from_user+0x1c/0xb0 [ 165.073397][T10249] ___sys_sendmsg+0xc1/0x1e0 [ 165.073456][T10249] __sys_sendmmsg+0x185/0x320 [ 165.073496][T10249] __x64_sys_sendmmsg+0x57/0x70 [ 165.073521][T10249] x64_sys_call+0x1e28/0x3000 [ 165.073550][T10249] do_syscall_64+0xc0/0x2a0 [ 165.073605][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.073629][T10249] RIP: 0033:0x7f2e8914aeb9 [ 165.073649][T10249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.073669][T10249] RSP: 002b:00007f2e87ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.073690][T10249] RAX: ffffffffffffffda RBX: 00007f2e893c5fa0 RCX: 00007f2e8914aeb9 [ 165.073741][T10249] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000009 [ 165.073757][T10249] RBP: 00007f2e87ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.073821][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.073834][T10249] R13: 00007f2e893c6038 R14: 00007f2e893c5fa0 R15: 00007fffe6b85058 [ 165.073855][T10249] [ 165.249580][T10252] loop1: detected capacity change from 0 to 136 [ 165.258679][T10252] iso9660: Unknown parameter 'chct' [ 165.314012][T10257] loop1: detected capacity change from 0 to 128 [ 165.340039][T10257] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.351906][T10260] syzkaller0: entered promiscuous mode [ 165.358002][T10260] syzkaller0: entered allmulticast mode [ 165.366037][T10257] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.415780][T10263] loop2: detected capacity change from 0 to 128 [ 165.458993][T10263] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.488947][T10263] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.768259][T10264] tipc: Cannot configure node identity twice [ 165.801711][T10271] netlink: 'syz.6.2023': attribute type 2 has an invalid length. [ 165.809601][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2023'. [ 166.052945][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.147650][ T2260] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.237411][T10302] loop1: detected capacity change from 0 to 164 [ 166.264120][T10304] loop6: detected capacity change from 0 to 512 [ 166.309441][T10304] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.316561][T10304] EXT4-fs: Ignoring removed bh option [ 166.327915][T10304] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 166.605630][T10324] loop1: detected capacity change from 0 to 512 [ 166.613436][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2035'. [ 166.622502][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2035'. [ 166.727547][T10324] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.2038: corrupted inode contents [ 166.746297][T10326] netlink: 'syz.6.2039': attribute type 2 has an invalid length. [ 166.754089][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2039'. [ 166.765616][T10324] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.2038: mark_inode_dirty error [ 166.812372][T10324] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.2038: corrupted inode contents [ 166.824920][T10324] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2038: mark_inode_dirty error [ 166.858810][T10324] __quota_error: 62 callbacks suppressed [ 166.858832][T10324] Quota error (device loop1): write_blk: dquota write failed [ 166.878823][T10324] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 166.889523][T10324] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2038: Failed to acquire dquot type 0 [ 166.915699][T10324] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2038: corrupted inode contents [ 166.931978][T10324] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.2038: mark_inode_dirty error [ 166.948096][T10324] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2038: corrupted inode contents [ 166.961030][T10324] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2038: mark_inode_dirty error [ 166.973628][T10324] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2038: corrupted inode contents [ 166.985811][T10324] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 166.994830][T10324] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2038: corrupted inode contents [ 167.007677][T10324] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.2038: mark_inode_dirty error [ 167.019326][T10324] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 167.028702][T10324] EXT4-fs (loop1): 1 truncate cleaned up [ 167.036112][T10324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.049193][T10324] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.078261][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.120001][T10332] loop0: detected capacity change from 0 to 128 [ 167.179309][T10332] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.221161][T10332] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.232997][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2043'. [ 167.294859][T10343] loop2: detected capacity change from 0 to 2048 [ 167.333872][T10343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.440772][T10343] FAULT_INJECTION: forcing a failure. [ 167.440772][T10343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.454547][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.2.2044 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.454657][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.454672][T10343] Call Trace: [ 167.454679][T10343] [ 167.454687][T10343] __dump_stack+0x1d/0x30 [ 167.454717][T10343] dump_stack_lvl+0x95/0xd0 [ 167.454792][T10343] dump_stack+0x15/0x1b [ 167.454814][T10343] should_fail_ex+0x263/0x280 [ 167.454888][T10343] should_fail+0xb/0x20 [ 167.454931][T10343] should_fail_usercopy+0x1a/0x20 [ 167.454964][T10343] _copy_to_user+0x20/0xa0 [ 167.455063][T10343] simple_read_from_buffer+0xb5/0x130 [ 167.455145][T10343] proc_fail_nth_read+0x10e/0x150 [ 167.455178][T10343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.455229][T10343] vfs_read+0x1ab/0x7f0 [ 167.455250][T10343] ? __rcu_read_unlock+0x4e/0x70 [ 167.455310][T10343] ? __fget_files+0x184/0x1c0 [ 167.455336][T10343] ? ldsem_up_read+0x8a/0xd0 [ 167.455374][T10343] ? mutex_lock+0x57/0x90 [ 167.455401][T10343] ksys_read+0xdc/0x1a0 [ 167.455494][T10343] __x64_sys_read+0x40/0x50 [ 167.455518][T10343] x64_sys_call+0x2889/0x3000 [ 167.455548][T10343] do_syscall_64+0xc0/0x2a0 [ 167.455676][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.455700][T10343] RIP: 0033:0x7f45b2f9b78e [ 167.455720][T10343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.455742][T10343] RSP: 002b:00007f45b1a15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.455766][T10343] RAX: ffffffffffffffda RBX: 00007f45b1a166c0 RCX: 00007f45b2f9b78e [ 167.455854][T10343] RDX: 000000000000000f RSI: 00007f45b1a160a0 RDI: 0000000000000007 [ 167.455870][T10343] RBP: 00007f45b1a16090 R08: 0000000000000000 R09: 0000000000000000 [ 167.455885][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.455915][T10343] R13: 00007f45b3256128 R14: 00007f45b3256090 R15: 00007ffc6e774418 [ 167.455940][T10343] [ 167.713505][ T29] audit: type=1400 audit(1769871664.224:2311): avc: denied { module_load } for pid=10360 comm="syz.1.2051" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 167.734011][T10332] tipc: Cannot configure node identity twice [ 167.752002][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.829455][T10367] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.2052: corrupted inode contents [ 167.851429][T10367] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #3: comm syz.2.2052: mark_inode_dirty error [ 167.864282][T10367] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.2052: corrupted inode contents [ 167.877848][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2049'. [ 167.886874][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2049'. [ 167.940100][T10367] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2052: mark_inode_dirty error [ 167.951877][T10367] Quota error (device loop2): write_blk: dquota write failed [ 167.960271][T10367] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 167.989839][T10367] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2052: Failed to acquire dquot type 0 [ 168.117811][T10367] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.2052: corrupted inode contents [ 168.147135][T10387] netlink: 'syz.6.2057': attribute type 2 has an invalid length. [ 168.176448][T10367] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.2052: mark_inode_dirty error [ 168.258082][T10367] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.2052: corrupted inode contents [ 168.344382][T10367] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2052: mark_inode_dirty error [ 168.433500][T10367] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.2052: corrupted inode contents [ 168.459060][T10367] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 168.469111][T10367] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.2052: corrupted inode contents [ 168.486148][T10367] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.2052: mark_inode_dirty error [ 168.501009][T10367] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 168.512771][T10367] EXT4-fs (loop2): 1 truncate cleaned up [ 168.518907][T10367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.532294][T10367] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.571061][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.595725][T10397] EXT4-fs: Ignoring removed orlov option [ 168.615987][T10397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.752784][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.900118][T10411] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.952010][T10411] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.254777][T10421] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 169.370960][T10418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.382165][ T29] audit: type=1400 audit(1769871665.884:2312): avc: denied { listen } for pid=10424 comm="syz.0.