last executing test programs: 3m6.907088078s ago: executing program 1 (id=121): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000380)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1a}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x240}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfc}, {0x6, 0x11, 0x851}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040801}, 0x1) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_VOICE(r4, 0x112, 0x13, 0x0, 0x0) clock_getres(0x7c80fe59fa833483, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1, 0x3523, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x5, 0x15, "ff00"}) r6 = syz_open_pts(r5, 0x141601) ioctl$TIOCGWINSZ(r6, 0x5413, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000700)={0x0, 0x52a}, &(0x7f0000000780)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfffffffffffffe45}, 0x7}], 0x1, 0x60010060, 0x0) acct(&(0x7f0000000300)='./file0\x00') 3m6.509367701s ago: executing program 1 (id=127): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xb712f7e64ca01733) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x24008045) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x40049409, 0x0) unshare(0x2040400) 3m3.839317793s ago: executing program 1 (id=136): socket$tipc(0x1e, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x25, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x3, 0x4}, 0x19a6d, 0x0, 0x7fc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000140)) r2 = eventfd2(0x0, 0x80001) read$eventfd(r2, &(0x7f0000000000), 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) io_submit(0x0, 0x0, 0x0) capset(0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 3m2.702152692s ago: executing program 1 (id=146): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}, {@grpquota}, {@nolazytime}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1ff, 0x493}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), 0x0}, 0x20) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x12, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x8, 0xdc66}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000013c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x210, 0x12, 0x1, 0x70bd2b, 0x25dfdbff, {0x18, 0x4, 0x10, 0x1, {0x4e24, 0x4e20, [0xd, 0x9533, 0x5, 0x6], [0xbda, 0x0, 0x8001, 0x2], r5, [0x3]}, 0x0, 0x9a}, [@INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "2f6b677d6d7eee7100dc4d6efe10d98f03dd64f5aa0c72394e0fa9f007b057f287e052abcb4690044501d7eb14c8dfb72b3e122f87d099ca9c07ffb1f84847d81aa3e7cbcd9975b3dba7cc26cf67c107e55cb5765bcb2717bea2b7f6ff6c63429db208e96335443a8e0b83404d194d1fc05c29af4ed841b4d82eb43ce9f3b2ecfb88fc960f9a2b660e8833b7ee6d40b279efd4e051405b488a463e3c685d5d3d3003139463cae3e0e70333de43807c2bb96bd6ead2d3f5c952a45ed5a398c1dfc4f2c995"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "1435b9d692a843805229e4c90e7c6a3503bb8eb3a6aaa115f2145588d06df6f5d114fcba73fbb42559a97487040505fdcd8f320ea47c2ea3b9da39648b2301f06d3218f4938904a4311190f1dafbb8c4050866533b39fd34961ccb5eee488a9e640c435c8d5424fab49c697ee5cb9ceb2228519425f47fc2abe5711815c26098f605997116f3479f86f00c590198294b3855b6e01f13b26404a98057cb5bf40ebbb92b280aab3cab1cfb5a7eee5b31e5ed7b2789bd034cb1d1199bec4a2539090eed39ace7eb6877bc86590d9b061ee33d4ca92ba477200dc95b9462dd32cd03c65b8a0815a12fd52e20045cf4b138d3"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "d5509f"}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7c, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x40, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r5, 0x0, 0x0, 0x3, 0xe, 0xd, @private2, @loopback, 0x40, 0x1, 0xfffffffc}}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c0001400000000000000008080004"], 0xdc}}, 0x0) r7 = getpid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x5) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x3, 0x8, 0x1, [0xfff, 0x36, 0x9, 0xc]}) listen(r8, 0x0) r9 = syz_pidfd_open(r7, 0x0) setns(r9, 0x24020000) r10 = socket$inet6(0xa, 0x3, 0x10001) sendmsg$inet6(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e23, 0x5, @remote, 0x9}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000940)="9709f028b4634048585c9dab9bc480b0c8306a672cfce9d45b93fcfd1aee7da9809a5f48cbc84caddfdd0a9fee0993d506bc61b6fe1d138cbbe900448f030f40dbf0fba9f9c06e152df05ba41c3c052dd6186e3f2e28acbf7fe22073acf14811eb1728820dcd621f9fc89287ad31d2333979e1b718e687716d3f9ea7e07fe1dc1f92bd9109009075fc0d5f016f728b4ae2bff4e56b13450c6da81382e70ea36bea24cd8d3e900c67032727b9335f2b4f6e5da143c44f7049eed4f1adead427a71b8d462dbd88b6055780257a0af6a1bc", 0xd0}, {&(0x7f0000000a40)="542fb45750161e9769bd2bda87336c5ff8a6e48a80420c7a9cd7eb2d009fefa14e6befaee38baf81e53a20295965591dbc5cdc12d470667f985e625d3429663309e8931767bbcd78a77ead02f4442523156f6061a3c41e4034adf7a28ff05dd9b0cc3d598bf11e3753dbb428ab7e86603f980c7fcd566b8b118e73e8ca44fa9595bdc3400dd85230ae8a16dc755593954e86be65a0b08580ddf87a637d81194000e15c92a45f6a34c13d2a9fc1e076ed00abfbce8ec7087c8c8204bd449eb2e934c03e049ae77ed12d2eda6ca48224bbab90b4590c9f9d19054e4a0a0a2ea634c7cac90133bc4596a256e36c38e9fa1efe3db67ecc026ccac7b6468d439f", 0xfe}, {&(0x7f0000000b40)="a13565745ed6e92319b8ff2e483256cb84e9a45d9e9812d8bcf5404a156aa9130a87e206d7a67e6a42c3931bf570a1df6a1f9a6600746676f306fca929a28e036546b764c78a746ed9aac3f08c1331080b0948590687342c9539615715464f84f95f8d77328aa2d091d68f5d2d683d5e84749d4b5c47a76f185c8c4aaed6d9f411484338f13a2405d6ba437fd435234af9fd0c986a76fdcb730bc6a4a6bffbc24b7093c034ad829acb7524e417e0610bc92d0a7281690922cad0ffa67e412dec1dbf878a78c74d0c9091459835995ce2", 0xd0}, {&(0x7f0000000c40)="328b4222ed6a330842bcf064ead33d74d9efc010c5f6965cf621572942952ce9a0fc4ecd44d32917a5b1cbb236e4c528ec0ca014aa479722add65c2a31d132ab6182bdd85896a502e2ee3d17c1dfc9f51205b11a", 0x54}, {&(0x7f0000000cc0)="602a6fe3f8e7a317efe52eff60b1ca6d12017997b3652fda69893af121514a1aae183670d04c8c1c4b0ee5ed047e657b67d0cb8a6761bd625a5f789df1f1586fc194c3743ef66983e0cf84ad2679bbbfd62f4dceb7a94e325728fadd2ce290", 0x5f}, {&(0x7f0000000d40)="a4cc9235d0231db49e71d3826833ee6de6073e0bdd1065c866e21e7b7975ff0acac9d56a22ac1357df74e230926e051441f1902e4823b9fc90b9bde4d7f37c7e2dde81c6f89d8cddf603d9db7f785c8993cb2f19a6353c2d84bbf1ac0346a95dd6523feba839dd245e6f9d09405a13dd0f62570a9f28d1480a300f0b6e73eaf81c9fcb5e31b353eff5892c96af05dcc060c091ea6fd6cc92df53eb0633024a8507a9e8a87638d694af1fb76944f16a8ed0a3abc3b1a54aac2bc5a2b69536a5fcfc9795f11cada76bf604b9d797d85e4db15e417282f291aae5cf111d3664aab0022156eb4a62bff8f88a75ade698b9d6ff6d", 0xf2}], 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="70000000000000002900000036000000d70b000000000000c910fc020000000000000000000000000000c20400000001073e12e0ad2d2b237b8018104915266a6b509a0fb3b5dacc1451194ececaaf2446e28244740621cb337d7f4f15a2e66e16433828d541643d2b5406d2920f3cd514000000000000002900000043000000650a000000000000500000000000000029000000040000002c0700000000000007280000000308060700b805000000000000f9ffffffffffffff020000000000000001800000000000000103000000c2040000000700010024000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r6, @ANYBLOB="00000000c80000000000000029000000360000000c150000000000000718000000020409a06d00000000010000000200000000000000040102247ab6449ab40b0aaf016fba8634aadb8f12a42d531368bd28a7c3394699ed1ae336b54074c5a913845c0d46c328baf7552b606e31b8b8d6b3e2d6505054635354ddfd3272d349beb39e3a97a52050657f5d15c7966dd24291452995fbef06e879cdac6f85e208418b6822766f90889010b752ab7ea8f409fb0033dc080e69f3701ab816f756e2f7e63ba3b5c204000000060014000000000000002900000008000000020000000000000024000000000000002900000032000000fc00"/260, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00G'], 0x208}, 0x20000880) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.300818004s ago: executing program 1 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0xe72c5f922f23cad9, 0x70bd25, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0xc844}, 0x24000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='f\n\x00\x00\t\x00\x00\x00a'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) (async, rerun: 64) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) (async, rerun: 64) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES64=r1, @ANYRES32=0x0], 0x2c}], 0x1, 0x0, 0x0, 0x4040884}, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00028005be"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) madvise(&(0x7f000081f000/0x2000)=nil, 0x2000, 0x14) writev(r1, &(0x7f00000003c0), 0x100000000000022d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000c3d8bac20aa85cccdb1f52621a9c227f70ec7a4b0b9079ec2d33e875ffd305d6"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) 3m1.213397253s ago: executing program 1 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) (fail_nth: 1) 3m1.212917833s ago: executing program 32 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) (fail_nth: 1) 1m53.147215443s ago: executing program 4 (id=839): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) read$usbmon(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000240)=@chain) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000400)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3e60, 0x3, 0x100000000, 0xe, 0xb8, 0x99b1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) 1m52.991461833s ago: executing program 4 (id=842): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002000)=ANY=[@ANYBLOB="3c00000010000304000000000000000100006500", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000062000280080040", @ANYBLOB="a881d07a8b222d5d9f9c6c4ccd7be96cca0a0f0a9c2118777d28256859c5b514157daa553b98e39040bcc0defde3162b2bae58ed0dfd410b0b12ae83e88c495255d213cbad2b87b6cd07f7a37d8f9632be12249dc1d14af8f9fe0ab778494bd4f16636b478239f5e76", @ANYRESHEX=r0, @ANYRES16=r0], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) write$tcp_mem(r2, &(0x7f0000000100)={0x7, 0x20, 0x41, 0x20, 0x76}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r4, 0x0, 0x9, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x18, 0x0, 0xfffffffffe000001}) 1m52.659601478s ago: executing program 4 (id=846): socket$inet(0x2, 0x3, 0x101) socket$inet6(0xa, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20848a, &(0x7f0000000200)={[{@dioread_lock}]}, 0xe, 0x549, &(0x7f0000001540)="$eJzs3UFsW2cdAPD/e0lqt8uaDnYANFgZg4Kq2om7VdMujFOF0CTEjhy6kLhRVLuuamcsoRKpOHFHYhInOHHmgMQBaSfuSBzgxmUckAZUoAUJCU9+fk6cNI6dLrHX+PeTnvy998Xv///ivu97+ty8L4CpdTkitiPiXES8HREL+fEk3+KN7tb5uY8ePVjZefRgJYl2+61/Jll951j0vafjmfycxYj43s2IHyQHgv4porm5dWe5Vqvezw+VW/V75ebm1rX1+vJada16t1K5sXRj8bXrr1aGtiGZHa2tL9Z/8+H5iPj97774wR+3v/GjTlrzeV1/O05St+lzu3Ei2tmv+DunEWwCZiJiNv/3c2xP9CZOUhoRn4mIl7LrfyFm4vGLaf/H9M0xZgcAnIZ2eyG/I+3tAwBnXZrNgSVpKZ8LmI80LZW6c3jPx4W01mi2rt5ubNxd7c6VXYq59PZ6rbqYzxVeirnk9vpsdSkr9/Zr1cqB/esR8VxE/KxwPtsvrTRqq5O88QGAKfbMgfH/P4Xu+A8AnHHFvWJhknkAAONTnHQCAMDYGf8BYPoY/wFg+hj/AWD6GP8BYPoY/wFgqnz3zTc7W3snf/716jubG3ca71xbrTbvlOobK6WVxv17pbVGYy17Zk992Plqjca9pVdi491yq9pslZubW7fqjY27rVvZc71vVefG0ioA4CjPvfj+X5KI2H79fLZF3/P+h47VL5x2dsBpSiedADAxM5NOAJiYEZfOA86gUebjz48hD2D8/t9ut6Nv7d6IeLhb6nsY6MD/IvTeESe/uFtKrRsKnz5XPv8J5v+Bp5r5f5heTzb/714ezgLz/zC92u3Emv8AMGXM8QPJkPr+7/8X2307R33/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfcfLYlaSlfC3w+0rRUing2Ii7FXHJ7vVZdjIiLEfHnwlyhs78UEdYNAoCnWfr3JF//68rCy/MHa88V/lvIXiPih7946+fvLrda95ciziX/2j3eei8/XplE/gDAML1xujeO93z06MFKbxtnPh9+KyJuduPv5Fu3ZjZms9diNtdw4d9Jvt/VuV+ZOYH42w8j4nOHtT/J5kYu5SufHozfif3sqcafOxA/3Rc/zeq6r53fxWdPIBeYNu93+p83Drv+0ricvR5+/RezHuqTy/q/YsTOY/1futv/zQzo/y6PGuOVP3z7sYPthW7dw4gvzEbs9E7e1//14icD4r88Yvy/vvCllwbVtX8ZcSUOa3+yL1a5Vb9Xbm5uXVuvL69V16p3K5UbSzcWX7v+aqWczVGXezPVj/vH61cvDorfaf+FAfGLQ9r/1RHb/6v/vf39Lx8R/+tf2Yv/49j7/J8/In5nTPzaiPGXL/y2OKiuE391QPuHff5X959q4HD8wd+2VkdMFQAYg+bm1p3lWq16/ziF3ki/v6p45LvS44V44kISsX3KIfYKhV//9ObwHy6MLZ8nLMSgqplO4VxETDrDYxZ+EhGfgjQOKRQmFT2SY75rwh0TcOr2LvpJZwIAAAAAAAAAAAAAAAwyjr89mnQbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLs+DgAA//8+0M+O") 1m51.208159867s ago: executing program 4 (id=856): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x77, 0x8, 0x9, 0x55, 0x0, 0x7f, 0x4000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x101000, 0x3, 0xffffffff, 0x3, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x1, 0x2000402) lseek(r1, 0x3ff, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x142, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x8}, 0x40, 0x1000, 0x6, 0x3, 0x9, 0x8, 0x5, 0x0, 0xffffffff, 0x0, 0x3365}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_clone(0x4200, &(0x7f0000000240)="b98f29ebbe79a84eaff8b551efbad8a3d85db217671d2a95f128b76c8e4f", 0x1e, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="3435ce8b8c3741c1178b28a3f9ec61a90235340a4efc66ddbbfb1785728a02c46065e95990de5dad813532d3db9dbf9c0c9e85a89c") 1m50.888268395s ago: executing program 4 (id=857): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xa800, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) unshare(0x62040200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fffeffff00000000090000009500000000000000aabe0dd106f833382bb6d7fe9164863a2c818e11c15f7ed62c66ed8676c45cfc22b672cc232cdab2283c15d16400299d5bae834c4525664522ee2b863e8d3372e4fbe2c60ff87042f0f68c36103237aa67c72bac7e2cabecd41eefa30f91602478dd672ad0c12e7a8bb03522365fa727d174679e25254cc0f9130e7f48f646731861051283f12c021e79c6ef590efa5348d1496dda9288c8a7b05d62e44a36aa76c4c4e36c0665b0ce3fc710f1cd514698f0d52810257bc458cba3b385a57ecd6b5c2919810954a1021f4c03604115c568493e748238228288beb18100da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) socket(0x1, 0x803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b63, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000480)={{0x108, 0x2, 0x9c, 0x20e, 0xdf, 0xb2, 0x252, 0x9}, "107cb68e4e6497faabdf4845e8f87e613ecaad37d639ca87018dd43191b4c342e8e5935f3eef8177095c7b3a101bd342dbad83e11759125e3dca31653428abb8dfc8bf05630e08cda232cf4f18fe7f6d73179907f2c4ed97e9493e0cfff71a358118ca88fc2c4d474c0c7d3dbc1c1ed85c81e2a236a9ae4e159d713d14d328bfdec450f000cbe0e2ac4189e855eafb612e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x170}]}, 0x34}}, 0x0) 1m50.300682911s ago: executing program 4 (id=862): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000380)={0x0, 'ipvlan1\x00', {0x4}, 0x23}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x7ffffffffffffffd, 0x62a42) ioctl$EVIOCGBITSND(r7, 0x40044591, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0xb100200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) timer_create(0x2, 0x0, &(0x7f0000000040)) write$cgroup_pid(r6, 0x0, 0x0) syz_clone(0x1812800, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) 1m50.232787128s ago: executing program 33 (id=862): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000380)={0x0, 'ipvlan1\x00', {0x4}, 0x23}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x7ffffffffffffffd, 0x62a42) ioctl$EVIOCGBITSND(r7, 0x40044591, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0xb100200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) timer_create(0x2, 0x0, &(0x7f0000000040)) write$cgroup_pid(r6, 0x0, 0x0) syz_clone(0x1812800, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) 4.167028328s ago: executing program 2 (id=1795): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.982593518s ago: executing program 0 (id=1801): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xa, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff96, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x401, 0x27, 0x0, 0x80000000, 0x9, 0x400002, 0x9, 0x7}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x83, 0xa}, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.982065688s ago: executing program 2 (id=1802): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100ebff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18001, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0}, 0xc9c4, 0x1000000000003, 0x10000, 0x0, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x40000c0}, 0x0, 0xe000000000000002, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10c2, &(0x7f0000002340)={0x0, 0x815e, 0x80, 0x0, 0x2fe}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x48fd, 0x0, 0x0, 0x0, 0x0) 2.980372238s ago: executing program 6 (id=1803): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x62510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xfb5, 0x4, 0x1, 0xa, 0x120005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) 2.927538578s ago: executing program 6 (id=1804): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xa800, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) unshare(0x62040200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fffeffff00000000090000009500000000000000aabe0dd106f833382bb6d7fe9164863a2c818e11c15f7ed62c66ed8676c45cfc22b672cc232cdab2283c15d16400299d5bae834c4525664522ee2b863e8d3372e4fbe2c60ff87042f0f68c36103237aa67c72bac7e2cabecd41eefa30f91602478dd672ad0c12e7a8bb03522365fa727d174679e25254cc0f9130e7f48f646731861051283f12c021e79c6ef590efa5348d1496dda9288c8a7b05d62e44a36aa76c4c4e36c0665b0ce3fc710f1cd514698f0d52810257bc458cba3b385a57ecd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$binfmt_aout(r7, &(0x7f0000000480)={{0x108, 0x2, 0x9c, 0x20e, 0xdf, 0xb2, 0x252, 0x9}, "107cb68e4e6497faabdf4845e8f87e613ecaad37d639ca87018dd43191b4c342e8e5935f3eef8177095c7b3a101bd342dbad83e11759125e3dca31653428abb8dfc8bf05630e08cda232cf4f18fe7f6d73179907f2c4ed97e9493e0cfff71a358118ca88fc2c4d474c0c7d3dbc1c1ed85c81e2a236a9ae4e159d713d14d328bfdec450f000cbe0e2ac4189e855eafb612e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x170}]}, 