last executing test programs: 5m1.521004224s ago: executing program 32 (id=119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1fde9b256d4cc3f07f92eab10280fa1887305c23000000fed8815f6f472d000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x7, 0x1}, {0x0, 0xb3}}, 0x0) setitimer(0x0, &(0x7f0000000100)={{}, {0x0, 0xea60}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x20, 0x7, 0xc, 0x5, {{0xa, 0x4, 0x1, 0x10, 0x28, 0x66, 0x0, 0xf5, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x13, 0xbc, [@private=0xa010100, @loopback, @local, @rand_addr=0x64010102]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x210, 0x4) 4m31.788836589s ago: executing program 33 (id=650): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x3000000}, 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 3m50.169005785s ago: executing program 34 (id=1422): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x3b01070, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x54}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff8}]}, 0x30}}, 0x1) 3m47.626832045s ago: executing program 5 (id=1463): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x37, 0x0, 0x34, 0x30, 0x65, 0x65, 0x31, 0x61, 0x65, 0x39, 0x66, 0x38, 0x1b, 0x61, 0x33, 0x38]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7ef30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x12}, 0x48, r0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') setresuid(0xee00, 0xee00, 0x0) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x400c894}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048890}, 0x0) getdents(r2, &(0x7f0000000200)=""/185, 0xb9) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@noswap}, {@inode32}]}) r6 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r1, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140), 0x3, 0x450, &(0x7f0000000640)="$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") 3m47.509227912s ago: executing program 5 (id=1466): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8820}, 0x8000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time={0x5, 0x2}, {0x4, 0xfc}, {0x0, 0x3}, @quote={{0x5, 0x9}, 0x8}}, {0xc3, 0x0, 0x80, 0x3, @time={0x4, 0xffff}, {0x0, 0x32}, {}, @connect={{0x4, 0x8}, {0x2, 0x3}}}], 0x38) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 3m47.396953989s ago: executing program 5 (id=1467): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 3m47.322638853s ago: executing program 5 (id=1470): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x7, 0x0) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x2000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), {0x1a}, &(0x7f00000002c0)=""/154, 0x9a, &(0x7f0000000600)=""/4096, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) 3m46.432306566s ago: executing program 5 (id=1483): openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socket(0xa, 0x1, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) (fail_nth: 1) 3m46.261219836s ago: executing program 5 (id=1488): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x40, 0x9, 0xffff0001, {{0x12, 0x4, 0x3, 0x5, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x9, [{@private=0xa010100, 0x2}, {@rand_addr=0x64010102, 0x101}, {@loopback, 0xfffffffb}, {@multicast1, 0x6}]}, @generic={0xde, 0xe, "d91a932753fa9f2b71d3f84f"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x42, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r0], &(0x7f0000000480)=[{0x4, 0x4, 0x4, 0xc}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) 3m46.19411414s ago: executing program 35 (id=1488): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x40, 0x9, 0xffff0001, {{0x12, 0x4, 0x3, 0x5, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x9, [{@private=0xa010100, 0x2}, {@rand_addr=0x64010102, 0x101}, {@loopback, 0xfffffffb}, {@multicast1, 0x6}]}, @generic={0xde, 0xe, "d91a932753fa9f2b71d3f84f"}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x42, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r0], &(0x7f0000000480)=[{0x4, 0x4, 0x4, 0xc}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) 3m38.071602439s ago: executing program 8 (id=1620): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r0, 0x5434, 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) 3m38.011473613s ago: executing program 8 (id=1622): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$eJzs3U1sHOUZAOB3nIQEIwVEqxRFIUwClYIEZr0GU5cDLOuxM7DetXbXVaKqohE4yIoDFIpacoGoErRVq6qnHilXbr1RVWqrHtqeKpVDL70hcaqo1D9RVUhbzew6/v9JcMxPnseyv9nZd77vnfV63pm193MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfmzqSbq0+2WzNb3L/U329WNas8tmrciKT4jEOH4sN/9dd9cfnuI8WXk3Gsf+tYHCqaQ3HpliO3PfKF/UNL22+R0LU6scO4JOK1IqkL5xYX51+8DonsoR/+6qo3+W+v+DqdNfNOK5+pTWdp3mmlE+PjlQdOT/VuncobWedsp5vNpPV2Vuu22ump+r3p6MTEWJqNnG3NNacna41saeXD91crlfH0iZHZrNbutJoPPBGd+um80cib02VMtfKdKGIeLp6IT+bdtJvVZtL0/MLi/NiKrJKNUi2CRje6Y1//+XPsntvef/m9fy7MF0/IzfY3GTwxq6Oj1ero+EMTDz1cqeyvVqqrV1TWiCsRMRRRRFyXJy2fIbt7AIePYWhQ/6MReTRjLs5EuubjQEQciHpMRjtaMVOs+8uBdVEDS/X/yw/8/U9bjbuy/i9V+TuW7z4aZf0/3r91fLP6vy6LLT8OXFX0th+/PdzP7lJciHOxGIsxHy/u6gjpwd3NOI106OP2kKy6NR1ZNCOPTrQij5molWvSwZo0JmI8xqMST8XpmIpOpDEVeTQii06cjU50IyufUfVoRxa16EYr2pHGqajHvZHGaEzERIxFGlmMxNloxVw0Yzruj1rZy/lYKB/3sTVZHrk5fvnsn99/s1i+EjS61W4VJ3NF0D+2CFpX7res/71ecb6wNkL9v9Ht9iEcrllvqf4DAAAAn1tJ+ep7Ur7Ef2e5NJU3sq/vYMvu/j1IDwAAANgF5W/+jxXNgWLpzkiK6//KBpHv7nluAAAAwO5IyvfYJRExHHf1l87HQrwW87HRiwAAAADAZ1D5+//jRTMc8Wq5Ymm6FNf/AAAA8Dnx/c3m2H9vaY7dzuzB5NflHMDJ5dkz9yQXa0Vc7eK+/naD5mtXeuxOHU0ODzopm/H9l25JImJ/PTuWLM1++dHBfvtB+fXo8lwCm831n7TbWyYQWydQ3oofxYl+zIln+u0zg3uS/ijDU3kjG6m3Go+UUyIWn92Xn1v4bkQx+g+aM4eTOL+wOD/y9POLz5S5XC56uXxxMIHiqnkUe7dumUtv8AjEnRvv8YHyjRiDcYf741ZW7v9QufX/euU8s5vuf7JyzNfjZD/m5HC/HV66pz/moWLM0ZFHRqNWOzzUzc50X+6t2PtBFqPb7fk234XX4+5+zN2n7u43G2RRXZXFc+uzqK7Mov9YxNAuZfHmiVfP/Of3rSQb2y6LsavIorcvYm0WAJ+U8+WsP8tV6OayChVFpVDU/zV19+alLXdwrP338ij9s4yPBt1GxIpatz/WVvflvndW3XvRP6Kf6sec6p9P7D+6QV2pbHBEf2HhhT8MjugPvv2zn3/j+B9/UY57TdXt7bi3HzNo4vbfbVJji33+8Zqq+laxxVsbjlucg3Ua1SQuR+z79sUX4shLr1y6f+HiuWfnn51/rlodG688WKk8VI0D5anCoNkiUwBuXNv/j51NI24adJE8uNlV9aDi3X7lTwpG4ul4PhajOAO4qx971/px3ymuxFf8GcJ921y1Dq/4Dy/3bXNtuRxbXR+bxCaxYysesS/9tGw+vC7fDgDYEydX1uFecjX1/8or8/dtc929upavuTqOzWv5Rr5yfR8OALghZO0PkuHuG0m7nc8+NToxMVrrns7Sdqv+ZNrOJ6ezNG92s3b9dK05naWz7Va3VV964Xgy66SdudnZVrubTrXaaQx18jPpVN7I0sG/fu9kM7VmN693ZhtZrZOl9VazW6t308m8U09n5x5v5J3TWbvcuDOb1fOpvF7r5q1m2mnNtevZSJp2smxFYD6ZNbv5VF4sNtPZdj5Ta1+OiMbcTJZOZp16O5/ttvodLo2VN6da7Zmy25H1u/+3vX68AeDT4KVXLl04t7g4/+K1Lfx1J8Gf9D4CAKvtqEr39jAhAAAAAAAAAAAAAABgnfVv1yvWfox3BF7dwsG47kPcQAtfHUzJ2F9TLH1KEttqYSiu5xDffPTRC5vFPP7qHad31s/GPykbvdX1jcMRN73zk/6axzYP/t7g52939vTdiLiGzXvJFjGrDhM37fFhCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA29P8AAAD//zO0a7E=") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240880c0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x80086601, 0x1000000000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe3da10a000600014002020c600e41b0000900ac000a0501000000160012000a0100000048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01b7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae54e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffeca0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f486f3869e18326b", 0xda}], 0x1}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000053c0001800c00028005000100000000002c00018014000300fc0100000000000000000000f400000007000400000000000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc060000000000000000000000000000140004"], 0xc8}}, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 3m37.817229945s ago: executing program 8 (id=1624): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff070001408000000108000140800000010900"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 3m37.783299967s ago: executing program 8 (id=1627): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f0000000080)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@nombcache}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x114) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xfa8, 0x10000}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3m37.534468831s ago: executing program 8 (id=1631): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x5, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x30, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x127c, 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d28616573290000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$inet_tcp(0x2, 0x1, 0x0) 3m37.324001123s ago: executing program 8 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000003c0)={'veth1_vlan\x00', {0x2, 0x4e24, @remote}}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x200, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@link_local, @multicast, @val={@val={0x88a8, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "2cc7bc75982e03b90e3696bf59d57903b2203e08530c20eb", "9a71e1964297c4b2ac735f6f6500000000020000000000000000000000001000"}}}}}}}, 0x72) (async) syz_clone3(&(0x7f0000000300)={0x11200, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x9}, &(0x7f0000000140)=""/32, 0x20, &(0x7f0000000200)=""/206, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_open_procfs(r7, &(0x7f0000000380)='gid_map\x00') (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r8, @ANYBLOB="20ba0100380a0400300012800b00010065727370616e00002000028005001600020000000500170001000000040012000600180007000000"], 0x50}}, 0x8040096) 3m37.278169356s ago: executing program 36 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000003c0)={'veth1_vlan\x00', {0x2, 0x4e24, @remote}}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x200, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x8) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@link_local, @multicast, @val={@val={0x88a8, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "2cc7bc75982e03b90e3696bf59d57903b2203e08530c20eb", "9a71e1964297c4b2ac735f6f6500000000020000000000000000000000001000"}}}}}}}, 0x72) (async) syz_clone3(&(0x7f0000000300)={0x11200, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x9}, &(0x7f0000000140)=""/32, 0x20, &(0x7f0000000200)=""/206, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_open_procfs(r7, &(0x7f0000000380)='gid_map\x00') (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r8, @ANYBLOB="20ba0100380a0400300012800b00010065727370616e00002000028005001600020000000500170001000000040012000600180007000000"], 0x50}}, 0x8040096) 3m19.219391602s ago: executing program 6 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m19.158283136s ago: executing program 6 (id=1892): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53048f6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000"], 0x58) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) sched_getattr(0x0, &(0x7f0000000380)={0x38}, 0x38, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) 3m19.060852092s ago: executing program 6 (id=1894): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000000)={[{}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@minixdf}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7f}}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x481, &(0x7f0000000cc0)="$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") 3m18.868842053s ago: executing program 6 (id=1898): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x3, 0x25dfdbfc}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = socket$phonet(0x23, 0x2, 0x1) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r4 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setopts(0x4202, r4, 0xe96, 0x455b843fbdb64c65) fallocate(r3, 0x10, 0x800, 0x8000) 3m18.132377046s ago: executing program 6 (id=1910): r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x0, 0x3, {{0x17, 0x4, 0x2, 0xf, 0x5c, 0x65, 0x0, 0xa0, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x21, 0x1, [{0x5, 0x10, "4d4ef0ff97121f840e766f19cdc8"}, {0x7, 0x2}, {0x4, 0x4, '2/'}, {0x2, 0x5, "1c585f"}]}, @ssrr={0x89, 0x1f, 0x25, [@local, @broadcast, @empty, @loopback, @broadcast, @broadcast, @local]}, @generic={0x89, 0x8, "1a1cb239f531"}]}}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x7, 0x1ff, 0xd8301839, {{0x30, 0x4, 0x2, 0x5, 0xc0, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x17, 0x39, [@rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010100, @loopback]}, @rr={0x7, 0x7, 0x42, [@broadcast]}, @lsrr={0x83, 0xf, 0xe, [@local, @broadcast, @remote]}, @ssrr={0x89, 0x3, 0x65}, @timestamp={0x44, 0x24, 0xe0, 0x0, 0x2, [0x3, 0x10001, 0x7a34, 0x9, 0x4, 0x1, 0x3, 0xc]}, @timestamp_prespec={0x44, 0x4c, 0x96, 0x3, 0xd, [{@multicast2, 0xd6}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x2}, {@local, 0xe48}, {@local, 0x13}, {@empty, 0x6}, {@multicast2, 0x4}, {@private=0xa010101, 0x4}]}, @ssrr={0x89, 0xb, 0xb3, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000190000042abd7000fedbdf250a2020010000c8070004000008001900", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB="0600150002000000080006000007000000001000030000000e000880460538dd70c4af18c8bc000008001000050000f60700170006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'veth1_virt_wifi\x00', {0x1}, 0xfff7}) write(r0, &(0x7f00000002c0)="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", 0xfc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r7, 0x40305839, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000500)={0x0, 0x69, "c548e859fa5269bbe58bc03ae36374244543a036386563c84ffb18c6ac5b8dc2d4825e5f7e96fdbf660a095da0067441261f66d8db22d8d7e9b71b97e29214f8e6ff9e6a12aeb12590d81218eb5cab12abe93eb6d7221b7328ff6aa1a3b66a458fa7553d721fb4c40d"}, &(0x7f0000000200)=0x71) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000600)={r8, 0xd1f1, 0x0, 0x81, 0x26}, &(0x7f0000000640)=0x18) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) write$vga_arbiter(r9, &(0x7f00000006c0)=@unlock_all, 0xb) 3m17.72857658s ago: executing program 6 (id=1919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x200088e, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@init_itable}, {@lazytime}, {@nodelalloc}, {@nogrpid}]}, 0x3, 0x45e, &(0x7f0000000340)="$eJzs3M9vFFUcAPDv7Lb8xlaCPyioVTRi1JYWRA5eMJp40MRED3isbSFIoUprIoQoGoNHQ8LJi/HuX+BJL0aNBxOvejckaLiAxpgxsztTusvuwpbdbmE/n2SW93be7nvfmXm7781jG0DfGs0ekogtEfFbRAxVs7UFRqv/XLtydvrvK2enk0jTN/5KKuWuXjk7XRQtXre5yAxElD5NYmeDehdOnzk+NTc3eyrPjy+eeHd84fSZZ4+dmDo6e3T25OTBg/v3TTx/YPK5jsSZxXV15MP5XTteeevCa9OHL7z949dJEX9dHB0y2mrnE2na4ep6a+uydDLQw4bQlnK1m8Zgpf8PRTmun7yhePmTnjYO6Ko0TdP7m+8+lwJ3sSR63QKgN4ov+mz+W2yrNPRYEy4fqk6Asriv5Vt1z0CU8jKDdfPbThqNiMPn/vky26I79yEAAGp8m41/nmk0/ivF8vtC9+RrKMMRcW9EbIuIAxGxPSLui6iUfSAiHmyz/vpFkhvHP6VLKwrsFl0+9F68kK9t1Y7/stHfhiwxXM5zWyvxDyZHjs3N7s2PyZ4YXJ/lJ1rU8d1Lv37ebN/y8V+2ZfUXY8G8HZcG1te+ZmZqcep24y5c/jhiZKBR/MnSSkASETsiYmSFdRwrx65m+24efwsdWGdKv4p4snr+z0Vd/IWk9frk+IaYm907XlwVN/rpl/OvN6v/tuLvgOz8b2p4/S/FP5wsX69daOfdv3gqezz/+2dN5zQrvf7XJW8uzc8yH0wtLp6aiFiXvFpt9PLnJ+vKTV4vn8W/Z3fj/r8trh+JnRGVi/ihiHg4Ih7J2/5oRDwWEbtbHIUfXnz8nZXH311Z/DNtnf888fOfF0ei5pmmifLx77+pqXS4nfiz87+/ktqTP3Mrn3+30q52r2YAAAC4U5UiYkskpbGldKk0Nlb9P/zbY1Npbn5h8ekj8++fnIn/0jSN4RgsFXe6hpbdD53Ip/VFfrIuvy+/b3yxvLGSH5uen5vpdfDQ5zY36f+ZP8q9bh3QdTeuo+n50C/8XhP6l/4P/Uv/h/7VoP9v7EU7gNXX6Pv/o9Yv+bfu98PAHaqu/7v5D33E/B/610r6v88MuDu07MvrVq8dwKpa2Bg3/5H8KiSS7jVjfafesPgzFD09UGsmEaU10QyJLiV6/MEEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQIf8HAAD///3x73E=") r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2a4) finit_module(r1, &(0x7f00000000c0)='ext4\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x40080, 0x7c) r3 = openat(r2, 0x0, 0x10000, 0xe2) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e20, 0xb3e, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}}, 0x3a) 3m17.692583553s ago: executing program 37 (id=1919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x200088e, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@init_itable}, {@lazytime}, {@nodelalloc}, {@nogrpid}]}, 0x3, 0x45e, &(0x7f0000000340)="$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") r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2a4) finit_module(r1, &(0x7f00000000c0)='ext4\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x40080, 0x7c) r3 = openat(r2, 0x0, 0x10000, 0xe2) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e20, 0xb3e, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}}, 0x3a) 2m54.883840119s ago: executing program 9 (id=2239): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x40000000000036d, 0x2, 0x0) (async) write(r0, &(0x7f0000000240)="1800000016005f0214fffffffffffff80700000000000000", 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001140)={0x80, 0x1f4}) (async) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000380)='\x00', 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2m54.800207523s ago: executing program 9 (id=2241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000007c0)=[@in6={0xa, 0x4e21, 0x383, @private2, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x3, @local, 0xa68}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa14000700"/36], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 2m54.68012954s ago: executing program 9 (id=2244): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000480)) (async) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_delete(r2) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="20100000000000001800128008000100677470000c00028008000300c5ce0001"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 2m54.18454634s ago: executing program 9 (id=2253): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000b00)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@utf8no}, {@fat=@showexec}, {@uni_xlate}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000480)=[{0x4, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/253, 0xfd}, {&(0x7f0000000c00)=""/227, 0xe3}], &(0x7f0000000240)=[0x8, 0x2, 0x5]}, {0x1, 0x1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/144, 0x90}], &(0x7f00000003c0)=[0x7870]}], 0x2) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f00000004c0)='utf8=0', &(0x7f0000000d00)='./bus\x00', &(0x7f0000000d40), 0x100000, &(0x7f0000000d80)={[{']\\1:'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@seclabel}]}) io_setup(0x3, &(0x7f0000000400)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000004000000040000000100000000080000", @ANYRES32, @ANYBLOB="08000000000000000000008630fee6bfde33c50a3ba4de55d5042303000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x300000000000000, 0x0, 0x0, 0x0, 0xe11, r7, 0x0, 0xf, 0x4, 0x0, 0x0, r7}]) io_uring_enter(r1, 0x627, 0x4c1, 0x9, 0x0, 0x0) 2m53.789362973s ago: executing program 9 (id=2261): mount$cgroup2(0x0, &(0x7f0000008180)='.