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.494188][T10437] EXT4-fs: Ignoring removed orlov option [ 169.552163][T10437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.585845][ T29] audit: type=1400 audit(1769871666.104:2313): avc: denied { lock } for pid=10444 comm="syz.1.2077" path="socket:[27836]" dev="sockfs" ino=27836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.586594][T10448] ./file0: Can't open blockdev [ 169.610902][ T29] audit: type=1400 audit(1769871666.104:2314): avc: denied { mounton } for pid=10444 comm="syz.1.2077" path="/474/file0" dev="tmpfs" ino=2569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.660848][T10418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.682070][T10448] syzkaller0: entered promiscuous mode [ 169.687656][T10448] syzkaller0: entered allmulticast mode [ 169.714562][T10418] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.743831][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.816972][T10455] set_capacity_and_notify: 7 callbacks suppressed [ 169.816993][T10455] loop1: detected capacity change from 0 to 128 [ 169.829867][ T29] audit: type=1326 audit(1769871666.334:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8914aeb9 code=0x7ffc0000 [ 169.854180][ T29] audit: type=1326 audit(1769871666.334:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8914aeb9 code=0x7ffc0000 [ 169.881682][T10455] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 169.891202][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.962554][T10462] loop2: detected capacity change from 0 to 164 [ 169.981160][T10427] loop0: detected capacity change from 0 to 512 [ 169.988079][T10465] loop3: detected capacity change from 0 to 512 [ 170.012154][T10466] loop6: detected capacity change from 0 to 1024 [ 170.025423][T10427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.040859][T10466] EXT4-fs: Ignoring removed bh option [ 170.054909][T10465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.055471][T10466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.069964][T10468] dummy0: entered promiscuous mode [ 170.142068][T10465] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.170006][T10468] macsec1: entered allmulticast mode [ 170.177921][T10468] dummy0: entered allmulticast mode [ 170.185717][ T7269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.212751][T10478] __nla_validate_parse: 7 callbacks suppressed [ 170.212772][T10478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2089'. [ 170.220615][T10468] dummy0: left allmulticast mode [ 170.232958][T10468] dummy0: left promiscuous mode [ 170.291405][T10427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.304221][T10482] netlink: 143700 bytes leftover after parsing attributes in process `syz.2.2089'. [ 170.312699][T10486] loop6: detected capacity change from 0 to 512 [ 170.321538][T10465] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.2085: corrupted inode contents [ 170.336221][T10427] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.354843][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.2090: corrupted inode contents [ 170.372760][T10465] EXT4-fs (loop3): Remounting filesystem read-only [ 170.382560][T10465] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 170.407514][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.417551][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.422439][T10486] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.2090: mark_inode_dirty error [ 170.447195][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.2090: corrupted inode contents [ 170.473932][T10486] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2090: mark_inode_dirty error [ 170.486234][T10486] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2090: Failed to acquire dquot type 0 [ 170.498592][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2090: corrupted inode contents [ 170.507866][T10494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20097 sclass=netlink_route_socket pid=10494 comm=syz.3.2093 [ 170.518641][T10495] loop2: detected capacity change from 0 to 128 [ 170.530887][T10486] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.2090: mark_inode_dirty error [ 170.542740][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2090: corrupted inode contents [ 170.557946][T10495] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 170.569162][T10494] tipc: Enabling of bearer rejected, failed to enable media [ 170.576001][T10486] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2090: mark_inode_dirty error [ 170.627842][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2090: corrupted inode contents [ 170.683958][T10486] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 170.702989][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2090: corrupted inode contents [ 170.721310][T10486] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.2090: mark_inode_dirty error [ 170.756769][T10516] loop3: detected capacity change from 0 to 2048 [ 170.764079][T10486] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 170.779598][T10486] EXT4-fs (loop6): 1 truncate cleaned up [ 170.789394][T10486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.804505][T10516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.816283][T10486] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.843007][ T7269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.853806][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.863338][T10511] loop2: detected capacity change from 0 to 736 [ 170.867977][T10511] iso9660: Unexpected value for 'hide' [ 170.891070][T10511] IPv6: sit2: Disabled Multicast RS [ 171.034895][T10527] loop1: detected capacity change from 0 to 1024 [ 171.052171][T10527] EXT4-fs: Ignoring removed orlov option [ 171.100698][T10527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.136403][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 171.145547][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2101'. [ 171.204995][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.217403][T10534] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 171.237841][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'. [ 171.362328][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 171.679610][T10567] EXT4-fs: Ignoring removed orlov option [ 171.714005][T10565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.733109][T10567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.844538][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.003027][T10579] FAULT_INJECTION: forcing a failure. [ 172.003027][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.016184][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.1.2117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.016272][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.016288][T10579] Call Trace: [ 172.016296][T10579] [ 172.016305][T10579] __dump_stack+0x1d/0x30 [ 172.016330][T10579] dump_stack_lvl+0x95/0xd0 [ 172.016419][T10579] dump_stack+0x15/0x1b [ 172.016439][T10579] should_fail_ex+0x263/0x280 [ 172.016471][T10579] should_fail+0xb/0x20 [ 172.016572][T10579] should_fail_usercopy+0x1a/0x20 [ 172.016603][T10579] _copy_to_user+0x20/0xa0 [ 172.016629][T10579] simple_read_from_buffer+0xb5/0x130 [ 172.016732][T10579] proc_fail_nth_read+0x10e/0x150 [ 172.016765][T10579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.016797][T10579] vfs_read+0x1ab/0x7f0 [ 172.016818][T10579] ? __rcu_read_unlock+0x4e/0x70 [ 172.016847][T10579] ? __fget_files+0x184/0x1c0 [ 172.016909][T10579] ? mutex_lock+0x57/0x90 [ 172.016994][T10579] ksys_read+0xdc/0x1a0 [ 172.017024][T10579] __x64_sys_read+0x40/0x50 [ 172.017043][T10579] x64_sys_call+0x2889/0x3000 [ 172.017146][T10579] do_syscall_64+0xc0/0x2a0 [ 172.017241][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.017267][T10579] RIP: 0033:0x7fba1b45b78e [ 172.017288][T10579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.017332][T10579] RSP: 002b:00007fba19ed5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.017368][T10579] RAX: ffffffffffffffda RBX: 00007fba19ed66c0 RCX: 00007fba1b45b78e [ 172.017382][T10579] RDX: 000000000000000f RSI: 00007fba19ed60a0 RDI: 0000000000000007 [ 172.017395][T10579] RBP: 00007fba19ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.017409][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.017486][T10579] R13: 00007fba1b716128 R14: 00007fba1b716090 R15: 00007ffc377bfa78 [ 172.017509][T10579] [ 172.345765][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.486840][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 172.613475][T10593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.625556][T10592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.683434][T10593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.802388][T10593] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.897271][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.992959][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2126'. [ 173.051686][T10591] -1: renamed from syzkaller0 [ 173.102914][T10591] program syz.0.2125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.137694][T10581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.315545][T10581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.335419][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 173.335492][ T29] audit: type=1326 audit(1769871669.854:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.365489][ T29] audit: type=1326 audit(1769871669.854:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.389073][ T29] audit: type=1326 audit(1769871669.854:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.412638][ T29] audit: type=1326 audit(1769871669.854:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.443907][T10581] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.452366][T10610] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 173.452366][T10610] Q׿2:[kz' to dns_resolver key: bad/missing value [ 173.466959][ T29] audit: type=1326 audit(1769871669.934:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.493674][ T29] audit: type=1326 audit(1769871669.954:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.520864][ T29] audit: type=1326 audit(1769871670.034:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.544471][ T29] audit: type=1326 audit(1769871670.034:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.657690][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.712991][ T29] audit: type=1326 audit(1769871670.074:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.736598][ T29] audit: type=1326 audit(1769871670.074:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10609 comm="syz.2.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 173.803162][T10624] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 173.947802][T10633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.958183][T10633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.978959][T10635] netlink: 'syz.2.2139': attribute type 2 has an invalid length. [ 173.987394][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2139'. [ 174.033606][T10633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.043953][T10633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.123582][T10633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.134025][T10633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.230327][T10633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.240751][T10633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.343812][ T2260] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.352154][ T2260] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.374885][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2136'. [ 174.380912][ T2260] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.392274][ T2260] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.437342][T10653] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 174.437342][T10653] Q׿2:[kz' to dns_resolver key: bad/missing value [ 174.542744][ T2260] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.551058][ T2260] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.579700][ T2260] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.587980][ T2260] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.667507][T10662] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.726336][T10669] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.778894][T10675] netlink: 'syz.6.2150': attribute type 4 has an invalid length. [ 174.810680][T10669] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.832344][T10679] netlink: 'syz.6.2150': attribute type 4 has an invalid length. [ 174.841717][T10669] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.2148: lblock 3 mapped to illegal pblock 3 (length 3) [ 174.861792][T10669] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 174.874375][T10669] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.874375][T10669] [ 174.918521][T10683] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.2148: lblock 0 mapped to illegal pblock 0 (length 1) [ 174.942035][T10675] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 174.981731][ T12] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 174.999692][T10684] lo speed is unknown, defaulting to 1000 [ 175.017071][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 