0x34}}, 0x0) 2.778343789s ago: executing program 0 (id=1806): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xda7e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) poll(&(0x7f00000002c0), 0x0, 0xfa) r3 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) poll(&(0x7f0000000080)=[{r3, 0x4000}, {r1, 0x3}], 0x2, 0xffff8001) mount(0x0, 0x0, 0x0, 0x40001, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) 2.777650539s ago: executing program 2 (id=1807): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x801, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02031008"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 2.740563912s ago: executing program 5 (id=1808): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) eventfd2(0x401, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 2.739992621s ago: executing program 2 (id=1809): r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000140)={0x0, 0x6ff9, 0x2, 0x3, 0x177}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 2.689756922s ago: executing program 2 (id=1810): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @mcast2, 0x200}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040410}, 0x40) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f00000001c0)=0x80000000, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000000080)=@deltclass={0x1628, 0x29, 0x10, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0x2}, {0xffff}, {0xfff3, 0x7}}, [@c_cbq={{0x8}, {0x85c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3a, 0x2, 0x8, 0x3, 0x0, 0x81}}, @TCA_CBQ_RATE={0x10, 0x5, {0x80, 0x1, 0x40, 0x5, 0x4ee, 0x40}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x9, 0xffff, 0x4, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0x8}, 0x28, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffc, 0x80000001, 0x4af1800, 0xfffffff9, 0x401, 0x7, 0x9, 0x1, 0x2, 0x7, 0x5, 0x9, 0x8273, 0x5, 0xa, 0x0, 0x10001, 0x7fff, 0x65262369, 0x49, 0x1, 0x10001, 0x2f, 0x1, 0x7, 0x3, 0x5, 0xfff, 0x0, 0x4, 0x81, 0x8, 0x1, 0x2, 0x8001, 0xa2, 0x2, 0x2, 0xf3dc, 0x7, 0x7fffffff, 0x8, 0x5, 0x0, 0x2, 0x80, 0x4ce, 0x8000, 0x4f5, 0x7, 0x5, 0xfffffc00, 0x8, 0x1, 0xe2d, 0x6, 0x9810, 0x1, 0x9, 0x200, 0x2, 0x0, 0x8, 0x80, 0xfff, 0x2, 0x4e, 0x9, 0x1, 0x0, 0xf842, 0x2, 0x3, 0x2, 0x93a, 0x6, 0x2, 0x2, 0xf, 0x6, 0x956, 0x2, 0x3, 0xffff, 0x80000001, 0xfffffff9, 0x5, 0x9, 0x7, 0xfffffc00, 0x9, 0xc28, 0x1fa6, 0x7, 0x7f, 0x8001, 0x7, 0xfff, 0x93, 0x0, 0x20000000, 0x0, 0x8, 0x1, 0x3, 0x9, 0x1000, 0x6, 0x80000001, 0x1, 0x0, 0x400, 0x9, 0x1a11, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x7, 0x4a7c, 0x80000000, 0x854, 0x0, 0x6, 0x1ff, 0x8, 0xffffffff, 0xc1da, 0x0, 0xffffffff, 0x4, 0x51e42ceb, 0x9, 0x80000000, 0x7, 0xbf99, 0x9, 0x1, 0x3, 0x400, 0x4, 0x7, 0x401, 0x0, 0x5, 0x8, 0x9, 0xc8, 0x2, 0x7, 0x0, 0x10000, 0x1, 0x4, 0x5, 0x1, 0x5, 0x8, 0x5, 0x9, 0x100, 0x8, 0x8, 0x3, 0x56f, 0x36, 0x5, 0x7, 0x80000000, 0x7, 0x4, 0x7fffffff, 0x7, 0x2, 0x8, 0x3, 0xffff, 0x3ff, 0x6, 0x2, 0x0, 0x3ff, 0xa66, 0x9, 0x8, 0x8, 0x100, 0xfd7f, 0x9, 0xc0000000, 0x0, 0x2, 0x8, 0x1ff, 0x0, 0x7, 0x2, 0x6, 0xfffff1a3, 0x8, 0x0, 0x8, 0x3, 0x400, 0xd, 0xbae, 0x2, 0xc149, 0x3, 0x2, 0x101, 0x52da, 0x7, 0x364, 0x69f, 0xffffffff, 0x3, 0x10, 0x10000, 0xcb9, 0x80000000, 0x6, 0x1bb, 0xfcce, 0x0, 0x2e5, 0xaa, 0x3ff, 0x3, 0x4, 0x7, 0xfffffffa, 0x5, 0xd374, 0xff9d, 0x3ff, 0x6, 0x1, 0x5, 0x7, 0x2000000, 0x3, 0x9, 0x1, 0xfffffff9, 0xc4, 0x7ff, 0x6f4, 0x4, 0x0, 0x8001, 0xfffffffa, 0x4, 0xfffffffe]}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x101, 0x84b7, 0x1841, 0x6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x2, 0xffff, 0x6, 0x4, 0x1, 0x40, 0x5, 0x9, 0xff, 0x7, 0x7fff, 0x7, 0x7c, 0xffff, 0x2, 0x9, 0xcf, 0x3d, 0x1, 0x0, 0xe, 0x0, 0x801a, 0x0, 0x42de, 0x1ff, 0x0, 0x8, 0x0, 0xf62c, 0x6, 0x800, 0x6, 0xffffff80, 0x7, 0x8, 0x81, 0x3, 0x6, 0x3, 0x3, 0x0, 0x1, 0x8, 0x4, 0x9, 0x400, 0xb, 0x0, 0x7, 0x6403, 0x5, 0x2, 0xb6c, 0x80, 0xfffffffd, 0x8001, 0xd55, 0x7, 0x200, 0x4, 0x3, 0xfffffffc, 0xb, 0x8, 0xe0, 0x0, 0xde, 0x5, 0x2, 0x3, 0x0, 0x2, 0x3e2, 0x318, 0xbb8e, 0x5, 0x5, 0x2, 0x5, 0x10, 0x10001, 0x2, 0x788, 0x7, 0x8000, 0x5, 0x4, 0x0, 0x200, 0x4, 0x2d10009f, 0x5, 0x4, 0x6, 0x1c55, 0x6, 0x0, 0x3, 0xd, 0x5, 0x8, 0x2, 0x5, 0xd5, 0x4, 0x7, 0xfffffffe, 0x5, 0x6548, 0xf, 0x5, 0x7, 0x2, 0x5164, 0x2, 0x9, 0x3, 0xbca, 0x3a5, 0xffff, 0x2, 0x3, 0xa, 0x1000, 0xfff, 0x6, 0x2, 0xfffffffc, 0x6, 0x4, 0x9, 0x4, 0x7ff, 0x1a9d91c0, 0x6, 0x7, 0xf, 0xe, 0x3, 0xfff, 0xe572, 0x0, 0x7, 0x3, 0x8, 0x2, 0x8, 0x8, 0x101, 0x7, 0xffff, 0x8, 0x3, 0xc4420000, 0x1000, 0x3, 0x3, 0x80000001, 0x2, 0x401, 0xfffffffe, 0x10001, 0x200, 0x5, 0x5, 0x5a, 0x9, 0x4, 0x4, 0x7, 0x6, 0x3, 0x7f, 0x6, 0x3, 0x0, 0x7, 0x7, 0x7, 0x1, 0x8, 0x6, 0x7, 0x1, 0x5, 0x8, 0x5, 0x1, 0x10, 0x2, 0x2, 0xcece, 0x6, 0x7, 0x9, 0xb, 0x3, 0x1, 0xfffffffe, 0x24d6, 0x4, 0xa3b, 0xd, 0x8, 0x0, 0x4, 0x8, 0x5, 0x8, 0xbc4, 0x2, 0x5, 0x0, 0x3, 0x7, 0xfffffffb, 0x0, 0x10, 0x7, 0x7b, 0x2, 0x6, 0x3, 0x5, 0x22, 0x9, 0x9, 0x6, 0xe8, 0x5, 0x1, 0x0, 0x8, 0x4, 0x2, 0x6, 0x2, 0x7, 0x5, 0x6, 0x2, 0x5, 0x3, 0xc, 0xfffffffa, 0x6, 0x8, 0x401, 0x6, 0x1, 0x7, 0x4, 0x40, 0x3]}]}}, @c_atm={{0x8}, {0x40, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff2}}, @TCA_ATM_HDR={0x2c, 0x3, "7b6ea94e0d550217e2808c7dcfbf96706e3c7c78bd470e2c22fa7826af9e0d62daf178fdf18956dd"}, @TCA_ATM_FD={0x8, 0x1, r2}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_atm={{0x8}, {0x64, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x7}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0xf, 0x3, "50a4127845058a094ed401"}, @TCA_ATM_HDR={0x3f, 0x3, "df30968f32249dfe22b55a752fa4598ea832e45eb19692f7b6420a50d14ff867772ed4c792a6ce5586bcbb312bc534cea86765b1d11505940d93b8"}]}}, @c_cbq={{0x8}, {0xc68, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x957, 0x100, 0xf, 0x7fff, 0x1, 0x20000, 0x2, 0x8, 0x401, 0x9, 0xcf1, 0xfff, 0x1134680c, 0x0, 0x8, 0x2, 0x8, 0x2, 0x7, 0x10, 0x3, 0x0, 0x0, 0xe, 0x1, 0x5, 0x2, 0xff, 0xf9, 0x8, 0x2, 0x9, 0x8, 0x4264, 0x0, 0x8, 0x2, 0xf5, 0xb, 0x8, 0x400, 0x0, 0xb9, 0xb4d7, 0x81, 0x8, 0x939, 0x1ff, 0x2000, 0x5, 0x7, 0x976f, 0xc, 0x7, 0x6, 0x0, 0x101, 0x6, 0x1, 0x6, 0x3, 0x6, 0x7, 0x3, 0x8, 0xfffffff9, 0x763, 0x9, 0x3, 0x4, 0xff, 0x2, 0x7, 0x99ff, 0x4, 0x9c43244e, 0x401, 0xd3, 0x1, 0x5, 0x0, 0x8, 0x5, 0x8, 0x74b4, 0x35, 0x67102dc4, 0xfeab, 0x0, 0x9, 0x0, 0x4, 0x1, 0xffffffff, 0x5, 0x9, 0x1, 0x30b, 0xa5e3a7e2, 0x8, 0xf, 0x7, 0x3, 0x101, 0x9, 0x5, 0x1600, 0x7, 0x65e5, 0x4, 0x20000000, 0x6, 0x0, 0x1, 0x5, 0x5, 0x3, 0x5, 0xa, 0x9f, 0x80, 0x6, 0x6, 0x80000001, 0x7, 0xc9c, 0x1, 0x6, 0xfffffff2, 0x4, 0x9, 0x0, 0x1, 0x9, 0xff38, 0xc, 0xb, 0x40000000, 0x7, 0x8, 0xfffffffd, 0x4, 0x9, 0xac4, 0x9, 0xaed7, 0x800, 0x0, 0x7, 0x0, 0x101, 0x5, 0x9, 0xf9f1, 0x11, 0xf, 0x7fff, 0x80, 0x5, 0x0, 0x1, 0x8, 0x7, 0xffff0001, 0x7, 0x0, 0x1, 0x6, 0x0, 0x2, 0x0, 0xe, 0x5, 0x5, 0x24, 0x7, 0x49db, 0x10000, 0x5, 0x800, 0x0, 0x4, 0x8, 0x8ce, 0x0, 0x1, 0x0, 0x10000, 0x40, 0x80000001, 0x0, 0x822, 0x0, 0xca2, 0x4, 0x4, 0x9, 0x3, 0x3, 0x767ae2c2, 0x0, 0x2c1d761, 0x4, 0x4, 0x101, 0x5, 0x52fd, 0x0, 0xffffffff, 0x3, 0x1, 0x5, 0x2, 0x401, 0x81, 0x7ff000, 0x8f, 0x5, 0xb, 0x6, 0x3, 0x2, 0x6, 0x7, 0x9, 0x10001, 0x8, 0x9, 0x8, 0x8, 0x100, 0x0, 0xffffffff, 0x0, 0x7, 0x9, 0x3, 0x7, 0x100, 0x6, 0x10000, 0x5, 0x3, 0x1, 0xe5, 0x3, 0xf, 0x1000, 0x7fe2, 0x0, 0x3, 0x4, 0x0, 0xd, 0xf84, 0x7fffffff]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x1, 0x0, 0x4, 0xff1, 0x80000000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff}, 0x8, 0x6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x27, 0x0, 0x10, 0xed, 0xa9, 0x400, 0x23e, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x5, 0x2, 0x9, 0xd, 0xe, 0xd2f1, 0x1, 0x4, 0x2, 0x5, 0x3, 0xfffffbff, 0x1, 0xfffff133, 0x56800000, 0x8d8, 0xb60, 0x2bb, 0x8, 0x1, 0x9, 0x4, 0xe, 0xd, 0x3, 0x100, 0x5, 0x6, 0x8000, 0x3, 0xfffffffc, 0xff, 0x81, 0x10001, 0x9, 0x8, 0x3, 0x5, 0x202, 0x8, 0x10000, 0x1, 0x199, 0x2, 0xec8, 0x0, 0x0, 0x5, 0x3, 0x4, 0xdf, 0xd, 0xa0000, 0x4, 0x24, 0x7ff, 0x10000, 0x10, 0x7, 0x6, 0x5, 0x10, 0x18000000, 0xc0db70c, 0x1, 0x8, 0x4, 0x5, 0x0, 0x2, 0xd, 0x8, 0x4, 0x1, 0x9, 0x9, 0x1, 0x0, 0x0, 0xd2, 0x5, 0x1ff, 0x1, 0x4, 0x4, 0x3, 0x8, 0x6, 0x1000, 0xb, 0xe9d, 0x3, 0x40000, 0x9, 0x5, 0x8, 0x3, 0x4, 0x8, 0x5f, 0x1, 0x8, 0xfffffffe, 0x9, 0x100, 0x1, 0x40, 0x3, 0x3, 0x3, 0x9, 0x8001, 0x62c, 0x6d031ba4, 0x9, 0xfd0, 0xfffeffff, 0xca34bea7, 0x10000, 0x1, 0x80000000, 0x1010, 0x5, 0x76, 0x6, 0x0, 0x10000, 0x2, 0x0, 0x15891fb3, 0x61, 0xb, 0x19a1, 0xfffff472, 0x4, 0x1, 0xfd9d, 0xfffffff8, 0x0, 0x2, 0x80000001, 0x1, 0xfffffffe, 0xfffffffc, 0x4, 0x3, 0x76, 0x5, 0xc, 0x0, 0x200, 0x7, 0x4, 0xd, 0x7, 0xe5, 0x8001, 0x5e, 0xff, 0xdc8, 0x4, 0x9, 0x7, 0x1, 0xb, 0xc4, 0xc07, 0x10, 0x6, 0x8b, 0x9, 0x7, 0x5, 0xce0, 0x5, 0x1, 0x9504, 0x9, 0x6, 0xfff, 0x5, 0x9, 0x3, 0xf, 0x6, 0x8, 0x3ff, 0x0, 0x800, 0x9, 0x7, 0x0, 0x22823345, 0x4, 0x18000, 0x7, 0x4, 0x9, 0xf9, 0x3, 0x1000, 0x8001, 0x1000, 0x2, 0x40008, 0x7fffffff, 0x800, 0xe5, 0x2, 0x3ff, 0x8, 0x1, 0x6, 0x1c08, 0x9, 0x1, 0x9, 0x79, 0x5, 0x6, 0x1, 0x7fffffff, 0x4, 0xe, 0x2, 0x6, 0x89, 0x55d9, 0x0, 0x1, 0x8, 0x3, 0xffff3ce8, 0x1, 0x33f6, 0x1ff, 0x9, 0x0, 0x0, 0x7b03, 0x7, 0x4, 0x10, 0x74f, 0x2, 0xf, 0x8, 0xfffffffd, 0xc3e, 0x8, 0x5, 0x1, 0x1ff, 0x6, 0x3]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x4}, 0x1, 0x8001}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0xc}, 0x1000, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7fff, 0x3, 0x4, 0xe, 0x9, 0x2, 0x1, 0x10, 0x3, 0x0, 0x4, 0xb2, 0xa00000, 0x9e8, 0x9, 0x3, 0xdd, 0x0, 0x10, 0x2, 0x5, 0x6, 0xb, 0xb, 0x80000000, 0x1, 0xfffff591, 0x1000, 0x3, 0xfffffbff, 0x1, 0x1, 0xe, 0x6, 0x0, 0x8, 0x80, 0x4f1d, 0x4, 0x6, 0xfa9, 0x2, 0x0, 0x9, 0xffffffff, 0xb566, 0x9, 0x6, 0x3, 0x1, 0xc, 0xd, 0x7, 0x6, 0x0, 0x10001, 0x3, 0xd, 0x6, 0x10000, 0x6, 0x81, 0x7, 0x3, 0x4, 0x7af7, 0xfffffff2, 0x6, 0x1, 0x0, 0x4, 0x5, 0x10001, 0xc390, 0x10001, 0x27, 0xfffffffd, 0xfd7, 0x2, 0x0, 0x1, 0x3, 0xff, 0x800, 0x4, 0x0, 0xd, 0x4, 0x2, 0xc71, 0x7, 0xfa7, 0x898, 0x0, 0x0, 0xad, 0x6, 0x1000, 0xff, 0x0, 0x8000, 0x7, 0x4, 0x7, 0x2, 0x100, 0x1, 0x9, 0x5, 0x3, 0x41, 0xaad, 0xbca, 0x59, 0x5c3, 0xfffffff7, 0x7, 0x3, 0x4, 0x1, 0x5, 0x10000, 0x4, 0xaca, 0xebf, 0x8, 0xbf, 0x2, 0xffffffff, 0x4, 0xe3d, 0x6e6, 0x1bf3ec16, 0x3c54f279, 0xd, 0x10000, 0x8, 0x9, 0xfff, 0xc240, 0x2, 0x2, 0xc, 0xf4, 0xe05, 0xffc00000, 0x401, 0x0, 0x4, 0x5, 0x3, 0xa90a, 0x0, 0x9, 0xa91e, 0x6, 0x3, 0xb, 0x3, 0x3c4a, 0x9, 0xffffffff, 0x7, 0x4, 0x80000000, 0x0, 0x9, 0x2, 0x32, 0x4, 0x0, 0x1, 0x4, 0x4, 0x3, 0x7fff, 0xffff, 0x101, 0x8, 0xfffffffb, 0xffff, 0x8, 0x6, 0xd4, 0x9, 0x3, 0x2, 0x5, 0x8001, 0x1, 0x8000, 0x5, 0x8, 0xd, 0x4, 0x7, 0x80000001, 0xcda, 0x3c, 0x80000001, 0x8dab, 0x9f, 0xfffffffe, 0x80000000, 0x2, 0x4, 0x0, 0x0, 0x5f2, 0x6, 0x1, 0x40, 0x3, 0x0, 0x6, 0x3, 0x100, 0x7f, 0xc8a1, 0xa8, 0x40, 0x2, 0x6, 0xa, 0x6, 0x4f, 0x6, 0x7ff, 0x3, 0x6, 0x80000000, 0x2, 0x2724, 0x6, 0x4, 0xe4, 0x7, 0x1, 0xaf, 0xfbc, 0x31, 0x6, 0x1000, 0xd, 0x80000000, 0x7a3, 0x458, 0x7f, 0xffffff09, 0x76, 0x2, 0xf1, 0x0, 0x9, 0x7, 0x95]}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0xc}, 0x0, 0xe}}]}}]}, 0x1628}, 0x1, 0x0, 0x0, 0x20002800}, 0x8000) 2.689168261s ago: executing program 2 (id=1811): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x133d, &(0x7f0000000340)={0x0, 0x7af1, 0x1, 0x4, 0x3da}, &(0x7f0000000200)=0x0, &(0x7f0000000100)) setresgid(0x0, 0xee01, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000380)=""/108) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x2) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f00000000c0), 0x0, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4009, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r13, 0x0) write$P9_RSTATu(r5, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r13], 0x228) 2.688495001s ago: executing program 6 (id=1812): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000005a000000040000000900d9bd103dc1000000000000bdfa2b20328caaa265d02e19381add15de6bc2c16bcee7d13c6195fcc825a8e86701018752a14346c0b184979f66780714dd3fc852809c9bc9d457f4cf1033d91cd5e5df9d4ac4c2c4a8690a572ce882d95bcd8b19459184c28869937a2ff15f28abea41c338010b545d907233518181d6e23fc1521fd87891493be1a04996cdd77405dbd483880dab664972570f7ad2ab38606ec8908c872aa88d4b8bd3f12ea54d25fe091dff5b82501fef8d37332f2f2e8bbeba63aa6171b585d93a3d674e971eb6b7307d05d33301b64464c4ad6b0071a2421709e7fe911143c12267e78f8d01095d52c42b74a6c5ebb3cb32b5b9033def87ea9d6bfd881b3665edeb5f2cee6100d2701bd7e2b664b17aac9f62068899ffe0c18d71a1b45b4c83b5535a89671b4c9be52a52977d693c8dc158c2fc1bef46ff55000000000000", @ANYRES32, @ANYBLOB='2 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)={0x10c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x48b8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x42, 0x8, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4a005}, 0x4000000) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) 2.647072833s ago: executing program 6 (id=1813): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.477536571s ago: executing program 0 (id=1814): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x62510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xfb5, 0x4, 0x1, 0xa, 0x120005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) 1.893454678s ago: executing program 5 (id=1815): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '([\x00'}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) 1.713858092s ago: executing program 6 (id=1816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3, 0x8440}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r5, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x4, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000810) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[], [{@measure}, {@subj_role={'subj_role', 0x3d, 'fou\x00'}}, {@context={'context', 0x3d, 'root'}}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x15, 0x0, 0x0, 0x4eb, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x5cb6c178341a18f0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400"], 0x74}}, 0x0) 1.666805013s ago: executing program 0 (id=1817): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xa, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff96, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x401, 0x27, 0x0, 0x80000000, 0x9, 0x400002, 0x9, 0x7}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x83, 0xa}, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.560660503s ago: executing program 5 (id=1819): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x801, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02031008"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (fail_nth: 1) 1.303241073s ago: executing program 3 (id=1821): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800010000000000000000000500000a19000000060a010400000200000000000a000001040009c8df67e0c0175d4c644401c5b188c00a77912269c8e7ec7eb7fe250480140000001100010000000000000000000100000a"], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) setreuid(0x0, 0xee00) setresuid(0x0, 0xee00, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000) 1.128246419s ago: executing program 3 (id=1822): mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) setregid(0xee01, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000f2a8be645c099968f7"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.127734179s ago: executing program 0 (id=1823): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xa800, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) unshare(0x62040200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fffeffff00000000090000009500000000000000aabe0dd106f833382bb6d7fe9164863a2c818e11c15f7ed62c66ed8676c45cfc22b672cc232cdab2283c15d16400299d5bae834c4525664522ee2b863e8d3372e4fbe2c60ff87042f0f68c36103237aa67c72bac7e2cabecd41eefa30f91602478dd672ad0c12e7a8bb03522365fa727d174679e25254cc0f9130e7f48f646731861051283f12c021e79c6ef590efa5348d1496dda9288c8a7b05d62e44a36aa76c4c4e36c0665b0ce3fc710f1cd514698f0d52810257bc458cba3b385a57ecd6b5c2919810954a1021f4c03604115"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$binfmt_aout(r7, &(0x7f0000000480)={{0x108, 0x2, 0x9c, 0x20e, 0xdf, 0xb2, 0x252, 0x9}, "107cb68e4e6497faabdf4845e8f87e613ecaad37d639ca87018dd43191b4c342e8e5935f3eef8177095c7b3a101bd342dbad83e11759125e3dca31653428abb8dfc8bf05630e08cda232cf4f18fe7f6d73179907f2c4ed97e9493e0cfff71a358118ca88fc2c4d474c0c7d3dbc1c1ed85c81e2a236a9ae4e159d713d14d328bfdec450f000cbe0e2ac4189e855eafb612e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x170}]}, 0x34}}, 0x0) 1.127426708s ago: executing program 3 (id=1824): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='2 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)={0x10c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x48b8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x42, 0x8, 0x80000000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4a005}, 0x4000000) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x8, 0x0, 0x7ffc1ffb}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) 940.059942ms ago: executing program 5 (id=1825): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) eventfd2(0x401, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 855.152006ms ago: executing program 3 (id=1826): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") chdir(&(0x7f0000000100)='./file0\x00') r0 = open(0x0, 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 725.874781ms ago: executing program 6 (id=1827): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$eJzs3M9rE2kYwPEnaX41pU1OC7uw7MPuZfcypNmrlyAtiAGlNqIehKmdaMiYlEyMRMT2Jt48+ycUj94E9R/oxZs3D+KlCIKXgtKRzOR301o16dT2+4EyD+/7PjPv/Gh53sLM9pXHt8tFxyiadQknVMIiG7Ijkm5FbSGJeNuwF8ek34b8N/PpzZ+Xrl47n8vnF5ZUF3PL/2dVde6vF3fvP/37VX3m8rO553HZSl/f/ph9t/Xb1u/bu8udvVfraupKtVo3V2xLV0tO2VC9aFumY2mp4li1gf6iXV1ba6pZWZ1NrtUsx1Gz0tSy1dR6Veu1ppo3zVJFDcPQ2aScNlPfnVHYXFoycxOZDIIwPaqxVsuZU35nSEL9PYXNI5sZAAA4Ng5X//vGWf/fKjlacrTyrfo/LNT/k+PV/7sji0acDNHWAiBnJtu/v4Oo/wEAAAAAAAAAAAAAAAAAAAAA+BXsuG7Kdd1UZ+umz4i4biouIglphX570PPEZOy5/+2fA+5/KMDpYsz6XtxLiNgPG4VGwd/6/bmilMSWtGSiIl+856HNjxfP5Rcy6knLS3u9ne+9JBjv5HekR+fP+/nal7/eKEQl2Tu+JVn/vcNR+dmh/KiINAox+fefvnxDUvL6hlTFllVvP738B/OqZy/kh44/7Y0DAAAAAOAkMLQrPbj+9b8maRja+WzIUL/f2F1fZ+TJ233W55nu+jwmvfyI/BEJ7rwBAAAAADhNnOa9smnbVq0VSESkNtAy/mBmYnseCnbb/4fotsTHeoihSzcUPDqCE5xM8Nl13f3GGAn/oTloPwlx3fXWoJ+fT1hEAroaH0Tk6G9BXET2dsXGcjG94P0d/wYeZnCQf5UAAAAATEKv6A96JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF6H/XhYZ/yPfHus73BTwZwlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDx8DQAA//+zrBg5") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, 0x0) linkat(r4, &(0x7f00000000c0)='./bus\x00', r0, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xae, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000380)=r6}, 0x20) socket(0x10, 0x3, 0x0) shutdown(r5, 0x0) 608.253028ms ago: executing program 3 (id=1828): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x9, 0x26, 0x4, @mcast2, @empty, 0x0, 0x7868, 0x3, 0x6}}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0x1c, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffa}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @exit, @ldst={0x0, 0x2, 0x1, 0xb, 0x7, 0x4, 0xfffffffffffffff0}, @ldst={0x3, 0x2, 0x0, 0x8, 0xb, 0xfffffffffffffff4, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xa2, &(0x7f0000000200)=""/162, 0x41000, 0x6, '\x00', r2, @fallback=0x2c, r3, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xe, 0x10000}, 0x10, r4, r5, 0xa, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0xa, 0xc}, {0x1, 0x1, 0xc, 0x5}, {0x5, 0x1, 0xc, 0xb}, {0x2, 0x4, 0x10, 0xa}, {0x1, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x8, 0x4}, {0x2, 0x5, 0x5}, {0x4, 0x4, 0x9, 0x2}, {0x2, 0x4, 0xc, 0x3}, {0x1, 0x4, 0xc, 0x7}], 0x10, 0x9a5}, 0x94) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 607.515878ms ago: executing program 0 (id=1829): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = io_uring_setup(0x40ff, &(0x7f0000000240)={0x0, 0x7cf1, 0x0, 0x1, 0xe6}) r8 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0xddc2, 0x10000, 0xffffffff, 0x100, 0x0, r7}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, 0x0, 0x4000000) syz_io_uring_submit(r9, r10, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r12, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) set_mempolicy(0x6005, 0x0, 0x4) 273.315793ms ago: executing program 3 (id=1830): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f00000002c0)={0x19980330, r1}, &(0x7f0000000080)={0x0, 0x1, 0xfffffffe}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a05a, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x9, 0x6}, 0x4, 0x0, 0x800001, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x4, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) unshare(0xa000000) msgget(0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180)) r5 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60d3ffff00403a00fc00a104be0100000000000000000000ff020000000000000000000000000001020090780000050260d0835a00000000fc010000000000000000000000000000fe8000000000000000000000000000bb3a00000000000000af0004000b000200"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000300)=[r7, r7, r7]) 60.595852ms ago: executing program 5 (id=1831): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100ebff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18001, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0}, 0xc9c4, 0x1000000000003, 0x10000, 0x0, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x40000c0}, 0x0, 0xe000000000000002, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10c2, &(0x7f0000002340)={0x0, 0x815e, 0x80, 0x0, 0x2fe}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x48fd, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r3}, &(0x7f0000bbdffc)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): I: 0000200000000100 [ 174.478275][ T8555] RBP: 00007f4951437090 R08: 0000000000000000 R09: 0000000000000000 [ 174.478286][ T8555] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 174.478298][ T8555] R13: 00007f4952c56038 R14: 00007f4952c55fa0 R15: 00007fffc65286b8 [ 174.478316][ T8555] [ 174.479691][ T8561] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 174.597321][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1363'. [ 174.603990][ T8561] EXT4-fs (loop2): no journal found [ 174.611917][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.618771][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 174.684044][ C0] EXT4-fs (loop2): initial error at time 1772246415: ext4_get_journal_inode:5863: inode 5 [ 174.684097][ C0] EXT4-fs (loop2): last error at time 1772246415: ext4_get_journal_inode:5863: inode 5 [ 174.699336][ T8577] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.710048][ T8561] EXT4-fs (loop2): can't get journal size [ 174.711296][ T8561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.711599][ T8577] EXT4-fs (loop5): 1 truncate cleaned up [ 174.711931][ T8577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.735168][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.808219][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.886423][ T8604] FAULT_INJECTION: forcing a failure. [ 174.886423][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.907837][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.6.1376 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.907869][ T8604] Tainted: [W]=WARN [ 174.907875][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.907888][ T8604] Call Trace: [ 174.907895][ T8604] [ 174.907902][ T8604] __dump_stack+0x1d/0x30 [ 174.907966][ T8604] dump_stack_lvl+0x95/0xd0 [ 174.908026][ T8604] dump_stack+0x15/0x1b [ 174.908045][ T8604] should_fail_ex+0x263/0x280 [ 174.908067][ T8604] should_fail+0xb/0x20 [ 174.908093][ T8604] should_fail_usercopy+0x1a/0x20 [ 174.908116][ T8604] _copy_from_user+0x1c/0xb0 [ 174.908145][ T8604] __sys_sendto+0x1ca/0x4d0 [ 174.908177][ T8604] __x64_sys_sendto+0x76/0x90 [ 174.908202][ T8604] x64_sys_call+0x2d35/0x3020 [ 174.908353][ T8604] do_syscall_64+0x12c/0x370 [ 174.908451][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.908470][ T8604] RIP: 0033:0x7f0bb33ec799 [ 174.908486][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.908515][ T8604] RSP: 002b:00007f0bb1e3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 174.908536][ T8604] RAX: ffffffffffffffda RBX: 00007f0bb3665fa0 RCX: 00007f0bb33ec799 [ 174.908574][ T8604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 174.908587][ T8604] RBP: 00007f0bb1e3f090 R08: 0000200000000100 R09: 0000000000000010 [ 174.908600][ T8604] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 174.908611][ T8604] R13: 00007f0bb3666038 R14: 00007f0bb3665fa0 R15: 00007ffdda7cd018 [ 174.908630][ T8604] [ 175.558373][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 175.563455][ T4640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.641019][ T8609] set_capacity_and_notify: 4 callbacks suppressed [ 175.641033][ T8609] loop0: detected capacity change from 0 to 128 [ 175.697027][ T8611] loop3: detected capacity change from 0 to 512 [ 175.704928][ T8611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.737889][ T8611] EXT4-fs (loop3): 1 truncate cleaned up [ 175.743710][ T8614] loop5: detected capacity change from 0 to 512 [ 175.762156][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.787870][ T8614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.808568][ T8614] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 175.823430][ T8614] EXT4-fs (loop5): 1 truncate cleaned up [ 175.829762][ T8614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.849158][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.043294][ T8638] FAULT_INJECTION: forcing a failure. [ 176.043294][ T8638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.056371][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: syz.5.1381 Tainted: G W syzkaller #0 PREEMPT(full) [ 176.056439][ T8638] Tainted: [W]=WARN [ 176.056445][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.056455][ T8638] Call Trace: [ 176.056460][ T8638] [ 176.056466][ T8638] __dump_stack+0x1d/0x30 [ 176.056560][ T8638] dump_stack_lvl+0x95/0xd0 [ 176.056579][ T8638] dump_stack+0x15/0x1b [ 176.056596][ T8638] should_fail_ex+0x263/0x280 [ 176.056616][ T8638] should_fail+0xb/0x20 [ 176.056674][ T8638] should_fail_usercopy+0x1a/0x20 [ 176.056695][ T8638] _copy_to_iter+0xd2/0xea0 [ 176.056732][ T8638] ? copy_page_to_iter+0x16a/0x2d0 [ 176.056762][ T8638] copy_page_to_iter+0x18f/0x2d0 [ 176.056783][ T8638] __sk_msg_recvmsg+0x25e/0xa20 [ 176.056876][ T8638] sk_msg_recvmsg+0x35/0x50 [ 176.056896][ T8638] unix_bpf_recvmsg+0x2cc/0x7c0 [ 176.056922][ T8638] unix_stream_recvmsg+0xeb/0x130 [ 176.056947][ T8638] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 176.056998][ T8638] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 176.057027][ T8638] sock_recvmsg+0x139/0x160 [ 176.057091][ T8638] __sys_recvfrom+0x122/0x200 [ 176.057125][ T8638] __x64_sys_recvfrom+0x76/0x90 [ 176.057147][ T8638] x64_sys_call+0x2c0c/0x3020 [ 176.057231][ T8638] do_syscall_64+0x12c/0x370 [ 176.057249][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.057311][ T8638] RIP: 0033:0x7fb1bde4c799 [ 176.057325][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.057339][ T8638] RSP: 002b:00007fb1bc865028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 176.057356][ T8638] RAX: ffffffffffffffda RBX: 00007fb1be0c6180 RCX: 00007fb1bde4c799 [ 176.057401][ T8638] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000007 [ 176.057415][ T8638] RBP: 00007fb1bc865090 R08: 0000000000000000 R09: 0000000000000000 [ 176.057429][ T8638] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 176.057443][ T8638] R13: 00007fb1be0c6218 R14: 00007fb1be0c6180 R15: 00007ffd32cea7d8 [ 176.057463][ T8638] [ 176.354783][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.364028][ T8637] loop2: detected capacity change from 0 to 4096 [ 176.406640][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 176.406652][ T28] audit: type=1326 audit(1772246417.465:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.446899][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.463279][ T28] audit: type=1326 audit(1772246417.465:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.487130][ T28] audit: type=1326 audit(1772246417.465:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.512157][ T28] audit: type=1326 audit(1772246417.465:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.536345][ T28] audit: type=1326 audit(1772246417.465:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.560072][ T28] audit: type=1326 audit(1772246417.465:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.583536][ T28] audit: type=1326 audit(1772246417.465:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.607077][ T28] audit: type=1326 audit(1772246417.465:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.631832][ T28] audit: type=1326 audit(1772246417.465:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.666586][ T28] audit: type=1326 audit(1772246417.465:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb33ec799 code=0x7ffc0000 [ 176.760353][ T8651] loop6: detected capacity change from 0 to 128 [ 176.821624][ T8654] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.1392'. [ 176.922741][ T8661] lo speed is unknown, defaulting to 1000 [ 177.686720][ T8671] loop3: detected capacity change from 0 to 512 [ 177.698656][ T8671] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.733138][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.756521][ T8671] EXT4-fs (loop3): 1 truncate cleaned up [ 177.764326][ T8677] loop5: detected capacity change from 0 to 128 [ 177.772567][ T8671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.853401][ T8690] loop6: detected capacity change from 0 to 1024 [ 177.870109][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.884731][ T8691] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1399'. [ 177.905165][ T8690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.951616][ T8690] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.007432][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 178.018511][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.028637][ T8706] syz.3.1408 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.039234][ T4463] usb 14-1: device descriptor read/8, error -110 [ 178.053839][ T8708] netlink: 15678 bytes leftover after parsing attributes in process `syz.6.1409'. [ 178.192281][ T4463] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 178.227819][ T4463] usb 14-1: enqueue for inactive port 0 [ 178.233396][ T4463] usb 14-1: enqueue for inactive port 0 [ 178.239169][ T4463] usb 14-1: enqueue for inactive port 0 [ 178.552360][ T8724] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 178.558957][ T8724] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 178.608488][ T8724] vhci_hcd vhci_hcd.0: Device attached [ 178.622235][ T8730] bond3: option mode: invalid value (9) [ 178.628123][ T8730] bond3 (unregistering): Released all slaves [ 178.652548][ T8716] lo speed is unknown, defaulting to 1000 [ 178.658925][ T8724] batman_adv: batadv0: Removing interface: dummy0 [ 178.674900][ T8734] loop2: detected capacity change from 0 to 512 [ 178.742624][ T8734] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.767938][ T8724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.800186][ T8734] EXT4-fs (loop2): 1 truncate cleaned up [ 178.812071][ T8734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.851185][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.877817][ T3418] usb 2-1: SetAddress Request (2) to port 0 [ 178.883866][ T3418] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 178.888659][ T8745] loop2: detected capacity change from 0 to 128 [ 178.904754][ T8724] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 178.936598][ T8726] vhci_hcd: connection reset by peer [ 178.942274][ T30] vhci_hcd vhci_hcd.0: stop threads [ 178.947491][ T30] vhci_hcd vhci_hcd.0: release socket [ 178.970057][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 179.001676][ T8748] EXT4-fs: Ignoring removed nobh option [ 179.023042][ T8748] EXT4-fs: Ignoring removed i_version option [ 179.051444][ T8748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.079483][ T8748] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 179.089740][ T8748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c041e018, mo2=0002] [ 179.109916][ T8748] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.142185][ T8748] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 179.174665][ T8758] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 179.184716][ T8758] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 179.207895][ T8758] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 179.224431][ T8748] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 179.236078][ T8758] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.1422: unexpected bad inode w/o EXT4_IGET_BAD [ 179.251564][ T8758] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 179.260718][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 179.260735][ C1] EXT4-fs (loop5): initial error at time 1772246420: ext4_get_journal_inode:5863: inode 5 [ 179.260763][ C1] EXT4-fs (loop5): last error at time 1772246420: ext4_get_journal_inode:5863: inode 5 [ 179.277874][ T8758] EXT4-fs (loop5): no journal found [ 179.292236][ T8748] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1419: bg 0: block 40: padding at end of block bitmap is not set [ 179.297828][ T8758] EXT4-fs (loop5): can't get journal size [ 179.306561][ T8748] loop2: lost filesystem error report for type 5 error -117 [ 179.314242][ T8748] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 179.321596][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 179.321612][ C1] EXT4-fs (loop2): initial error at time 1772246420: ext4_validate_block_bitmap:441 [ 179.321661][ C1] EXT4-fs (loop2): last error at time 1772246420: ext4_validate_block_bitmap:441 [ 179.361202][ T8748] loop2: lost filesystem error report for type 5 error -117 [ 179.361546][ T8748] EXT4-fs (loop2): 1 truncate cleaned up [ 179.369555][ T8758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.375182][ T8748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.387157][ T4463] usb usb14-port1: attempt power cycle [ 179.527334][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.614736][ T8748] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.1419: bad symlink. [ 179.786218][ T8767] xt_CT: No such helper "snmp_trap" [ 180.165593][ T8775] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.179923][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.190638][ T8775] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 180.208581][ T8778] ext4: Unknown parameter 'measure' [ 