\x00', &(0x7f00000081c0), 0x40, &(0x7f0000008200)={[{@pids_localevents}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x181402) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x5c, 0x31, 0x53b, 0x70bd2c, 0x0, {0x9}, [{0x48, 0x1, [@m_sample={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a2f2f9bb2c23128d02390a3243a5d9f447"}, {0xc}, {0xc, 0x4}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac0000000001010400000000000000040a0000003c0001802c000180140003"], 0xac}}, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000240)=""/212) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, 0x6, 0x3}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)={{r7}, {@val={r8}, @actul_num={@val=0x2b, 0x8, 0x6b}}}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x234, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3, 0xce21, 0x2, 0x2, 0x0, 0x0, 0x21}, {@in6=@private1, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x100000001, 0x0, 0xfffffffffffffffd, 0x8, 0x41, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x81}, 0x70bd2c, 0x0, 0xa, 0x1, 0x0, 0x50}, [@algo_auth={0x141, 0x1, {{'sha256-asm\x00'}, 0x7c8, "f6b555bf66e6fb0942bff7e6ab4807681e7a8a864e8943a3ffac4b8c20e24fa8202b23be8801f79d5701d3abeea584df755a53e95e471e05807f662e7f8b33e48b5479cfa343e1938d4b6e290c89ab65ac51a36325e6819caf2eab32188f525a95fd84eeb09391098e9050b5ed8fcf25985bce9ee12f242b128e4b374d1762b302b16d911f22cdea32c4663f652991834ec357a59ac5b6d186c68a6387add9ae80083374c6763516d9770bc265cdff355d19786adb156cd23ce7a6194a5e4e75a8c599abc1ddc0aba1c01aaf9c4013a30859c68efcc22382b0f228a3a2db21f04ed3d7094db77af1f609be2bfb4f193671a2a6ff110f07f062"}}]}, 0x234}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2m53.476843152s ago: executing program 9 (id=2268): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x1, 0x20004, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) 2m53.476443922s ago: executing program 38 (id=2268): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x1, 0x20004, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) 2m27.105297468s ago: executing program 7 (id=2646): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x30, r2, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4088}, 0x840) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b34ef6a1c2d461340fa66a39a7251b610e42", @ANYRES32=r3, @ANYBLOB="0c009900090000003500000008006b00b4000000"], 0x30}}, 0x0) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (rerun: 64) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, 0x0) (async) recvmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/253, 0xfd}], 0x1, &(0x7f0000000200)=""/168, 0xa8}, 0x7}, {{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f0000000600)=""/116, 0x74}], 0x6}, 0x80}, {{&(0x7f0000000700)=@nfc_llcp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/20, 0x14}, {&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000000880)=""/230, 0xe6}, {&(0x7f0000000980)=""/208, 0xd0}], 0x5, &(0x7f0000000b00)=""/196, 0xc4}, 0xff}], 0x3, 0xfc0, 0x0) 2m26.200928272s ago: executing program 7 (id=2656): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40005, @mcast1}, {0x2, 0xfff9, 0xc00, @empty, 0xffffffff}, r1, 0x9dffffff}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40005, @mcast1}, {0x2, 0xfff9, 0xc00, @empty, 0xffffffff}, r1, 0x9dffffff}}, 0x48) socket(0x2a, 0x3, 0xfffffff6) (async) r2 = socket(0x2a, 0x3, 0xfffffff6) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 2m26.129208016s ago: executing program 7 (id=2660): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x1, 0xffffffd0}, {0x3d}, {0x16, 0x0, 0x3, 0x20000000}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) splice(r0, 0x0, r3, 0x0, 0xf39, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r9 = openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:*\t\n', @ANYRESDEC], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x1) dup3(r11, r10, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) tee(r0, r5, 0x1, 0x100000000000000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)={r2}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$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") r12 = open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef) preadv2(r12, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) faccessat2(r1, &(0x7f0000000000)='./file0\x00', 0x100, 0x1100) 2m25.179643312s ago: executing program 7 (id=2670): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) 2m24.878719419s ago: executing program 7 (id=2677): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x2000775) chdir(&(0x7f0000000000)='./file1\x00') write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f45090000000040ff7f00000000000002003e00edfffbff94020000000000004000000000000000dd010000000000000f000000000038000100000002000000030000000300000004000000000000000d00000000000000c801000000000000e6000000000000000410000000000000030000000000000050e9fdfc7fa4abfaf2cde512b630da6ab8"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204040, 0x80) 2m24.500707992s ago: executing program 7 (id=2683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000340), 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000802}, 0x8000) r5 = socket(0x10, 0x803, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) process_vm_writev(r6, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "91f59eb1e5f8b656b18eb8a9217c98d0be2e304b9ef1fa47a4442c5cbd35885d", 0x13, 0x4, 0x9}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0xa7e4a71329317a60}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x80) 2m24.496477842s ago: executing program 39 (id=2683): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000340), 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000802}, 0x8000) r5 = socket(0x10, 0x803, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) process_vm_writev(r6, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "91f59eb1e5f8b656b18eb8a9217c98d0be2e304b9ef1fa47a4442c5cbd35885d", 0x13, 0x4, 0x9}, 0x3c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0xa7e4a71329317a60}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x80) 7.038289125s ago: executing program 4 (id=3863): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) 6.770413541s ago: executing program 4 (id=3867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r5, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg(r5, &(0x7f0000000300)={&(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x810) 5.328445746s ago: executing program 4 (id=3870): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) 5.169134936s ago: executing program 2 (id=3872): r0 = io_uring_setup(0x62d2, &(0x7f00000004c0)={0x0, 0x108b896, 0x10, 0x0, 0x237}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="9fab5ffdd945621b", 0x8, 0x14, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000000)={0x80, 0xfffffffb, 0x5}, 0x0) 4.197010323s ago: executing program 4 (id=3876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x49}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.206471711s ago: executing program 2 (id=3877): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") 3.079472518s ago: executing program 0 (id=3878): socket(0x2b, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008002e800400328008002f"], 0x30}], 0x1}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 3.05581995s ago: executing program 4 (id=3879): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = io_uring_setup(0x41d1, &(0x7f0000000140)) rt_sigsuspend(&(0x7f00000000c0)={[0x27ccfee7]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.990181294s ago: executing program 1 (id=3880): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4c9, &(0x7f0000000580)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007"], 0x88}, 0x1, 0x7}, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x44000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1013}], 0x2, 0x0, 0x0, 0x700) 2.564956589s ago: executing program 1 (id=3881): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x6, 0x1000, 0xffffffffffffffff}], 0x1, 0x4bff, 0x1e, 0x0, 0x0, 0x67}) 2.464708155s ago: executing program 0 (id=3882): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.288972775s ago: executing program 2 (id=3884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008801}, 0x20004000) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000001400)={&(0x7f00000002c0), 0xc, &(0x7f00000013c0)={&(0x7f0000000300)={0x10a0, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_SE_APDU={0x14, 0x19, "85bfd039dc66e907865c6211d8f72613"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xe35a41570af8f737}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_APDU={0x4a, 0x19, "7429ba1db6d2ddc3e9ebfe31da5ce14298766718f77a3331721a9c8af4ffa19cedb67930923973c60479fcba6214ed0f2e17ec5f632bdd8f49b054e0183f401d269179856231"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x10a0}, 0x1, 0x0, 0x0, 0x8090}, 0x20004801) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20408}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008814) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000001580)={0x6, 'nicvf0\x00', {0x8b0d}, 0x80}) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001600), r0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001640)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r11, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000080) close_range(r7, r7, 0x2) (async, rerun: 64) r12 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f0000001840)={0xc}) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r11, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, r8, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r13, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x84, r14, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2404c010}, 0x0) r15 = io_uring_setup(0x7115, &(0x7f0000001b80)={0x0, 0x38ab, 0x10, 0x3, 0x17e}) io_uring_enter(r15, 0x6cbf, 0x41ae, 0xee, &(0x7f0000001c00)={[0xfffffffffffffff7]}, 0x8) (async) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000001c40)='wg2\x00', 0x4) (async, rerun: 64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001d40)="f0c061d53caaaa6726b207e2090f58ffb12f1d849e5c52e10af3c85c1b0b6d40366caa8c876b0db5c4609345d9f06055ee57cfefb9c12eef51ec9255872f0e29ea0f29bdb12e35a40e48a711468008a52fb6ad2465e4fe2ce0d35c5daad55bbbfce9be91beaf4c4fdfcfa24b439a11a491a9c489e4785743e9e7faf6", 0x7c}, {&(0x7f0000001dc0)="d52468cbf7657a617d1d007dd9836bdd03ef32e692caeaa72162d2c8fa62c59efb8c85ab9a63056088e1a0b73bfb76f21a2f747130c0734491748fc0c2a8f85424bfcb28faa463c4d24de71773969e798271a8ad9134dd6f0462ec9183ada452a6f9d7924da685b94051c1293fc77f4a48ae6dcdfb1afa9d3ef793dad73f0ce2f32fc695dcd5e4fe7b81173be3f9c558752e613b7209489b588ee9aed91464ea9521df1b9695ec7d222b8864897922a90cd49052d7d7e58dad4ff95c364ecb2f0dd26aadff3668941471514ba3", 0xcd}], 0x2, 0x0, 0x0, 0x5}, 0x80) (rerun: 64) 2.068889348s ago: executing program 2 (id=3886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r3, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000780)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x1, 0x6, "00b646", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x2569, 0x0, 0x7f}}}}}}}}, 0x52) 1.907813938s ago: executing program 0 (id=3888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001dc0)=@newtfilter={0xa5, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_SEL={0x94, 0x5, {0xb, 0xf8, 0x8, 0x0, 0xff, 0x7, 0xf, 0x401, [{0x8001, 0xbba, 0x1, 0x5}, {0x633, 0xb4, 0x1ff, 0x3dd509e8}, {0x4df2, 0x800, 0xec3}, {0x3, 0x86, 0x4, 0x2}, {0x8000, 0x8, 0x3, 0x1}, {0x0, 0x401, 0x6}, {0x6, 0x3386d283, 0x50000000, 0xfffffffb}, {0xb7a, 0x8, 0x9, 0x6}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.750130757s ago: executing program 2 (id=3889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xe, 0x8, 0x1, 0x8, 0x2030005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000a80)=ANY=[@ANYBLOB="74020000", @ANYRES16=r6, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x50}, 0x80804) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d4}, 0x4048810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000aa5000/0x1000)=nil, 0x0}, 0x68) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r8 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) pipe(&(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.635806734s ago: executing program 1 (id=3890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0x12}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x16c, 0x24, 0x100, 0x4000, 0x0, {0x60, 0x0, 0x0, r6, {0x1, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x13c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x6, 0xa, 0x3, 0x1, 0x6, 0xf, 0xf, 0x1, 0x1, 0x2, 0x7, 0xb, 0x0, 0x0, 0x4, 0x4], 0x0, [0x8, 0x7c38, 0x9, 0x8, 0x8, 0xd755, 0x8ac9, 0x81, 0xe1, 0x7, 0xa, 0x8949, 0xb, 0x9, 0x200, 0x5], [0x86d, 0x8, 0x2, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x94a, 0xab, 0xa38, 0x3, 0x400, 0x1, 0xe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xa0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf79}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x34, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xee}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc67}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff0494}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x891d, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\x00\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn[\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\'\x9f\xd0\xcb\xe1mN\x1cA\xe54\xfa4\x84l\xb3\xc8\xc3\xd19\xc6_n\xf3:\x01\xc2\xec\xf0j\xb0nY\xea\x94VXo~\nC\x89\'\n=JBy\xc0\xe5\xe8\xc1.\x1bd\x9d\xe3\xee\xc55)`\xda\xf7\xb1\xc9\x04\xcfc\xd8\xb3F\xd3\xaa*\xc0\xcf\xd8]1\xcd\f\x9b\xb4\x12\x9d\xf37a\x98\x01\\\xb9\xa9\xbd\xf5\\\xd8\x96o\xff\xa5a\x8bkj~7\xd8\xe7F+l]\x18`\x9d\x94\xc6c\x81\xe4n\xa1\x1a{\xf8\xb2\xf0C\x7f\x8d+\xc3z!\xac\xc6\xd4\x1f=\xa2\xc7Y\xfc\xcb\xf6~Kx\x9e\x1d\xd5T\rC\x95\x94\xa7\x85\xb1Ff<2w\xd0s\xac36\xb8\x96U\x9e(Za\xf2\x9bk\xcfK\xd3\xa1\xd6\'\xdb\x8b\x06U\xf4a\xee\xac\xaa\x8b\xe3\x053Q7\xe3\xcc\xa5\xb1\x8a7w\x9b\xaa\xb4W[\xbas_\x95.\xd3\x89\xa7\x01R\xe9\xa3\f\xb8\x15e\x04l\xb1\x03\x82\xfc\x18\xcd6-\xd1\xbe\xc9w\x8a\xbd\x98\xe8\x04\xf0`\xe0O\b;\x9a\xf5\xb8\xcdv)\xaf\x83\x94\x00\xb4\xf9\xb3:Dc\x96K?dK.\x1e\x84r\xae\xc0\xe7\xf0+\xce\x0e\xealJ\xdb\x9b2\x92.\xb4\xbdG\xf7I\xc9\x84\xe0@\x89\xb516\xd0o\x83dr%0%-\xd2\xa2\xcb\xa3\x87f\xack\xfd?\x16u~\xb8\r$&\xb4,e\xc4\xea3\xbf\xab\xfc') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 1.380184989s ago: executing program 4 (id=3891): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f00000000c0)={0x9}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000200)='\x00\v', 0x2) sendfile(r2, r0, 0x0, 0x40001) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 1.301413074s ago: executing program 1 (id=3892): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) pipe2(0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r6, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10], 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.300521884s ago: executing program 0 (id=3893): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd25, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x2, @a={0xe8, 0x2, 0x6, 0x0, 0x1, 0xb, 0x9, {0x1, 0x0, "", 0x6, 0x81}, 0x6, 0x1, 0x8, 0x5, 0x4e, "f449155c445338d16c111d1b83413dcceeb71f84e02cd6f12e90886f363e7d305e2c9aa7461715abcda24aa5eabbe5bc9a9fe614ef047503c7e955bbbc247579ff688eee563dad1e43226dc26058"}}, 0x61) r4 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)) r5 = fsmount(r4, 0x0, 0x86) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000240)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r6, &(0x7f0000000040)='./bus\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x47, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x7a3}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") 1.02931614s ago: executing program 3 (id=3895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x100f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010004b0427bd7000000000007a000040b9eb64d07db6bb2e2fae64f17f1e798ad4cc9cc0fa45ac185db8edb4ced64cde8b4006d32f011292b8bb884118ebaf1ae90c1eebf1129b6671f0", @ANYRES32=0x0, @ANYBLOB="08000000081000001c0012800b00010062726964676500000c0002800500180000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 994.088302ms ago: executing program 3 (id=3896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x4008840) 981.605763ms ago: executing program 0 (id=3897): socket$packet(0x11, 0x2, 0x300) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) read(r0, &(0x7f00000000c0)=""/226, 0xe2) 964.638363ms ago: executing program 3 (id=3898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 901.009477ms ago: executing program 3 (id=3899): set_robust_list(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (rerun: 32) 670.987301ms ago: executing program 2 (id=3900): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 472.532603ms ago: executing program 1 (id=3901): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000084) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 263.388315ms ago: executing program 0 (id=3902): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4c9, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpI0SXNvP+7l0vbCbaEXej9oJh9cmtx7N3d1dVEQC24UakymsWaSCZlJbUIXqe66cCGKgrhw71/gxq4sgrjWvbiQitYIKggj58xMm6+JQ00zbc/vB6d5z0fO874dnpdz3pwzbwCZdSr5JxcxFBGfRsShxurmA041fqzfuTadLLmo1y98k0uO64k716Zbh7Z+72BErEVEf0Q8/f+IF3Lb41ZXVuemyuXSUnO9WJtfLFZXVs9enp+aLc2WFkYnzk1OToyMj03uWVtvvPbSjfMfPNn3/g+v3r71+kcfJtUaau5b39COvdRoem8c2bCtJyL++yCCdUGh2Z6BbleE+5J8fn+IiNNp/h+KQvppAllQr9frP9cPtNu9VgceW/n0GjiXH46IRjmfHx5uXMP/MQbz5Uq19s9LleWFmca18uHozV+6XC6NNO8VDkdvLlkfTcv31se2rI9HpNfAbxQG0vXh6Up5Zn+7OmCLg1vy//tCI/+BjHDLD9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2TSU+fPJ0u99f77zJWV5bnKlbMzperc8Pzy9PB0ZWlxeLZSmU3f2Zn/tfOVK5XF0X/F8tVirVStFasrqxfnK8sLtYvpe/0XS7370iqgE0dO3vw8FxFr/x5Il0Rfc59chcdbvZ6Lbr+DDHRHodsdENA1hv4gu9zjA1u/onfrdUF/u19cvDdeCDxa8t2uANA1Z477+x9klfF/yC7j/5BdrvGBHabo22S38X/g0WT8H7JrqM38X7/bMHfXSET8PiI+K/QeaM31BTwO8l/lmtf/Zw79tTkd9r3XAvpyP6blvoh4+Z0Lb12dqtWWRpPt397dXnu7uX1sw2nb3jAA3dLK01YeAwDZtX7n2nRr2c+4X/+v8RDC9vg9zbHJ/vRvlIPruU3PKuT26NmFtesRcWyn+LnmfOeNG5nB9cK2+EebP3ONU6T17UnnTd+f+Mc3xP/LhvgnfvP/CmTDzaT/Gdkp//JpTsfd/Nvc/wzt0bMT7fu//N3+r9Cm/zvZYYwX333ly7bxr0ec2DF+K15/Gmtr/KRuZzqMf/u5Z/7Ubl/9vcZ5dorfkpSKtfnFYnVl9Wz6PXKzpYXRiXOTkxMj42OTxXSMutgaqd7uP8c+ubVb+wfbxN+t/cm2v3fY/p/+/PGzp3aJ/7fTO3/+R3eJPxAR/+gw/ndjXzzfbl8Sf6ZN+/O7xE+2jXcYv/rmEwc6PBQA2AfVldW5qXK5tKSwh4X8w1ENhUeicP3hqMaWQrd7JuBBq64kt+ZJ0ne7JgAAAAAAAAAAAECn9uNx4k0BTTgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBffgkAAP//He/UdQ==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007"], 