175.030573][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 175.030573][ T12] [ 175.059387][ T2113] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 175.098745][ T2113] EXT4-fs (loop0): Remounting filesystem read-only [ 175.118541][T10691] set_capacity_and_notify: 11 callbacks suppressed [ 175.118559][T10691] loop3: detected capacity change from 0 to 512 [ 175.142066][T10691] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.151399][T10691] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 175.170071][T10691] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 175.179518][T10691] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 175.206591][T10691] System zones: 0-2, 18-18, 34-35 [ 175.225190][T10694] loop0: detected capacity change from 0 to 512 [ 175.254063][T10694] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2153: corrupted inode contents [ 175.294121][T10694] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.2153: mark_inode_dirty error [ 175.310369][T10694] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2153: corrupted inode contents [ 175.326484][T10694] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2153: mark_inode_dirty error [ 175.340031][T10694] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2153: Failed to acquire dquot type 0 [ 175.361476][T10694] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2153: corrupted inode contents [ 175.376046][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2155'. [ 175.377362][T10694] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.2153: mark_inode_dirty error [ 175.397082][T10694] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2153: corrupted inode contents [ 175.412247][T10694] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2153: mark_inode_dirty error [ 175.414734][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2156'. [ 175.423748][T10694] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2153: corrupted inode contents [ 175.444864][T10694] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 175.453619][T10694] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2153: corrupted inode contents [ 175.468558][T10694] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.2153: mark_inode_dirty error [ 175.479473][T10705] loop3: detected capacity change from 0 to 2048 [ 175.479974][T10694] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 175.496759][T10694] EXT4-fs (loop0): 1 truncate cleaned up [ 175.505691][T10694] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.563388][ T3303] Alternate GPT is invalid, using primary GPT. [ 175.569904][ T3303] loop3: p2 p3 p7 [ 175.590987][T10705] Alternate GPT is invalid, using primary GPT. [ 175.597374][T10705] loop3: p2 p3 p7 [ 175.632964][T10705] loop6: detected capacity change from 0 to 7 [ 175.671889][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2162'. [ 175.695545][ T5457] udevd[5457]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 175.708762][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 175.720351][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 175.741796][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 175.743698][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 175.766173][ T5457] udevd[5457]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 175.790011][T10721] bond1: option lacp_rate: invalid value (79) [ 175.837782][T10721] bond1 (unregistering): Released all slaves [ 176.358315][T10733] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 176.358315][T10733] Q׿2:[kz' to dns_resolver key: bad/missing value [ 176.479872][T10737] netlink: 'syz.6.2167': attribute type 2 has an invalid length. [ 176.487909][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2167'. [ 176.569959][T10744] loop6: detected capacity change from 0 to 1024 [ 176.578928][T10744] EXT4-fs: Ignoring removed orlov option [ 176.614929][T10749] lo speed is unknown, defaulting to 1000 [ 176.629597][T10751] FAULT_INJECTION: forcing a failure. [ 176.629597][T10751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.642832][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.6.2171 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.642866][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.642879][T10751] Call Trace: [ 176.642886][T10751] [ 176.642894][T10751] __dump_stack+0x1d/0x30 [ 176.643019][T10751] dump_stack_lvl+0x95/0xd0 [ 176.643045][T10751] dump_stack+0x15/0x1b [ 176.643070][T10751] should_fail_ex+0x263/0x280 [ 176.643106][T10751] should_fail+0xb/0x20 [ 176.643182][T10751] should_fail_usercopy+0x1a/0x20 [ 176.643220][T10751] _copy_from_user+0x1c/0xb0 [ 176.643260][T10751] __copy_msghdr+0x244/0x300 [ 176.643286][T10751] ___sys_sendmsg+0x10c/0x1e0 [ 176.643324][T10751] __sys_sendmmsg+0x185/0x320 [ 176.643353][T10751] __x64_sys_sendmmsg+0x57/0x70 [ 176.643374][T10751] x64_sys_call+0x1e28/0x3000 [ 176.643415][T10751] do_syscall_64+0xc0/0x2a0 [ 176.643447][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.643475][T10751] RIP: 0033:0x7f2e8914aeb9 [ 176.643496][T10751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.643529][T10751] RSP: 002b:00007f2e87ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.643554][T10751] RAX: ffffffffffffffda RBX: 00007f2e893c5fa0 RCX: 00007f2e8914aeb9 [ 176.643568][T10751] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 176.643584][T10751] RBP: 00007f2e87ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.643598][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.643632][T10751] R13: 00007f2e893c6038 R14: 00007f2e893c5fa0 R15: 00007fffe6b85058 [ 176.643652][T10751] [ 176.851921][T10755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2173'. [ 176.898589][ T3576] hid_parser_main: 1 callbacks suppressed [ 176.898609][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.911969][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.919479][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.926963][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.934421][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.942043][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.949520][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.957073][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.964663][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.972147][ T3576] hid-generic 0103:0004:0000.000E: unknown main item tag 0x0 [ 176.985725][ T3576] hid-generic 0103:0004:0000.000E: hidraw0: HID v0.02 Device [syz0] on syz1 [ 177.008620][T10759] FAULT_INJECTION: forcing a failure. [ 177.008620][T10759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.011458][T10762] fido_id[10762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.021872][T10759] CPU: 1 UID: 0 PID: 10759 Comm: syz.3.2174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.021902][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.021916][T10759] Call Trace: [ 177.021924][T10759] [ 177.021933][T10759] __dump_stack+0x1d/0x30 [ 177.021961][T10759] dump_stack_lvl+0x95/0xd0 [ 177.022091][T10759] dump_stack+0x15/0x1b [ 177.022112][T10759] should_fail_ex+0x263/0x280 [ 177.022145][T10759] should_fail+0xb/0x20 [ 177.022210][T10759] should_fail_usercopy+0x1a/0x20 [ 177.022317][T10759] _copy_to_user+0x20/0xa0 [ 177.022340][T10759] uhid_char_read+0x291/0x3c0 [ 177.022364][T10759] ? __pfx_uhid_char_read+0x10/0x10 [ 177.022450][T10759] vfs_readv+0x432/0x6e0 [ 177.022508][T10759] ? __pfx_uhid_char_read+0x10/0x10 [ 177.022536][T10759] do_readv+0xe9/0x210 [ 177.022564][T10759] __x64_sys_readv+0x45/0x50 [ 177.022587][T10759] x64_sys_call+0x2831/0x3000 [ 177.022658][T10759] do_syscall_64+0xc0/0x2a0 [ 177.022732][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.022756][T10759] RIP: 0033:0x7f518819aeb9 [ 177.022782][T10759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.022808][T10759] RSP: 002b:00007f5186bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 177.022831][T10759] RAX: ffffffffffffffda RBX: 00007f5188415fa0 RCX: 00007f518819aeb9 [ 177.022847][T10759] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 177.022861][T10759] RBP: 00007f5186bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.022875][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.022889][T10759] R13: 00007f5188416038 R14: 00007f5188415fa0 R15: 00007ffd496c6dd8 [ 177.022978][T10759] [ 177.148501][ T23] hid-generic 0103:0004:0000.000F: hidraw0: HID v0.02 Device [syz0] on syz1 [ 177.248579][T10768] fido_id[10768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.278902][ T3576] hid-generic 0103:0004:0000.0010: hidraw0: HID v0.02 Device [syz0] on syz1 [ 177.599780][T10658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.664438][T10779] dummy0: entered promiscuous mode [ 177.682335][T10779] macsec1: entered allmulticast mode [ 177.699112][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2179'. [ 177.699977][T10779] dummy0: entered allmulticast mode [ 177.719721][T10779] dummy0: left allmulticast mode [ 177.725429][T10779] dummy0: left promiscuous mode [ 177.763224][T10781] loop2: detected capacity change from 0 to 1024 [ 177.770367][T10781] EXT4-fs: Ignoring removed orlov option [ 177.777118][T10788] loop6: detected capacity change from 0 to 1024 [ 177.793921][T10788] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.853253][T10798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2184'. [ 177.961808][T10806] loop2: detected capacity change from 0 to 1024 [ 177.973908][T10811] FAULT_INJECTION: forcing a failure. [ 177.973908][T10811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.987052][T10811] CPU: 1 UID: 0 PID: 10811 Comm: syz.0.2189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.987133][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.987148][T10811] Call Trace: [ 177.987156][T10811] [ 177.987165][T10811] __dump_stack+0x1d/0x30 [ 177.987196][T10811] dump_stack_lvl+0x95/0xd0 [ 177.987228][T10811] dump_stack+0x15/0x1b [ 177.987277][T10811] should_fail_ex+0x263/0x280 [ 177.987314][T10811] should_fail+0xb/0x20 [ 177.987347][T10811] should_fail_usercopy+0x1a/0x20 [ 177.987508][T10811] strncpy_from_user+0x27/0x250 [ 177.987597][T10811] getname_flags+0xad/0x3b0 [ 177.987624][T10811] __se_sys_newstat+0x48/0x3f0 [ 177.987718][T10811] ? mutex_lock+0x57/0x90 [ 177.987746][T10811] ? mutex_unlock+0x4e/0x90 [ 177.987773][T10811] ? fput+0x8f/0xc0 [ 177.987801][T10811] ? ksys_write+0x194/0x1a0 [ 177.987874][T10811] __x64_sys_newstat+0x31/0x40 [ 177.987904][T10811] x64_sys_call+0x7c4/0x3000 [ 177.987975][T10811] do_syscall_64+0xc0/0x2a0 [ 177.988042][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.988067][T10811] RIP: 0033:0x7fec5a38aeb9 [ 177.988086][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.988175][T10811] RSP: 002b:00007fec58de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 177.988202][T10811] RAX: ffffffffffffffda RBX: 00007fec5a605fa0 RCX: 00007fec5a38aeb9 [ 177.988269][T10811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000980 [ 177.988284][T10811] RBP: 00007fec58de7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.988298][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.988310][T10811] R13: 00007fec5a606038 R14: 00007fec5a605fa0 R15: 00007fff56bcb548 [ 177.988330][T10811] [ 178.176391][T10806] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.232326][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 178.324156][T10826] loop6: detected capacity change from 0 to 1024 [ 178.344192][T10832] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.2197'. [ 178.353482][T10832] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.2197'. [ 