180.217288][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 180.226266][ T8778] netlink: 'syz.3.1426': attribute type 5 has an invalid length. [ 180.233995][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1426'. [ 180.411620][ T8775] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 180.429037][ T8785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.431578][ T8775] System zones: 0-2, 18-18, 34-34 [ 180.447433][ T8775] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1427: bad orphan inode 15 [ 180.460731][ T8785] EXT4-fs (loop2): 1 truncate cleaned up [ 180.471062][ T8785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.471263][ T8775] loop5: lost filesystem error report for type 5 error -117 [ 180.484010][ T8775] ext4_test_bit(bit=14, block=18) = 1 [ 180.491315][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 180.491336][ C0] EXT4-fs (loop5): initial error at time 1772246421: ext4_orphan_get:1417 [ 180.491359][ C0] EXT4-fs (loop5): last error at time 1772246421: ext4_orphan_get:1417 [ 180.538360][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.551588][ T8775] is_bad_inode(inode)=0 [ 180.555732][ T8775] NEXT_ORPHAN(inode)=2264924160 [ 180.560703][ T8775] max_ino=32 [ 180.563938][ T8775] i_nlink=0 [ 180.567239][ T8775] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1427: corrupted inode contents [ 180.581086][ T8775] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.581211][ T8775] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.1427: mark_inode_dirty error [ 180.602231][ T8775] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.602569][ T8775] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1427: corrupted inode contents [ 180.624463][ T8775] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.628044][ T8775] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1427: mark_inode_dirty error [ 180.649313][ T8775] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.649456][ T8775] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.1427: mark inode dirty (error -117) [ 180.693251][ T8791] lo speed is unknown, defaulting to 1000 [ 180.703320][ T8775] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.703645][ T8775] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 180.722681][ T8775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.741689][ T8775] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.1427: path /270/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 180.757592][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1432'. [ 180.770173][ T8800] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 180.773649][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 180.776709][ T8800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.794190][ T8793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1432'. [ 180.803210][ T8800] vhci_hcd vhci_hcd.0: Device attached [ 180.808845][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 180.818777][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.832821][ T8807] bond1: option mode: invalid value (9) [ 180.839455][ T8807] bond1 (unregistering): Released all slaves [ 180.879947][ T8793] syzkaller0: entered promiscuous mode [ 180.885665][ T8793] syzkaller0: entered allmulticast mode [ 180.891400][ T4463] usb 14-1: SetAddress Request (5) to port 0 [ 180.897371][ T4463] usb 14-1: new SuperSpeed USB device number 5 using vhci_hcd [ 180.905192][ T8800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.981477][ T8800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.046602][ T8802] vhci_hcd: connection reset by peer [ 181.056092][ T30] vhci_hcd vhci_hcd.6: stop threads [ 181.061454][ T30] vhci_hcd vhci_hcd.6: release socket [ 181.067357][ T8816] set_capacity_and_notify: 5 callbacks suppressed [ 181.067368][ T8816] loop0: detected capacity change from 0 to 4096 [ 181.086334][ T8816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.125518][ T30] vhci_hcd vhci_hcd.6: disconnect device [ 181.158987][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.486116][ T8826] loop0: detected capacity change from 0 to 512 [ 181.493201][ T8826] ext4: Unknown parameter 'measure' [ 181.507091][ T8826] netlink: 'syz.0.1438': attribute type 5 has an invalid length. [ 182.318795][ T8847] loop3: detected capacity change from 0 to 512 [ 182.326371][ T8847] ext4: Unknown parameter 'measure' [ 182.336297][ T8847] __nla_validate_parse: 2 callbacks suppressed [ 182.336308][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 182.351339][ T8847] netlink: 'syz.3.1444': attribute type 5 has an invalid length. [ 182.359123][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 182.545210][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1439'. [ 182.783238][ T8850] loop2: detected capacity change from 0 to 1024 [ 182.803403][ T8852] loop6: detected capacity change from 0 to 512 [ 182.821142][ T8850] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 182.840903][ T8850] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 182.851693][ T8852] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.871526][ T8850] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 182.871526][ T8852] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 182.882482][ T8850] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #5: comm syz.2.1447: unexpected bad inode w/o EXT4_IGET_BAD [ 182.903273][ T8850] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 182.903432][ T8850] EXT4-fs (loop2): no journal found [ 182.912486][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 182.912503][ C0] EXT4-fs (loop2): initial error at time 1772246423: ext4_get_journal_inode:5863: inode 5 [ 182.912530][ C0] EXT4-fs (loop2): last error at time 1772246423: ext4_get_journal_inode:5863: inode 5 [ 182.949394][ T8850] EXT4-fs (loop2): can't get journal size [ 182.950382][ T8852] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 182.963438][ T8852] System zones: 0-2, 18-18, 34-34 [ 182.963857][ T8850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.981385][ T8852] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1446: bad orphan inode 15 [ 183.007047][ T8852] loop6: lost filesystem error report for type 5 error -117 [ 183.007168][ T8852] ext4_test_bit(bit=14, block=18) = 1 [ 183.014512][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 183.014550][ C1] EXT4-fs (loop6): initial error at time 1772246424: ext4_orphan_get:1417 [ 183.014577][ C1] EXT4-fs (loop6): last error at time 1772246424: ext4_orphan_get:1417 [ 183.056840][ T8852] is_bad_inode(inode)=0 [ 183.061254][ T8852] NEXT_ORPHAN(inode)=2264924160 [ 183.066195][ T8852] max_ino=32 [ 183.066203][ T8852] i_nlink=0 [ 183.100090][ T8857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.133047][ T8852] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1446: corrupted inode contents [ 183.150240][ T8862] loop5: detected capacity change from 0 to 512 [ 183.191049][ T8857] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.198631][ T8862] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.201333][ T8857] bridge1: entered promiscuous mode [ 183.211066][ T8852] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.215982][ T8852] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.1446: mark_inode_dirty error [ 183.216354][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.246022][ T8852] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.246141][ T8852] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1446: corrupted inode contents [ 183.255397][ T8862] EXT4-fs (loop5): 1 truncate cleaned up [ 183.273120][ T8852] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.273267][ T8852] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.1446: mark_inode_dirty error [ 183.294821][ T8852] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.1446: mark inode dirty (error -117) [ 183.313351][ T8852] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 183.389253][ T8863] loop0: detected capacity change from 0 to 512 [ 183.396517][ T8863] ext4: Unknown parameter 'measure' [ 183.408765][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 183.417631][ T8863] netlink: 'syz.0.1450': attribute type 5 has an invalid length. [ 183.425438][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 183.488288][ T8868] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 183.494871][ T8868] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.510160][ T8852] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.1446: path /91/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 183.551865][ T8868] vhci_hcd vhci_hcd.0: Device attached [ 183.573459][ T8872] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.619310][ T8872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.698230][ T8876] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.762329][ T8870] vhci_hcd: connection closed [ 183.769378][ T3804] vhci_hcd vhci_hcd.3: stop threads [ 183.781346][ T3804] vhci_hcd vhci_hcd.3: release socket [ 183.790966][ T3804] vhci_hcd vhci_hcd.3: disconnect device [ 183.823495][ T9] usb 8-1: enqueue for inactive port 0 [ 183.951579][ T8885] lo speed is unknown, defaulting to 1000 [ 183.957922][ T3418] usb 2-1: device descriptor read/8, error -110 [ 183.971308][ T8887] loop5: detected capacity change from 0 to 1024 [ 184.006650][ T8890] loop0: detected capacity change from 0 to 512 [ 184.016668][ T8887] EXT4-fs: Ignoring removed oldalloc option [ 184.023679][ T8887] EXT4-fs: Ignoring removed bh option [ 184.030314][ T8890] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.041347][ T9] usb 8-1: enqueue for inactive port 0 [ 184.060239][ T8890] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.1457: path /310/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 184.067815][ T3418] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 184.093621][ T8890] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.1457: path /310/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 184.107828][ T3418] usb 2-1: enqueue for inactive port 0 [ 184.119803][ T3418] usb 2-1: enqueue for inactive port 0 [ 184.125262][ T3418] usb 2-1: enqueue for inactive port 0 [ 184.138571][ T8890] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.1457: path /310/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 184.183397][ T8896] loop6: detected capacity change from 0 to 512 [ 184.189849][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 184.189859][ T28] audit: type=1400 audit(1772246425.255:5331): avc: denied { mounton } for pid=8884 comm="syz.6.1456" path="/file0" dev="ramfs" ino=23433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 184.369472][ T8885] xt_hashlimit: size too large, truncated to 1048576 [ 184.431451][ T8905] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.820849][ T8925] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.866826][ T8925] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 184.903739][ T8934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.914110][ T8925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 184.922370][ T8925] System zones: 0-2, 18-18, 34-34 [ 184.927907][ T8925] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1465: bad orphan inode 15 [ 184.937993][ T8925] loop3: lost filesystem error report for type 5 error -117 [ 184.938755][ T8925] ext4_test_bit(bit=14, block=18) = 1 [ 184.951395][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 184.951410][ C1] EXT4-fs (loop3): initial error at time 1772246426: ext4_orphan_get:1417 [ 184.951428][ C1] EXT4-fs (loop3): last error at time 1772246426: ext4_orphan_get:1417 [ 184.953333][ T8934] EXT4-fs (loop2): 1 truncate cleaned up [ 184.958109][ T8925] is_bad_inode(inode)=0 [ 184.985721][ T8925] NEXT_ORPHAN(inode)=2264924160 [ 184.990645][ T8925] max_ino=32 [ 184.993831][ T8925] i_nlink=0 [ 185.018031][ T8925] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1465: corrupted inode contents [ 185.030971][ T8925] fserror_report: 2 callbacks suppressed [ 185.030983][ T8925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.036735][ T8925] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.1465: mark_inode_dirty error [ 185.057497][ T8925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.057657][ T8925] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1465: corrupted inode contents [ 185.099646][ T8925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.115890][ T8925] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1465: mark_inode_dirty error [ 185.140415][ T8942] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 185.146994][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 185.162843][ T8925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.163304][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 185.180716][ T8925] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.1465: mark inode dirty (error -117) [ 185.194002][ T8925] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.194170][ T8925] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 185.275568][ T8947] ext4: Unknown parameter 'measure' [ 185.287283][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 185.296276][ T8947] netlink: 'syz.5.1468': attribute type 5 has an invalid length. [ 185.304059][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1468'. [ 185.316487][ T9] usb usb8-port1: attempt power cycle [ 185.351954][ T8949] netlink: 'syz.6.1471': attribute type 13 has an invalid length. [ 185.416857][ T8949] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.1471'. [ 185.495370][ T8925] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.1465: path /296/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 185.560997][ T8945] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 185.624238][ T3418] usb 2-1: SetAddress Request (3) to port 0 [ 185.641285][ T8945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.659472][ T3418] usb 2-1: new SuperSpeed USB device number 3 using vhci_hcd [ 185.669290][ T8940] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1469: bad orphan inode 134217728 [ 185.680719][ T8940] loop2: lost filesystem error report for type 5 error -117 [ 185.683541][ T8953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.712949][ T8943] vhci_hcd: connection reset by peer [ 185.724232][ T3811] vhci_hcd vhci_hcd.0: stop threads [ 185.734822][ T3811] vhci_hcd vhci_hcd.0: release socket [ 185.740454][ T3811] vhci_hcd vhci_hcd.0: disconnect device [ 185.805878][ T8958] lo speed is unknown, defaulting to 1000 [ 185.843559][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 185.886996][ T8964] EXT4-fs: inline encryption not supported [ 185.918635][ T8964] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.957860][ T4463] usb 14-1: device descriptor read/8, error -110 [ 186.062315][ T3811] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:16: lblock 8 mapped to illegal pblock 8 (length 8) [ 186.077148][ T3811] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 186.077157][ T4463] usb 14-1: new SuperSpeed USB device number 5 using vhci_hcd [ 186.077254][ T3811] EXT4-fs (loop6): This should not happen!! Data will be lost [ 186.077254][ T3811] [ 186.217105][ T8978] set_capacity_and_notify: 8 callbacks suppressed [ 186.217128][ T8978] loop3: detected capacity change from 0 to 512 [ 186.230375][ T8978] ext4: Unknown parameter 'measure' [ 186.239296][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 186.248303][ T8978] netlink: 'syz.3.1478': attribute type 5 has an invalid length. [ 186.513254][ T8981] loop0: detected capacity change from 0 to 512 [ 186.515789][ T4463] usb 14-1: enqueue for inactive port 0 [ 186.534086][ T4463] usb 14-1: enqueue for inactive port 0 [ 186.539694][ T4463] usb 14-1: enqueue for inactive port 0 [ 186.555316][ T8985] loop6: detected capacity change from 0 to 512 [ 186.566154][ T8981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.577163][ T8985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 186.625550][ T8981] EXT4-fs (loop0): 1 truncate cleaned up [ 186.637636][ T8985] EXT4-fs (loop6): 1 truncate cleaned up [ 186.842053][ T8994] loop3: detected capacity change from 0 to 512 [ 186.884976][ T8994] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.914493][ T8993] loop6: detected capacity change from 0 to 8192 [ 186.925952][ T8994] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 186.957927][ T8994] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 186.986396][ T8994] System zones: 0-2, 18-18, 34-34 [ 186.993627][ T8994] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1482: bad orphan inode 15 [ 187.038176][ T8994] loop3: lost filesystem error report for type 5 error -117 [ 187.038315][ T8994] ext4_test_bit(bit=14, block=18) = 1 [ 187.051011][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 187.051026][ C0] EXT4-fs (loop3): initial error at time 1772246428: ext4_orphan_get:1417 [ 187.051051][ C0] EXT4-fs (loop3): last error at time 1772246428: ext4_orphan_get:1417 [ 187.105894][ T8994] is_bad_inode(inode)=0 [ 187.120022][ T8994] NEXT_ORPHAN(inode)=2264924160 [ 187.134705][ T8994] max_ino=32 [ 187.145735][ T8994] i_nlink=0 [ 187.167715][ T8994] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1482: corrupted inode contents [ 187.211108][ T8994] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.211302][ T8994] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.1482: mark_inode_dirty error [ 187.258230][ T8994] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.258380][ T8994] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.1482: corrupted inode contents [ 187.287825][ T8994] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.287942][ T8994] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1482: mark_inode_dirty error [ 187.444801][ T8994] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.454950][ T28] audit: type=1400 audit(1772246428.425:5332): avc: denied { unmount } for pid=9001 comm="syz.2.1485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.488214][ T9] usb usb8-port1: unable to enumerate USB device [ 187.506498][ T8994] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.1482: mark inode dirty (error -117) [ 187.612701][ T8994] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.613049][ T8994] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 187.832229][ T9015] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 187.838748][ T9015] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 187.868915][ T9015] vhci_hcd vhci_hcd.0: Device attached [ 187.884456][ T9015] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.897167][ T9015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.934732][ T9015] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 187.952194][ T9018] vhci_hcd: connection closed [ 188.040738][ T3835] vhci_hcd vhci_hcd.3: stop threads [ 188.050861][ T3835] vhci_hcd vhci_hcd.3: release socket [ 188.056246][ T3835] vhci_hcd vhci_hcd.3: disconnect device [ 188.162566][ T9031] loop6: detected capacity change from 0 to 512 [ 188.169411][ T9031] ext4: Unknown parameter 'measure' [ 188.178620][ T9031] __nla_validate_parse: 1 callbacks suppressed [ 188.178632][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1493'. [ 188.193822][ T9031] netlink: 'syz.6.1493': attribute type 5 has an invalid length. [ 188.201593][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1493'. [ 188.212889][ T9029] loop2: detected capacity change from 0 to 128 [ 188.223771][ T9029] EXT4-fs: Ignoring removed nobh option [ 188.357094][ T9029] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.490936][ T9029] FAULT_INJECTION: forcing a failure. [ 188.490936][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 188.515196][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.2.1494 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.515226][ T9029] Tainted: [W]=WARN [ 188.515232][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.515250][ T9029] Call Trace: [ 188.515255][ T9029] [ 188.515261][ T9029] __dump_stack+0x1d/0x30 [ 188.515286][ T9029] dump_stack_lvl+0x95/0xd0 [ 188.515348][ T9029] dump_stack+0x15/0x1b [ 188.515369][ T9029] should_fail_ex+0x263/0x280 [ 188.515448][ T9029] should_failslab+0x8c/0xb0 [ 188.515465][ T9029] __kmalloc_noprof+0xb8/0x4e0 [ 188.515483][ T9029] ? ext4_find_extent+0x17a/0x790 [ 188.515504][ T9029] ? ext4_inode_csum+0x12f/0x1b0 [ 188.515580][ T9029] ext4_find_extent+0x17a/0x790 [ 188.515602][ T9029] ? folio_mark_accessed+0x240/0x3a0 [ 188.515624][ T9029] ext4_ext_map_blocks+0x10d/0x2fb0 [ 188.515644][ T9029] ? bdev_getblk+0x35a/0x3f0 [ 188.515743][ T9029] ? crc32c+0x158/0x290 [ 188.515760][ T9029] ? ext4_inode_csum+0x12f/0x1b0 [ 188.515782][ T9029] ? mark_buffer_dirty+0xfa/0x220 [ 188.515804][ T9029] ? __ext4_handle_dirty_metadata+0x200/0x470 [ 188.515929][ T9029] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 188.515948][ T9029] ext4_map_query_blocks+0xb2/0x550 [ 188.515971][ T9029] ? ext4_es_lookup_extent+0x3ae/0x570 [ 188.516071][ T9029] ext4_map_blocks+0x306/0x970 [ 188.516102][ T9029] ext4_append+0x10b/0x2c0 [ 188.516131][ T9029] ext4_init_new_dir+0xec/0x180 [ 188.516154][ T9029] ext4_mkdir+0x31e/0x740 [ 188.516216][ T9029] vfs_mkdir+0x294/0x3e0 [ 188.516243][ T9029] filename_mkdirat+0x138/0x300 [ 188.516290][ T9029] __se_sys_mkdirat+0x32/0xf0 [ 188.516310][ T9029] __x64_sys_mkdirat+0x43/0x50 [ 188.516326][ T9029] x64_sys_call+0x2c4e/0x3020 [ 188.516347][ T9029] do_syscall_64+0x12c/0x370 [ 188.516381][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.516400][ T9029] RIP: 0033:0x7f7c5c7fc799 [ 188.516462][ T9029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.516478][ T9029] RSP: 002b:00007f7c5b24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 188.516495][ T9029] RAX: ffffffffffffffda RBX: 00007f7c5ca75fa0 RCX: 00007f7c5c7fc799 [ 188.516645][ T9029] RDX: 0000000000000140 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 188.516657][ T9029] RBP: 00007f7c5b24f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.516668][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.516681][ T9029] R13: 00007f7c5ca76038 R14: 00007f7c5ca75fa0 R15: 00007ffc06951548 [ 188.516726][ T9029] [ 188.900168][ T9043] loop6: detected capacity change from 0 to 512 [ 188.907147][ T9041] loop5: detected capacity change from 0 to 1024 [ 188.916573][ T9043] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.944347][ T9041] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 188.967935][ T9043] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 188.983500][ T9043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 188.988171][ T9041] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 188.993508][ T9043] System zones: 0-2, 18-18, 34-34 [ 189.012307][ T9043] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1498: bad orphan inode 15 [ 189.020914][ T9041] EXT4-fs (loop5): invalid journal inode [ 189.022496][ T9043] loop6: lost filesystem error report for type 5 error -117 [ 189.028080][ T9043] ext4_test_bit(bit=14, block=18) = 1 [ 189.040732][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 189.040757][ C1] EXT4-fs (loop6): initial error at time 1772246430: ext4_orphan_get:1417 [ 189.040784][ C1] EXT4-fs (loop6): last error at time 1772246430: ext4_orphan_get:1417 [ 189.049348][ T9041] EXT4-fs (loop5): can't get journal size [ 189.056123][ T9043] is_bad_inode(inode)=0 [ 189.074034][ T9043] NEXT_ORPHAN(inode)=2264924160 [ 189.074044][ T9043] max_ino=32 [ 189.074052][ T9043] i_nlink=0 [ 189.091707][ T9043] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1498: corrupted inode contents [ 189.093797][ T9043] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.1498: mark_inode_dirty error [ 189.095886][ T9051] loop3: detected capacity change from 0 to 128 [ 189.103242][ T9043] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.1498: corrupted inode contents [ 189.103734][ T9043] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.1498: mark_inode_dirty error [ 189.170866][ T28] audit: type=1326 audit(1772246430.235:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.194419][ T28] audit: type=1326 audit(1772246430.235:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.218462][ T28] audit: type=1326 audit(1772246430.235:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.243302][ T9043] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.1498: mark inode dirty (error -117) [ 189.259675][ T28] audit: type=1326 audit(1772246430.235:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.291901][ T9057] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1499'. [ 189.308016][ T28] audit: type=1326 audit(1772246430.235:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.331835][ T9043] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 189.342289][ T28] audit: type=1326 audit(1772246430.235:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.365872][ T28] audit: type=1326 audit(1772246430.235:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.417254][ T28] audit: type=1326 audit(1772246430.235:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.482504][ T9041] lo speed is unknown, defaulting to 1000 [ 189.506051][ T9061] ext4: Unknown parameter 'measure' [ 189.518567][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 189.527432][ T9061] netlink: 'syz.0.1504': attribute type 5 has an invalid length. [ 189.535164][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1504'. [ 189.666128][ T9062] lo speed is unknown, defaulting to 1000 [ 189.679579][ T28] audit: type=1326 audit(1772246430.235:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.714722][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 189.848476][ T28] audit: type=1326 audit(1772246430.235:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.888590][ T28] audit: type=1326 audit(1772246430.355:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1bde4c799 code=0x7ffc0000 [ 189.922243][ T28] audit: type=1326 audit(1772246430.355:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1bde4c502 code=0x7ffc0000 [ 190.181577][ T4183] EXT4-fs unmount: 33 callbacks suppressed [ 190.181590][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.208528][ T9075] ext4: Unknown parameter 'measure' [ 190.218599][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 190.227476][ T9075] netlink: 'syz.2.1508': attribute type 5 has an invalid length. [ 190.235290][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 190.405429][ T9078] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 190.449446][ T9078] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 190.483715][ T9078] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 190.521188][ T9078] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #5: comm syz.0.1511: unexpected bad inode w/o EXT4_IGET_BAD [ 190.545946][ T9078] fserror_report: 5 callbacks suppressed [ 190.545958][ T9078] loop0: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 190.567647][ T9078] EXT4-fs (loop0): no journal found [ 190.576692][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 190.576720][ C1] EXT4-fs (loop0): initial error at time 1772246431: ext4_get_journal_inode:5863: inode 5 [ 190.576753][ C1] EXT4-fs (loop0): last error at time 1772246431: ext4_get_journal_inode:5863: inode 5 [ 190.608106][ T9078] EXT4-fs (loop0): can't get journal size [ 190.615293][ T9078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.715026][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.764379][ T9092] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.767909][ T3418] usb 2-1: device descriptor read/8, error -110 [ 190.791901][ T9094] lo speed is unknown, defaulting to 1000 [ 190.808028][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 190.808707][ T9092] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 190.854081][ T9092] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 190.858920][ T9101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.868855][ T9092] System zones: 0-2, 18-18, 34-34 [ 190.874351][ T9092] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1515: bad orphan inode 15 [ 190.885284][ T9092] loop5: lost filesystem error report for type 5 error -117 [ 190.885479][ T9092] ext4_test_bit(bit=14, block=18) = 1 [ 190.892767][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 190.892781][ C1] EXT4-fs (loop5): initial error at time 1772246431: ext4_orphan_get:1417 [ 190.892799][ C1] EXT4-fs (loop5): last error at time 1772246431: ext4_orphan_get:1417 [ 190.921535][ T3418] usb 2-1: new SuperSpeed USB device number 3 using vhci_hcd [ 190.949810][ T3418] usb 2-1: enqueue for inactive port 0 [ 190.949842][ T9092] is_bad_inode(inode)=0 [ 190.955273][ T3418] usb 2-1: enqueue for inactive port 0 [ 190.959556][ T9092] NEXT_ORPHAN(inode)=2264924160 [ 190.969844][ T9092] max_ino=32 [ 190.973731][ T9092] i_nlink=0 [ 190.981114][ T9092] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1515: corrupted inode contents [ 190.992969][ T9101] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 190.993125][ T3418] usb 2-1: enqueue for inactive port 0 [ 191.005754][ T9092] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.007744][ T9092] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.1515: mark_inode_dirty error [ 191.029942][ T9101] EXT4-fs (loop6): 1 truncate cleaned up [ 191.036087][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 191.054528][ T9103] lo speed is unknown, defaulting to 1000 [ 191.055048][ T9101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.078187][ T9092] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.119296][ T9092] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1515: corrupted inode contents [ 191.170544][ T3418] usb usb2-port1: attempt power cycle [ 191.186756][ T9092] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.186958][ T9092] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1515: mark_inode_dirty error [ 191.206237][ T9092] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.209818][ T9092] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.1515: mark inode dirty (error -117) [ 191.234922][ T9092] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.235135][ T9092] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 191.254257][ T9092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.359352][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.432460][ T9122] set_capacity_and_notify: 5 callbacks suppressed [ 191.432509][ T9122] loop5: detected capacity change from 0 to 1024 [ 191.819305][ T9122] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 191.829424][ T9122] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 191.841711][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.874822][ T9122] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 191.885698][ T9122] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.1525: unexpected bad inode w/o EXT4_IGET_BAD [ 191.898952][ T9122] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 191.899203][ T9122] EXT4-fs (loop5): no journal found [ 191.917781][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 191.924213][ C1] EXT4-fs (loop5): initial error at time 1772246432: ext4_get_journal_inode:5863: inode 5 [ 191.934140][ C1] EXT4-fs (loop5): last error at time 1772246432: ext4_get_journal_inode:5863: inode 5 [ 191.940824][ T9122] EXT4-fs (loop5): can't get journal size [ 191.956136][ T9122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.982160][ T3834] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.014980][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.240501][ T9137] loop5: detected capacity change from 0 to 512 [ 192.247548][ T9137] ext4: Unknown parameter 'measure' [ 192.256138][ T9137] netlink: 'syz.5.1529': attribute type 5 has an invalid length. [ 192.527463][ T9140] loop0: detected capacity change from 0 to 512 [ 192.534478][ T9140] ext4: Unknown parameter 'measure' [ 192.544628][ T9140] netlink: 'syz.0.1530': attribute type 5 has an invalid length. [ 192.665683][ T9144] loop2: detected capacity change from 0 to 512 [ 192.681784][ T9144] EXT4-fs: Ignoring removed i_version option [ 192.692114][ T9144] EXT4-fs: Ignoring removed bh option [ 192.710457][ T9144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.723157][ T9144] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.803409][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.399136][ T9165] loop3: detected capacity change from 0 to 512 [ 193.415880][ T9165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.438815][ T9165] EXT4-fs (loop3): 1 truncate cleaned up [ 193.444952][ T9165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.610719][ T3418] usb usb2-port1: unable to enumerate USB device [ 193.766722][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.938853][ T9184] FAULT_INJECTION: forcing a failure. [ 193.938853][ T9184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.952098][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.3.1544 Tainted: G W syzkaller #0 PREEMPT(full) [ 193.952236][ T9184] Tainted: [W]=WARN [ 193.952240][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.952250][ T9184] Call Trace: [ 193.952254][ T9184] [ 193.952258][ T9184] __dump_stack+0x1d/0x30 [ 193.952274][ T9184] dump_stack_lvl+0x95/0xd0 [ 193.952303][ T9184] dump_stack+0x15/0x1b [ 193.952314][ T9184] should_fail_ex+0x263/0x280 [ 193.952327][ T9184] should_fail+0xb/0x20 [ 193.952337][ T9184] should_fail_usercopy+0x1a/0x20 [ 193.952365][ T9184] _copy_from_user+0x1c/0xb0 [ 193.952380][ T9184] copy_from_sockptr_offset+0x66/0xa0 [ 193.952418][ T9184] do_ip6t_set_ctl+0x61b/0x8f0 [ 193.952491][ T9184] ? avc_has_perm_noaudit+0xab/0x130 [ 193.952507][ T9184] nf_setsockopt+0x199/0x1b0 [ 193.952543][ T9184] ipv6_setsockopt+0x11a/0x130 [ 193.952619][ T9184] sock_common_setsockopt+0x69/0x80 [ 193.952639][ T9184] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 193.952670][ T9184] __sys_setsockopt+0x184/0x200 [ 193.952704][ T9184] __x64_sys_setsockopt+0x64/0x80 [ 193.952718][ T9184] x64_sys_call+0x2327/0x3020 [ 193.952732][ T9184] do_syscall_64+0x12c/0x370 [ 193.952744][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.952781][ T9184] RIP: 0033:0x7f49529dc799 [ 193.952791][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.952801][ T9184] RSP: 002b:00007f4951437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.952813][ T9184] RAX: ffffffffffffffda RBX: 00007f4952c55fa0 RCX: 00007f49529dc799 [ 193.952852][ T9184] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 193.952859][ T9184] RBP: 00007f4951437090 R08: 0000000000000740 R09: 0000000000000000 [ 193.952920][ T9184] R10: 0000200000001080 R11: 0000000000000246 R12: 0000000000000001 [ 193.952927][ T9184] R13: 00007f4952c56038 R14: 00007f4952c55fa0 R15: 00007fffc65286b8 [ 193.952938][ T9184] [ 194.155484][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 