last executing test programs: 2m14.850443569s ago: executing program 32 (id=457): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x11, 0x0, 0x0}) 1m50.606795327s ago: executing program 1 (id=901): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x3, 0x80040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x9, 0xf070}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={r1, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000440)=0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2a, 0x100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0xc0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xfffffffffffffef8, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000640)=""/4, 0xffffffff, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ff8}, 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvfrom(r6, 0x0, 0x0, 0x102, 0x0, 0x0) shutdown(r6, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22400049, &(0x7f0000000680)={[{@dioread_nolock}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noblock_validity}, {@data_err_abort}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x1, 0x478, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvTH8gP0oL4g8QZRWJjWhLCyoHLxpNuJiY6EGPtVSCFDC0JkKIoDF4NP4F6tHEv8CTXox60njVuzEhhovowayZnRnYbbe17Xa7xfl8kinvzbyZ9968ecybebsbQGXVsj9JxI6I+CUihvNoa4Ja/s/NG5en/7pxeTqJev2VP5JGuj9vXJ6OvjzpjmKX7cUxR9OI9MMkrrbJd+7ipTNTs7MzF4r4+PzZt8fnLl568vTZqVMzp2bOTR4/fuzoxDNPTz61LvUcysq6773z+/eeeP2Tl6br8cb3X2blL4qe16PFSMd51qIW9Xq9nrasHWz8PdTx0TeXoaZw0t/DgrAq2fWfNddAo/8PR1/cbrzhePGDnhYO6Krs/rRr0dr8rpgeShrbgf8rfRyqqrzjZ8+/5bKxI5Deuv5c/gCU1ftmseRb+iN7bk9G8if2vi7lvyMiXrv696fZEm3fQwAArK+vs/HPE+3Gf2nc25RuZzE3NBIRhyNid0TcHRF7IuKeiEba+yLi/lXmX1sQXzz++Wnrmiq2Qtn479libqt1/Hdr1makr4gNNeo/kLx5enbmSHFORmNgSxafWCaPb174+eOlttWaxn/ZkuVfjgWLcvzev6V1n5NT81Od1LnZ9fcj9vW3q39yayYgiYi9EbFvDcfPztnpx7/Yn4V3bl+8/b/rv4x1mGeqfx7xWN7+V2NB/UtJntNS85Pjd8XszJHx8qpY7Icfr73cHB9oCndU/3WQtf+2ttd/Uf+yG5TztXOrz+Parx8t+Uyz1ut/MHm1ER4s1r07NT9/YSJisFjRsn7y9r5lvEyf1X/0YPv+vzvin8+K/R6IiOwifjAiHoqIA0XZH46IRyLiYNva5QX/7vlH31r+DPW2/U8u1/4RI0nzfP0aAn1nvv1qqfxX1v7HGqHRYs1K/v9baQE7OXcAAABwp0gbc9BJOnYrnKZjY/ln+PfEtnT2/Nz84Vq8c+5kPlc9EgNp+aZruOl96ETxbriMTy6IH42IXY1PGm1txMemz88O9bryUHHbl+j/md+69aEXYPNY1Txa0r1yABvP9zWhuvR/qC79H6pL/4fqatf/r0Tc7EFRgA3m/g/Vpf9Dden/UF36P1TS4q/Elz+3spZv+t8O7D7R0e4VCvR16cjR/KMdXQhEutLEA7EZznNLIN0MxThQBLZExEr3utLVNl14/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANz5/g0AAP//zPrjMw==") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1m49.698813971s ago: executing program 1 (id=922): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x23c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7, 0x7, 0x1, 0x2, 0x3, 0x9, 0x8}}, {0x14, 0x2, [0x7c, 0x3, 0x5d, 0x2, 0x8, 0x2, 0x0, 0x0]}}, {{0x1c, 0x1, {0x1, 0x2, 0x3, 0x401, 0x2, 0x8, 0x3, 0x6}}, {0x10, 0x2, [0x2, 0xfffa, 0x464, 0x7, 0x1, 0x5]}}, {{0x1c, 0x1, {0x2, 0x2, 0x9, 0x6, 0x2, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5f04}, @TCA_RATE={0x6, 0x5, {0x8, 0xf1}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xff, 0x1, 0x8000, 0x1, 0x7f, 0x80000000, 0x5}}, {0xe, 0x2, [0xbfd, 0xffff, 0x8, 0x8, 0x0]}}, {{0x1c, 0x1, {0x7, 0x6, 0xe, 0x0, 0x1, 0x7f, 0xb66a, 0x5}}, {0xe, 