178.409410][T10840] loop0: detected capacity change from 0 to 736 [ 178.425969][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 178.425989][ T29] audit: type=1400 audit(1769871674.938:2525): avc: denied { mount } for pid=10839 comm="syz.0.2201" name="/" dev="loop0" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 178.471019][ T29] audit: type=1400 audit(1769871674.978:2526): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 178.471779][T10826] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.510130][T10845] FAULT_INJECTION: forcing a failure. [ 178.510130][T10845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.524018][T10845] CPU: 1 UID: 0 PID: 10845 Comm: syz.0.2202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.524122][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.524138][T10845] Call Trace: [ 178.524147][T10845] [ 178.524157][T10845] __dump_stack+0x1d/0x30 [ 178.524247][T10845] dump_stack_lvl+0x95/0xd0 [ 178.524272][T10845] dump_stack+0x15/0x1b [ 178.524297][T10845] should_fail_ex+0x263/0x280 [ 178.524333][T10845] should_fail+0xb/0x20 [ 178.524418][T10845] should_fail_usercopy+0x1a/0x20 [ 178.524491][T10845] _copy_from_user+0x1c/0xb0 [ 178.524551][T10845] memdup_user+0x5e/0xd0 [ 178.524576][T10845] sctp_getsockopt_connectx3+0x1b2/0x340 [ 178.524616][T10845] sctp_getsockopt+0x910/0xaa0 [ 178.524656][T10845] sock_common_getsockopt+0x60/0x70 [ 178.524685][T10845] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 178.524772][T10845] do_sock_getsockopt+0x1c4/0x210 [ 178.524807][T10845] __x64_sys_getsockopt+0x11d/0x1a0 [ 178.524908][T10845] x64_sys_call+0x2dc7/0x3000 [ 178.524937][T10845] do_syscall_64+0xc0/0x2a0 [ 178.524974][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.525002][T10845] RIP: 0033:0x7fec5a38aeb9 [ 178.525020][T10845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.525092][T10845] RSP: 002b:00007fec58de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 178.525115][T10845] RAX: ffffffffffffffda RBX: 00007fec5a605fa0 RCX: 00007fec5a38aeb9 [ 178.525131][T10845] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 178.525147][T10845] RBP: 00007fec58de7090 R08: 00002000000007c0 R09: 0000000000000000 [ 178.525164][T10845] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.525180][T10845] R13: 00007fec5a606038 R14: 00007fec5a605fa0 R15: 00007fff56bcb548 [ 178.525259][T10845] [ 178.815538][T10852] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.923334][T10866] sch_fq: defrate 4294967295 ignored. [ 179.006188][T10871] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2209: invalid indirect mapped block 256 (level 2) [ 179.070999][T10871] EXT4-fs (loop6): 2 truncates cleaned up [ 179.086638][T10881] FAULT_INJECTION: forcing a failure. [ 179.086638][T10881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.100118][T10881] CPU: 1 UID: 0 PID: 10881 Comm: syz.2.2213 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.100207][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.100222][T10881] Call Trace: [ 179.100230][T10881] [ 179.100241][T10881] __dump_stack+0x1d/0x30 [ 179.100271][T10881] dump_stack_lvl+0x95/0xd0 [ 179.100321][T10881] dump_stack+0x15/0x1b [ 179.100341][T10881] should_fail_ex+0x263/0x280 [ 179.100372][T10881] should_fail_alloc_page+0xf2/0x100 [ 179.100401][T10881] __alloc_frozen_pages_noprof+0x108/0x350 [ 179.100483][T10881] alloc_pages_mpol+0xb3/0x260 [ 179.100512][T10881] ? css_rstat_updated+0xbb/0x280 [ 179.100546][T10881] vma_alloc_folio_noprof+0x1a9/0x300 [ 179.100637][T10881] handle_mm_fault+0x111f/0x3030 [ 179.100709][T10881] ? mt_find+0x291/0x3b0 [ 179.100783][T10881] do_user_addr_fault+0x3fd/0x1050 [ 179.100819][T10881] exc_page_fault+0x62/0xa0 [ 179.100847][T10881] asm_exc_page_fault+0x26/0x30 [ 179.100868][T10881] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 179.100892][T10881] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 179.100978][T10881] RSP: 0018:ffffc90001a779d8 EFLAGS: 00050206 [ 179.100999][T10881] RAX: ffff88810b481b10 RBX: ffffc90001a77e80 RCX: 0000000000000b5c [ 179.101095][T10881] RDX: 0000000000000000 RSI: ffff88810a860340 RDI: 000020000000b000 [ 179.101112][T10881] RBP: 0000000000000000 R08: 0000000000000e48 R09: 0000000000000000 [ 179.101128][T10881] R10: 000188810a860000 R11: 000188810a860e9b R12: ffffc90001a77e68 [ 179.101146][T10881] R13: 0000000000000e9c R14: 0000000000000e9c R15: 0000000000000e9c [ 179.101169][T10881] _copy_to_iter+0x2df/0xea0 [ 179.101251][T10881] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 179.101272][T10881] __skb_datagram_iter+0xc6/0x680 [ 179.101369][T10881] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 179.101394][T10881] skb_copy_datagram_iter+0x3d/0x100 [ 179.101418][T10881] netlink_recvmsg+0x1a8/0x550 [ 179.101441][T10881] ? __pfx_netlink_recvmsg+0x10/0x10 [ 179.101461][T10881] sock_recvmsg+0x139/0x160 [ 179.101545][T10881] ____sys_recvmsg+0xf5/0x280 [ 179.101627][T10881] ___sys_recvmsg+0x11f/0x3b0 [ 179.101655][T10881] __x64_sys_recvmsg+0xd1/0x160 [ 179.101702][T10881] x64_sys_call+0x2cbf/0x3000 [ 179.101730][T10881] do_syscall_64+0xc0/0x2a0 [ 179.101765][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.101791][T10881] RIP: 0033:0x7f45b2fdaeb9 [ 179.101889][T10881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.101973][T10881] RSP: 002b:00007f45b1a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 179.101995][T10881] RAX: ffffffffffffffda RBX: 00007f45b3255fa0 RCX: 00007f45b2fdaeb9 [ 179.102011][T10881] RDX: 0000000000000020 RSI: 000020000000c1c0 RDI: 0000000000000003 [ 179.102026][T10881] RBP: 00007f45b1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 179.102054][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.102069][T10881] R13: 00007f45b3256038 R14: 00007f45b3255fa0 R15: 00007ffc6e774418 [ 179.102092][T10881] [ 179.555215][ T29] audit: type=1326 audit(1769871676.068:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.601149][ T29] audit: type=1326 audit(1769871676.068:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.624701][ T29] audit: type=1326 audit(1769871676.068:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.648406][ T29] audit: type=1326 audit(1769871676.068:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.671998][ T29] audit: type=1326 audit(1769871676.068:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.695504][ T29] audit: type=1326 audit(1769871676.068:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.719332][ T29] audit: type=1326 audit(1769871676.068:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 179.742922][ T29] audit: type=1326 audit(1769871676.068:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba1b45b78e code=0x7ffc0000 [ 179.767762][T10896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.768553][T10895] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.803766][T10890] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.824284][T10896] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.891881][T10883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.921605][T10883] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.050574][ T2673] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.061320][ T2673] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.097427][T10908] sch_fq: defrate 4294967295 ignored. [ 180.145611][ T2673] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.156025][ T2673] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.169541][T10917] set_capacity_and_notify: 6 callbacks suppressed [ 180.169623][T10917] loop2: detected capacity change from 0 to 8192 [ 180.684237][T10926] lo speed is unknown, defaulting to 1000 [ 180.776601][ T2673] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.788001][ T2673] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.908982][T10951] loop3: detected capacity change from 0 to 1024 [ 180.916687][ T2673] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.927043][ T2673] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.955297][T10926] chnl_net:caif_netlink_parms(): no params data found [ 181.031979][T10951] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.044258][T10956] loop2: detected capacity change from 0 to 1024 [ 181.086424][T10956] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.105864][T10966] __nla_validate_parse: 8 callbacks suppressed [ 181.105897][T10966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2234'. [ 181.135384][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.143224][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.150493][T10926] bridge_slave_0: entered allmulticast mode [ 181.157590][T10926] bridge_slave_0: entered promiscuous mode [ 181.187177][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2232'. [ 181.216017][T10962] lo speed is unknown, defaulting to 1000 [ 181.222330][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.229502][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.268193][T10926] bridge_slave_1: entered allmulticast mode [ 181.293552][T10926] bridge_slave_1: entered promiscuous mode [ 181.371806][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.382908][T10968] lo speed is unknown, defaulting to 1000 [ 181.412592][T10975] FAULT_INJECTION: forcing a failure. [ 181.412592][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.425852][T10975] CPU: 0 UID: 0 PID: 10975 Comm: syz.3.2237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.425886][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.425900][T10975] Call Trace: [ 181.425908][T10975] [ 181.425925][T10975] __dump_stack+0x1d/0x30 [ 181.425954][T10975] dump_stack_lvl+0x95/0xd0 [ 181.426033][T10975] dump_stack+0x15/0x1b [ 181.426056][T10975] should_fail_ex+0x263/0x280 [ 181.426091][T10975] should_fail+0xb/0x20 [ 181.426123][T10975] should_fail_usercopy+0x1a/0x20 [ 181.426165][T10975] _copy_from_user+0x1c/0xb0 [ 181.426189][T10975] ___sys_sendmsg+0xc1/0x1e0 [ 181.426222][T10975] __x64_sys_sendmsg+0xd4/0x160 [ 181.426256][T10975] x64_sys_call+0x17ba/0x3000 [ 181.426336][T10975] do_syscall_64+0xc0/0x2a0 [ 181.426371][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.426396][T10975] RIP: 0033:0x7f518819aeb9 [ 181.426464][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.426564][T10975] RSP: 002b:00007f5186bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.426588][T10975] RAX: ffffffffffffffda RBX: 00007f5188415fa0 RCX: 00007f518819aeb9 [ 181.426666][T10975] RDX: 0000000000000098 RSI: 0000200000000040 RDI: 0000000000000003 [ 181.426681][T10975] RBP: 00007f5186bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.426703][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.426760][T10975] R13: 00007f5188416038 R14: 00007f5188415fa0 R15: 00007ffd496c6dd8 [ 181.426781][T10975] [ 181.606130][T10984] loop2: detected capacity change from 0 to 8192 [ 181.885376][ T2673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.905035][ T2673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.917933][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 181.935413][ T2673] bond0 (unregistering): Released all slaves [ 181.960625][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.994469][T10999] sch_fq: defrate 4294967295 ignored. [ 182.012524][T10926] team0: Port device team_slave_0 added [ 182.018286][ T2673] tipc: Left network mode [ 182.045901][T11003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2242'. [ 182.080035][ T2673] hsr_slave_0: left promiscuous mode [ 182.086280][ T2673] hsr_slave_1: left promiscuous mode [ 182.095232][ T2673] veth1_macvtap: left promiscuous mode [ 182.100921][ T2673] veth0_macvtap: left promiscuous mode [ 