194.155788][ T4640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.268977][ T9191] __nla_validate_parse: 6 callbacks suppressed [ 194.269040][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 194.345513][ T9194] lo speed is unknown, defaulting to 1000 [ 194.370345][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 194.440912][ T9195] loop2: detected capacity change from 0 to 512 [ 194.447754][ T9195] ext4: Unknown parameter 'measure' [ 194.457508][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 194.466561][ T9195] netlink: 'syz.2.1547': attribute type 5 has an invalid length. [ 194.474340][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1547'. [ 194.838548][ T9204] loop0: detected capacity change from 0 to 512 [ 194.845566][ T9204] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.869364][ T9204] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1553: bad orphan inode 131083 [ 194.923353][ T9204] loop0: lost filesystem error report for type 5 error -117 [ 194.924031][ T9204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.994406][ T9213] loop3: detected capacity change from 0 to 512 [ 195.032542][ T9213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 195.045220][ T9213] ext4 filesystem being mounted at /312/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.229483][ T9219] loop6: detected capacity change from 0 to 512 [ 195.236149][ T9219] ext4: Unknown parameter 'measure' [ 195.366924][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1552'. [ 195.375848][ T9219] netlink: 'syz.6.1552': attribute type 5 has an invalid length. [ 195.383562][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1552'. [ 195.598537][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 195.629272][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.649917][ T9221] loop3: detected capacity change from 0 to 128 [ 195.657110][ T9221] EXT4-fs: Ignoring removed nobh option [ 195.679078][ T9224] vfat: Deprecated parameter 'posix' [ 195.687805][ T9224] FAT-fs: "posix" option is obsolete, not supported now [ 195.709666][ T9221] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.740127][ T9221] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.870420][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.884764][ T9236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.912539][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.275414][ T9260] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1568'. [ 196.286312][ T9260] netlink: 'syz.3.1568': attribute type 9 has an invalid length. [ 196.304569][ T9260] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1568'. [ 196.318530][ T9260] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1568'. [ 196.694157][ T9265] tipc: Started in network mode [ 196.699099][ T9265] tipc: Node identity f6224f0305bb, cluster identity 4711 [ 196.706272][ T9265] tipc: Enabled bearer , priority 0 [ 196.738317][ T9265] syzkaller0: MTU too low for tipc bearer [ 196.744060][ T9265] tipc: Disabling bearer [ 197.262025][ T9283] set_capacity_and_notify: 2 callbacks suppressed [ 197.262038][ T9283] loop6: detected capacity change from 0 to 512 [ 197.295334][ T9283] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.323346][ T9283] EXT4-fs (loop6): 1 truncate cleaned up [ 197.329726][ T9283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.360346][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.392655][ T9288] loop6: detected capacity change from 0 to 4096 [ 197.409979][ T9288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.447401][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.459705][ T9295] loop3: detected capacity change from 0 to 512 [ 197.466207][ T9295] ext4: Unknown parameter 'measure' [ 197.472080][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 197.480982][ T9295] netlink: 'syz.3.1572': attribute type 5 has an invalid length. [ 197.547350][ T9304] loop2: detected capacity change from 0 to 1024 [ 197.606586][ T9304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.648776][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 197.648788][ T28] audit: type=1400 audit(1772246438.715:5485): avc: denied { validate_trans } for pid=9309 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 197.678254][ T9310] tipc: Failed to remove unknown binding: 66,0,0/0:1996058537/1996058538 [ 197.703513][ T9310] tipc: Failed to remove unknown binding: 66,0,0/0:1996058537/1996058538 [ 197.727801][ T4640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.753603][ T9312] loop5: detected capacity change from 0 to 1024 [ 197.762395][ T9312] EXT4-fs: Ignoring removed oldalloc option [ 197.770057][ T9312] EXT4-fs: Ignoring removed bh option [ 197.800481][ T9312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.839719][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.982060][ T9320] loop2: detected capacity change from 0 to 512 [ 198.055404][ T9320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.135619][ T28] audit: type=1400 audit(1772246439.195:5486): avc: denied { setattr } for pid=9324 comm="syz.3.1585" name="RAWv6" dev="sockfs" ino=25171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.192834][ T9320] EXT4-fs (loop2): 1 truncate cleaned up [ 198.241091][ T9320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.371084][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.422997][ T9331] loop2: detected capacity change from 0 to 4096 [ 198.440310][ T9331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.480506][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.773437][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.813054][ T9339] lo speed is unknown, defaulting to 1000 [ 199.058578][ T9347] lo speed is unknown, defaulting to 1000 [ 199.441043][ T9356] loop3: detected capacity change from 0 to 512 [ 199.449844][ T9356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.481165][ T9356] EXT4-fs (loop3): 1 truncate cleaned up [ 199.487273][ T9356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.815231][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.882992][ T9360] loop2: detected capacity change from 0 to 512 [ 199.891737][ T9360] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.927465][ T9360] EXT4-fs (loop2): 1 truncate cleaned up [ 199.939913][ T9360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.967708][ T28] audit: type=1400 audit(1772246441.025:5487): avc: denied { execute } for pid=9370 comm="syz.3.1600" path="/selinux/user" dev="selinuxfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 199.982292][ T9368] loop0: detected capacity change from 0 to 4096 [ 200.098572][ T9368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.119349][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.228663][ T9378] ext4: Unknown parameter 'measure' [ 200.235670][ T9378] __nla_validate_parse: 3 callbacks suppressed [ 200.235683][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1596'. [ 200.250771][ T9378] netlink: 'syz.5.1596': attribute type 5 has an invalid length. [ 200.258491][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1596'. [ 200.975239][ T9382] ext4: Unknown parameter 'measure' [ 200.984566][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 200.993580][ T9382] netlink: 'syz.3.1602': attribute type 5 has an invalid length. [ 201.001435][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1602'. [ 201.097815][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.268071][ T9398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 201.289275][ T9398] EXT4-fs (loop0): 1 truncate cleaned up [ 201.295258][ T9398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.365769][ T9410] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 201.372285][ T9410] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.380105][ T9410] vhci_hcd vhci_hcd.0: Device attached [ 201.387540][ T9410] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.399538][ T9410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.977821][ T9] usb 6-1: SetAddress Request (2) to port 0 [ 201.983840][ T9] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 202.036309][ T9419] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.054615][ T9419] EXT4-fs (loop5): 1 truncate cleaned up [ 202.063928][ T9419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.085154][ T9415] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 202.102178][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.127327][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.137382][ T9411] vhci_hcd: connection reset by peer [ 202.143499][ T3811] vhci_hcd vhci_hcd.2: stop threads [ 202.149052][ T3811] vhci_hcd vhci_hcd.2: release socket [ 202.155545][ T3811] vhci_hcd vhci_hcd.2: disconnect device [ 202.171933][ T28] audit: type=1326 audit(1772246443.235:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.210115][ T28] audit: type=1326 audit(1772246443.235:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.233894][ T28] audit: type=1326 audit(1772246443.235:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.257918][ T28] audit: type=1326 audit(1772246443.235:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.282008][ T28] audit: type=1326 audit(1772246443.235:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.305774][ T28] audit: type=1326 audit(1772246443.235:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.329264][ T28] audit: type=1326 audit(1772246443.235:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9421 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 202.353294][ T9429] set_capacity_and_notify: 4 callbacks suppressed [ 202.353308][ T9429] loop5: detected capacity change from 0 to 256 [ 202.414940][ T9432] loop6: detected capacity change from 0 to 4096 [ 202.443894][ T9432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.476970][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.757785][ T9440] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20000 [ 203.058458][ T9455] loop3: detected capacity change from 0 to 512 [ 203.065441][ T9455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.186761][ T9455] EXT4-fs (loop3): 1 truncate cleaned up [ 203.192895][ T9455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.264604][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.500485][ T9469] loop3: detected capacity change from 0 to 512 [ 203.508707][ T9469] EXT4-fs: inline encryption not supported [ 203.514693][ T9469] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.565302][ T9469] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 204.272630][ T9475] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 204.279155][ T9475] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 204.299677][ T9471] loop0: detected capacity change from 0 to 4096 [ 204.364464][ T9475] vhci_hcd vhci_hcd.0: Device attached [ 204.409723][ T9478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.440779][ T9471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.489980][ T9475] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.533791][ T9481] lo speed is unknown, defaulting to 1000 [ 204.540826][ T9476] vhci_hcd: connection closed [ 204.541645][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.555999][ T30] vhci_hcd vhci_hcd.5: stop threads [ 204.565141][ T9483] loop2: detected capacity change from 0 to 1024 [ 204.571739][ T30] vhci_hcd vhci_hcd.5: release socket [ 204.577875][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 204.586905][ T30] vhci_hcd vhci_hcd.5: disconnect device [ 204.592975][ T9483] EXT4-fs: Ignoring removed oldalloc option [ 204.617109][ T9483] EXT4-fs: Ignoring removed bh option [ 204.643633][ T9483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.992116][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 204.992150][ T28] audit: type=1400 audit(1772246446.055:5502): avc: denied { listen } for pid=9498 comm="syz.3.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.038910][ T28] audit: type=1400 audit(1772246446.055:5503): avc: denied { accept } for pid=9498 comm="syz.3.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.126745][ T9502] loop5: detected capacity change from 0 to 2048 [ 205.250912][ T9502] Alternate GPT is invalid, using primary GPT. [ 205.257251][ T9502] loop5: p2 p3 p7 [ 205.272697][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.301031][ T9505] loop2: detected capacity change from 0 to 512 [ 205.331548][ T9505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.361711][ T9508] FAULT_INJECTION: forcing a failure. [ 205.361711][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 205.375268][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.5.1638 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.375298][ T9508] Tainted: [W]=WARN [ 205.375305][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.375316][ T9508] Call Trace: [ 205.375323][ T9508] [ 205.375330][ T9508] __dump_stack+0x1d/0x30 [ 205.375354][ T9508] dump_stack_lvl+0x95/0xd0 [ 205.375376][ T9508] dump_stack+0x15/0x1b [ 205.375394][ T9508] should_fail_ex+0x263/0x280 [ 205.375416][ T9508] should_failslab+0x8c/0xb0 [ 205.375434][ T9508] kmem_cache_alloc_noprof+0x66/0x400 [ 205.375451][ T9508] ? vm_area_dup+0x33/0x2c0 [ 205.375469][ T9508] vm_area_dup+0x33/0x2c0 [ 205.375486][ T9508] __split_vma+0xe9/0x640 [ 205.375505][ T9508] ? mas_find+0x5d5/0x700 [ 205.375523][ T9508] vms_gather_munmap_vmas+0x2bc/0x850 [ 205.375556][ T9508] do_vmi_align_munmap+0x1e1/0x400 [ 205.375587][ T9508] __se_sys_brk+0x543/0x890 [ 205.375611][ T9508] __x64_sys_brk+0x1f/0x30 [ 205.375628][ T9508] x64_sys_call+0x277e/0x3020 [ 205.375651][ T9508] do_syscall_64+0x12c/0x370 [ 205.375671][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.375690][ T9508] RIP: 0033:0x7fb1bde4c799 [ 205.375702][ T9508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.375716][ T9508] RSP: 002b:00007fb1bc8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 205.375734][ T9508] RAX: ffffffffffffffda RBX: 00007fb1be0c5fa0 RCX: 00007fb1bde4c799 [ 205.375746][ T9508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000ffc000 [ 205.375756][ T9508] RBP: 00007fb1bc8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 205.375767][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.375777][ T9508] R13: 00007fb1be0c6038 R14: 00007fb1be0c5fa0 R15: 00007ffd32cea7d8 [ 205.375793][ T9508] [ 205.377973][ T9505] EXT4-fs (loop2): 1 truncate cleaned up [ 205.574239][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 205.578145][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 205.585557][ T3606] udevd[3606]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 205.604501][ T9505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.736940][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.009991][ T9521] loop2: detected capacity change from 0 to 4096 [ 206.062393][ T9521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.348681][ T9529] loop6: detected capacity change from 0 to 512 [ 206.355693][ T9529] ext4: Unknown parameter 'measure' [ 206.364879][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1644'. [ 206.374088][ T9529] netlink: 'syz.6.1644': attribute type 5 has an invalid length. [ 206.381821][ T9529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1644'. [ 206.917222][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.976794][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'. [ 206.985713][ T9543] netlink: 'syz.2.1649': attribute type 3 has an invalid length. [ 206.993774][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'. [ 207.023790][ T9543] geneve3: entered promiscuous mode [ 207.031625][ T9543] geneve3: entered allmulticast mode [ 207.039417][ T9277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.052634][ T9277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.080358][ T9] usb 6-1: device descriptor read/8, error -110 [ 207.197810][ T9] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 207.227811][ T9] usb 6-1: enqueue for inactive port 0 [ 207.233402][ T9] usb 6-1: enqueue for inactive port 0 [ 207.239205][ T9] usb 6-1: enqueue for inactive port 0 [ 207.717560][ T9277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.774183][ T3811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.817574][ T9562] loop5: detected capacity change from 0 to 1024 [ 207.835154][ T9562] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 207.845267][ T28] audit: type=1400 audit(1772246448.905:5504): avc: denied { lock } for pid=9554 comm="syz.0.1652" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 207.860010][ T9562] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 207.905196][ T9562] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 207.926097][ T9562] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.1656: unexpected bad inode w/o EXT4_IGET_BAD [ 207.959673][ T9568] tipc: Enabled bearer , priority 0 [ 207.962059][ T9562] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 207.966582][ T28] audit: type=1326 audit(1772246449.025:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 207.970762][ T9562] EXT4-fs (loop5): no journal found [ 207.997801][ T28] audit: type=1326 audit(1772246449.025:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 207.999049][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 208.004205][ T28] audit: type=1326 audit(1772246449.025:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 208.027526][ C0] EXT4-fs (loop5): initial error at