0x88}, 0x1, 0x7}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) r2 = open(&(0x7f0000000100)='./file1\x00', 0x44000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1013}], 0x2, 0x0, 0x0, 0x0) 24.955039ms ago: executing program 3 (id=3903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000200180014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 5.45237ms ago: executing program 3 (id=3904): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x54) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x12, 0x60d, 0x180, 0x202, 0x250, 0x2e8, 0x2e8, 0x250, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'wlan1\x00', 'pim6reg1\x00', {}, {}, 0x3a, 0x9, 0x5}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0xff, 0x2, 0x1, [0xfff7, 0xfffe, 0xed, 0xff01, 0x4, 0x9, 0x5, 0x10, 0x3, 0x7, 0xffff, 0x9e, 0xfff, 0x3, 0x4, 0x5], 0x6}}, @common=@unspec=@limit={{0x48}, {0x5, 0x6, 0xfffffffffffffffd, 0x7be, 0xa674, 0x0, 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb", 0x19, 0x800, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f00000000c0)={{r7}, {@void, @actul_num={@void, 0x4, 0x50}}}) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) write(r1, &(0x7f0000000080)="91", 0x1) 0s ago: executing program 1 (id=3905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x2, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40020042, &(0x7f0000000440)={0x11, 0xf8, 0x0, 0x1, 0x6}, 0x14) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$BLKOPENZONE(r3, 0x40101286, &(0x7f00000000c0)={0x9}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000200)='\x00\v', 0x2) sendfile(r4, r2, 0x0, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005480), 0x0, 0x28008004) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ___sys_sendmsg+0xc1/0x1e0 [ 294.028591][T16035] __x64_sys_sendmsg+0xd4/0x160 [ 294.028634][T16035] x64_sys_call+0x17ba/0x3000 [ 294.028674][T16035] do_syscall_64+0xc0/0x2a0 [ 294.028711][T16035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.028734][T16035] RIP: 0033:0x7f2d0357acb9 [ 294.028781][T16035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.028806][T16035] RSP: 002b:00007f2d01f95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.028896][T16035] RAX: ffffffffffffffda RBX: 00007f2d037f6180 RCX: 00007f2d0357acb9 [ 294.028910][T16035] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 294.028925][T16035] RBP: 00007f2d01f95090 R08: 0000000000000000 R09: 0000000000000000 [ 294.028943][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.028960][T16035] R13: 00007f2d037f6218 R14: 00007f2d037f6180 R15: 00007fff0274d648 [ 294.029026][T16035] [ 294.032356][T16033] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3214: bg 0: block 363: padding at end of block bitmap is not set [ 294.260313][T16042] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.286912][T16033] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 294.315389][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.364483][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.682286][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 294.682306][ T29] audit: type=1326 audit(1769229564.856:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.2.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 294.785878][ T29] audit: type=1326 audit(1769229564.856:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.2.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 294.809476][ T29] audit: type=1326 audit(1769229564.856:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.2.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 294.925841][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3228'. [ 294.950440][T16063] set_capacity_and_notify: 4 callbacks suppressed [ 294.950462][T16063] loop1: detected capacity change from 0 to 128 [ 294.988059][ T29] audit: type=1400 audit(1769229565.182:8794): avc: denied { accept } for pid=16068 comm="syz.0.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 295.061614][T16070] 8021q: adding VLAN 0 to HW filter on device bond8 [ 295.073943][T16072] bond8: (slave batadv1): Opening slave failed [ 295.088545][T16077] loop4: detected capacity change from 0 to 512 [ 295.123837][ T29] audit: type=1326 audit(1769229565.329:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.2.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 295.183059][T16077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.199908][ T29] audit: type=1326 audit(1769229565.350:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16057 comm="syz.2.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 295.225376][T16077] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.441854][T16093] loop3: detected capacity change from 0 to 4096 [ 295.463448][T16093] EXT4-fs: Ignoring removed oldalloc option [ 295.469908][T16097] FAULT_INJECTION: forcing a failure. [ 295.469908][T16097] name failslab, interval 1, probability 0, space 0, times 0 [ 295.482708][T16097] CPU: 1 UID: 0 PID: 16097 Comm: syz.1.3235 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.482756][T16093] ext4: Bad value for 'sb' [ 295.482783][T16097] Tainted: [W]=WARN [ 295.482793][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.482863][T16097] Call Trace: [ 295.482891][T16097] [ 295.482927][T16097] __dump_stack+0x1d/0x30 [ 295.483024][T16097] dump_stack_lvl+0x95/0xd0 [ 295.483125][T16097] dump_stack+0x15/0x1b [ 295.483196][T16097] should_fail_ex+0x263/0x280 [ 295.483266][T16097] should_failslab+0x8c/0xb0 [ 295.483347][T16097] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 295.483474][T16097] ? __alloc_skb+0x2f0/0x4b0 [ 295.483537][T16097] __alloc_skb+0x2f0/0x4b0 [ 295.483593][T16097] ? __alloc_skb+0x219/0x4b0 [ 295.483713][T16097] netlink_alloc_large_skb+0xbf/0xf0 [ 295.483817][T16097] netlink_sendmsg+0x40c/0x6f0 [ 295.483937][T16097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.484030][T16097] __sock_sendmsg+0x145/0x170 [ 295.484205][T16097] ____sys_sendmsg+0x31e/0x4a0 [ 295.484301][T16097] ___sys_sendmsg+0x195/0x1e0 [ 295.484471][T16097] __x64_sys_sendmsg+0xd4/0x160 [ 295.484559][T16097] x64_sys_call+0x17ba/0x3000 [ 295.484669][T16097] do_syscall_64+0xc0/0x2a0 [ 295.484760][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.484813][T16097] RIP: 0033:0x7f2d0357acb9 [ 295.484830][T16097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.484921][T16097] RSP: 002b:00007f2d01fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.485001][T16097] RAX: ffffffffffffffda RBX: 00007f2d037f6090 RCX: 00007f2d0357acb9 [ 295.485056][T16097] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 295.485099][T16097] RBP: 00007f2d01fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.485142][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.485203][T16097] R13: 00007f2d037f6128 R14: 00007f2d037f6090 R15: 00007fff0274d648 [ 295.485317][T16097] [ 295.698531][ T29] audit: type=1400 audit(1769229565.927:8797): avc: denied { setopt } for pid=16092 comm="syz.3.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 295.740223][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 295.749236][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3238'. [ 295.752467][ T29] audit: type=1400 audit(1769229565.927:8798): avc: denied { ioctl } for pid=16092 comm="syz.3.3234" path="socket:[59068]" dev="sockfs" ino=59068 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 295.759378][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 295.792688][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3238'. [ 295.992540][T13857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.008942][T16117] loop3: detected capacity change from 0 to 128 [ 296.101696][ T29] audit: type=1326 audit(1769229566.347:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9adedcacb9 code=0x7ffc0000 [ 296.128805][ T29] audit: type=1326 audit(1769229566.379:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9adedcacb9 code=0x7ffc0000 [ 296.233733][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 296.242831][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3251'. [ 296.255143][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 296.264204][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3251'. [ 296.382201][T16146] loop3: detected capacity change from 0 to 512 [ 296.402762][T16146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.417082][T16146] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.673458][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.978660][T16160] loop2: detected capacity change from 0 to 1024 [ 296.985918][T16160] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.996239][T16160] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 297.005555][T16158] loop3: detected capacity change from 0 to 128 [ 297.130943][T16165] loop1: detected capacity change from 0 to 4096 [ 297.146085][T16165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.193026][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.242361][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 297.269234][T16172] loop0: detected capacity change from 0 to 512 [ 297.275995][T16172] EXT4-fs: Ignoring removed nobh option [ 297.353866][T16172] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 297.362802][T16172] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3264: invalid indirect mapped block 256 (level 1) [ 297.431923][T16188] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 297.498818][T16188] loop3: detected capacity change from 0 to 1024 [ 297.521410][T16188] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 297.531846][T16172] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3264: invalid indirect mapped block 2683928664 (level 1) [ 297.547747][T16188] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 297.563967][T16188] EXT4-fs (loop3): invalid journal inode [ 297.571227][T16188] EXT4-fs (loop3): can't get journal size [ 297.579977][T16188] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 17104912: comm syz.3.3273: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 297.595847][T16188] EXT4-fs (loop3): failed to initialize system zone (-117) [ 297.603236][T16188] EXT4-fs (loop3): mount failed [ 297.618341][T16172] EXT4-fs (loop0): 1 truncate cleaned up [ 297.632534][T16172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.801627][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.040507][T16226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.057368][T16226] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.135118][T16233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.169584][T16233] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.385830][T16240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16240 comm=syz.0.3288 [ 298.456674][T16244] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 298.494781][T16233] FAULT_INJECTION: forcing a failure. [ 298.494781][T16233] name failslab, interval 1, probability 0, space 0, times 0 [ 298.507688][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.1.3287 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.507730][T16233] Tainted: [W]=WARN [ 298.507740][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.507758][T16233] Call Trace: [ 298.507767][T16233] [ 298.507776][T16233] __dump_stack+0x1d/0x30 [ 298.507851][T16233] dump_stack_lvl+0x95/0xd0 [ 298.507883][T16233] dump_stack+0x15/0x1b [ 298.507987][T16233] should_fail_ex+0x263/0x280 [ 298.508018][T16233] should_failslab+0x8c/0xb0 [ 298.508126][T16233] __kmalloc_cache_noprof+0x64/0x4a0 [ 298.508154][T16233] ? __iomap_dio_rw+0x194/0x14c0 [ 298.508188][T16233] __iomap_dio_rw+0x194/0x14c0 [ 298.508270][T16233] iomap_dio_rw+0x40/0x90 [ 298.508297][T16233] ext4_file_read_iter+0x20f/0x290 [ 298.508345][T16233] do_iter_readv_writev+0x4fd/0x5a0 [ 298.508371][T16233] vfs_readv+0x1f4/0x6e0 [ 298.508467][T16233] __se_sys_preadv2+0xfc/0x1c0 [ 298.508493][T16233] __x64_sys_preadv2+0x67/0x80 [ 298.508516][T16233] x64_sys_call+0xc61/0x3000 [ 298.508566][T16233] do_syscall_64+0xc0/0x2a0 [ 298.508680][T16233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.508704][T16233] RIP: 0033:0x7f2d0357acb9 [ 298.508726][T16233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.508752][T16233] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 298.508843][T16233] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 298.508864][T16233] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 298.508880][T16233] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.508959][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.509001][T16233] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 298.509029][T16233] [ 298.509693][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.709611][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.980587][T16267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.041649][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.157126][T16282] 9p: Bad value for 'rfdno' [ 299.229059][T16290] FAULT_INJECTION: forcing a failure. [ 299.229059][T16290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.242367][T16290] CPU: 1 UID: 0 PID: 16290 Comm: syz.0.3303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.242410][T16290] Tainted: [W]=WARN [ 299.242419][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.242444][T16290] Call Trace: [ 299.242452][T16290] [ 299.242542][T16290] __dump_stack+0x1d/0x30 [ 299.242575][T16290] dump_stack_lvl+0x95/0xd0 [ 299.242598][T16290] dump_stack+0x15/0x1b [ 299.242626][T16290] should_fail_ex+0x263/0x280 [ 299.242652][T16290] should_fail+0xb/0x20 [ 299.242677][T16290] should_fail_usercopy+0x1a/0x20 [ 299.242718][T16290] _copy_from_iter+0xcf/0xea0 [ 299.242820][T16290] ? __alloc_skb+0x397/0x4b0 [ 299.242854][T16290] ? __alloc_skb+0x219/0x4b0 [ 299.242882][T16290] netlink_sendmsg+0x4ae/0x6f0 [ 299.242918][T16290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.242946][T16290] __sock_sendmsg+0x145/0x170 [ 299.243098][T16290] ____sys_sendmsg+0x31e/0x4a0 [ 299.243142][T16290] ___sys_sendmsg+0x195/0x1e0 [ 299.243274][T16290] __x64_sys_sendmsg+0xd4/0x160 [ 299.243369][T16290] x64_sys_call+0x17ba/0x3000 [ 299.243400][T16290] do_syscall_64+0xc0/0x2a0 [ 299.243436][T16290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.243467][T16290] RIP: 0033:0x7f9adedcacb9 [ 299.243490][T16290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.243561][T16290] RSP: 002b:00007f9add806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.243583][T16290] RAX: ffffffffffffffda RBX: 00007f9adf046090 RCX: 00007f9adedcacb9 [ 299.243685][T16290] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 299.243703][T16290] RBP: 00007f9add806090 R08: 0000000000000000 R09: 0000000000000000 [ 299.243722][T16290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.243740][T16290] R13: 00007f9adf046128 R14: 00007f9adf046090 R15: 00007fffad7e1b98 [ 299.243768][T16290] [ 299.451864][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 299.451884][ T29] audit: type=1326 audit(1769229569.864:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa52c664ad7 code=0x7ffc0000 [ 299.496082][ T29] audit: type=1326 audit(1769229569.896:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa52c60c0d9 code=0x7ffc0000 [ 299.519677][ T29] audit: type=1326 audit(1769229569.896:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa52c664ad7 code=0x7ffc0000 [ 299.543309][ T29] audit: type=1326 audit(1769229569.896:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa52c60c0d9 code=0x7ffc0000 [ 299.566740][ T29] audit: type=1326 audit(1769229569.896:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 299.590329][ T29] audit: type=1326 audit(1769229569.906:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa52c664ad7 code=0x7ffc0000 [ 299.613870][ T29] audit: type=1326 audit(1769229569.906:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa52c60c0d9 code=0x7ffc0000 [ 299.637292][ T29] audit: type=1326 audit(1769229569.906:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c66acb9 code=0x7ffc0000 [ 299.703696][ T29] audit: type=1326 audit(1769229570.032:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa52c664ad7 code=0x7ffc0000 [ 299.727199][ T29] audit: type=1326 audit(1769229570.032:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16183 comm="syz.2.