182.106683][ T2673] veth1_vlan: left promiscuous mode [ 182.111914][T11008] loop2: detected capacity change from 0 to 1024 [ 182.112125][ T2673] veth0_vlan: left promiscuous mode [ 182.121342][T11008] EXT4-fs: Ignoring removed orlov option [ 182.162896][T11011] loop3: detected capacity change from 0 to 1024 [ 182.186070][T11011] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.198743][ T2673] team0 (unregistering): Port device team_slave_1 removed [ 182.208392][ T2673] team0 (unregistering): Port device team_slave_0 removed [ 182.237417][T10926] team0: Port device team_slave_1 added [ 182.320551][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.327649][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.353807][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.366770][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.373835][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.399862][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.416453][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2246'. [ 182.442624][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 182.444438][T10926] hsr_slave_0: entered promiscuous mode [ 182.461319][T10926] hsr_slave_1: entered promiscuous mode [ 182.467585][T10926] debugfs: 'hsr0' already exists in 'hsr' [ 182.471416][T11031] loop2: detected capacity change from 0 to 512 [ 182.473369][T10926] Cannot create hsr debugfs directory [ 182.545408][T11033] loop3: detected capacity change from 0 to 128 [ 182.597381][T11033] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.597787][T11031] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2246: bg 0: block 248: padding at end of block bitmap is not set [ 182.669071][T11031] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2246: Failed to acquire dquot type 1 [ 182.672957][T11033] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.711999][T11031] EXT4-fs (loop2): 1 truncate cleaned up [ 182.731813][T11031] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.745524][T10926] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 182.767588][T10926] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 182.784486][T10926] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.806660][T11047] loop1: detected capacity change from 0 to 8192 [ 182.815343][T10926] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.976776][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.988511][T11064] loop1: detected capacity change from 0 to 2048 [ 183.019399][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.045480][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.052640][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.074320][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.081571][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.211391][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.340607][T11098] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 183.427781][ T52] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.518706][T11119] lo speed is unknown, defaulting to 1000 [ 183.527852][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'. [ 183.546020][T11126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11126 comm=syz.1.2257 [ 183.561703][T11127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2258'. [ 183.624724][T11132] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 183.640753][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 183.640837][ T29] audit: type=1400 audit(1769871680.148:2559): avc: denied { getopt } for pid=11133 comm="syz.2.2261" lport=45633 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 183.648243][T10926] veth0_vlan: entered promiscuous mode [ 183.755693][T10926] veth1_vlan: entered promiscuous mode [ 183.783309][T10926] veth0_macvtap: entered promiscuous mode [ 183.797280][T10926] veth1_macvtap: entered promiscuous mode [ 183.809845][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.827854][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.847455][T11146] 9p: Bad value for 'rfdno' [ 183.858297][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.871799][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.902369][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.905313][ T29] audit: type=1400 audit(1769871680.418:2560): avc: denied { mount } for pid=10926 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.930323][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.944526][T11151] netlink: 'syz.1.2266': attribute type 2 has an invalid length. [ 183.952462][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2266'. [ 183.993969][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2225'. [ 184.169902][T11168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=11168 comm=syz.1.2269 [ 184.243608][T11172] FAULT_INJECTION: forcing a failure. [ 184.243608][T11172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.256803][T11172] CPU: 1 UID: 0 PID: 11172 Comm: syz.1.2270 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.256844][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.256860][T11172] Call Trace: [ 184.256867][T11172] [ 184.256875][T11172] __dump_stack+0x1d/0x30 [ 184.256925][T11172] dump_stack_lvl+0x95/0xd0 [ 184.256946][T11172] dump_stack+0x15/0x1b [ 184.256988][T11172] should_fail_ex+0x263/0x280 [ 184.257065][T11172] should_fail+0xb/0x20 [ 184.257097][T11172] should_fail_usercopy+0x1a/0x20 [ 184.257130][T11172] _copy_from_user+0x1c/0xb0 [ 184.257152][T11172] ___sys_sendmsg+0xc1/0x1e0 [ 184.257219][T11172] __x64_sys_sendmsg+0xd4/0x160 [ 184.257254][T11172] x64_sys_call+0x17ba/0x3000 [ 184.257329][T11172] do_syscall_64+0xc0/0x2a0 [ 184.257364][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.257408][T11172] RIP: 0033:0x7fba1b49aeb9 [ 184.257428][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.257448][T11172] RSP: 002b:00007fba19ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.257500][T11172] RAX: ffffffffffffffda RBX: 00007fba1b715fa0 RCX: 00007fba1b49aeb9 [ 184.257518][T11172] RDX: 0000000000000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 184.257763][T11172] RBP: 00007fba19ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.257779][T11172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.257858][T11172] R13: 00007fba1b716038 R14: 00007fba1b715fa0 R15: 00007ffc377bfa78 [ 184.257933][T11172] [ 184.453073][T11174] netlink: 'syz.1.2271': attribute type 2 has an invalid length. [ 184.610277][T11182] netlink: 'syz.3.2273': attribute type 2 has an invalid length. [ 184.670818][T11166] netlink: 'syz.7.2268': attribute type 4 has an invalid length. [ 184.775654][T11204] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2279: corrupted inode contents [ 184.806720][T11210] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 184.806720][T11210] Q׿2:[kz' to dns_resolver key: bad/missing value [ 184.835561][ T29] audit: type=1326 audit(1769871681.318:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 184.859613][ T29] audit: type=1326 audit(1769871681.318:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 184.883531][ T29] audit: type=1326 audit(1769871681.318:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 184.907224][ T29] audit: type=1326 audit(1769871681.318:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 184.943350][T11204] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.2279: mark_inode_dirty error [ 184.970320][T11204] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.2279: corrupted inode contents [ 184.996450][T11204] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2279: mark_inode_dirty error [ 185.005607][T11216] netlink: 'syz.3.2282': attribute type 2 has an invalid length. [ 185.066286][ T29] audit: type=1326 audit(1769871681.468:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 185.090203][ T29] audit: type=1326 audit(1769871681.468:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 185.103745][T11204] Quota error (device loop0): write_blk: dquota write failed [ 185.113893][ T29] audit: type=1326 audit(1769871681.468:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.1.2280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fba1b49aeb9 code=0x7ffc0000 [ 185.146777][T11204] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2279: Failed to acquire dquot type 0 [ 185.181355][T11221] lo speed is unknown, defaulting to 1000 [ 185.190142][T11204] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2279: corrupted inode contents [ 185.211790][T11235] tmpfs: Bad value for 'mpol' [ 185.267569][T11204] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.2279: mark_inode_dirty error [ 185.293100][T11204] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2279: corrupted inode contents [ 185.334077][T11166] batadv_slave_1: entered promiscuous mode [ 185.341679][T11204] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2279: mark_inode_dirty error [ 185.380245][T11204] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2279: corrupted inode contents [ 185.437465][T11204] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 185.449284][T11204] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2279: corrupted inode contents [ 185.461590][T11204] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.2279: mark_inode_dirty error [ 185.473167][T11204] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 185.506983][T11204] EXT4-fs (loop0): 1 truncate cleaned up [ 185.516061][T11204] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.605403][T11165] batadv_slave_1: left promiscuous mode [ 185.612476][T11249] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 185.612476][T11249] Q׿2:[kz' to dns_resolver key: bad/missing value [ 185.652521][T11255] netlink: 'syz.2.2294': attribute type 2 has an invalid length. [ 185.877047][T11276] set_capacity_and_notify: 5 callbacks suppressed [ 185.877079][T11276] loop7: detected capacity change from 0 to 1024 [ 185.892631][T11276] EXT4-fs: Ignoring removed orlov option [ 185.921989][T11272] loop0: detected capacity change from 0 to 8192 [ 185.991035][T11286] loop3: detected capacity change from 0 to 512 [ 186.038010][T11285] xt_bpf: check failed: parse error [ 186.070086][T11288] netlink: 'syz.2.2306': attribute type 2 has an invalid length. [ 186.106966][T11293] loop3: detected capacity change from 0 to 1024 [ 186.117473][T11293] EXT4-fs: Mount option(s) incompatible with ext2 [ 186.152809][T11295] loop7: detected capacity change from 0 to 512 [ 186.170869][T11295] EXT4-fs: Ignoring removed oldalloc option [ 186.207846][T11295] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.272953][T11295] EXT4-fs (loop7): 1 truncate cleaned up [ 186.441721][T11309] loop3: detected capacity change from 0 to 8192 [ 186.500696][T11321] __nla_validate_parse: 13 callbacks suppressed [ 186.500716][T11321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2316'. [ 186.632856][T11329] netlink: 'syz.2.2319': attribute type 2 has an invalid length. [ 186.640759][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2319'. [ 186.658306][T11334] loop7: detected capacity change from 0 to 1024 [ 186.672568][T11334] EXT4-fs: Ignoring removed orlov option [ 186.718325][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 186.739710][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2323'. [ 186.823223][T11357] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2325'. [ 186.837931][T11351] netlink: 143700 bytes leftover after parsing attributes in process `syz.2.2323'. [ 186.860226][T11357] loop7: detected capacity change from 0 to 1024 [ 186.871133][T11357] EXT4-fs: Ignoring removed orlov option [ 186.935612][T11368] sctp: [Deprecated]: syz.1.2328 (pid 11368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.935612][T11368] Use struct sctp_sack_info instead [ 186.998177][T11376] FAULT_INJECTION: forcing a failure. [ 186.998177][T11376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.011528][T11376] CPU: 0 UID: 0 PID: 11376 Comm: syz.7.2331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.011564][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.011579][T11376] Call Trace: [ 187.011587][T11376] [ 187.011596][T11376] __dump_stack+0x1d/0x30 [ 187.011625][T11376] dump_stack_lvl+0x95/0xd0 [ 187.011652][T11376] dump_stack+0x15/0x1b [ 187.011715][T11376] should_fail_ex+0x263/0x280 [ 187.011764][T11376] should_fail+0xb/0x20 [ 187.011791][T11376] should_fail_usercopy+0x1a/0x20 [ 187.011897][T11376] _copy_from_user+0x1c/0xb0 [ 187.011921][T11376] ___sys_sendmsg+0xc1/0x1e0 [ 187.011952][T11376] __x64_sys_sendmsg+0xd4/0x160 [ 187.011981][T11376] x64_sys_call+0x17ba/0x3000 [ 187.012015][T11376] do_syscall_64+0xc0/0x2a0 [ 187.012101][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.012197][T11376] RIP: 0033:0x7fbf11afaeb9 [ 187.012275][T11376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.012295][T11376] RSP: 002b:00007fbf10557028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.012318][T11376] RAX: ffffffffffffffda RBX: 00007fbf11d75fa0 RCX: 00007fbf11afaeb9 [ 187.012414][T11376] RDX: 0000000020000004 RSI: 0000200000002c80 RDI: 0000000000000004 [ 187.012431][T11376] RBP: 00007fbf10557090 R08: 0000000000000000 R09: 0000000000000000 [ 187.012483][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.012497][T11376] R13: 00007fbf11d76038 R14: 00007fbf11d75fa0 R15: 00007fff4747bff8 [ 187.012589][T11376] [ 187.303497][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2341'. [ 187.305236][T11398] loop0: detected capacity change from 0 to 512 [ 187.322178][T11398] EXT4-fs: Ignoring removed oldalloc option [ 187.339720][T11402] sctp: [Deprecated]: syz.2.2343 (pid 11402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.339720][T11402] Use struct sctp_sack_info instead [ 187.362999][T11398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.394670][T11398] EXT4-fs (loop0): 1 truncate cleaned up [ 187.496306][T11415] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 187.496306][T11415] Q׿2:[kz' to dns_resolver key: bad/missing value [ 187.586097][T11426] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2353'. [ 187.611483][T11426] loop2: detected capacity change from 0 to 1024 [ 187.625886][T11430] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 187.636846][T11430] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 187.650516][T11426] EXT4-fs: Ignoring removed orlov option [ 187.680991][T11430] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.2354: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 187.725017][T11430] EXT4-fs (loop7): no journal found [ 187.743622][T11430] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.765720][T11430] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.788638][T11430] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2354: Failed to acquire dquot type 1 [ 187.832702][T11430] sctp: [Deprecated]: syz.7.2354 (pid 11430) Use of int in maxseg socket option. [ 187.832702][T11430] Use struct sctp_assoc_value instead [ 187.911669][T11458] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.961579][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'. [ 187.981439][T11454] sch_fq: defrate 4294967295 ignored. [ 188.005096][T11458] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.058137][T11476] FAULT_INJECTION: forcing a failure. [ 188.058137][T11476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.071588][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.7.2370 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.071634][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.071648][T11476] Call Trace: [ 188.071656][T11476] [ 188.071665][T11476] __dump_stack+0x1d/0x30 [ 188.071702][T11476] dump_stack_lvl+0x95/0xd0 [ 188.071729][T11476] dump_stack+0x15/0x1b [ 188.071781][T11476] should_fail_ex+0x263/0x280 [ 188.071814][T11476] should_fail_alloc_page+0xf2/0x100 [ 188.071909][T11476] __alloc_frozen_pages_noprof+0x108/0x350 [ 188.071946][T11476] alloc_pages_mpol+0xb3/0x260 [ 188.072059][T11476] alloc_pages_noprof+0x8f/0x130 [ 188.072172][T11476] __pmd_alloc+0x47/0x480 [ 188.072196][T11476] handle_mm_fault+0x1ed8/0x3030 [ 188.072235][T11476] ? mt_find+0x291/0x3b0 [ 188.072295][T11476] ? lock_mm_and_find_vma+0x88/0x400 [ 188.072324][T11476] do_user_addr_fault+0x3fd/0x1050 [ 188.072354][T11476] exc_page_fault+0x62/0xa0 [ 188.072399][T11476] asm_exc_page_fault+0x26/0x30 [ 188.072504][T11476] RIP: 0010:__put_user_4+0xd/0x20 [ 188.072538][T11476] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 188.072556][T11476] RSP: 0018:ffffc90001af7dd8 EFLAGS: 00050206 [ 188.072575][T11476] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 00002000000003c0 [ 188.072651][T11476] RDX: 0000000000000000 RSI: ffffffff86c20db0 RDI: 0000000000000003 [ 188.072666][T11476] RBP: 0000000000004b44 R08: ffff88811bab0000 R09: 0000000000000004 [ 188.072782][T11476] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000004b44 [ 188.072795][T11476] R13: ffff88810d1de800 R14: ffff88811d9eb000 R15: 00002000000003c0 [ 188.072817][T11476] vt_ioctl+0x4b5/0x18d0 [ 188.072843][T11476] ? tty_jobctrl_ioctl+0x29c/0x810 [ 188.072880][T11476] tty_ioctl+0x7d7/0xb80 [ 188.072964][T11476] ? __pfx_tty_ioctl+0x10/0x10 [ 188.073062][T11476] __se_sys_ioctl+0xce/0x140 [ 188.073102][T11476] __x64_sys_ioctl+0x43/0x50 [ 188.073139][T11476] x64_sys_call+0x14b0/0x3000 [ 188.073204][T11476] do_syscall_64+0xc0/0x2a0 [ 188.073239][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.073314][T11476] RIP: 0033:0x7fbf11afaeb9 [ 188.073334][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.073356][T11476] RSP: 002b:00007fbf10557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.073381][T11476] RAX: ffffffffffffffda RBX: 00007fbf11d75fa0 RCX: 00007fbf11afaeb9 [ 188.073398][T11476] RDX: 00002000000003c0 RSI: 0000000000004b44 RDI: 0000000000000003 [ 188.073414][T11476] RBP: 00007fbf10557090 R08: 0000000000000000 R09: 0000000000000000 [ 188.073428][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.073476][T11476] R13: 00007fbf11d76038 R14: 00007fbf11d75fa0 R15: 00007fff4747bff8 [ 188.073519][T11476] [ 188.510098][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 188.531173][T11340] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.579702][T11505] FAULT_INJECTION: forcing a failure. [ 188.579702][T11505] name failslab, interval 1, probability 0, space 0, times 0 [ 188.592511][T11505] CPU: 1 UID: 0 PID: 11505 Comm: syz.2.2379 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.592582][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.592597][T11505] Call Trace: [ 188.592604][T11505] [ 188.592615][T11505] __dump_stack+0x1d/0x30 [ 188.592645][T11505] dump_stack_lvl+0x95/0xd0 [ 188.592706][T11505] dump_stack+0x15/0x1b [ 188.592736][T11505] should_fail_ex+0x263/0x280 [ 188.592773][T11505] should_failslab+0x8c/0xb0 [ 188.592878][T11505] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 188.592904][T11505] ? __d_alloc+0x37/0x340 [ 188.592937][T11505] __d_alloc+0x37/0x340 [ 188.593083][T11505] ? should_fail_ex+0xd9/0x280 [ 188.593114][T11505] ? should_fail_ex+0xd9/0x280 [ 188.593149][T11505] d_alloc+0x2e/0x100 [ 188.593178][T11505] lookup_one_qstr_excl+0x99/0x250 [ 188.593220][T11505] start_creating_noperm+0x64/0xa0 [ 188.593255][T11505] do_mq_open+0x178/0x500 [ 188.593300][T11505] ? mutex_lock+0x57/0x90 [ 188.593326][T11505] __x64_sys_mq_open+0xcb/0x100 [ 188.593380][T11505] x64_sys_call+0x843/0x3000 [ 188.593476][T11505] do_syscall_64+0xc0/0x2a0 [ 188.593576][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.593603][T11505] RIP: 0033:0x7f45b2fdaeb9 [ 188.593625][T11505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.593648][T11505] RSP: 002b:00007f45b1a37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 188.593675][T11505] RAX: ffffffffffffffda RBX: 00007f45b3255fa0 RCX: 00007f45b2fdaeb9 [ 188.593771][T11505] RDX: 0000000000000000 RSI: 6e93ebbbcc0884f2 RDI: 000020000084dff0 [ 188.593787][T11505] RBP: 00007f45b1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 188.593803][T11505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.593819][T11505] R13: 00007f45b3256038 R14: 00007f45b3255fa0 R15: 00007ffc6e774418 [ 188.593869][T11505] [ 188.854746][T11514] EXT4-fs: Ignoring removed orlov option [ 188.896567][T11514] EXT4-fs mount: 57 callbacks suppressed [ 188.896588][T11514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.929573][T11515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.991829][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.001815][T11529] EXT4-fs: Ignoring removed orlov option [ 189.009852][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.080090][T11529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.107095][T11539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.127626][T11539] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.151240][T10926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.198128][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 189.198145][ T29] audit: type=1326 audit(1769871685.706:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.207474][T11539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.234467][ T29] audit: type=1326 audit(1769871685.706:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.258812][ T29] audit: type=1326 audit(1769871685.706:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.283123][ T29] audit: type=1326 audit(1769871685.706:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.302636][T11552] xt_hashlimit: size too large, truncated to 1048576 [ 189.307422][ T29] audit: type=1326 audit(1769871685.706:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.314069][T11552] xt_hashlimit: max too large, truncated to 1048576 [ 189.344744][ T29] audit: type=1326 audit(1769871685.706:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.368281][ T29] audit: type=1326 audit(1769871685.706:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.392342][ T29] audit: type=1326 audit(1769871685.706:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.416307][ T29] audit: type=1326 audit(1769871685.706:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.439916][ T29] audit: type=1326 audit(1769871685.706:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11538 comm="syz.3.