0x2, [0x8, 0x8001, 0xd88b, 0x3, 0x1]}}, {{0x1c, 0x1, {0x1, 0xc5, 0x3, 0xfffffff7, 0x1, 0x401, 0x100, 0x6}}, {0x10, 0x2, [0x41ed, 0x5, 0x2, 0x6, 0x1ff, 0x5]}}, {{0x1c, 0x1, {0x0, 0x1, 0x8, 0xfc, 0x2, 0x5, 0x86d6, 0x1}}, {0x6, 0x2, [0x63]}}, {{0x1c, 0x1, {0x9, 0x2, 0x2, 0x6, 0x1, 0x0, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x7, 0x7, 0x0, 0xfffffffb, 0x9b46, 0x4}}, {0xc, 0x2, [0x6, 0x20, 0x9, 0x5]}}, {{0x1c, 0x1, {0x0, 0xb, 0x9, 0xf8, 0x0, 0x5e2d, 0x400, 0x3}}, {0xa, 0x2, [0x3, 0x8, 0x6]}}, {{0x1c, 0x1, {0x0, 0x10, 0x4, 0x67, 0x0, 0x6af5, 0xd, 0x5}}, {0xe, 0x2, [0xffff, 0x8, 0x7, 0x1, 0x1]}}, {{0x1c, 0x1, {0x5, 0x2, 0x6, 0x22, 0x2, 0xffffff80, 0x8000, 0x6}}, {0x10, 0x2, [0x8, 0x6000, 0x5, 0x1, 0x5, 0x8]}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000c80)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "e1a986", 0x10, 0x21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x5, 0x5, "44ab69", 0x3, "f80d27"}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)={0x3, 0x3, 0x4, 0x7fffffff}) r3 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m48.848874951s ago: executing program 1 (id=935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x541e, &(0x7f0000000140)=0x12) 1m48.372823189s ago: executing program 1 (id=943): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x580, &(0x7f00000007c0)="$eJzs3V1rHFUfAPD/bDZ9Sfs8SaEU9UICvbBSu2kSXyoIrZeixYLe1yXZhpJNt2Q3pYmFthf2xhspgogF8QPotZfFL+CnKGihSAl64U1kNrPNNtnN65rdur8fTHLOzCTnnD1zzvxnZ5YNoG+Npj9yES9HxFdJxHDTtnxkG0dX91t+emsqXZJYWfnkjySSbF1j/yT7fSTLvBQRv3wRcTq3sdzq4tJssVwuzWf5sdrc9bHq4tKZq3PFmdJM6drE5OS5tyYn3n3n7Y619fVLf3378cMPzn15cvmbHx8fu5/EhTiabWtuxx7cac6Mxmj2mgzGhXU7jnegsF6SdLsC7MpANs4HI50DhmMgG/XAf9/tiFgB+lRi/EOfasQBjWv7Dl0HvzCevL96AbSx/fnV90biUP3aaGg5ee7KKL3eHelA+WkZP//+4H66xBbvQ9zuQHkADXfuRsTZfH7j/Jdk89/una2/eby59WX02/kHuulhGv+80Sr+yT2Lf6JF/HOkxdjdja3Hf+5xRBzsQFEtpfHfey3j32dT18hAlvtfPeYbTK5cLZfORsT/I+JUDB5M85vdzzm3/Gil3bbm+C9d0vIbsWBWj8f5da2fLtaKe2lzsyd3I15Zi3+T2DD/H6rHuuv7P309Lm2zjBOlB6+227Z1+5t1PgJe+SHitZb9v3ZHK9n8/uRY/XgYaxwVG/1578Sv7crfWfs7L+3/oc3bP5I036+t7ryM7w/9XWq3bbfH/4Hk03r6QLbuZrFWmx+POJB8tHH9xNrfNvKN/dP2nzq5+fzX6vg/HBGfbbP9947fa7trL/T/9I76f+eJRx9+/l278rfX/2/WU6eyNduZ/7Zbwb28dgAAAAAAANBrchFxNJJc4Vk6lysUVp/vOB5DuXKlWjt9pbJwbTrqn5UdicFc4073cNPzEOPZ87CN/MS6/GREHIuIrwcO1/OFqUp5utuNBwAAAAAAAAAAAAAAAAAAgB5xpM3n/1O/DXS7dsC/zld+Q//acvx34puegJ7k/A/9y/iH/pVvmQT6gUEP/atp/CdJNysC7Dvnf+hfa+N/qKv1APaf8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAB01KWLF9NlZfnprak0P31jcWG2cuPMdKk6W5hbmCpMVeavF2YqlZlyqTBVmdvq/5UrlevjE7Fwc6xWqtbGqotLl+cqC9dql6/OFWdKl0uD+9IqAAAAAAAAAAAAAAAAAAAAeLFUF5dmi+VyaV6ibeJ89EQ1dp1Iturl89nBsKsi8t1voMS6xE/Dex/d3ZyVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5/wQAAP//sHcxLQ==") r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0xeffffffffffffff7, 0x7a09282d) ptrace$pokeuser(0x6, r6, 0x358, 0xafe8) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) socket(0x9, 0x80000, 0x7) 1m47.260847654s ago: executing program 1 (id=965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket(0x1e, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m46.905467416s ago: executing program 1 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 