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa52c60c0d9 code=0x7ffc0000 [ 299.844013][T16300] set_capacity_and_notify: 6 callbacks suppressed [ 299.844034][T16300] loop3: detected capacity change from 0 to 128 [ 299.944088][T16305] loop3: detected capacity change from 0 to 512 [ 299.955373][T16305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.969988][T16305] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.024444][T16306] __nla_validate_parse: 19 callbacks suppressed [ 300.024464][T16306] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3311'. [ 300.144524][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 300.153530][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3317'. [ 300.177200][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 300.186150][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3317'. [ 300.240119][T16320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16320 comm=syz.1.3318 [ 300.279940][T16320] netlink: 'syz.1.3318': attribute type 4 has an invalid length. [ 300.288215][T16320] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3318'. [ 300.310471][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.324486][T16320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 300.376038][T16325] loop1: detected capacity change from 0 to 512 [ 300.390410][T16329] loop2: detected capacity change from 0 to 512 [ 300.397155][T16327] loop3: detected capacity change from 0 to 512 [ 300.405358][T16330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3321'. [ 300.426112][T16325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.442535][T16327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.442590][T16329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.442772][T16329] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.477029][T16325] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.494646][T16327] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.528305][T16329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3322'. [ 300.537365][T16329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3322'. [ 300.623746][T16342] loop0: detected capacity change from 0 to 4096 [ 300.686442][T16343] team0: Device gtp0 is of different type [ 300.821452][T16325] FAULT_INJECTION: forcing a failure. [ 300.821452][T16325] name failslab, interval 1, probability 0, space 0, times 0 [ 300.834246][T16325] CPU: 0 UID: 0 PID: 16325 Comm: syz.1.3320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.834290][T16325] Tainted: [W]=WARN [ 300.834300][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.834318][T16325] Call Trace: [ 300.834325][T16325] [ 300.834413][T16325] __dump_stack+0x1d/0x30 [ 300.834448][T16325] dump_stack_lvl+0x95/0xd0 [ 300.834479][T16325] dump_stack+0x15/0x1b [ 300.834507][T16325] should_fail_ex+0x263/0x280 [ 300.834583][T16325] should_failslab+0x8c/0xb0 [ 300.834610][T16325] __kmalloc_noprof+0xb8/0x580 [ 300.834633][T16325] ? ext4_find_extent+0x16b/0x7a0 [ 300.834659][T16325] ext4_find_extent+0x16b/0x7a0 [ 300.834703][T16325] ? blk_mq_dispatch_queue_requests+0x201/0x340 [ 300.834795][T16325] ? blk_mq_flush_plug_list+0x2f2/0x320 [ 300.834842][T16325] ext4_ext_map_blocks+0x128/0x38a0 [ 300.834930][T16325] ? __blk_flush_plug+0x26b/0x2b0 [ 300.835001][T16325] ? __submit_bio+0x31a/0x4f0 [ 300.835024][T16325] ? strlen+0x19/0x40 [ 300.835058][T16325] ? __perf_event_task_sched_in+0xa65/0xad0 [ 300.835081][T16325] ? __list_add_valid_or_report+0x38/0xe0 [ 300.835202][T16325] ext4_map_query_blocks+0xae/0x550 [ 300.835245][T16325] ? ext4_es_lookup_extent+0x3ac/0x540 [ 300.835329][T16325] ext4_map_blocks+0x398/0xd70 [ 300.835412][T16325] ? __account_obj_stock+0x2cc/0x350 [ 300.835449][T16325] ext4_iomap_begin+0x18b/0x1000 [ 300.835488][T16325] ? __account_obj_stock+0x211/0x350 [ 300.835583][T16325] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 300.835626][T16325] iomap_iter+0x3f7/0x800 [ 300.835669][T16325] __iomap_dio_rw+0x858/0x14c0 [ 300.835796][T16325] iomap_dio_rw+0x40/0x90 [ 300.835823][T16325] ext4_file_read_iter+0x20f/0x290 [ 300.835858][T16325] do_iter_readv_writev+0x4fd/0x5a0 [ 300.835898][T16325] vfs_readv+0x1f4/0x6e0 [ 300.835937][T16325] __se_sys_preadv2+0xfc/0x1c0 [ 300.835961][T16325] __x64_sys_preadv2+0x67/0x80 [ 300.835987][T16325] x64_sys_call+0xc61/0x3000 [ 300.836088][T16325] do_syscall_64+0xc0/0x2a0 [ 300.836118][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.836158][T16325] RIP: 0033:0x7f2d0357acb9 [ 300.836174][T16325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.836194][T16325] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 300.836216][T16325] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 300.836266][T16325] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 300.836285][T16325] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.836304][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.836321][T16325] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 300.836350][T16325] [ 301.141038][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.150865][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.283832][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.306667][T16362] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3331'. [ 301.445086][T16374] loop3: detected capacity change from 0 to 128 [ 301.480411][T16373] loop1: detected capacity change from 0 to 8192 [ 301.516070][T16376] bridge0: entered promiscuous mode [ 301.524188][T16373] loop1: p1 p2 p3 p4 [ 301.528307][T16373] loop1: p1 size 262144 extends beyond EOD, truncated [ 301.536042][T16373] loop1: p2 start 2531787010 is beyond EOD, truncated [ 301.543049][T16373] loop1: p3 size 100663552 extends beyond EOD, truncated [ 301.551283][T16373] loop1: p4 size 50331648 extends beyond EOD, truncated [ 301.624378][T16373] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 301.717780][T16391] FAULT_INJECTION: forcing a failure. [ 301.717780][T16391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.730942][T16391] CPU: 1 UID: 0 PID: 16391 Comm: syz.1.3341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.731040][T16391] Tainted: [W]=WARN [ 301.731048][T16391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.731066][T16391] Call Trace: [ 301.731074][T16391] [ 301.731085][T16391] __dump_stack+0x1d/0x30 [ 301.731189][T16391] dump_stack_lvl+0x95/0xd0 [ 301.731258][T16391] dump_stack+0x15/0x1b [ 301.731285][T16391] should_fail_ex+0x263/0x280 [ 301.731314][T16391] should_fail+0xb/0x20 [ 301.731415][T16391] should_fail_usercopy+0x1a/0x20 [ 301.731447][T16391] _copy_to_user+0x20/0xa0 [ 301.731491][T16391] simple_read_from_buffer+0xb5/0x130 [ 301.731647][T16391] proc_fail_nth_read+0x10e/0x150 [ 301.731688][T16391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.731754][T16391] vfs_read+0x1ab/0x7f0 [ 301.731804][T16391] ? __rcu_read_unlock+0x4e/0x70 [ 301.731828][T16391] ? __fget_files+0x184/0x1c0 [ 301.731857][T16391] ? __sys_bind+0x222/0x290 [ 301.731932][T16391] ? mutex_lock+0x57/0x90 [ 301.731955][T16391] ksys_read+0xdc/0x1a0 [ 301.732000][T16391] __x64_sys_read+0x40/0x50 [ 301.732053][T16391] x64_sys_call+0x2889/0x3000 [ 301.732079][T16391] do_syscall_64+0xc0/0x2a0 [ 301.732131][T16391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.732162][T16391] RIP: 0033:0x7f2d0353b58e [ 301.732238][T16391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.732264][T16391] RSP: 002b:00007f2d01fd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.732346][T16391] RAX: ffffffffffffffda RBX: 00007f2d01fd76c0 RCX: 00007f2d0353b58e [ 301.732364][T16391] RDX: 000000000000000f RSI: 00007f2d01fd70a0 RDI: 0000000000000004 [ 301.732381][T16391] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.732399][T16391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.732459][T16391] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 301.732480][T16391] [ 302.040888][T16390] loop0: detected capacity change from 0 to 8192 [ 302.105215][T16390] loop0: p2 p3 p4 < > [ 302.109369][T16390] loop0: partition table partially beyond EOD, truncated [ 302.174052][T16390] loop0: p2 size 590592 extends beyond EOD, truncated [ 302.182856][T16390] loop0: p3 start 4294967295 is beyond EOD, truncated [ 302.189718][T16390] loop0: p4 start 117440516 is beyond EOD, truncated [ 302.239090][ T3007] loop0: p2 p3 p4 < > [ 302.243221][ T3007] loop0: partition table partially beyond EOD, truncated [ 302.267533][ T3007] loop0: p2 size 590592 extends beyond EOD, truncated [ 302.277374][ T3007] loop0: p3 start 4294967295 is beyond EOD, truncated [ 302.284229][ T3007] loop0: p4 start 117440516 is beyond EOD, truncated [ 302.369688][T16429] loop1: detected capacity change from 0 to 128 [ 302.390130][T16430] FAULT_INJECTION: forcing a failure. [ 302.390130][T16430] name failslab, interval 1, probability 0, space 0, times 0 [ 302.402912][T16430] CPU: 1 UID: 0 PID: 16430 Comm: syz.3.3350 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.402954][T16430] Tainted: [W]=WARN [ 302.402963][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.402978][T16430] Call Trace: [ 302.402994][T16430] [ 302.403003][T16430] __dump_stack+0x1d/0x30 [ 302.403030][T16430] dump_stack_lvl+0x95/0xd0 [ 302.403092][T16430] dump_stack+0x15/0x1b [ 302.403114][T16430] should_fail_ex+0x263/0x280 [ 302.403189][T16430] should_failslab+0x8c/0xb0 [ 302.403212][T16430] kmem_cache_alloc_noprof+0x68/0x490 [ 302.403235][T16430] ? skb_clone+0x151/0x1f0 [ 302.403262][T16430] skb_clone+0x151/0x1f0 [ 302.403289][T16430] __netlink_deliver_tap+0x2c9/0x500 [ 302.403323][T16430] netlink_unicast+0x66b/0x690 [ 302.403414][T16430] netlink_sendmsg+0x5c8/0x6f0 [ 302.403453][T16430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.403483][T16430] __sock_sendmsg+0x145/0x170 [ 302.403516][T16430] ____sys_sendmsg+0x31e/0x4a0 [ 302.403658][T16430] ___sys_sendmsg+0x195/0x1e0 [ 302.403697][T16430] __x64_sys_sendmsg+0xd4/0x160 [ 302.403769][T16430] x64_sys_call+0x17ba/0x3000 [ 302.403798][T16430] do_syscall_64+0xc0/0x2a0 [ 302.403889][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.403990][T16430] RIP: 0033:0x7f75b8d6acb9 [ 302.404007][T16430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.404027][T16430] RSP: 002b:00007f75b7785028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.404048][T16430] RAX: ffffffffffffffda RBX: 00007f75b8fe6180 RCX: 00007f75b8d6acb9 [ 302.404100][T16430] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 302.404180][T16430] RBP: 00007f75b7785090 R08: 0000000000000000 R09: 0000000000000000 [ 302.404194][T16430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.404207][T16430] R13: 00007f75b8fe6218 R14: 00007f75b8fe6180 R15: 00007ffe6893be08 [ 302.404229][T16430] [ 302.620586][T16428] Unable to read rock-ridge attributes [ 302.641757][T16428] Unable to read rock-ridge attributes [ 302.688245][T16432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.709890][T16432] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.793715][T16441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.841127][T16441] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.031142][T16448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.062112][T16448] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.073814][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.124910][T16448] EXT4-fs error (device loop2): ext4_get_first_dir_block:3527: inode #12: comm syz.2.3357: Directory hole found for htree leaf block 0 [ 303.236044][T16461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.389814][T16461] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.536802][T16471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.567474][T16461] FAULT_INJECTION: forcing a failure. [ 303.567474][T16461] name failslab, interval 1, probability 0, space 0, times 0 [ 303.580170][T16461] CPU: 1 UID: 0 PID: 16461 Comm: syz.1.3361 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.580241][T16461] Tainted: [W]=WARN [ 303.580248][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.580263][T16461] Call Trace: [ 303.580272][T16461] [ 303.580282][T16461] __dump_stack+0x1d/0x30 [ 303.580311][T16461] dump_stack_lvl+0x95/0xd0 [ 303.580391][T16461] dump_stack+0x15/0x1b [ 303.580416][T16461] should_fail_ex+0x263/0x280 [ 303.580439][T16461] should_failslab+0x8c/0xb0 [ 303.580462][T16461] kmem_cache_alloc_noprof+0x68/0x490 [ 303.580507][T16461] ? __es_insert_extent+0x508/0xee0 [ 303.580549][T16461] __es_insert_extent+0x508/0xee0 [ 303.580607][T16461] ? blk_mq_request_issue_directly+0x314/0x390 [ 303.580725][T16461] ext4_es_cache_extent+0x28d/0x390 [ 303.580765][T16461] ext4_find_extent+0x336/0x7a0 [ 303.580800][T16461] ext4_ext_map_blocks+0x128/0x38a0 [ 303.580932][T16461] ? __blk_flush_plug+0x26b/0x2b0 [ 303.580964][T16461] ? __submit_bio+0x31a/0x4f0 [ 303.580999][T16461] ? __perf_event_task_sched_in+0xa65/0xad0 [ 303.581026][T16461] ? __list_add_valid_or_report+0x38/0xe0 [ 303.581065][T16461] ext4_map_query_blocks+0xae/0x550 [ 303.581108][T16461] ? ext4_es_lookup_extent+0x3ac/0x540 [ 303.581156][T16461] ext4_map_blocks+0x398/0xd70 [ 303.581222][T16461] ? __account_obj_stock+0x2cc/0x350 [ 303.581251][T16461] ? trace_reschedule_exit+0xd/0xb0 [ 303.581301][T16461] ? xas_load+0x413/0x430 [ 303.581334][T16461] ext4_iomap_begin+0x18b/0x1000 [ 303.581422][T16461] ? xa_load+0xb1/0xe0 [ 303.581462][T16461] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 303.581498][T16461] iomap_iter+0x3f7/0x800 [ 303.581686][T16461] __iomap_dio_rw+0x858/0x14c0 [ 303.581808][T16461] iomap_dio_rw+0x40/0x90 [ 303.581847][T16461] ext4_file_read_iter+0x20f/0x290 [ 303.581881][T16461] do_iter_readv_writev+0x4fd/0x5a0 [ 303.581913][T16461] vfs_readv+0x1f4/0x6e0 [ 303.581991][T16461] __se_sys_preadv2+0xfc/0x1c0 [ 303.582019][T16461] __x64_sys_preadv2+0x67/0x80 [ 303.582063][T16461] x64_sys_call+0xc61/0x3000 [ 303.582094][T16461] do_syscall_64+0xc0/0x2a0 [ 303.582133][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.582160][T16461] RIP: 0033:0x7f2d0357acb9 [ 303.582273][T16461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.582376][T16461] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 303.582442][T16461] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 303.582457][T16461] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 303.582470][T16461] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.582484][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.582546][T16461] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 303.582641][T16461] [ 303.871248][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.935321][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.956794][T13857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.976035][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.305482][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 304.305500][ T29] audit: type=1326 audit(1769229574.967:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.339570][T16503] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.345816][ T29] audit: type=1326 audit(1769229574.998:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.381357][ T29] audit: type=1326 audit(1769229575.040:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.405053][ T29] audit: type=1326 audit(1769229575.040:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.428696][ T29] audit: type=1326 audit(1769229575.040:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.452457][ T29] audit: type=1326 audit(1769229575.040:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.475989][ T29] audit: type=1326 audit(1769229575.040:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.499684][ T29] audit: type=1326 audit(1769229575.040:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.523379][ T29] audit: type=1326 audit(1769229575.040:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.547260][ T29] audit: type=1326 audit(1769229575.040:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16500 comm="syz.1.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 304.615055][T16509] can0: slcan on ttyS3. [ 304.620180][T16510] FAULT_INJECTION: forcing a failure. [ 304.620180][T16510] name failslab, interval 1, probability 0, space 0, times 0 [ 304.632891][T16510] CPU: 0 UID: 0 PID: 16510 Comm: syz.1.3380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.632980][T16510] Tainted: [W]=WARN [ 304.632988][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.633001][T16510] Call Trace: [ 304.633008][T16510] [ 304.633066][T16510] __dump_stack+0x1d/0x30 [ 304.633099][T16510] dump_stack_lvl+0x95/0xd0 [ 304.633122][T16510] dump_stack+0x15/0x1b [ 304.633224][T16510] should_fail_ex+0x263/0x280 [ 304.633253][T16510] should_failslab+0x8c/0xb0 [ 304.633278][T16510] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 304.633410][T16510] ? __alloc_skb+0x2f0/0x4b0 [ 304.633440][T16510] __alloc_skb+0x2f0/0x4b0 [ 304.633464][T16510] ? __alloc_skb+0x219/0x4b0 [ 304.633492][T16510] netlink_ack+0xfd/0x500 [ 304.633596][T16510] netlink_rcv_skb+0x192/0x220 [ 304.633625][T16510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.633668][T16510] rtnetlink_rcv+0x1c/0x30 [ 304.633709][T16510] netlink_unicast+0x5c0/0x690 [ 304.633753][T16510] netlink_sendmsg+0x5c8/0x6f0 [ 304.633787][T16510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.633814][T16510] __sock_sendmsg+0x145/0x170 [ 304.633850][T16510] ____sys_sendmsg+0x31e/0x4a0 [ 304.633901][T16510] ___sys_sendmsg+0x195/0x1e0 [ 304.633940][T16510] __x64_sys_sendmsg+0xd4/0x160 [ 304.633970][T16510] x64_sys_call+0x17ba/0x3000 [ 304.634051][T16510] do_syscall_64+0xc0/0x2a0 [ 304.634083][T16510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.634172][T16510] RIP: 0033:0x7f2d0357acb9 [ 304.634192][T16510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.634215][T16510] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.634307][T16510] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 304.634389][T16510] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 304.634402][T16510] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.634415][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.634428][T16510] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 304.634448][T16510] [ 304.905323][T16514] can0 (unregistered): slcan off ttyS3. [ 304.908008][T16509] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=257 sclass=netlink_xfrm_socket pid=16509 comm=syz.2.3378 [ 305.113733][T16522] __nla_validate_parse: 30 callbacks suppressed [ 305.113754][T16522] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3384'. [ 305.450922][T16531] set_capacity_and_notify: 7 callbacks suppressed [ 305.450940][T16531] loop4: detected capacity change from 0 to 512 [ 305.565396][T16531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.711428][T16531] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.823815][T16542] loop1: detected capacity change from 0 to 512 [ 305.860431][T16542] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 305.939077][T16544] loop2: detected capacity change from 0 to 512 [ 305.972660][T16535] loop3: detected capacity change from 0 to 128 [ 306.076166][T16544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.107050][T16544] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.177516][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 306.186498][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3393'. [ 306.283214][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 306.292254][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3393'. [ 306.328020][T16562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3397'. [ 306.353885][T16560] loop3: detected capacity change from 0 to 4096 [ 306.380647][T16560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.413760][T16567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'. [ 306.435660][T16567] netlink: 'syz.1.3399': attribute type 7 has an invalid length. [ 306.444268][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3396'. [ 306.467328][T16544] FAULT_INJECTION: forcing a failure. [ 306.467328][T16544] name failslab, interval 1, probability 0, space 0, times 0 [ 306.480092][T16544] CPU: 0 UID: 0 PID: 16544 Comm: syz.2.3391 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.480158][T16544] Tainted: [W]=WARN [ 306.480168][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.480187][T16544] Call Trace: [ 306.480196][T16544] [ 306.480206][T16544] __dump_stack+0x1d/0x30 [ 306.480232][T16544] dump_stack_lvl+0x95/0xd0 [ 