time 1772246449: ext4_get_journal_inode:5863: inode 5 [ 208.046673][ T9568] syzkaller0: entered promiscuous mode [ 208.057279][ C0] EXT4-fs (loop5): last error at time 1772246449: ext4_get_journal_inode:5863: inode 5 [ 208.077611][ T9562] EXT4-fs (loop5): can't get journal size [ 208.089025][ T9562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.107714][ T28] audit: type=1326 audit(1772246449.025:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 208.131410][ T28] audit: type=1326 audit(1772246449.025:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 208.154958][ T28] audit: type=1326 audit(1772246449.055:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 208.179619][ T28] audit: type=1326 audit(1772246449.055:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9566 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 208.206382][ T9568] syzkaller0: entered allmulticast mode [ 208.212555][ T9568] tipc: Resetting bearer [ 208.264567][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.278101][ T9] usb usb6-port1: attempt power cycle [ 208.360425][ T9580] loop5: detected capacity change from 0 to 4096 [ 208.470587][ T9567] tipc: Resetting bearer [ 208.513114][ T9567] tipc: Disabling bearer [ 209.060230][ T9580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.177344][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.307188][ T9600] loop2: detected capacity change from 0 to 512 [ 209.313806][ T9600] ext4: Unknown parameter 'measure' [ 209.320989][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 209.329918][ T9600] netlink: 'syz.2.1665': attribute type 5 has an invalid length. [ 209.337635][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 210.043699][ T9607] loop3: detected capacity change from 0 to 512 [ 210.050649][ T9607] ext4: Unknown parameter 'measure' [ 210.059158][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 210.068062][ T9607] netlink: 'syz.3.1667': attribute type 5 has an invalid length. [ 210.075845][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1667'. [ 210.925583][ T9615] loop0: detected capacity change from 0 to 512 [ 210.934802][ T9615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.964970][ T9615] EXT4-fs (loop0): 1 truncate cleaned up [ 210.980093][ T9619] loop2: detected capacity change from 0 to 1024 [ 210.989042][ T9615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.990206][ T9617] lo speed is unknown, defaulting to 1000 [ 211.016968][ T9619] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 211.029369][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.047202][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1671'. [ 211.047942][ T9619] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 211.056755][ T9] usb usb6-port1: unable to enumerate USB device [ 211.065661][ T9619] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 211.082601][ T9619] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #5: comm syz.2.1672: unexpected bad inode w/o EXT4_IGET_BAD [ 211.096009][ T9619] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 211.096141][ T9619] EXT4-fs (loop2): no journal found [ 211.105235][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 211.105250][ C1] EXT4-fs (loop2): initial error at time 1772246452: ext4_get_journal_inode:5863: inode 5 [ 211.105273][ C1] EXT4-fs (loop2): last error at time 1772246452: ext4_get_journal_inode:5863: inode 5 [ 211.127647][ T9622] lo speed is unknown, defaulting to 1000 [ 211.142317][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 211.142328][ T28] audit: type=1400 audit(1772246452.205:5556): avc: denied { name_bind } for pid=9624 comm="syz.0.1674" src=20257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 211.170279][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 211.177622][ T9619] EXT4-fs (loop2): can't get journal size [ 211.189094][ T9619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.198144][ T9630] loop0: detected capacity change from 0 to 1024 [ 211.257128][ T9633] loop5: detected capacity change from 0 to 4096 [ 211.292181][ T9633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.310258][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.357861][ T28] audit: type=1400 audit(1772246452.405:5557): avc: denied { create } for pid=9629 comm="syz.0.1675" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 211.387853][ T28] audit: type=1400 audit(1772246452.405:5558): avc: denied { map } for pid=9629 comm="syz.0.1675" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 211.412953][ T28] audit: type=1400 audit(1772246452.405:5559): avc: denied { read write } for pid=9629 comm="syz.0.1675" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 211.424667][ T9643] tipc: Enabling of bearer rejected, failed to enable media [ 212.404566][ T9662] loop0: detected capacity change from 0 to 512 [ 212.427480][ T9662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.447542][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 212.471961][ T9662] EXT4-fs (loop0): 1 truncate cleaned up [ 212.497110][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 212.512078][ T9666] lo speed is unknown, defaulting to 1000 [ 212.520560][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 212.541050][ T9671] loop2: detected capacity change from 0 to 1024 [ 212.548000][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 212.598470][ T9671] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 212.619824][ T9671] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 212.632232][ T9671] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 212.644480][ T9671] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #5: comm syz.2.1688: unexpected bad inode w/o EXT4_IGET_BAD [ 212.658601][ T9671] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 212.666541][ T9675] lo speed is unknown, defaulting to 1000 [ 212.675615][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 212.675630][ C0] EXT4-fs (loop2): initial error at time 1772246453: ext4_get_journal_inode:5863: inode 5 [ 212.675655][ C0] EXT4-fs (loop2): last error at time 1772246453: ext4_get_journal_inode:5863: inode 5 [ 212.696921][ T9671] EXT4-fs (loop2): no journal found [ 212.713779][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 212.723156][ T9671] EXT4-fs (loop2): can't get journal size [ 213.092225][ T28] audit: type=1400 audit(1772246454.155:5560): avc: denied { ioctl } for pid=9679 comm="syz.2.1692" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=26951 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.304272][ T9659] infiniband syz1: set active [ 213.309295][ T9659] infiniband syz1: added xfrm0 [ 213.314396][ T9659] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 213.314788][ T9659] infiniband syz1: Couldn't open port 1 [ 213.334547][ T9659] RDS/IB: syz1: added [ 213.338663][ T9659] smc: adding ib device syz1 with port count 1 [ 213.344900][ T9659] smc: ib device syz1 port 1 has no pnetid [ 213.351262][ T1048] xfrm0 speed is unknown, defaulting to 1000 [ 213.357430][ T1048] xfrm0 speed is unknown, defaulting to 1000 [ 213.365651][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 213.411400][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 213.433979][ T9696] set_capacity_and_notify: 1 callbacks suppressed [ 213.433991][ T9696] loop3: detected capacity change from 0 to 512 [ 213.448592][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 213.473728][ T9696] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.515754][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 213.549968][ T9659] xfrm0 speed is unknown, defaulting to 1000 [ 213.699735][ T9706] loop0: detected capacity change from 0 to 1024 [ 213.756381][ T9712] loop5: detected capacity change from 0 to 512 [ 213.764756][ T9712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.840808][ T9712] EXT4-fs (loop5): 1 truncate cleaned up [ 214.303911][ T9715] loop2: detected capacity change from 0 to 4096 [ 214.449150][ T9720] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 214.455676][ T9720] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 214.466177][ T9720] vhci_hcd vhci_hcd.0: Device attached [ 214.485890][ T9725] loop5: detected capacity change from 0 to 1024 [ 214.503014][ T9720] bond1: option mode: unable to set because the bond device has slaves [ 214.522744][ T9725] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 214.534952][ T9720] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.547332][ T9725] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 214.562224][ T9720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.577626][ T9725] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 214.585672][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 214.588280][ T9725] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.1703: unexpected bad inode w/o EXT4_IGET_BAD [ 214.610323][ T9725] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 214.610483][ T9725] EXT4-fs (loop5): no journal found [ 214.619535][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 214.619558][ C1] EXT4-fs (loop5): initial error at time 1772246455: ext4_get_journal_inode:5863: inode 5 [ 214.619589][ C1] EXT4-fs (loop5): last error at time 1772246455: ext4_get_journal_inode:5863: inode 5 [ 214.622210][ T9728] lo speed is unknown, defaulting to 1000 [ 214.632867][ T9725] EXT4-fs (loop5): can't get journal size [ 214.662980][ T9728] xfrm0 speed is unknown, defaulting to 1000 [ 214.665406][ T9720] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.687272][ T9721] vhci_hcd: connection closed [ 214.687408][ T3798] vhci_hcd vhci_hcd.2: stop threads [ 214.697545][ T3798] vhci_hcd vhci_hcd.2: release socket [ 214.703109][ T3798] vhci_hcd vhci_hcd.2: disconnect device [ 214.737849][ T1048] usb 6-1: enqueue for inactive port 0 [ 214.936449][ T9741] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 214.955392][ T9741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.034068][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 215.122828][ T9741] macvlan0: entered promiscuous mode [ 215.141332][ T9741] macvlan0: entered allmulticast mode [ 215.232078][ T1048] usb 6-1: enqueue for inactive port 0 [ 215.241413][ T9747] FAULT_INJECTION: forcing a failure. [ 215.241413][ T9747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.258880][ T9747] CPU: 0 UID: 0 PID: 9747 Comm: syz.0.1709 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.258964][ T9747] Tainted: [W]=WARN [ 215.258971][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.258984][ T9747] Call Trace: [ 215.258991][ T9747] [ 215.258999][ T9747] __dump_stack+0x1d/0x30 [ 215.259083][ T9747] dump_stack_lvl+0x95/0xd0 [ 215.259169][ T9747] dump_stack+0x15/0x1b [ 215.259187][ T9747] should_fail_ex+0x263/0x280 [ 215.259205][ T9747] should_fail+0xb/0x20 [ 215.259221][ T9747] should_fail_usercopy+0x1a/0x20 [ 215.259239][ T9747] _copy_from_user+0x1c/0xb0 [ 215.259287][ T9747] memdup_user+0x5e/0xd0 [ 215.259319][ T9747] strndup_user+0x68/0xb0 [ 215.259337][ T9747] __se_sys_fsopen+0x3c/0x1e0 [ 215.259360][ T9747] __x64_sys_fsopen+0x31/0x40 [ 215.259429][ T9747] x64_sys_call+0x29af/0x3020 [ 215.259455][ T9747] do_syscall_64+0x12c/0x370 [ 215.259509][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.259528][ T9747] RIP: 0033:0x7f2bb8c4c799 [ 215.259541][ T9747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.259557][ T9747] RSP: 002b:00007f2bb76a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 215.259615][ T9747] RAX: ffffffffffffffda RBX: 00007f2bb8ec5fa0 RCX: 00007f2bb8c4c799 [ 215.259628][ T9747] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 215.259642][ T9747] RBP: 00007f2bb76a7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.259657][ T9747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.259731][ T9747] R13: 00007f2bb8ec6038 R14: 00007f2bb8ec5fa0 R15: 00007ffc5c274858 [ 215.259748][ T9747] [ 215.455691][ T9750] loop2: detected capacity change from 0 to 512 [ 215.463069][ T9750] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.487192][ T9750] EXT4-fs (loop2): 1 truncate cleaned up [ 215.606111][ T9761] loop5: detected capacity change from 0 to 4096 [ 215.608186][ T9758] loop2: detected capacity change from 0 to 4096 [ 215.989388][ T9770] loop2: detected capacity change from 0 to 1024 [ 215.996282][ T9770] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 216.017880][ T9770] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 216.047416][ T9770] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 216.075156][ T9770] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #5: comm syz.2.1717: unexpected bad inode w/o EXT4_IGET_BAD [ 216.106409][ T9770] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 216.107779][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 216.123246][ C1] EXT4-fs (loop2): initial error at time 1772246457: ext4_get_journal_inode:5863: inode 5 [ 216.133163][ C1] EXT4-fs (loop2): last error at time 1772246457: ext4_get_journal_inode:5863: inode 5 [ 216.143104][ T9770] EXT4-fs (loop2): no journal found [ 216.148405][ T9770] EXT4-fs (loop2): can't get journal size [ 216.347954][ T1048] usb usb6-port1: attempt power cycle [ 216.405149][ T28] audit: type=1400 audit(1772246457.465:5561): avc: denied { create } for pid=9776 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.426433][ T28] audit: type=1326 audit(1772246457.495:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.451267][ T28] audit: type=1326 audit(1772246457.515:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.474718][ T28] audit: type=1326 audit(1772246457.515:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.498270][ T28] audit: type=1326 audit(1772246457.515:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.522094][ T28] audit: type=1326 audit(1772246457.515:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.545582][ T28] audit: type=1326 audit(1772246457.515:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.569111][ T28] audit: type=1326 audit(1772246457.515:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.592688][ T28] audit: type=1326 audit(1772246457.515:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.661993][ T28] audit: type=1326 audit(1772246457.725:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 216.719524][ T9780] loop2: detected capacity change from 0 to 1024 [ 216.787062][ T9789] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.811306][ T9787] lo speed is unknown, defaulting to 1000 [ 216.819949][ T9787] xfrm0 speed is unknown, defaulting to 1000 [ 216.852944][ T9789] EXT4-fs (loop5): 1 truncate cleaned up [ 216.893620][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 217.040431][ T9805] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 217.050911][ T9805] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 217.072181][ T9805] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 217.088857][ T9805] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.1728: unexpected bad inode w/o EXT4_IGET_BAD [ 217.113864][ T9805] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 217.117394][ T9805] EXT4-fs (loop3): no journal found [ 217.126434][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 217.126452][ C0] EXT4-fs (loop3): initial error at time 1772246458: ext4_get_journal_inode:5863: inode 5 [ 217.126476][ C0] EXT4-fs (loop3): last error at time 1772246458: ext4_get_journal_inode:5863: inode 5 [ 217.190048][ T9805] EXT4-fs (loop3): can't get journal size [ 218.178922][ T1048] usb usb6-port1: unable to enumerate USB device [ 218.420910][ T9836] lo speed is unknown, defaulting to 1000 [ 218.428651][ T9836] xfrm0 speed is unknown, defaulting to 1000 [ 218.435842][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'. [ 218.493608][ T9848] set_capacity_and_notify: 4 callbacks suppressed [ 218.493621][ T9848] loop2: detected capacity change from 0 to 1024 [ 218.613815][ T9848] EXT4-fs (loop2): shut down requested (0) [ 218.634938][ T9847] EXT4-fs (loop2): shut down requested (0) [ 218.937226][ T9871] loop6: detected capacity change from 0 to 512 [ 218.944561][ T9871] ext4: Unknown parameter 'measure' [ 218.954436][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1746'. [ 218.963355][ T9871] netlink: 'syz.6.1746': attribute type 5 has an invalid length. [ 218.971138][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1746'. [ 219.063258][ T9874] FAULT_INJECTION: forcing a failure. [ 219.063258][ T9874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.117681][ T9874] CPU: 1 UID: 0 PID: 9874 Comm: syz.2.1750 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.117710][ T9874] Tainted: [W]=WARN [ 219.117718][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.117730][ T9874] Call Trace: [ 219.117740][ T9874] [ 219.117748][ T9874] __dump_stack+0x1d/0x30 [ 219.117779][ T9874] dump_stack_lvl+0x95/0xd0 [ 219.117801][ T9874] dump_stack+0x15/0x1b [ 219.117856][ T9874] should_fail_ex+0x263/0x280 [ 219.117874][ T9874] should_fail+0xb/0x20 [ 219.117894][ T9874] should_fail_usercopy+0x1a/0x20 [ 219.117913][ T9874] _copy_from_user+0x1c/0xb0 [ 219.117982][ T9874] kstrtouint_from_user+0x69/0xf0 [ 219.118007][ T9874] proc_fail_nth_write+0x50/0x160 [ 219.118036][ T9874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 219.118059][ T9874] vfs_write+0x269/0x9f0 [ 219.118166][ T9874] ? __rcu_read_unlock+0x4e/0x70 [ 219.118189][ T9874] ? __fget_files+0x184/0x1c0 [ 219.118209][ T9874] ? mutex_lock+0x57/0x90 [ 219.118336][ T9874] ksys_write+0xdc/0x1a0 [ 219.118364][ T9874] __x64_sys_write+0x40/0x50 [ 219.118456][ T9874] x64_sys_call+0x27e1/0x3020 [ 219.118501][ T9874] do_syscall_64+0x12c/0x370 [ 219.118521][ T9874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.118542][ T9874] RIP: 0033:0x7f7c5c7bcfce [ 219.118555][ T9874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.118590][ T9874] RSP: 002b:00007f7c5b24efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.118611][ T9874] RAX: ffffffffffffffda RBX: 00007f7c5b24f6c0 RCX: 00007f7c5c7bcfce [ 219.118706][ T9874] RDX: 0000000000000001 RSI: 00007f7c5b24f0a0 RDI: 0000000000000004 [ 219.118717][ T9874] RBP: 00007f7c5b24f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.118729][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.118741][ T9874] R13: 00007f7c5ca76038 R14: 00007f7c5ca75fa0 R15: 00007ffc06951548 [ 219.118758][ T9874] [ 219.751214][ T9882] loop6: detected capacity change from 0 to 512 [ 219.764651][ T9882] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 219.830694][ T9882] EXT4-fs (loop6): 1 truncate cleaned up [ 220.313302][ T9888] siw: device registration error -23 [ 220.344506][ T9894] lo speed is unknown, defaulting to 1000 [ 220.356165][ T9894] xfrm0 speed is unknown, defaulting to 1000 [ 220.410060][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1757'. [ 220.511294][ T9903] loop3: detected capacity change from 0 to 1024 [ 220.530885][ T9903] EXT4-fs mount: 41 callbacks suppressed [ 220.530897][ T9903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.608752][ T9909] lo speed is unknown, defaulting to 1000 [ 220.616041][ T9909] xfrm0 speed is unknown, defaulting to 1000 [ 220.643444][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1762'. [ 220.726020][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.956235][ T9919] loop3: detected capacity change from 0 to 512 [ 220.963704][ T9919] ext4: Unknown parameter 'measure' [ 220.974111][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 220.983061][ T9919] netlink: 'syz.3.1764': attribute type 5 has an invalid length. [ 220.990801][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1764'. [ 221.519847][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 221.519886][ T28] audit: type=1326 audit(1772246462.585:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.549570][ T28] audit: type=1326 audit(1772246462.585:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.573293][ T28] audit: type=1326 audit(1772246462.585:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.598989][ T28] audit: type=1326 audit(1772246462.585:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.622622][ T28] audit: type=1326 audit(1772246462.585:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.646526][ T28] audit: type=1326 audit(1772246462.585:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.670045][ T28] audit: type=1326 audit(1772246462.585:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.700313][ T28] audit: type=1326 audit(1772246462.585:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.724234][ T28] audit: type=1326 audit(1772246462.585:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.758024][ T9927] loop6: detected capacity change from 0 to 512 [ 221.760893][ T28] audit: type=1326 audit(1772246462.815:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9923 comm="syz.0.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 221.773738][ T9927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 221.805410][ T9927] EXT4-fs (loop6): 1 truncate cleaned up [ 221.816140][ T9927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.859491][ T9932] ipvlan0: entered promiscuous mode [ 221.874847][ T9932] ipvlan0: entered allmulticast mode [ 221.883268][ T9932] veth0_vlan: entered allmulticast mode [ 221.938910][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.962447][ T9932] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 222.033872][ T9941] lo speed is unknown, defaulting to 1000 [ 222.040070][ T9941] xfrm0 speed is unknown, defaulting to 1000 [ 222.047686][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1772'. [ 222.119966][ T9946] loop3: detected capacity change from 0 to 1024 [ 222.125801][ T9932] netlink: 'syz.5.1770': attribute type 3 has an invalid length. [ 222.205150][ T9946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.271804][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.304068][ T9957] loop3: detected capacity change from 0 to 1024 [ 222.311578][ T9957] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 222.344158][ T9957] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 222.353854][ T9957] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 222.364323][ T9957] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.1778: unexpected bad inode w/o EXT4_IGET_BAD [ 222.377581][ T9957] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 222.377719][ T9957] EXT4-fs (loop3): no journal found [ 222.377814][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 222.398444][ C1] EXT4-fs (loop3): initial error at time 1772246463: ext4_get_journal_inode:5863: inode 5 [ 222.408372][ C1] EXT4-fs (loop3): last error at time 1772246463: ext4_get_journal_inode:5863: inode 5 [ 222.418667][ T9957] EXT4-fs (loop3): can't get journal size [ 222.425195][ T9957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.450514][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.490339][ T9963] loop3: detected capacity change from 0 to 1024 [ 222.496953][ T9963] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.524013][ T9963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 222.536513][ T9963] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.558042][ T9963] EXT4-fs (loop3): shut down requested (2) [ 222.564277][ T9963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 222.573510][ T9963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 222.582628][ T9963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 222.591754][ T9963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 222.718439][ T9963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 222.880687][ T9974] loop6: detected capacity change from 0 to 512 [ 222.887419][ T9974] ext4: Unknown parameter 'measure' [ 222.895914][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'. [ 222.904802][ T9974] netlink: 'syz.6.1781': attribute type 5 has an invalid length. [ 222.912556][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1781'. [ 223.171822][ T9976] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.188436][ T9976] EXT4-fs (loop5): 1 truncate cleaned up [ 223.194633][ T9976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.559189][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.628902][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 223.760129][ T9989] set_capacity_and_notify: 1 callbacks suppressed [ 223.760143][ T9989] loop2: detected capacity change from 0 to 1024 [ 223.804314][ T9989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.846379][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1789'. [ 223.855461][ T9983] loop6: detected capacity change from 0 to 512 [ 223.862008][ T9983] ext4: Unknown parameter 'measure' [ 223.869022][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1787'. [ 223.869049][ T9983] netlink: 'syz.6.1787': attribute type 5 has an invalid length. [ 223.869060][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1787'. [ 223.907073][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.908815][ T9995] lo speed is unknown, defaulting to 1000 [ 223.922545][ T9995] xfrm0 speed is unknown, defaulting to 1000 [ 223.958161][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 224.661287][T10014] geneve3: entered promiscuous mode [ 224.667040][ T3798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.685456][ T3798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.701818][ T3798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.712862][ T3798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.059283][T10020] loop5: detected capacity change from 0 to 512 [ 225.065955][T10020] ext4: Unknown parameter 'measure' [ 225.075188][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 225.084128][T10020] netlink: 'syz.5.1797': attribute type 5 has an invalid length. [ 225.091898][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1797'. [ 225.344247][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 225.353329][T10025] netlink: 'syz.3.1799': attribute type 18 has an invalid length. [ 225.361221][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 225.451685][T10033] loop0: detected capacity change from 0 to 1024 [ 225.500400][T10033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.533365][T10037] lo speed is unknown, defaulting to 1000 [ 225.565067][T10037] xfrm0 speed is unknown, defaulting to 1000 [ 225.608626][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.620490][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 226.521835][T10073] loop5: detected capacity change from 0 to 1024 [ 226.530688][T10073] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 226.546680][T10073] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 226.556533][T10073] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 226.566865][T10073] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.1815: unexpected bad inode w/o EXT4_IGET_BAD [ 226.580258][T10073] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 226.580383][T10073] EXT4-fs (loop5): no journal found [ 226.589456][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 226.589492][ C1] EXT4-fs (loop5): initial error at time 1772246467: ext4_get_journal_inode:5863: inode 5 [ 226.589522][ C1] EXT4-fs (loop5): last error at time 1772246467: ext4_get_journal_inode:5863: inode 5 [ 226.628940][T10073] EXT4-fs (loop5): can't get journal size [ 226.640526][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 226.640539][ T28] audit: type=1326 audit(1772246467.705:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.0.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 226.673245][ T28] audit: type=1326 audit(1772246467.705:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10065 comm="syz.0.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb8c4c799 code=0x7ffc0000 [ 226.675569][T10073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.811951][T10081] loop0: detected capacity change from 0 to 1024 [ 226.992731][T10084] loop6: detected capacity change from 0 to 512 [ 227.000242][T10084] ext4: Unknown parameter 'measure' [ 227.009994][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1816'. [ 227.019029][T10084] netlink: 'syz.6.1816': attribute type 5 has an invalid length. [ 227.058526][T10081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.072123][ T4183] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.220523][T10091] FAULT_INJECTION: forcing a failure. [ 227.220523][T10091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.276521][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.279105][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.5.1819 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.279177][T10091] Tainted: [W]=WARN [ 227.279184][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.279195][T10091] Call Trace: [ 227.279202][T10091] [ 227.279209][T10091] __dump_stack+0x1d/0x30 [ 227.279282][T10091] dump_stack_lvl+0x95/0xd0 [ 227.279304][T10091] dump_stack+0x15/0x1b [ 227.279324][T10091] should_fail_ex+0x263/0x280 [ 227.279346][T10091] should_fail+0xb/0x20 [ 227.279401][T10091] should_fail_usercopy+0x1a/0x20 [ 227.279424][T10091] _copy_from_user+0x1c/0xb0 [ 227.279449][T10091] ___sys_sendmsg+0xc1/0x1e0 [ 227.279531][T10091] __x64_sys_sendmsg+0xd4/0x160 [ 227.279559][T10091] x64_sys_call+0x194c/0x3020 [ 227.279583][T10091] do_syscall_64+0x12c/0x370 [ 227.279603][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.279674][T10091] RIP: 0033:0x7fb1bde4c799 [ 227.279690][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.279707][T10091] RSP: 002b:00007fb1bc8a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.279727][T10091] RAX: ffffffffffffffda RBX: 00007fb1be0c5fa0 RCX: 00007fb1bde4c799 [ 227.279740][T10091] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 227.279792][T10091] RBP: 00007fb1bc8a7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.279805][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.279831][T10091] R13: 00007fb1be0c6038 R14: 00007fb1be0c5fa0 R15: 00007ffd32cea7d8 [ 227.279850][T10091] [ 227.375236][ T28] audit: type=1326 audit(1772246468.405:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.472463][ T28] audit: type=1326 audit(1772246468.405:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.496499][ T28] audit: type=1326 audit(1772246468.405:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.533682][ T28] audit: type=1326 audit(1772246468.405:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.544167][T10100] lo speed is unknown, defaulting to 1000 [ 227.564426][ T28] audit: type=1326 audit(1772246468.405:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.589727][T10102] loop3: detected capacity change from 0 to 512 [ 227.590601][T10100] xfrm0 speed is unknown, defaulting to 1000 [ 227.605564][ T28] audit: type=1326 audit(1772246468.405:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.659535][ T28] audit: type=1326 audit(1772246468.405:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.672932][T10102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.695694][T10102] EXT4-fs (loop3): 1 truncate cleaned up [ 227.701932][T10102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.716725][ T28] audit: type=1326 audit(1772246468.405:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f49529dc799 code=0x7ffc0000 [ 227.770942][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.889780][T10110] loop3: detected capacity change from 0 to 512 [ 227.906005][T10110] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 227.914807][T10110] EXT4-fs (loop3): orphan cleanup on readonly fs [ 227.922675][T10110] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 227.947891][T10110] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 227.950802][T10112] loop6: detected capacity change from 0 to 1024 [ 227.962200][T10110] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.1828: inode has both inline data and extents flags [ 227.975561][T10110] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 227.975735][T10110] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1828: couldn't read orphan inode 16 (err -117) [ 227.984919][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 227.984940][ C1] EXT4-fs (loop3): initial error at time 1772246469: ext4_orphan_get:1391: inode 16 [ 227.984983][ C1] EXT4-fs (loop3): last error at time 1772246469: ext4_orphan_get:1391: inode 16 [ 228.000419][T10112] EXT4-fs: Ignoring removed oldalloc option [ 228.003396][T10110] loop3: lost filesystem error report for type 5 error -117 [ 228.034402][T10112] EXT4-fs: Ignoring removed bh option [ 228.048029][T10110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.092375][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.126207][T10112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.469665][T10105] ================================================================== [ 228.477760][T10105] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 228.487223][T10105] [ 228.489531][T10105] read to 0xffff888172ca2800 of 1024 bytes by task 30 on cpu 1: [ 228.497154][T10105] copy_folio_from_iter_atomic+0x75f/0x1170 [ 228.503042][T10105] generic_perform_write+0x2c1/0x490 [ 228.508315][T10105] shmem_file_write_iter+0xc5/0xf0 [ 228.513420][T10105] lo_rw_aio+0x67d/0x730 [ 228.517654][T10105] loop_process_work+0x56c/0xac0 [ 228.522585][T10105] loop_workfn+0x31/0x40 [ 228.526824][T10105] process_scheduled_works+0x4de/0x9e0 [ 228.532280][T10105] worker_thread+0x581/0x770 [ 228.536869][T10105] kthread+0x22a/0x280 [ 228.540929][T10105] ret_from_fork+0x150/0x360 [ 228.545524][T10105] ret_from_fork_asm+0x1a/0x30 [ 228.550285][T10105] [ 228.552592][T10105] write to 0xffff888172ca2bbc of 10 bytes by task 10105 on cpu 0: [ 228.560382][T10105] copy_folio_from_iter_atomic+0x75f/0x1170 [ 228.566266][T10105] generic_perform_write+0x2c1/0x490 [ 228.571548][T10105] ext4_buffered_write_iter+0x1ee/0x3c0 [ 228.577100][T10105] ext4_file_write_iter+0x380/0xfa0 [ 228.582307][T10105] iter_file_splice_write+0x6c4/0xa80 [ 228.587667][T10105] direct_splice_actor+0x156/0x2a0 [ 228.592771][T10105] splice_direct_to_actor+0x311/0x670 [ 228.598131][T10105] do_splice_direct+0x119/0x1a0 [ 228.602972][T10105] do_sendfile+0x382/0x650 [ 228.607390][T10105] __x64_sys_sendfile64+0x105/0x150 [ 228.612586][T10105] x64_sys_call+0x2dc4/0x3020 [ 228.617252][T10105] do_syscall_64+0x12c/0x370 [ 228.621836][T10105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.627726][T10105] [ 228.630031][T10105] Reported by Kernel Concurrency Sanitizer on: [ 228.636163][T10105] CPU: 0 UID: 0 PID: 10105 Comm: syz.6.1827 Tainted: G W syzkaller #0 PREEMPT(full) [ 228.647091][T10105] Tainted: [W]=WARN [ 228.650888][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.660938][T10105] ================================================================== [ 228.814207][ T6638] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.