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518819aeb9 code=0x7ffc0000 [ 189.468801][T11539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.477237][T11539] bond1: (slave bond0): Enslaving as an active interface with an up link [ 189.478199][T11562] netlink: 'syz.2.2396': attribute type 6 has an invalid length. [ 189.499040][T11539] netlink: 'syz.3.2388': attribute type 10 has an invalid length. [ 189.501860][T11562] netlink: 'syz.2.2396': attribute type 6 has an invalid length. [ 189.546416][T11552] loop0: p2 p3 p7 [ 189.570588][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.629900][T11570] FAULT_INJECTION: forcing a failure. [ 189.629900][T11570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.639018][T11568] EXT4-fs: Ignoring removed bh option [ 189.643219][T11570] CPU: 1 UID: 0 PID: 11570 Comm: syz.2.2400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.643250][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.643330][T11570] Call Trace: [ 189.643338][T11570] [ 189.643347][T11570] __dump_stack+0x1d/0x30 [ 189.643375][T11570] dump_stack_lvl+0x95/0xd0 [ 189.643437][T11570] dump_stack+0x15/0x1b [ 189.643459][T11570] should_fail_ex+0x263/0x280 [ 189.643492][T11570] should_fail+0xb/0x20 [ 189.643634][T11570] should_fail_usercopy+0x1a/0x20 [ 189.643668][T11570] _copy_to_user+0x20/0xa0 [ 189.643691][T11570] simple_read_from_buffer+0xb5/0x130 [ 189.643786][T11570] proc_fail_nth_read+0x10e/0x150 [ 189.643816][T11570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.643844][T11570] vfs_read+0x1ab/0x7f0 [ 189.643865][T11570] ? __rcu_read_unlock+0x4e/0x70 [ 189.643944][T11570] ? __fget_files+0x184/0x1c0 [ 189.643969][T11570] ? mutex_lock+0x57/0x90 [ 189.644016][T11570] ksys_read+0xdc/0x1a0 [ 189.644037][T11570] __x64_sys_read+0x40/0x50 [ 189.644058][T11570] x64_sys_call+0x2889/0x3000 [ 189.644085][T11570] do_syscall_64+0xc0/0x2a0 [ 189.644185][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.644209][T11570] RIP: 0033:0x7f45b2f9b78e [ 189.644228][T11570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.644248][T11570] RSP: 002b:00007f45b1a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.644272][T11570] RAX: ffffffffffffffda RBX: 00007f45b1a376c0 RCX: 00007f45b2f9b78e [ 189.644354][T11570] RDX: 000000000000000f RSI: 00007f45b1a370a0 RDI: 0000000000000004 [ 189.644368][T11570] RBP: 00007f45b1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 189.644383][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.644397][T11570] R13: 00007f45b3256038 R14: 00007f45b3255fa0 R15: 00007ffc6e774418 [ 189.644489][T11570] [ 189.941858][T11565] FAULT_INJECTION: forcing a failure. [ 189.941858][T11565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.955220][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.1.2398 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.955255][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.955270][T11565] Call Trace: [ 189.955278][T11565] [ 189.955288][T11565] __dump_stack+0x1d/0x30 [ 189.955320][T11565] dump_stack_lvl+0x95/0xd0 [ 189.955351][T11565] dump_stack+0x15/0x1b [ 189.955376][T11565] should_fail_ex+0x263/0x280 [ 189.955497][T11565] should_fail+0xb/0x20 [ 189.955531][T11565] should_fail_usercopy+0x1a/0x20 [ 189.955570][T11565] _copy_to_iter+0xd2/0xea0 [ 189.955655][T11565] ? vmalloc_info_show+0x826/0x860 [ 189.955690][T11565] seq_read_iter+0x776/0x940 [ 189.955723][T11565] proc_reg_read_iter+0x110/0x180 [ 189.955792][T11565] do_iter_readv_writev+0x4fd/0x5a0 [ 189.955824][T11565] vfs_readv+0x1f4/0x6e0 [ 189.955907][T11565] __x64_sys_preadv+0xfd/0x1c0 [ 189.955979][T11565] x64_sys_call+0x2805/0x3000 [ 189.956066][T11565] do_syscall_64+0xc0/0x2a0 [ 189.956104][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.956131][T11565] RIP: 0033:0x7fba1b49aeb9 [ 189.956162][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.956222][T11565] RSP: 002b:00007fba19ed6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 189.956283][T11565] RAX: ffffffffffffffda RBX: 00007fba1b716090 RCX: 00007fba1b49aeb9 [ 189.956298][T11565] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000003 [ 189.956314][T11565] RBP: 00007fba19ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.956330][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.956346][T11565] R13: 00007fba1b716128 R14: 00007fba1b716090 R15: 00007ffc377bfa78 [ 189.956371][T11565] [ 190.146837][T11568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.176997][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 190.190672][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 190.206358][T11568] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2397: Allocating blocks 497-513 which overlap fs metadata [ 190.223054][ T5457] udevd[5457]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 190.251226][T11585] lo speed is unknown, defaulting to 1000 [ 190.252069][T11568] EXT4-fs (loop3): Remounting filesystem read-only [ 190.460068][T11608] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 190.460068][T11608] Q׿2:[kz' to dns_resolver key: bad/missing value [ 190.585202][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.589640][T11620] EXT4-fs: Ignoring removed orlov option [ 190.614753][T11620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.616431][T11623] FAULT_INJECTION: forcing a failure. [ 190.616431][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.640136][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.7.2417 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.640228][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.640242][T11623] Call Trace: [ 190.640250][T11623] [ 190.640332][T11623] __dump_stack+0x1d/0x30 [ 190.640361][T11623] dump_stack_lvl+0x95/0xd0 [ 190.640384][T11623] dump_stack+0x15/0x1b [ 190.640424][T11623] should_fail_ex+0x263/0x280 [ 190.640457][T11623] should_fail+0xb/0x20 [ 190.640564][T11623] should_fail_usercopy+0x1a/0x20 [ 190.640596][T11623] _copy_from_user+0x1c/0xb0 [ 190.640620][T11623] ___sys_sendmsg+0xc1/0x1e0 [ 190.640738][T11623] __x64_sys_sendmsg+0xd4/0x160 [ 190.640767][T11623] x64_sys_call+0x17ba/0x3000 [ 190.640791][T11623] do_syscall_64+0xc0/0x2a0 [ 190.640824][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.640951][T11623] RIP: 0033:0x7fbf11afaeb9 [ 190.640973][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.641015][T11623] RSP: 002b:00007fbf10557028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.641042][T11623] RAX: ffffffffffffffda RBX: 00007fbf11d75fa0 RCX: 00007fbf11afaeb9 [ 190.641099][T11623] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000005 [ 190.641116][T11623] RBP: 00007fbf10557090 R08: 0000000000000000 R09: 0000000000000000 [ 190.641133][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.641150][T11623] R13: 00007fbf11d76038 R14: 00007fbf11d75fa0 R15: 00007fff4747bff8 [ 190.641223][T11623] [ 190.810789][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.930232][T11629] set_capacity_and_notify: 17 callbacks suppressed [ 190.930252][T11629] loop7: detected capacity change from 0 to 512 [ 190.959772][T11636] loop2: detected capacity change from 0 to 164 [ 190.973244][T11629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.150140][T11629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.204108][T11653] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 191.204108][T11653] Q׿2:[kz' to dns_resolver key: bad/missing value [ 191.267270][T11629] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.416947][T11629] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2419: corrupted xattr block 32: bad e_name length [ 191.460237][T11629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 191.494303][T11629] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2419: corrupted xattr block 32: bad e_name length [ 191.535813][T11663] team0: Device ipvlan0 failed to register rx_handler [ 191.552755][T11629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 191.572138][T11661] EXT4-fs error (device loop7): __ext4_new_inode:1279: comm syz.7.2419: failed to insert inode 16: doubly allocated? [ 191.592918][T11658] loop2: detected capacity change from 0 to 512 [ 191.637708][T11658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.643336][T11663] __nla_validate_parse: 17 callbacks suppressed [ 191.643356][T11663] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2430'. [ 191.685177][T11663] lo: entered promiscuous mode [ 191.690278][T11663] lo: entered allmulticast mode [ 191.729429][T11663] tunl0: entered promiscuous mode [ 191.734568][T11663] tunl0: entered allmulticast mode [ 191.805756][T11658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.833888][T11663] gre0: entered promiscuous mode [ 191.838958][T11663] gre0: entered allmulticast mode [ 191.847469][T10926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.857913][T11663] gretap0: entered promiscuous mode [ 191.863322][T11663] gretap0: entered allmulticast mode [ 191.892716][T11658] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.904986][T11666] netlink: 'syz.3.2430': attribute type 10 has an invalid length. [ 191.912865][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2430'. [ 191.923293][T11663] erspan0: entered promiscuous mode [ 191.928564][T11663] erspan0: entered allmulticast mode [ 191.945512][T11663] ip_vti0: entered promiscuous mode [ 191.950780][T11663] ip_vti0: entered allmulticast mode [ 191.971565][T11663] ip6_vti0: entered promiscuous mode [ 191.976954][T11663] ip6_vti0: entered allmulticast mode [ 191.990390][T11663] sit0: entered promiscuous mode [ 191.995506][T11663] sit0: entered allmulticast mode [ 192.006896][T11663] ip6tnl0: entered promiscuous mode [ 192.012231][T11663] ip6tnl0: entered allmulticast mode [ 192.023421][T11663] ip6gre0: entered promiscuous mode [ 192.028730][T11663] ip6gre0: entered allmulticast mode [ 192.049456][T11663] syz_tun: entered promiscuous mode [ 192.054854][T11663] syz_tun: entered allmulticast mode [ 192.078825][T11663] ip6gretap0: entered promiscuous mode [ 192.084986][T11663] ip6gretap0: entered allmulticast mode [ 192.102144][T11663] vcan0: entered promiscuous mode [ 192.107424][T11663] vcan0: entered allmulticast mode [ 192.114341][T11663] bond0: entered promiscuous mode [ 192.119589][T11663] bond_slave_0: entered promiscuous mode [ 192.125436][T11663] bond_slave_1: entered promiscuous mode [ 192.131155][T11663] bond0: entered allmulticast mode [ 192.136429][T11663] bond_slave_0: entered allmulticast mode [ 192.142233][T11663] bond_slave_1: entered allmulticast mode [ 192.149596][T11663] team0: entered promiscuous mode [ 192.154774][T11663] team_slave_0: entered promiscuous mode [ 192.160650][T11663] team_slave_1: entered promiscuous mode [ 192.166480][T11663] team0: entered allmulticast mode [ 192.171616][T11663] team_slave_0: entered allmulticast mode [ 192.177390][T11663] team_slave_1: entered allmulticast mode [ 192.186638][T11663] dummy0: entered promiscuous mode [ 192.191805][T11663] dummy0: entered allmulticast mode [ 192.198785][T11663] nlmon0: entered promiscuous mode [ 192.203977][T11663] nlmon0: entered allmulticast mode [ 192.211118][T11663] caif0: entered promiscuous mode [ 192.216247][T11663] caif0: entered allmulticast mode [ 192.221415][T11663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.236972][ T3576] lo speed is unknown, defaulting to 1000 [ 192.242814][ T3576] syz2: Port: 1 Link ACTIVE [ 192.257652][T11675] geneve2: entered promiscuous mode [ 192.264928][ T37] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 41861 - 0 [ 192.274089][ T37] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 41861 - 0 [ 192.314717][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.331973][ T37] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 41861 - 0 [ 192.341005][ T37] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 41861 - 0 [ 192.359973][T11681] loop0: detected capacity change from 0 to 512 [ 192.392042][T11681] FAT-fs (loop0): IO charset u#ww9C= Y撳t EŒ&y3_S@rRhB&5dxpO߁up@HX[曖[7VG1 y{.