306.480330][T16544] dump_stack+0x15/0x1b [ 306.480351][T16544] should_fail_ex+0x263/0x280 [ 306.480374][T16544] should_failslab+0x8c/0xb0 [ 306.480407][T16544] kmem_cache_alloc_noprof+0x68/0x490 [ 306.480438][T16544] ? __es_insert_extent+0x508/0xee0 [ 306.480500][T16544] __es_insert_extent+0x508/0xee0 [ 306.480542][T16544] ext4_es_insert_extent+0x467/0x1c70 [ 306.480667][T16544] ext4_map_query_blocks+0x38e/0x550 [ 306.480709][T16544] ? ext4_es_lookup_extent+0x3ac/0x540 [ 306.480749][T16544] ? __rcu_read_unlock+0x4e/0x70 [ 306.480771][T16544] ext4_map_blocks+0x398/0xd70 [ 306.480829][T16544] ? __account_obj_stock+0x211/0x350 [ 306.480860][T16544] ? xas_load+0x413/0x430 [ 306.480893][T16544] ? css_rstat_updated+0xbb/0x280 [ 306.480941][T16544] ext4_iomap_begin+0x18b/0x1000 [ 306.481030][T16544] ? __rcu_read_unlock+0x4e/0x70 [ 306.481062][T16544] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 306.481117][T16544] iomap_iter+0x3f7/0x800 [ 306.481224][T16544] __iomap_dio_rw+0x858/0x14c0 [ 306.481288][T16544] iomap_dio_rw+0x40/0x90 [ 306.481319][T16544] ext4_file_read_iter+0x20f/0x290 [ 306.481357][T16544] do_iter_readv_writev+0x4fd/0x5a0 [ 306.481386][T16544] vfs_readv+0x1f4/0x6e0 [ 306.481463][T16544] __se_sys_preadv2+0xfc/0x1c0 [ 306.481495][T16544] __x64_sys_preadv2+0x67/0x80 [ 306.481590][T16544] x64_sys_call+0xc61/0x3000 [ 306.481625][T16544] do_syscall_64+0xc0/0x2a0 [ 306.481665][T16544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.481695][T16544] RIP: 0033:0x7fa52c66acb9 [ 306.481750][T16544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.481776][T16544] RSP: 002b:00007fa52b0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 306.481797][T16544] RAX: ffffffffffffffda RBX: 00007fa52c8e5fa0 RCX: 00007fa52c66acb9 [ 306.481841][T16544] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 306.481855][T16544] RBP: 00007fa52b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.481874][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.481891][T16544] R13: 00007fa52c8e6038 R14: 00007fa52c8e5fa0 R15: 00007ffe5f4e31b8 [ 306.481920][T16544] [ 306.762197][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.802072][T16573] FAULT_INJECTION: forcing a failure. [ 306.802072][T16573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.815193][T16573] CPU: 1 UID: 0 PID: 16573 Comm: syz.1.3402 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.815280][T16573] Tainted: [W]=WARN [ 306.815289][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.815307][T16573] Call Trace: [ 306.815317][T16573] [ 306.815327][T16573] __dump_stack+0x1d/0x30 [ 306.815354][T16573] dump_stack_lvl+0x95/0xd0 [ 306.815448][T16573] dump_stack+0x15/0x1b [ 306.815469][T16573] should_fail_ex+0x263/0x280 [ 306.815538][T16573] should_fail+0xb/0x20 [ 306.815560][T16573] should_fail_usercopy+0x1a/0x20 [ 306.815584][T16573] _copy_from_user+0x1c/0xb0 [ 306.815647][T16573] ___sys_sendmsg+0xc1/0x1e0 [ 306.815695][T16573] __x64_sys_sendmsg+0xd4/0x160 [ 306.815726][T16573] x64_sys_call+0x17ba/0x3000 [ 306.815801][T16573] do_syscall_64+0xc0/0x2a0 [ 306.815869][T16573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.815958][T16573] RIP: 0033:0x7f2d0357acb9 [ 306.815987][T16573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.816011][T16573] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.816038][T16573] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 306.816056][T16573] RDX: 0000000004000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 306.816120][T16573] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.816160][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.816254][T16573] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 306.816282][T16573] [ 306.998135][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.008290][T13857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.182846][T16584] loop3: detected capacity change from 0 to 128 [ 307.307163][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3410'. [ 307.316146][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3410'. [ 307.348281][T12002] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.362756][T12002] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.381947][T12002] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.390732][T12002] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.491515][T16603] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 307.577025][T16612] FAULT_INJECTION: forcing a failure. [ 307.577025][T16612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.590283][T16612] CPU: 0 UID: 0 PID: 16612 Comm: syz.1.3417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.590318][T16612] Tainted: [W]=WARN [ 307.590335][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.590350][T16612] Call Trace: [ 307.590357][T16612] [ 307.590365][T16612] __dump_stack+0x1d/0x30 [ 307.590391][T16612] dump_stack_lvl+0x95/0xd0 [ 307.590415][T16612] dump_stack+0x15/0x1b [ 307.590444][T16612] should_fail_ex+0x263/0x280 [ 307.590510][T16612] should_fail+0xb/0x20 [ 307.590536][T16612] should_fail_usercopy+0x1a/0x20 [ 307.590619][T16612] _copy_to_user+0x20/0xa0 [ 307.590735][T16612] simple_read_from_buffer+0xb5/0x130 [ 307.590922][T16612] proc_fail_nth_read+0x10e/0x150 [ 307.590959][T16612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.591050][T16612] vfs_read+0x1ab/0x7f0 [ 307.591084][T16612] ? __schedule+0x82d/0xc90 [ 307.591119][T16612] ? __rcu_read_unlock+0x4e/0x70 [ 307.591194][T16612] ? __fget_files+0x184/0x1c0 [ 307.591241][T16612] ? mutex_lock+0x57/0x90 [ 307.591264][T16612] ksys_read+0xdc/0x1a0 [ 307.591352][T16612] __x64_sys_read+0x40/0x50 [ 307.591452][T16612] x64_sys_call+0x2889/0x3000 [ 307.591479][T16612] do_syscall_64+0xc0/0x2a0 [ 307.591588][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.591640][T16612] RIP: 0033:0x7f2d0353b58e [ 307.591658][T16612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.591678][T16612] RSP: 002b:00007f2d01fd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.591700][T16612] RAX: ffffffffffffffda RBX: 00007f2d01fd76c0 RCX: 00007f2d0353b58e [ 307.591715][T16612] RDX: 000000000000000f RSI: 00007f2d01fd70a0 RDI: 0000000000000007 [ 307.591803][T16612] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.591817][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.591830][T16612] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 307.591853][T16612] [ 308.083527][ T9306] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.092636][ T9306] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.103514][ T9306] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.113617][ T9306] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.152489][T16635] loop1: detected capacity change from 0 to 512 [ 308.172566][T16622] loop3: detected capacity change from 0 to 128 [ 308.211399][T16635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.230144][T16635] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.309490][T16646] loop3: detected capacity change from 0 to 512 [ 308.347404][T16646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.370535][T16646] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.575305][T16656] loop4: detected capacity change from 0 to 512 [ 308.592091][T16657] FAULT_INJECTION: forcing a failure. [ 308.592091][T16657] name failslab, interval 1, probability 0, space 0, times 0 [ 308.604806][T16657] CPU: 1 UID: 0 PID: 16657 Comm: syz.0.3433 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 308.604849][T16657] Tainted: [W]=WARN [ 308.604856][T16657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.604870][T16657] Call Trace: [ 308.604957][T16657] [ 308.604967][T16657] __dump_stack+0x1d/0x30 [ 308.604997][T16657] dump_stack_lvl+0x95/0xd0 [ 308.605020][T16657] dump_stack+0x15/0x1b [ 308.605040][T16657] should_fail_ex+0x263/0x280 [ 308.605064][T16657] should_failslab+0x8c/0xb0 [ 308.605115][T16657] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 308.605212][T16657] ? __alloc_skb+0x2f0/0x4b0 [ 308.605258][T16657] __alloc_skb+0x2f0/0x4b0 [ 308.605277][T16657] ? __alloc_skb+0x219/0x4b0 [ 308.605302][T16657] netlink_alloc_large_skb+0xbf/0xf0 [ 308.605335][T16657] netlink_sendmsg+0x40c/0x6f0 [ 308.605410][T16657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.605447][T16657] __sock_sendmsg+0x145/0x170 [ 308.605558][T16657] ____sys_sendmsg+0x31e/0x4a0 [ 308.605612][T16657] ___sys_sendmsg+0x195/0x1e0 [ 308.605660][T16657] __x64_sys_sendmsg+0xd4/0x160 [ 308.605767][T16657] x64_sys_call+0x17ba/0x3000 [ 308.605800][T16657] do_syscall_64+0xc0/0x2a0 [ 308.605872][T16657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.605967][T16657] RIP: 0033:0x7f9adedcacb9 [ 308.605987][T16657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.606070][T16657] RSP: 002b:00007f9add827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.606093][T16657] RAX: ffffffffffffffda RBX: 00007f9adf045fa0 RCX: 00007f9adedcacb9 [ 308.606108][T16657] RDX: 0000000004000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 308.606124][T16657] RBP: 00007f9add827090 R08: 0000000000000000 R09: 0000000000000000 [ 308.606137][T16657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.606151][T16657] R13: 00007f9adf046038 R14: 00007f9adf045fa0 R15: 00007fffad7e1b98 [ 308.606171][T16657] [ 308.810440][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.833758][T16646] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 308.842397][T16656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.903419][T16656] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.944404][T16664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.965555][T16664] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 308.991806][T16664] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 309.000055][T16664] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3435: bad orphan inode 14 [ 309.013875][T16664] ext4_test_bit(bit=13, block=18) = 1 [ 309.019291][T16664] is_bad_inode(inode)=0 [ 309.023543][T16664] NEXT_ORPHAN(inode)=0 [ 309.027654][T16664] max_ino=32 [ 309.030930][T16664] i_nlink=1 [ 309.039144][T16664] EXT4-fs (loop3): 1 truncate cleaned up [ 309.192992][T16682] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.270142][T16684] lo speed is unknown, defaulting to 1000 [ 309.404072][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 309.404091][ T29] audit: type=1326 audit(1769229580.322:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.458038][ T29] audit: type=1326 audit(1769229580.322:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.481688][ T29] audit: type=1326 audit(1769229580.353:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.555876][ T29] audit: type=1326 audit(1769229580.427:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.579457][ T29] audit: type=1326 audit(1769229580.427:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.603066][ T29] audit: type=1326 audit(1769229580.427:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.626564][ T29] audit: type=1326 audit(1769229580.427:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.650164][ T29] audit: type=1326 audit(1769229580.427:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.673736][ T29] audit: type=1326 audit(1769229580.427:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.697385][ T29] audit: type=1326 audit(1769229580.427:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 309.773642][T16701] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 309.898259][T16701] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.997941][T16715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.006486][T16715] team0: Failed to send port change of device bond1 via netlink (err -105) [ 310.022596][T16715] team0: Failed to send options change via netlink (err -105) [ 310.030180][T16715] team0: Port device bond1 added [ 310.306274][T16721] lo speed is unknown, defaulting to 1000 [ 310.335445][T16725] set_capacity_and_notify: 5 callbacks suppressed [ 310.335465][T16725] loop3: detected capacity change from 0 to 128 [ 310.413298][T16732] loop0: detected capacity change from 0 to 512 [ 310.536614][T16734] ip6gre1: entered promiscuous mode [ 310.542009][T16734] ip6gre1: entered allmulticast mode [ 310.571998][T16732] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.792643][T16750] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 310.799089][T16750] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 311.065263][T16756] loop3: detected capacity change from 0 to 128 [ 311.156070][T16765] ip6gre2: entered promiscuous mode [ 311.161328][T16765] ip6gre2: entered allmulticast mode [ 311.238353][T16769] loop3: detected capacity change from 0 to 512 [ 311.264661][T16769] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3472: inode has both inline data and extents flags [ 311.307064][T16769] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3472: couldn't read orphan inode 15 (err -117) [ 311.363075][T16769] __nla_validate_parse: 14 callbacks suppressed [ 311.363093][T16769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3472'. [ 311.508863][T16773] loop2: detected capacity change from 0 to 512 [ 311.530041][T16773] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3467: invalid block [ 311.544147][T16773] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3467: invalid indirect mapped block 4294967295 (level 1) [ 311.558759][T16773] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3467: invalid indirect mapped block 4294967295 (level 1) [ 311.573869][T16773] EXT4-fs (loop2): 2 truncates cleaned up [ 311.597419][T16760] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.3467: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 311.621337][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'. [ 311.676919][T16791] loop4: detected capacity change from 0 to 512 [ 311.764960][T16791] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.975477][T16806] loop2: detected capacity change from 0 to 512 [ 312.030444][T16808] FAULT_INJECTION: forcing a failure. [ 312.030444][T16808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.030530][T16799] loop1: detected capacity change from 0 to 128 [ 312.050088][T16808] CPU: 1 UID: 0 PID: 16808 Comm: syz.0.3485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.050243][T16808] Tainted: [W]=WARN [ 312.050253][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.050271][T16808] Call Trace: [ 312.050282][T16808] [ 312.050294][T16808] __dump_stack+0x1d/0x30 [ 312.050325][T16808] dump_stack_lvl+0x95/0xd0 [ 312.050382][T16808] dump_stack+0x15/0x1b [ 312.050412][T16808] should_fail_ex+0x263/0x280 [ 312.050437][T16808] should_fail+0xb/0x20 [ 312.050462][T16808] should_fail_usercopy+0x1a/0x20 [ 312.050510][T16808] _copy_from_iter+0xcf/0xea0 [ 312.050579][T16808] ? __alloc_skb+0x397/0x4b0 [ 312.050606][T16808] ? __alloc_skb+0x219/0x4b0 [ 312.050635][T16808] netlink_sendmsg+0x4ae/0x6f0 [ 312.050677][T16808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.050753][T16808] __sock_sendmsg+0x145/0x170 [ 312.050792][T16808] ____sys_sendmsg+0x31e/0x4a0 [ 312.050957][T16808] ___sys_sendmsg+0x195/0x1e0 [ 312.050996][T16808] __x64_sys_sendmsg+0xd4/0x160 [ 312.051032][T16808] x64_sys_call+0x17ba/0x3000 [ 312.051068][T16808] do_syscall_64+0xc0/0x2a0 [ 312.051139][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.051162][T16808] RIP: 0033:0x7f9adedcacb9 [ 312.051183][T16808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.051266][T16808] RSP: 002b:00007f9add827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.051367][T16808] RAX: ffffffffffffffda RBX: 00007f9adf045fa0 RCX: 00007f9adedcacb9 [ 312.051423][T16808] RDX: 0000000004000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 312.051438][T16808] RBP: 00007f9add827090 R08: 0000000000000000 R09: 0000000000000000 [ 312.051532][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.051550][T16808] R13: 00007f9adf046038 R14: 00007f9adf045fa0 R15: 00007fffad7e1b98 [ 312.051578][T16808] [ 312.270714][T16806] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.375552][T16818] loop1: detected capacity change from 0 to 512 [ 312.382141][T16818] EXT4-fs: inline encryption not supported [ 312.406752][T16818] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 312.415218][T16818] EXT4-fs (loop1): orphan cleanup on readonly fs [ 312.431319][T16818] EXT4-fs (loop1): 1 orphan inode deleted [ 312.437356][ T9286] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 312.473672][T16831] loop3: detected capacity change from 0 to 512 [ 312.483440][T16831] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.497010][T16831] EXT4-fs (loop3): orphan cleanup on readonly fs [ 312.504479][T16831] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3494: Allocating blocks 41-42 which overlap fs metadata [ 312.544133][T16831] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3494: Allocating blocks 41-42 which overlap fs metadata [ 312.598170][T16831] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3494: Failed to acquire dquot type 1 [ 312.652958][T16831] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 312.706725][T16831] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3494: corrupted inode contents [ 312.718919][T16831] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.3494: mark_inode_dirty error [ 312.740408][T16831] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3494: corrupted inode contents [ 312.754265][T16831] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3494: mark_inode_dirty error [ 312.768610][T16831] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3494: corrupted inode contents [ 312.791925][T16831] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 312.810819][T16831] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3494: corrupted inode contents [ 312.825948][T16831] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.3494: mark_inode_dirty error [ 312.837373][T16831] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 312.849282][T16831] EXT4-fs (loop3): 1 truncate cleaned up [ 313.146795][T16862] netlink: 'syz.2.3505': attribute type 8 has an invalid length. [ 313.154696][T16862] fq_change: 23 callbacks suppressed [ 313.154714][T16862] sch_fq: defrate 0 ignored. [ 313.183045][T16860] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.213954][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 313.288089][T16875] FAULT_INJECTION: forcing a failure. [ 313.288089][T16875] name failslab, interval 1, probability 0, space 0, times 0 [ 313.300902][T16875] CPU: 1 UID: 0 PID: 16875 Comm: syz.2.3509 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 313.300938][T16875] Tainted: [W]=WARN [ 313.300946][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.300959][T16875] Call Trace: [ 313.300966][T16875] [ 313.300973][T16875] __dump_stack+0x1d/0x30 [ 313.301006][T16875] dump_stack_lvl+0x95/0xd0 [ 313.301121][T16875] dump_stack+0x15/0x1b [ 313.301213][T16875] should_fail_ex+0x263/0x280 [ 313.301235][T16875] should_failslab+0x8c/0xb0 [ 313.301291][T16875] kmem_cache_alloc_noprof+0x68/0x490 [ 313.301325][T16875] ? skb_clone+0x151/0x1f0 [ 313.301350][T16875] skb_clone+0x151/0x1f0 [ 313.301382][T16875] __netlink_deliver_tap+0x2c9/0x500 [ 313.301496][T16875] netlink_unicast+0x66b/0x690 [ 313.301532][T16875] netlink_sendmsg+0x5c8/0x6f0 [ 313.301572][T16875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.301636][T16875] __sock_sendmsg+0x145/0x170 [ 313.301669][T16875] ____sys_sendmsg+0x31e/0x4a0 [ 313.301774][T16875] ___sys_sendmsg+0x195/0x1e0 [ 313.301820][T16875] __x64_sys_sendmsg+0xd4/0x160 [ 313.301858][T16875] x64_sys_call+0x17ba/0x3000 [ 313.301946][T16875] do_syscall_64+0xc0/0x2a0 [ 313.301985][T16875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.302020][T16875] RIP: 0033:0x7fa52c66acb9 [ 313.302059][T16875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.302084][T16875] RSP: 002b:00007fa52b0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.302109][T16875] RAX: ffffffffffffffda RBX: 00007fa52c8e5fa0 RCX: 00007fa52c66acb9 [ 313.302128][T16875] RDX: 0000000004000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 313.302145][T16875] RBP: 00007fa52b0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 313.302201][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.302217][T16875] R13: 00007fa52c8e6038 R14: 00007fa52c8e5fa0 R15: 00007ffe5f4e31b8 [ 313.302244][T16875] [ 313.618738][T16886] ip6gre1: entered promiscuous mode [ 313.624394][T16886] ip6gre1: entered allmulticast mode [ 313.632138][T16884] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 313.763437][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.038957][T16860] FAULT_INJECTION: forcing a failure. [ 314.038957][T16860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.052414][T16860] CPU: 0 UID: 0 PID: 16860 Comm: syz.4.3503 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 314.052459][T16860] Tainted: [W]=WARN [ 314.052469][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.052496][T16860] Call Trace: [ 314.052505][T16860] [ 314.052513][T16860] __dump_stack+0x1d/0x30 [ 314.052539][T16860] dump_stack_lvl+0x95/0xd0 [ 314.052563][T16860] dump_stack+0x15/0x1b [ 314.052592][T16860] should_fail_ex+0x263/0x280 [ 314.052677][T16860] should_fail_alloc_page+0xf2/0x100 [ 314.052708][T16860] __alloc_frozen_pages_noprof+0x108/0x350 [ 314.052748][T16860] alloc_pages_mpol+0xb3/0x260 [ 314.052846][T16860] folio_alloc_mpol_noprof+0x39/0x80 [ 314.052918][T16860] shmem_get_folio_gfp+0x3da/0xd60 [ 314.053000][T16860] shmem_fault+0xf6/0x250 [ 314.053058][T16860] __do_fault+0xbc/0x200 [ 314.053099][T16860] handle_mm_fault+0xfa1/0x3030 [ 314.053214][T16860] ? _raw_spin_lock+0x52/0xa0 [ 314.053257][T16860] ? __pte_offset_map_lock+0x1d9/0x240 [ 314.053292][T16860] __get_user_pages+0x1023/0x1ea0 [ 314.053434][T16860] __gup_longterm_locked+0x8d7/0xe30 [ 314.053509][T16860] ? __rcu_read_lock+0x36/0x50 [ 314.053535][T16860] ? ___pte_offset_map+0xef/0x150 [ 314.053566][T16860] gup_fast_fallback+0x1f3/0x13c0 [ 314.053622][T16860] pin_user_pages_fast+0x5f/0x90 [ 314.053745][T16860] iov_iter_extract_pages+0x261/0x440 [ 314.053798][T16860] bio_iov_iter_get_pages+0x2a9/0xba0 [ 314.053840][T16860] ? __rcu_read_unlock+0x4e/0x70 [ 314.053869][T16860] ? bio_alloc_bioset+0x86f/0xa50 [ 314.053907][T16860] iomap_dio_bio_iter+0x7e0/0xca0 [ 314.053966][T16860] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 314.054026][T16860] __iomap_dio_rw+0xbea/0x14c0 [ 314.054130][T16860] iomap_dio_rw+0x40/0x90 [ 314.054156][T16860] ext4_file_read_iter+0x20f/0x290 [ 314.054193][T16860] do_iter_readv_writev+0x4fd/0x5a0 [ 314.054298][T16860] vfs_readv+0x1f4/0x6e0 [ 314.054344][T16860] __se_sys_preadv2+0xfc/0x1c0 [ 314.054408][T16860] __x64_sys_preadv2+0x67/0x80 [ 314.054437][T16860] x64_sys_call+0xc61/0x3000 [ 314.054463][T16860] do_syscall_64+0xc0/0x2a0 [ 314.054495][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.054523][T16860] RIP: 0033:0x7f233fe1acb9 [ 314.054608][T16860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.054709][T16860] RSP: 002b:00007f233e877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 314.054737][T16860] RAX: ffffffffffffffda RBX: 00007f2340095fa0 RCX: 00007f233fe1acb9 [ 314.054758][T16860] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 314.054776][T16860] RBP: 00007f233e877090 R08: 0000000000000000 R09: 0000000000000000 [ 314.054795][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.054820][T16860] R13: 00007f2340096038 R14: 00007f2340095fa0 R15: 00007ffd6eabeb88 [ 314.054841][T16860] [ 314.347419][T16913] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.378898][T16915] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.851344][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 314.851364][ T29] audit: type=1400 audit(1769229586.033:9947): avc: denied { create } for pid=16935 comm="syz.1.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 314.912171][T16937] netlink: 'syz.1.3530': attribute type 11 has an invalid length. [ 314.934068][ T29] audit: type=1400 audit(1769229586.117:9948): avc: denied { read } for pid=16935 comm="syz.1.3530" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 314.957272][ T29] audit: type=1400 audit(1769229586.117:9949): avc: denied { open } for pid=16935 comm="syz.1.3530" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.013048][T16946] FAULT_INJECTION: forcing a failure. [ 315.013048][T16946] name failslab, interval 1, probability 0, space 0, times 0 [ 315.025826][T16946] CPU: 1 UID: 0 PID: 16946 Comm: syz.3.3533 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 315.025860][T16946] Tainted: [W]=WARN [ 315.025868][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.025944][T16946] Call Trace: [ 315.025954][T16946] [ 315.025965][T16946] __dump_stack+0x1d/0x30 [ 315.026002][T16946] dump_stack_lvl+0x95/0xd0 [ 315.026025][T16946] dump_stack+0x15/0x1b [ 315.026060][T16946] should_fail_ex+0x263/0x280 [ 315.026123][T16946] should_failslab+0x8c/0xb0 [ 315.026205][T16946] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 315.026232][T16946] ? __alloc_skb+0x2f0/0x4b0 [ 315.026255][T16946] __alloc_skb+0x2f0/0x4b0 [ 315.026315][T16946] ? __alloc_skb+0x219/0x4b0 [ 315.026404][T16946] netlink_ack+0xfd/0x500 [ 315.026501][T16946] netlink_rcv_skb+0x192/0x220 [ 315.026578][T16946] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 315.026609][T16946] nfnetlink_rcv+0x167/0x1720 [ 315.026639][T16946] ? __kfree_skb+0x109/0x150 [ 315.026663][T16946] ? nlmon_xmit+0x4f/0x60 [ 315.026713][T16946] ? consume_skb+0x49/0x140 [ 315.026738][T16946] ? nlmon_xmit+0x4f/0x60 [ 315.026757][T16946] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 315.026784][T16946] ? __dev_queue_xmit+0x139a/0x1f20 [ 315.026906][T16946] ? __dev_queue_xmit+0x148/0x1f20 [ 315.026939][T16946] ? ref_tracker_free+0x37d/0x3e0 [ 315.026984][T16946] ? __netlink_deliver_tap+0x4dc/0x500 [ 315.027057][T16946] netlink_unicast+0x5c0/0x690 [ 315.027087][T16946] netlink_sendmsg+0x5c8/0x6f0 [ 315.027163][T16946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.027201][T16946] __sock_sendmsg+0x145/0x170 [ 315.027235][T16946] ____sys_sendmsg+0x31e/0x4a0 [ 315.027312][T16946] ___sys_sendmsg+0x195/0x1e0 [ 315.027352][T16946] __x64_sys_sendmsg+0xd4/0x160 [ 315.027454][T16946] x64_sys_call+0x17ba/0x3000 [ 315.027490][T16946] do_syscall_64+0xc0/0x2a0 [ 315.027531][T16946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.027563][T16946] RIP: 0033:0x7f75b8d6acb9 [ 315.027645][T16946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.027726][T16946] RSP: 002b:00007f75b77c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.027746][T16946] RAX: ffffffffffffffda RBX: 00007f75b8fe5fa0 RCX: 00007f75b8d6acb9 [ 315.027761][T16946] RDX: 0000000004000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 315.027776][T16946] RBP: 00007f75b77c7090 R08: 0000000000000000 R09: 0000000000000000 [ 315.027794][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.027851][T16946] R13: 00007f75b8fe6038 R14: 00007f75b8fe5fa0 R15: 00007ffe6893be08 [ 315.027879][T16946] [ 315.027933][ T29] audit: type=1400 audit(1769229586.180:9950): avc: denied { ioctl } for pid=16935 comm="syz.1.3530" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.340035][T16955] set_capacity_and_notify: 6 callbacks suppressed [ 315.340137][T16955] loop0: detected capacity change from 0 to 512 [ 315.358219][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'. [ 315.498891][T16968] netlink: 'syz.4.3538': attribute type 10 has an invalid length. [ 315.511021][T16964] ip6gre2: entered promiscuous mode [ 315.516385][T16964] ip6gre2: entered allmulticast mode [ 315.585858][T16975] loop3: detected capacity change from 0 to 512 [ 315.609003][T16975] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.621908][T16968] team0 (unregistering): Port device team_slave_0 removed [ 315.626280][ T29] audit: type=1400 audit(1769229586.852:9951): avc: denied { cpu } for pid=16974 comm="syz.3.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 315.629335][ T29] audit: type=1400 audit(1769229586.852:9952): avc: denied { setcheckreqprot } for pid=16974 comm="syz.3.3543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 315.661046][T16968] team0 (unregistering): Port device team_slave_1 removed [ 315.680329][ T1675] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.680389][ T1675] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.706211][ T9756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.811275][ T9756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.918537][T16989] loop1: detected capacity change from 0 to 512 [ 315.931623][T16989] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.192744][T16985] loop4: detected capacity change from 0 to 8192 [ 316.249794][T16985] loop4: p1 < > p3 p4 < > [ 316.250804][T16985] loop4: p3 size 33554432 extends beyond EOD, truncated [ 316.280876][T16989] FAULT_INJECTION: forcing a failure. [ 316.280876][T16989] name failslab, interval 1, probability 0, space 0, times 0 [ 316.280919][T16989] CPU: 0 UID: 0 PID: 16989 Comm: syz.1.3547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 316.280992][T16989] Tainted: [W]=WARN [ 316.281000][T16989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.281014][T16989] Call Trace: [ 316.281021][T16989] [ 316.281029][T16989] __dump_stack+0x1d/0x30 [ 316.281101][T16989] dump_stack_lvl+0x95/0xd0 [ 316.281126][T16989] dump_stack+0x15/0x1b [ 316.281151][T16989] should_fail_ex+0x263/0x280 [ 316.281180][T16989] should_failslab+0x8c/0xb0 [ 316.281209][T16989] __kmalloc_noprof+0xb8/0x580 [ 316.281267][T16989] ? ext4_find_extent+0x16b/0x7a0 [ 316.281367][T16989] ext4_find_extent+0x16b/0x7a0 [ 316.281400][T16989] ? blk_mq_get_tag+0x519/0x590 [ 316.281504][T16989] ext4_ext_map_blocks+0x128/0x38a0 [ 316.281540][T16989] ? update_io_ticks+0x15d/0x190 [ 316.281639][T16989] ext4_map_query_blocks+0xae/0x550 [ 316.281670][T16989] ? ext4_es_lookup_extent+0x3ac/0x540 [ 316.281714][T16989] ext4_map_blocks+0x398/0xd70 [ 316.281748][T16989] ? bio_iov_iter_get_pages+0xadc/0xba0 [ 316.281863][T16989] ext4_iomap_begin+0x18b/0x1000 [ 316.281908][T16989] ? iomap_iter_advance+0xf0/0x120 [ 316.281953][T16989] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 316.282069][T16989] iomap_iter+0x3f7/0x800 [ 316.282185][T16989] __iomap_dio_rw+0xf80/0x14c0 [ 316.282237][T16989] iomap_dio_rw+0x40/0x90 [ 316.282266][T16989] ext4_file_read_iter+0x20f/0x290 [ 316.282378][T16989] do_iter_readv_writev+0x4fd/0x5a0 [ 316.282404][T16989] vfs_readv+0x1f4/0x6e0 [ 316.282445][T16989] __se_sys_preadv2+0xfc/0x1c0 [ 316.282473][T16989] __x64_sys_preadv2+0x67/0x80 [ 316.282549][T16989] x64_sys_call+0xc61/0x3000 [ 316.282583][T16989] do_syscall_64+0xc0/0x2a0 [ 316.282677][T16989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.282704][T16989] RIP: 0033:0x7f2d0357acb9 [ 316.282741][T16989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.282762][T16989] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 316.282783][T16989] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 316.282797][T16989] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 316.282810][T16989] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 316.282879][T16989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.282892][T16989] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 316.282915][T16989] [ 316.365520][T17000] loop0: detected capacity change from 0 to 128 [ 316.374887][T17001] loop1: detected capacity change from 0 to 128 [ 316.375107][T17001] vfat: Bad value for 'utf8' [ 316.431774][T17003] FAULT_INJECTION: forcing a failure. [ 316.431774][T17003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.431825][T17003] CPU: 0 UID: 0 PID: 17003 Comm: syz.1.3551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 316.431865][T17003] Tainted: [W]=WARN [ 316.431873][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.431889][T17003] Call Trace: [ 316.431897][T17003] [ 316.431907][T17003] __dump_stack+0x1d/0x30 [ 316.431938][T17003] dump_stack_lvl+0x95/0xd0 [ 316.431989][T17003] dump_stack+0x15/0x1b [ 316.432086][T17003] should_fail_ex+0x263/0x280 [ 316.432114][T17003] should_fail+0xb/0x20 [ 316.432135][T17003] should_fail_usercopy+0x1a/0x20 [ 316.432212][T17003] _copy_to_user+0x20/0xa0 [ 316.432240][T17003] simple_read_from_buffer+0xb5/0x130 [ 316.432281][T17003] proc_fail_nth_read+0x10e/0x150 [ 316.432338][T17003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.432399][T17003] vfs_read+0x1ab/0x7f0 [ 316.432440][T17003] ? __rcu_read_unlock+0x4e/0x70 [ 316.432463][T17003] ? __fget_files+0x184/0x1c0 [ 316.432510][T17003] ? mutex_lock+0x57/0x90 [ 316.432538][T17003] ksys_read+0xdc/0x1a0 [ 316.432578][T17003] __x64_sys_read+0x40/0x50 [ 316.432612][T17003] x64_sys_call+0x2889/0x3000 [ 316.432651][T17003] do_syscall_64+0xc0/0x2a0 [ 316.432689][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.432765][T17003] RIP: 0033:0x7f2d0353b58e [ 316.432785][T17003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.432812][T17003] RSP: 002b:00007f2d01fd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.432855][T17003] RAX: ffffffffffffffda RBX: 00007f2d01fd76c0 RCX: 00007f2d0353b58e [ 316.432870][T17003] RDX: 000000000000000f RSI: 00007f2d01fd70a0 RDI: 0000000000000004 [ 316.432885][T17003] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 316.432902][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.432915][T17003] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 316.432936][T17003] [ 316.493091][T17007] loop0: detected capacity change from 0 to 512 [ 316.506766][ T9756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 316.507932][T17007] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.540289][T17011] ip6gre1: entered promiscuous mode [ 316.540314][T17011] ip6gre1: entered allmulticast mode [ 316.783945][ T29] audit: type=1400 audit(1769229588.070:9953): avc: denied { write } for pid=17019 comm="syz.1.3558" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 316.886629][T17025] loop1: detected capacity change from 0 to 128 [ 316.886935][T17025] vfat: Unknown parameter 'shortnale' [ 316.938009][ T29] audit: type=1400 audit(1769229588.227:9954): avc: denied { lock } for pid=17024 comm="syz.1.3560" path="socket:[62623]" dev="sockfs" ino=62623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 317.021780][T17033] binfmt_misc: register: failed to install interpreter file ./file2 [ 317.134061][T17036] loop3: detected capacity change from 0 to 512 [ 317.428054][ T3007] loop4: p1 < > p3 p4 < > [ 317.537957][T17036] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.547502][ T3007] loop4: p3 size 33554432 extends beyond EOD, truncated [ 317.609209][ T29] audit: type=1400 audit(1769229588.931:9955): avc: denied { nlmsg_read } for pid=17035 comm="syz.3.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.649396][ T29] audit: type=1400 audit(1769229588.973:9956): avc: denied { connect } for pid=17035 comm="syz.3.