#vX)P1u&-@=6Axa'ێe yoE [ 192.392042][T11681] r not found [ 192.418598][T11685] loop2: detected capacity change from 0 to 164 [ 192.449794][T11687] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 192.449794][T11687] Q׿2:[kz' to dns_resolver key: bad/missing value [ 192.553792][T11693] geneve3: entered promiscuous mode [ 192.587682][T11693] loop7: detected capacity change from 0 to 1024 [ 192.596413][T11693] EXT4-fs: Ignoring removed orlov option [ 192.684505][T11693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.804428][T11695] Set syz1 is full, maxelem 65536 reached [ 192.830372][T10926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.970723][T11713] loop2: detected capacity change from 0 to 2048 [ 193.101745][T11724] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 193.101745][T11724] Q׿2:[kz' to dns_resolver key: bad/missing value [ 193.194002][T11726] FAULT_INJECTION: forcing a failure. [ 193.194002][T11726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.207426][T11726] CPU: 1 UID: 0 PID: 11726 Comm: syz.2.2453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.207458][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.207472][T11726] Call Trace: [ 193.207479][T11726] [ 193.207489][T11726] __dump_stack+0x1d/0x30 [ 193.207526][T11726] dump_stack_lvl+0x95/0xd0 [ 193.207599][T11726] dump_stack+0x15/0x1b [ 193.207622][T11726] should_fail_ex+0x263/0x280 [ 193.207659][T11726] should_fail+0xb/0x20 [ 193.207742][T11726] should_fail_usercopy+0x1a/0x20 [ 193.207777][T11726] _copy_from_user+0x1c/0xb0 [ 193.207801][T11726] ___sys_recvmsg+0xaa/0x3b0 [ 193.207826][T11726] ? __rcu_read_unlock+0x4e/0x70 [ 193.207889][T11726] __x64_sys_recvmsg+0xd1/0x160 [ 193.207917][T11726] x64_sys_call+0x2cbf/0x3000 [ 193.207942][T11726] do_syscall_64+0xc0/0x2a0 [ 193.208040][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.208068][T11726] RIP: 0033:0x7f45b2fdaeb9 [ 193.208087][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.208110][T11726] RSP: 002b:00007f45b1a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 193.208197][T11726] RAX: ffffffffffffffda RBX: 00007f45b3255fa0 RCX: 00007f45b2fdaeb9 [ 193.208213][T11726] RDX: 0000000000000020 RSI: 000020000000c1c0 RDI: 0000000000000003 [ 193.208226][T11726] RBP: 00007f45b1a37090 R08: 0000000000000000 R09: 0000000000000000 [ 193.208239][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.208252][T11726] R13: 00007f45b3256038 R14: 00007f45b3255fa0 R15: 00007ffc6e774418 [ 193.208272][T11726] [ 193.440854][T11740] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 193.476346][T11747] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2461'. [ 193.536493][T11745] loop3: detected capacity change from 0 to 2048 [ 193.552900][T11763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2462'. [ 193.716262][T11772] loop2: detected capacity change from 0 to 8192 [ 193.742341][T11749] Set syz1 is full, maxelem 65536 reached [ 193.867621][T11792] vhci_hcd vhci_hcd.4: invalid port number 255 [ 193.873991][T11792] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.881411][T11791] loop2: detected capacity change from 0 to 2048 [ 194.010044][T11803] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2472'. [ 194.249515][T11836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.262353][T11836] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.392411][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.433639][T11827] Set syz1 is full, maxelem 65536 reached [ 194.441529][T11855] EXT4-fs: Ignoring removed orlov option [ 194.492559][T11855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.540290][T10926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.577193][T11867] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 194.585324][T11867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 194.601823][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 194.601843][ T29] audit: type=1400 audit(1769871691.116:3153): avc: denied { shutdown } for pid=11870 comm="syz.7.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.629973][T11867] EXT4-fs (loop1): orphan cleanup on readonly fs [ 194.637333][T11867] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 194.646925][T11867] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 194.661607][T11867] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 194.668843][T11867] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2491: bg 0: block 40: padding at end of block bitmap is not set [ 194.683747][T11867] EXT4-fs (loop1): Remounting filesystem read-only [ 194.690789][T11867] EXT4-fs (loop1): 1 truncate cleaned up [ 194.691470][T11876] ext4: Unknown parameter 'uid<00000000000000000000' [ 194.696922][T11867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.779701][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.836932][ T29] audit: type=1400 audit(1769871691.346:3154): avc: denied { mounton } for pid=11878 comm="syz.7.2496" path="/mnt" dev="ramfs" ino=32418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 194.846359][T11879] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 194.863864][T11881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.871690][T11879] EXT4-fs (loop7): group descriptors corrupted! [ 194.899159][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.982676][ T29] audit: type=1326 audit(1769871691.496:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11888 comm="syz.7.2500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf11afaeb9 code=0x0 [ 195.188449][T11895] Set syz1 is full, maxelem 65536 reached [ 195.233111][T11904] EXT4-fs: Ignoring removed orlov option [ 195.246894][T11904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.268316][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.292679][T11908] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.306218][T11908] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.420657][T11920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2508'. [ 195.506293][T11920] netlink: 143700 bytes leftover after parsing attributes in process `syz.0.2508'. [ 195.526404][ T29] audit: type=1400 audit(1769871692.026:3156): avc: denied { bind } for pid=11923 comm="syz.3.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.535607][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'. [ 195.559900][T11922] sch_fq: defrate 4294967295 ignored. [ 195.779719][T11936] Set syz1 is full, maxelem 65536 reached [ 195.790113][T11917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.877729][T11957] EXT4-fs: Ignoring removed orlov option [ 195.915326][T11957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.924336][T11917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.947083][T11917] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.962220][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.985817][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2518'. [ 195.999748][T11973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=11973 comm=syz.1.2519 [ 196.013383][ T29] audit: type=1400 audit(1769871692.526:3157): avc: denied { mounton } for pid=11971 comm="syz.1.2519" path="/proc/1401/task" dev="proc" ino=32890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 196.051251][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.083520][T11977] set_capacity_and_notify: 13 callbacks suppressed [ 196.083540][T11977] loop7: detected capacity change from 0 to 1024 [ 196.106516][T11981] loop2: detected capacity change from 0 to 128 [ 196.112625][T11977] EXT4-fs: Ignoring removed orlov option [ 196.138374][T11981] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.154098][T11981] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.165366][T11977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.187879][ T29] audit: type=1326 audit(1769871692.696:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11980 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 196.211574][ T29] audit: type=1326 audit(1769871692.696:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11980 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 196.235614][ T29] audit: type=1326 audit(1769871692.696:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11980 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 196.241496][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 196.259400][ T29] audit: type=1326 audit(1769871692.696:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11980 comm="syz.2.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b2fdaeb9 code=0x7ffc0000 [ 196.294293][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.294928][T10926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.308931][T11983] sch_fq: defrate 4294967295 ignored. [ 196.360845][T11997] lo speed is unknown, defaulting to 1000 [ 196.416349][T12001] loop3: detected capacity change from 0 to 2048 [ 196.427794][T12004] loop1: detected capacity change from 0 to 1024 [ 196.483573][T12001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.507512][T12007] loop0: detected capacity change from 0 to 1024 [ 196.547636][T12004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.564867][T11995] Set syz1 is full, maxelem 65536 reached [ 196.582735][T12004] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.593060][T12007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.605962][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.625280][T12004] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.667333][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.679201][T12004] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.2527: lblock 3 mapped to illegal pblock 3 (length 3) [ 196.722436][T12004] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 196.734870][T12004] EXT4-fs (loop1): This should not happen!! Data will be lost [ 196.734870][T12004] [ 196.746118][T12016] loop2: detected capacity change from 0 to 8192 [ 196.760953][T12020] loop3: detected capacity change from 0 to 128 [ 196.785276][T12004] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2527: bg 0: block 112: padding at end of block bitmap is not set [ 196.790919][T12020] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.835605][T12020] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.936320][ T3003] ================================================================== [ 196.944500][ T3003] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 196.948169][T12032] loop0: detected capacity change from 0 to 1024 [ 196.952035][ T3003] [ 196.952047][ T3003] write to 0xffff88811b3a3000 of 4 bytes by task 3303 on cpu 1: [ 196.952069][ T3003] d_make_discardable+0x4f/0xa0 [ 196.952103][ T3003] simple_unlink+0x68/0x80 [ 196.952138][ T3003] shmem_unlink+0x12d/0x140 [ 196.952169][ T3003] vfs_unlink+0x28b/0x440 [ 196.952188][ T3003] do_unlinkat+0x1e2/0x4b0 [ 196.952207][ T3003] __x64_sys_unlink+0x2e/0x40 [ 196.952233][ T3003] x64_sys_call+0x2f48/0x3000 [ 196.959302][T12032] EXT4-fs: Ignoring removed orlov option [ 196.960901][ T3003] do_syscall_64+0xc0/0x2a0 [ 196.973381][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.973411][ T3003] [ 196.973420][ T3003] read to 0xffff88811b3a3000 of 4 bytes by task 3003 on cpu 0: [ 197.026451][ T3003] do_readlinkat+0xa9/0x340 [ 197.031065][ T3003] __x64_sys_readlink+0x47/0x60 [ 197.035965][ T3003] x64_sys_call+0x2af1/0x3000 [ 197.040746][ T3003] do_syscall_64+0xc0/0x2a0 [ 197.045354][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.051254][ T3003] [ 197.053580][ T3003] value changed: 0x08300080 -> 0x00300180 [ 197.059299][ T3003] [ 197.061802][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 197.068041][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.077341][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.087491][ T3003] ================================================================== [ 197.116345][ T37] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 5) [ 197.131250][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 197.143785][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 197.143785][ T37] [ 197.158748][T12032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.171282][T11345] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.223484][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.251129][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.