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.843792][T17061] loop3: detected capacity change from 0 to 512 [ 317.846930][T17059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3571'. [ 317.890199][T17061] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.057621][T17059] sd 0:0:1:0: device reset [ 318.224405][T17061] FAULT_INJECTION: forcing a failure. [ 318.224405][T17061] name failslab, interval 1, probability 0, space 0, times 0 [ 318.237207][T17061] CPU: 1 UID: 0 PID: 17061 Comm: syz.3.3573 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 318.237252][T17061] Tainted: [W]=WARN [ 318.237261][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.237348][T17061] Call Trace: [ 318.237356][T17061] [ 318.237381][T17061] __dump_stack+0x1d/0x30 [ 318.237415][T17061] dump_stack_lvl+0x95/0xd0 [ 318.237442][T17061] dump_stack+0x15/0x1b [ 318.237489][T17061] should_fail_ex+0x263/0x280 [ 318.237518][T17061] should_failslab+0x8c/0xb0 [ 318.237623][T17061] kmem_cache_alloc_noprof+0x68/0x490 [ 318.237652][T17061] ? __es_insert_extent+0x508/0xee0 [ 318.237693][T17061] __es_insert_extent+0x508/0xee0 [ 318.237738][T17061] ext4_es_insert_extent+0x467/0x1c70 [ 318.237917][T17061] ext4_ext_map_blocks+0x179f/0x38a0 [ 318.237958][T17061] ? update_io_ticks+0x15d/0x190 [ 318.237993][T17061] ext4_map_query_blocks+0xae/0x550 [ 318.238094][T17061] ? ext4_es_lookup_extent+0x3ac/0x540 [ 318.238137][T17061] ext4_map_blocks+0x398/0xd70 [ 318.238211][T17061] ? bio_iov_iter_get_pages+0xadc/0xba0 [ 318.238249][T17061] ext4_iomap_begin+0x18b/0x1000 [ 318.238292][T17061] ? iomap_iter_advance+0xf0/0x120 [ 318.238397][T17061] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 318.238515][T17061] iomap_iter+0x3f7/0x800 [ 318.238574][T17061] __iomap_dio_rw+0xf80/0x14c0 [ 318.238621][T17061] iomap_dio_rw+0x40/0x90 [ 318.238646][T17061] ext4_file_read_iter+0x20f/0x290 [ 318.238744][T17061] do_iter_readv_writev+0x4fd/0x5a0 [ 318.238804][T17061] vfs_readv+0x1f4/0x6e0 [ 318.238838][T17061] __se_sys_preadv2+0xfc/0x1c0 [ 318.238865][T17061] __x64_sys_preadv2+0x67/0x80 [ 318.238895][T17061] x64_sys_call+0xc61/0x3000 [ 318.238930][T17061] do_syscall_64+0xc0/0x2a0 [ 318.238970][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.239006][T17061] RIP: 0033:0x7f75b8d6acb9 [ 318.239022][T17061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.239041][T17061] RSP: 002b:00007f75b77c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 318.239068][T17061] RAX: ffffffffffffffda RBX: 00007f75b8fe5fa0 RCX: 00007f75b8d6acb9 [ 318.239088][T17061] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 318.239167][T17061] RBP: 00007f75b77c7090 R08: 0000000000000000 R09: 0000000000000000 [ 318.239221][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.239247][T17061] R13: 00007f75b8fe6038 R14: 00007f75b8fe5fa0 R15: 00007ffe6893be08 [ 318.239271][T17061] [ 318.831699][T17093] EXT4-fs mount: 36 callbacks suppressed [ 318.831780][T17093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.170437][T17093] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.327513][T17113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.382730][T17113] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.828005][T17131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.849491][T17131] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.860088][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 319.937767][T17135] lo speed is unknown, defaulting to 1000 [ 319.979811][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 319.979857][ T29] audit: type=1400 audit(1769229591.419:9960): avc: denied { ioctl } for pid=17134 comm="syz.3.3595" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.035414][T17131] FAULT_INJECTION: forcing a failure. [ 320.035414][T17131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.048895][T17131] CPU: 0 UID: 0 PID: 17131 Comm: syz.1.3593 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.048981][T17131] Tainted: [W]=WARN [ 320.048991][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.049009][T17131] Call Trace: [ 320.049019][T17131] [ 320.049030][T17131] __dump_stack+0x1d/0x30 [ 320.049063][T17131] dump_stack_lvl+0x95/0xd0 [ 320.049116][T17131] dump_stack+0x15/0x1b [ 320.049145][T17131] should_fail_ex+0x263/0x280 [ 320.049216][T17131] should_fail_alloc_page+0xf2/0x100 [ 320.049289][T17131] __alloc_frozen_pages_noprof+0x108/0x350 [ 320.049411][T17131] alloc_pages_mpol+0xb3/0x260 [ 320.049447][T17131] folio_alloc_mpol_noprof+0x39/0x80 [ 320.049478][T17131] shmem_get_folio_gfp+0x3da/0xd60 [ 320.049577][T17131] shmem_fault+0xf6/0x250 [ 320.049632][T17131] __do_fault+0xbc/0x200 [ 320.049665][T17131] handle_mm_fault+0xfa1/0x3030 [ 320.049697][T17131] ? mt_find+0x291/0x3b0 [ 320.049783][T17131] do_user_addr_fault+0x3fd/0x1050 [ 320.049816][T17131] ? ext4_set_iomap+0x43f/0x460 [ 320.049846][T17131] exc_page_fault+0x62/0xa0 [ 320.049921][T17131] asm_exc_page_fault+0x26/0x30 [ 320.049944][T17131] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 320.049987][T17131] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 320.050063][T17131] RSP: 0018:ffffc90002cc79a8 EFLAGS: 00050202 [ 320.050081][T17131] RAX: 0000000000000000 RBX: 0000200000002213 RCX: 0000000000000213 [ 320.050096][T17131] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000200000002000 [ 320.050190][T17131] RBP: 0000000000000c01 R08: 0001c90002cc7db7 R09: 0000000000000000 [ 320.050205][T17131] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000c13 [ 320.050221][T17131] R13: 0000200000001600 R14: 0000000000000400 R15: ffffc90002cc7d80 [ 320.050248][T17131] iov_iter_zero+0x26f/0xd70 [ 320.050284][T17131] __iomap_dio_rw+0xd70/0x14c0 [ 320.050386][T17131] iomap_dio_rw+0x40/0x90 [ 320.050425][T17131] ext4_file_read_iter+0x20f/0x290 [ 320.050495][T17131] do_iter_readv_writev+0x4fd/0x5a0 [ 320.050527][T17131] vfs_readv+0x1f4/0x6e0 [ 320.050570][T17131] __se_sys_preadv2+0xfc/0x1c0 [ 320.050654][T17131] __x64_sys_preadv2+0x67/0x80 [ 320.050678][T17131] x64_sys_call+0xc61/0x3000 [ 320.050707][T17131] do_syscall_64+0xc0/0x2a0 [ 320.050743][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.050819][T17131] RIP: 0033:0x7f2d0357acb9 [ 320.050836][T17131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.050855][T17131] RSP: 002b:00007f2d01fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 320.050875][T17131] RAX: ffffffffffffffda RBX: 00007f2d037f5fa0 RCX: 00007f2d0357acb9 [ 320.050899][T17131] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 320.050915][T17131] RBP: 00007f2d01fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 320.050933][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.050950][T17131] R13: 00007f2d037f6038 R14: 00007f2d037f5fa0 R15: 00007fff0274d648 [ 320.051055][T17131] [ 320.524297][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.574228][T13857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.646339][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.730456][ T29] audit: type=1400 audit(1769229592.207:9961): avc: denied { ioctl } for pid=17158 comm="syz.1.3603" path="socket:[61971]" dev="sockfs" ino=61971 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 320.815003][ T29] audit: type=1400 audit(1769229592.301:9962): avc: denied { audit_read } for pid=17162 comm="syz.1.3606" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 320.906924][T17178] set_capacity_and_notify: 5 callbacks suppressed [ 320.906944][T17178] loop3: detected capacity change from 0 to 512 [ 320.937152][T17178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.950404][T17178] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.105266][T17191] loop1: detected capacity change from 0 to 512 [ 321.133124][T17191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.148348][T17191] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.190337][T17174] loop2: detected capacity change from 0 to 128 [ 321.299758][ T29] audit: type=1400 audit(1769229592.805:9963): avc: denied { read } for pid=17194 comm="syz.4.3613" path="socket:[62859]" dev="sockfs" ino=62859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 321.465704][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.514286][T17203] loop1: detected capacity change from 0 to 512 [ 321.531091][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.541815][T17203] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3614: bad orphan inode 15 [ 321.563505][T17203] ext4_test_bit(bit=14, block=5) = 0 [ 321.588841][T17203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.655914][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.706569][ T29] audit: type=1400 audit(1769229593.235:9964): avc: denied { watch } for pid=17215 comm="syz.2.3618" path="/223" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 321.769698][T17229] loop3: detected capacity change from 0 to 512 [ 321.794002][T17232] loop0: detected capacity change from 0 to 2048 [ 321.802292][T17229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.821780][T17229] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.834465][T17236] loop4: detected capacity change from 0 to 512 [ 321.931547][T17232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.945523][T17236] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 322.017296][T17242] loop2: detected capacity change from 0 to 1024 [ 322.024048][T17242] EXT4-fs: Ignoring removed oldalloc option [ 322.030070][T17242] EXT4-fs: Ignoring removed bh option [ 322.041687][T17242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.089621][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.190345][T17238] loop1: detected capacity change from 0 to 128 [ 322.290508][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.349764][T17253] loop3: detected capacity change from 0 to 512 [ 322.360748][T17253] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 322.369597][T17253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 322.387080][T17253] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 322.396149][T17253] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 322.406046][T17253] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3631: Failed to acquire dquot type 1 [ 322.464305][T17253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3631: bg 0: block 40: padding at end of block bitmap is not set [ 322.512431][T17253] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 322.532199][T17253] EXT4-fs (loop3): 1 truncate cleaned up [ 322.549314][T17253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 322.620069][T17261] EXT4-fs: Ignoring removed bh option [ 322.650901][T17261] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 322.662647][T17253] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.3631: corrupted xattr block 31: invalid header [ 322.683759][T17261] macvtap0: entered promiscuous mode [ 322.685146][T17253] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 322.698385][T17261] macvtap0: left promiscuous mode [ 322.709452][T17253] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #16: comm syz.3.3631: corrupted xattr block 31: invalid header [ 322.727789][T17253] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 322.739875][ T29] audit: type=1400 audit(1769229594.317:9965): avc: denied { read } for pid=17250 comm="syz.3.3631" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 322.765705][T17253] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.3631: bad symlink. [ 322.790596][ T29] audit: type=1326 audit(1769229594.359:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 322.814248][ T29] audit: type=1326 audit(1769229594.359:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d0357acb9 code=0x7ffc0000 [ 322.884897][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.045634][T17275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.072446][T17275] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.175113][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.530697][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.670578][T17297] xt_hashlimit: overflow, try lower: 3/0 [ 323.733088][T17299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.774017][T17299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.781473][T17299] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3649: Failed to acquire dquot type 1 [ 323.812654][T17299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3649: bg 0: block 40: padding at end of block bitmap is not set [ 323.827610][T17299] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 323.836671][T17299] EXT4-fs (loop1): 1 truncate cleaned up [ 323.850215][T17299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.864187][T17299] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.3649: corrupted xattr block 31: invalid header [ 323.877779][T17299] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 323.897372][T17299] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.3649: corrupted xattr block 31: invalid header [ 323.924119][T17306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17306 comm=syz.4.3650 [ 323.951635][T17299] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 323.960775][T17299] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.3649: bad symlink. [ 323.982621][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.165757][T17321] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3653'. [ 324.369401][T17342] FAULT_INJECTION: forcing a failure. [ 324.369401][T17342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.382761][T17342] CPU: 1 UID: 0 PID: 17342 Comm: syz.3.3662 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.382807][T17342] Tainted: [W]=WARN [ 324.382817][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.382942][T17342] Call Trace: [ 324.382949][T17342] [ 324.382958][T17342] __dump_stack+0x1d/0x30 [ 324.383041][T17342] dump_stack_lvl+0x95/0xd0 [ 324.383070][T17342] dump_stack+0x15/0x1b [ 324.383097][T17342] should_fail_ex+0x263/0x280 [ 324.383125][T17342] should_fail+0xb/0x20 [ 324.383230][T17342] should_fail_usercopy+0x1a/0x20 [ 324.383257][T17342] _copy_from_user+0x1c/0xb0 [ 324.383291][T17342] ___sys_sendmsg+0xc1/0x1e0 [ 324.383339][T17342] __sys_sendmmsg+0x185/0x320 [ 324.383460][T17342] __x64_sys_sendmmsg+0x57/0x70 [ 324.383593][T17342] x64_sys_call+0x1e28/0x3000 [ 324.383689][T17342] do_syscall_64+0xc0/0x2a0 [ 324.383729][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.383760][T17342] RIP: 0033:0x7f75b8d6acb9 [ 324.383864][T17342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.383893][T17342] RSP: 002b:00007f75b77c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.383921][T17342] RAX: ffffffffffffffda RBX: 00007f75b8fe5fa0 RCX: 00007f75b8d6acb9 [ 324.383941][T17342] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000004 [ 324.383960][T17342] RBP: 00007f75b77c7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.384067][T17342] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 324.384149][T17342] R13: 00007f75b8fe6038 R14: 00007f75b8fe5fa0 R15: 00007ffe6893be08 [ 324.384178][T17342] [ 324.697742][T17362] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 324.731241][T17364] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 324.753078][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 324.753098][ T29] audit: type=1400 audit(1769229596.427:10016): avc: denied { remount } for pid=17365 comm="syz.3.3670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 324.781281][T17366] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 324.790254][T17366] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 324.978552][T17358] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3666'. [ 325.003144][T17378] FAULT_INJECTION: forcing a failure. [ 325.003144][T17378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.016282][T17378] CPU: 0 UID: 0 PID: 17378 Comm: syz.2.3675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.016397][T17378] Tainted: [W]=WARN [ 325.016407][T17378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.016425][T17378] Call Trace: [ 325.016432][T17378] [ 325.016505][T17378] __dump_stack+0x1d/0x30 [ 325.016540][T17378] dump_stack_lvl+0x95/0xd0 [ 325.016572][T17378] dump_stack+0x15/0x1b [ 325.016665][T17378] should_fail_ex+0x263/0x280 [ 325.016687][T17378] should_fail+0xb/0x20 [ 325.016772][T17378] should_fail_usercopy+0x1a/0x20 [ 325.016803][T17378] _copy_from_user+0x1c/0xb0 [ 325.016854][T17378] __copy_msghdr+0x244/0x300 [ 325.016886][T17378] ___sys_sendmsg+0x10c/0x1e0 [ 325.016938][T17378] __sys_sendmmsg+0x185/0x320 [ 325.016992][T17378] __x64_sys_sendmmsg+0x57/0x70 [ 325.017018][T17378] x64_sys_call+0x1e28/0x3000 [ 325.017063][T17378] do_syscall_64+0xc0/0x2a0 [ 325.017103][T17378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.017133][T17378] RIP: 0033:0x7fa52c66acb9 [ 325.017155][T17378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.017177][T17378] RSP: 002b:00007fa52b0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 325.017257][T17378] RAX: ffffffffffffffda RBX: 00007fa52c8e6090 RCX: 00007fa52c66acb9 [ 325.017278][T17378] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000004 [ 325.017297][T17378] RBP: 00007fa52b0a6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.017315][T17378] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 325.017391][T17378] R13: 00007fa52c8e6128 R14: 00007fa52c8e6090 R15: 00007ffe5f4e31b8 [ 325.017418][T17378] [ 325.198592][ T29] audit: type=1400 audit(1769229596.900:10017): avc: denied { connect } for pid=17379 comm="syz.0.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.223695][ T29] audit: type=1400 audit(1769229596.931:10018): avc: denied { write } for pid=17379 comm="syz.0.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.349245][T17385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3678'. [ 326.081820][ T29] audit: type=1400 audit(1769229597.813:10019): avc: denied { relabelfrom } for pid=17420 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 326.102018][ T29] audit: type=1400 audit(1769229597.813:10020): avc: denied { relabelto } for pid=17420 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 326.189698][T17423] blkio.reset_stats is deprecated [ 326.544634][T17451] syzkaller0: entered promiscuous mode [ 326.550312][T17451] syzkaller0: entered allmulticast mode [ 326.638797][T17457] veth1_to_bond: entered promiscuous mode [ 326.644937][T17457] veth1_to_bond: entered allmulticast mode [ 328.366642][T17557] lo speed is unknown, defaulting to 1000 [ 328.393553][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 328.844518][T17587] syzkaller0: entered promiscuous mode [ 328.850066][T17587] syzkaller0: entered allmulticast mode [ 328.911079][T17594] syz_tun: entered promiscuous mode [ 328.916351][T17594] syz_tun: entered allmulticast mode [ 329.524328][T17618] set_capacity_and_notify: 8 callbacks suppressed [ 329.524357][T17618] loop0: detected capacity change from 0 to 1024 [ 329.571874][T17620] loop2: detected capacity change from 0 to 128 [ 329.591013][T17620] FAT-fs (loop2): Directory bread(block 414) failed [ 329.603377][T17620] FAT-fs (loop2): Directory bread(block 415) failed [ 329.634252][T17618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 329.663939][T17620] FAT-fs (loop2): Directory bread(block 416) failed [ 329.839271][T17618] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.850405][T17620] FAT-fs (loop2): Directory bread(block 417) failed [ 329.857387][T17620] FAT-fs (loop2): Directory bread(block 418) failed [ 329.864406][T17620] FAT-fs (loop2): Directory bread(block 419) failed [ 329.871534][ T29] audit: type=1400 audit(1769229601.813:10021): avc: denied { ioctl } for pid=17617 comm="syz.0.3778" path="/326/file1/file1" dev="loop0" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.911025][T17628] can0: slcan on ttyS3. [ 329.922014][T17620] FAT-fs (loop2): Directory bread(block 420) failed [ 329.928803][T17620] FAT-fs (loop2): Directory bread(block 421) failed [ 329.938050][T17620] FAT-fs (loop2): Directory bread(block 414) failed [ 329.944680][T17620] FAT-fs (loop2): Directory bread(block 415) failed [ 329.955160][T17628] can0 (unregistered): slcan off ttyS3. [ 329.971430][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 330.107125][ T29] audit: type=1400 audit(1769229602.034:10022): avc: denied { mount } for pid=17633 comm="syz.1.3786" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 330.158871][T17638] loop2: detected capacity change from 0 to 128 [ 330.166105][T17638] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.178862][T17638] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.693902][T17646] loop0: detected capacity change from 0 to 512 [ 330.700784][T17646] msdos: Bad value for 'check' [ 331.004525][T17649] loop4: detected capacity change from 0 to 512 [ 331.023448][T17649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.072970][T17649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.121831][T17653] loop2: detected capacity change from 0 to 512 [ 331.130778][T17653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.143560][T17649] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.159251][T17653] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.181584][T13857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.207302][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.257744][ T29] audit: type=1400 audit(1769229603.199:10023): avc: denied { setattr } for pid=17652 comm="syz.2.3790" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 331.347933][T17662] loop4: detected capacity change from 0 to 256 [ 331.661920][T17662] FAT-fs (loop4): Directory bread(block 64) failed [ 331.724972][T17662] FAT-fs (loop4): Directory bread(block 65) failed [ 331.790437][T17662] FAT-fs (loop4): Directory bread(block 66) failed [ 331.850217][T17662] FAT-fs (loop4): Directory bread(block 67) failed [ 331.925854][T17662] FAT-fs (loop4): Directory bread(block 68) failed [ 331.986905][T17662] FAT-fs (loop4): Directory bread(block 69) failed [ 332.053042][T17662] FAT-fs (loop4): Directory bread(block 70) failed [ 332.116851][T17662] FAT-fs (loop4): Directory bread(block 71) failed [ 332.238618][T17662] FAT-fs (loop4): Directory bread(block 72) failed [ 332.320243][T17662] FAT-fs (loop4): Directory bread(block 73) failed [ 333.270014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.279271][T17695] loop4: detected capacity change from 0 to 512 [ 333.372163][T17695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.384881][T17695] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.403424][T17695] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3800: corrupted inode contents [ 333.416749][T17695] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.3800: mark_inode_dirty error [ 333.429213][T17695] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3800: corrupted inode contents [ 333.441346][T17695] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3800: mark_inode_dirty error [ 333.947156][T17718] veth0: entered promiscuous mode [ 333.953522][T17718] veth0: left promiscuous mode [ 333.977427][ T29] audit: type=1400 audit(1769229606.086:10024): avc: denied { read } for pid=17711 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.012850][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 334.043299][ T29] audit: type=1400 audit(1769229606.191:10025): avc: denied { mount } for pid=17719 comm="syz.1.3810" name="/" dev="ramfs" ino=64802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 334.108689][T17722] loop1: detected capacity change from 0 to 128 [ 334.126120][T17722] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 334.134629][T17722] FAT-fs (loop1): Filesystem has been set read-only [ 335.013696][T13857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.289367][T17735] loop2: detected capacity change from 0 to 256 [ 335.338841][T17739] loop0: detected capacity change from 0 to 512 [ 335.466510][T17743] loop4: detected capacity change from 0 to 128 [ 335.484129][T17743] bio_check_eod: 94 callbacks suppressed [ 335.484150][T17743] syz.4.3816: attempt to access beyond end of device [ 335.484150][T17743] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 335.530041][T17735] FAT-fs (loop2): Directory bread(block 64) failed [ 335.614786][ T29] audit: type=1400 audit(1769229607.840:10026): avc: denied { bind } for pid=17744 comm="syz.3.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.732277][T17747] loop3: detected capacity change from 0 to 1024 [ 335.763919][T17735] FAT-fs (loop2): Directory bread(block 65) failed [ 335.774165][T17747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.071155][T14216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.087404][T17735] FAT-fs (loop2): Directory bread(block 66) failed [ 336.094770][T17735] FAT-fs (loop2): Directory bread(block 67) failed [ 336.122579][T17751] loop3: detected capacity change from 0 to 512 [ 336.132001][T17739] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3819: couldn't read orphan inode 26 (err -116) [ 336.143974][T17751] EXT4-fs (loop3): Invalid log cluster size: 393218 [ 336.145508][T17739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.170678][T17735] FAT-fs (loop2): Directory bread(block 68) failed [ 336.177396][T17735] FAT-fs (loop2): Directory bread(block 69) failed [ 336.184119][T17735] FAT-fs (loop2): Directory bread(block 70) failed [ 336.190819][T17735] FAT-fs (loop2): Directory bread(block 71) failed [ 336.197728][T17735] FAT-fs (loop2): Directory bread(block 72) failed [ 336.204360][T17735] FAT-fs (loop2): Directory bread(block 73) failed [ 336.257450][T17739] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.276138][T17756] loop3: detected capacity change from 0 to 128 [ 336.299417][T17739] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3819: bg 0: block 64: padding at end of block bitmap is not set [ 336.318671][T17756] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.352495][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.381521][T17756] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.437936][T14216] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.519124][T17766] loop1: detected capacity change from 0 to 256 [ 336.530180][T17768] netlink: 'syz.0.3826': attribute type 4 has an invalid length. [ 336.538036][T17768] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3826'. [ 336.733737][T17772] loop1: detected capacity change from 0 to 2048 [ 336.779223][T17772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.005017][T17772] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.052250][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.566083][T17788] loop2: detected capacity change from 0 to 512 [ 337.573172][T17788] msdos: Bad value for 'check' [ 337.790132][T17795] loop3: detected capacity change from 0 to 256 [ 339.234289][ T29] audit: type=1400 audit(1769229611.640:10027): avc: denied { write } for pid=17830 comm="syz.2.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 339.922811][T17848] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.027972][T17848] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.199557][T17855] serio: Serial port ptm0 [ 340.675132][T10527] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.765142][ T29] audit: type=1400 audit(1769229613.163:10028): avc: denied { firmware_load } for pid=17859 comm="syz.3.3859" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 340.982255][T17864] set_capacity_and_notify: 1 callbacks suppressed [ 340.982275][T17864] loop2: detected capacity change from 0 to 512 [ 341.372652][T17871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3865'. [ 341.393953][T17864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.461680][T17876] loop1: detected capacity change from 0 to 128 [ 341.478714][T17876] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.499538][T17876] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.638207][T17864] ext4 filesystem being mounted at /265/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.517468][T17864] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #4: comm syz.2.3861: corrupted inode contents [ 342.529701][T12015] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 342.917974][T17864] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #4: comm syz.2.3861: mark_inode_dirty error [ 342.929895][T17864] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #4: comm syz.2.3861: corrupted inode contents [ 342.941944][T17864] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.3861: mark_inode_dirty error [ 343.068308][T17864] Quota error (device loop2): write_blk: dquota write failed [ 343.075779][T17864] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 343.084911][T17864] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 343.094913][T17864] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3861: Failed to acquire dquot type 1 [ 343.120150][T17890] loop4: detected capacity change from 0 to 256 [ 343.143874][T12017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.303099][T17901] loop3: detected capacity change from 0 to 512 [ 343.314968][T17901] EXT4-fs (loop3): first meta block group too large: 256 (group descriptor block count 1) [ 343.341486][T17899] loop0: detected capacity change from 0 to 512 [ 344.251616][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.093954][T17912] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 345.176276][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3875'. [ 345.262546][T17916] loop0: detected capacity change from 0 to 2048 [ 345.314978][T17920] loop1: detected capacity change from 0 to 512 [ 345.330313][T17916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.349054][T17920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.365981][T17920] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.463543][ T29] audit: type=1400 audit(1769229618.181:10029): avc: denied { map } for pid=17915 comm="syz.0.3878" path="/343/file1/cgroup.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 345.487508][T17916] EXT4-fs (loop0): shut down requested (0) [ 345.556530][ T29] audit: type=1400 audit(1769229618.276:10030): avc: denied { map } for pid=17915 comm="syz.0.3878" path="/343/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.580971][T17926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 345.677313][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.706700][ T9298] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 345.719021][ T9298] EXT4-fs (loop0): This should not happen!! Data will be lost [ 345.719021][ T9298] [ 345.728755][ T9298] EXT4-fs (loop0): Total free blocks count 0 [ 345.734788][ T9298] EXT4-fs (loop0): Free/Dirty block details [ 345.740751][ T9298] EXT4-fs (loop0): free_blocks=2415919504 [ 345.746498][ T9298] EXT4-fs (loop0): dirty_blocks=16 [ 345.751674][ T9298] EXT4-fs (loop0): Block reservation details [ 345.757692][ T9298] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 345.841367][T17929] loop2: detected capacity change from 0 to 128 [ 346.559287][T17955] netlink: 121 bytes leftover after parsing attributes in process `syz.0.3888'. [ 346.708335][T17961] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 346.814506][T17961] bond2 (unregistering): Released all slaves [ 346.956104][ T29] audit: type=1400 audit(1769229619.735:10031): avc: denied { read } for pid=17969 comm="syz.1.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.068258][T17976] netlink: 'syz.1.3892': attribute type 1 has an invalid length. [ 347.117600][T17976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.133523][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 347.142883][T17975] loop0: detected capacity change from 0 to 512 [ 347.185541][T17984] macvlan2: entered promiscuous mode [ 347.190950][T17984] macvlan2: entered allmulticast mode [ 347.217063][T17976] bond2: (slave ip6gretap1): making interface the new active one [ 347.239994][T17976] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 347.852737][T18001] lo speed is unknown, defaulting to 1000 [ 348.087721][T18004] loop0: detected capacity change from 0 to 512 [ 348.241533][T18004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.313390][T18013] loop1: detected capacity change from 0 to 1024 [ 348.320347][T18013] EXT4-fs: Ignoring removed oldalloc option [ 348.326370][T18013] EXT4-fs: Ignoring removed bh option [ 348.339949][T18004] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.340463][T18013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.370694][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3904'. [ 348.438449][ T29] audit: type=1400 audit(1769229621.300:10032): avc: denied { shutdown } for pid=18010 comm="syz.3.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.490490][T18016] ================================================================== [ 348.498624][T18016] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 348.506548][T18016] [ 348.508901][T18016] write to 0xffff88811a81a164 of 4 bytes by task 18013 on cpu 1: [ 348.516646][T18016] xas_set_mark+0x12b/0x140 [ 348.521181][T18016] __folio_start_writeback+0x17b/0x370 [ 348.526683][T18016] ext4_bio_write_folio+0x5ad/0x9f0 [ 348.531937][T18016] mpage_process_page_bufs+0x4a1/0x620 [ 348.537417][T18016] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 348.543248][T18016] ext4_do_writepages+0x9f6/0x2800 [ 348.548403][T18016] ext4_writepages+0x18f/0x320 [ 348.553189][T18016] do_writepages+0x1c6/0x310 [ 348.557814][T18016] file_write_and_wait_range+0x178/0x2f0 [ 348.563513][T18016] generic_buffers_fsync_noflush+0x45/0x130 [ 348.569438][T18016] ext4_sync_file+0x1aa/0x680 [ 348.574170][T18016] vfs_fsync_range+0x10d/0x130 [ 348.578959][T18016] ext4_buffered_write_iter+0x34f/0x3c0 [ 348.584557][T18016] ext4_file_write_iter+0x380/0xf70 [ 348.589809][T18016] iter_file_splice_write+0x6bc/0xa80 [ 348.595220][T18016] direct_splice_actor+0x156/0x2a0 [ 348.600360][T18016] splice_direct_to_actor+0x311/0x670 [ 348.605768][T18016] do_splice_direct+0x119/0x1a0 [ 348.610655][T18016] do_sendfile+0x380/0x650 [ 348.615100][T18016] __x64_sys_sendfile64+0x105/0x150 [ 348.620327][T18016] x64_sys_call+0x2db1/0x3000 [ 348.625035][T18016] do_syscall_64+0xc0/0x2a0 [ 348.629654][T18016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.635571][T18016] [ 348.637909][T18016] read to 0xffff88811a81a164 of 4 bytes by task 18016 on cpu 0: [ 348.645579][T18016] __writeback_single_inode+0x201/0x7b0 [ 348.651159][T18016] writeback_single_inode+0x16d/0x3f0 [ 348.656563][T18016] sync_inode_metadata+0x6e/0xa0 [ 348.661531][T18016] generic_buffers_fsync_noflush+0xee/0x130 [ 348.667450][T18016] ext4_sync_file+0x1aa/0x680 [ 348.672146][T18016] vfs_fsync_range+0x10d/0x130 [ 348.676932][T18016] ext4_buffered_write_iter+0x34f/0x3c0 [ 348.682510][T18016] ext4_file_write_iter+0x380/0xf70 [ 348.687742][T18016] iter_file_splice_write+0x6bc/0xa80 [ 348.693158][T18016] direct_splice_actor+0x156/0x2a0 [ 348.698288][T18016] splice_direct_to_actor+0x311/0x670 [ 348.703701][T18016] do_splice_direct+0x119/0x1a0 [ 348.708591][T18016] do_sendfile+0x380/0x650 [ 348.713033][T18016] __x64_sys_sendfile64+0x105/0x150 [ 348.718266][T18016] x64_sys_call+0x2db1/0x3000 [ 348.722983][T18016] do_syscall_64+0xc0/0x2a0 [ 348.727619][T18016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.733542][T18016] [ 348.735896][T18016] value changed: 0x0a000021 -> 0x04000021 [ 348.741630][T18016] [ 348.743972][T18016] Reported by Kernel Concurrency Sanitizer on: [ 348.750142][T18016] CPU: 0 UID: 0 PID: 18016 Comm: syz.1.3905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.761540][T18016] Tainted: [W]=WARN [ 348.765358][T18016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.775431][T18016] ================================================================== [ 348.957649][T18013] ================================================================== [ 348.965850][T18013] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 348.973026][T18013] [ 348.975391][T18013] write to 0xffff88811a81a164 of 4 bytes by task 18016 on cpu 0: [ 348.983140][T18013] xas_set_mark+0x12b/0x140 [ 348.987699][T18013] __folio_start_writeback+0x17b/0x370 [ 348.993241][T18013] ext4_bio_write_folio+0x5ad/0x9f0 [ 348.998500][T18013] mpage_process_page_bufs+0x4a1/0x620 [ 349.004002][T18013] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 349.009939][T18013] ext4_do_writepages+0x9f6/0x2800 [ 349.015103][T18013] ext4_writepages+0x18f/0x320 [ 349.019890][T18013] do_writepages+0x1c6/0x310 [ 349.024531][T18013] file_write_and_wait_range+0x178/0x2f0 [ 349.030229][T18013] generic_buffers_fsync_noflush+0x45/0x130 [ 349.036189][T18013] ext4_sync_file+0x1aa/0x680 [ 349.040910][T18013] vfs_fsync_range+0x10d/0x130 [ 349.045732][T18013] ext4_buffered_write_iter+0x34f/0x3c0 [ 349.051338][T18013] ext4_file_write_iter+0x380/0xf70 [ 349.056591][T18013] iter_file_splice_write+0x6bc/0xa80 [ 349.062018][T18013] direct_splice_actor+0x156/0x2a0 [ 349.067190][T18013] splice_direct_to_actor+0x311/0x670 [ 349.072616][T18013] do_splice_direct+0x119/0x1a0 [ 349.077515][T18013] do_sendfile+0x380/0x650 [ 349.081975][T18013] __x64_sys_sendfile64+0x105/0x150 [ 349.087218][T18013] x64_sys_call+0x2db1/0x3000 [ 349.091931][T18013] do_syscall_64+0xc0/0x2a0 [ 349.096485][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.102419][T18013] [ 349.104768][T18013] read to 0xffff88811a81a164 of 4 bytes by task 18013 on cpu 1: [ 349.112422][T18013] xas_find_marked+0x5d7/0x620 [ 349.117238][T18013] find_get_entry+0x5d/0x380 [ 349.121875][T18013] filemap_get_folios_tag+0xb6/0x230 [ 349.127210][T18013] mpage_prepare_extent_to_map+0x328/0xc50 [ 349.133057][T18013] ext4_do_writepages+0x6fe/0x2800 [ 349.138214][T18013] ext4_writepages+0x18f/0x320 [ 349.143029][T18013] do_writepages+0x1c6/0x310 [ 349.147669][T18013] file_write_and_wait_range+0x178/0x2f0 [ 349.153531][T18013] generic_buffers_fsync_noflush+0x45/0x130 [ 349.159465][T18013] ext4_sync_file+0x1aa/0x680 [ 349.164176][T18013] vfs_fsync_range+0x10d/0x130 [ 349.169021][T18013] ext4_buffered_write_iter+0x34f/0x3c0 [ 349.174616][T18013] ext4_file_write_iter+0x380/0xf70 [ 349.179872][T18013] iter_file_splice_write+0x6bc/0xa80 [ 349.185307][T18013] direct_splice_actor+0x156/0x2a0 [ 349.190475][T18013] splice_direct_to_actor+0x311/0x670 [ 349.195921][T18013] do_splice_direct+0x119/0x1a0 [ 349.200842][T18013] do_sendfile+0x380/0x650 [ 349.205342][T18013] __x64_sys_sendfile64+0x105/0x150 [ 349.210605][T18013] x64_sys_call+0x2db1/0x3000 [ 349.215332][T18013] do_syscall_64+0xc0/0x2a0 [ 349.219889][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.225828][T18013] [ 349.228179][T18013] value changed: 0x0a000021 -> 0x04000021 [ 349.233934][T18013] [ 349.236281][T18013] Reported by Kernel Concurrency Sanitizer on: [ 349.242461][T18013] CPU: 1 UID: 0 PID: 18013 Comm: syz.1.3905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.253951][T18013] Tainted: [W]=WARN [ 349.257774][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.267848][T18013] ================================================================== [ 349.312969][T15715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.474825][T10527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.