1m46.878330317s ago: executing program 33 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008", @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 1m10.273222493s ago: executing program 5 (id=1642): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3]}, 0x8) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 1m10.245816985s ago: executing program 5 (id=1643): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x40) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x20081) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x5, 0x9, "b4a39c62098d5a2b8164309049643dceb5013884806c9ad2ad0723981568867519362a0a1076b9216eaa79f7d9d8b43a2dbef76bbc218598938fb69e82402878", "06692924d8ee043f163fd58f0a19688f9c189e30999e6ce017105cd6ab5c0c7c3fe6dd8ad5c1b860c60becc2b4983aff68dab6c682f6596217a92f87c3d710ba", "3c4864540e92fc1244fd2e585c87f81a36c2d07295f2cc023174e21240388fa1", [0x1, 0xcff]}) close_range(r0, r0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000140)="563cc3099b820a19e224389334735a5e5db1839a35445111740c60a1", 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m10.072418335s ago: executing program 5 (id=1649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073", @ANYRES8=r1], 0x70}}, 0x0) 1m10.043825557s ago: executing program 5 (id=1650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x90}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) setreuid(0xee01, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) 1m9.675770848s ago: executing program 5 (id=1659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x8100) 1m9.368155786s ago: executing program 5 (id=1663): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd72, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',dirsync,\x00']) pipe(&(0x7f0000000140)) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") 1m9.325719069s ago: executing program 34 (id=1663): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd72, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',dirsync,\x00']) pipe(&(0x7f0000000140)) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$eJzs3M9vVEUcAPDv2/7gt62IP0CUKhobjS0tqBw8gNHEgyYmesBjbQsiCzW0GiFEVw94NCTeiUcT/wJPejHqycSr3g0JMVxAvTzzdt8ru8vuupStC+znkyydefOWme/Om+2bmd0GMLAmsn+SiK0R8VtEjNWyjSdM1H5cu3Ju/q8r5+aTSNM3/0yq5129cm6+OLV43pYiU2k8Xm/5zNkTc+Xy4uk8P71y8v3p5TNnnz1+cu7Y4rHFU7MHDx7YP/PC87PP9STOrE1Xd328tHvnq29feH3+yIV3fvomKeJviOPD7v/TjR1LJ1ocGyoST3Zfyx1hW106Ge5jQ7gp70ZE1l0j1fE/FkNxvfPG4pXP+to4YF2laZpuaF9cSYG7WBL9bgHQH/nv+SSikk395+vn84Pg8uHaBCiL+1r+qJUMR6mWGL/YNL/tpWy2daTy98XsEU3rKQAA6+G7w7Wf2X1H8agdKTWs4h/K94bGI+LeiNgeEfdFxI6IuD8iHoiIByPiobrntNr3ada8SXLj/U/p0poC61J2//divrfVeP9XKk4ZH8pz26rxjyRHj5cX90XEPRExGSMbsvxMhzq+f/nXL9qVTdTd/2WPrP7iXjBvx6XhpgW6hbmVuVuJud7lTyN2DbeKP1ndCcj6cWdE7NqztjqOP/317nZl/x1/Bz3YZ0q/iniq1v+VaIq/kHTen5zeGOXFfdPFVXGjn385/0a7+m8p/h7I+n9zy+t/Nf7xpH6/dvnm6zj/++dt5zRdXv+j9c/Jrv/R5K1quij4aG5l5fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+uvxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLN9X/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/Eg3738dW3r6Vq5mAAAAuPOUImJrJKWp1XSpNDVV+7z8jthcKi8trzxzdOmDUwu17wiMx0ipWOkaW10PjcpMPq0v1kdnm/L783XjL4c2VfNT80vlhX4HDwNuS5vxn/ljqN+tA9ZXh0//A3e/te6jp2n6SY+bAvzPfF8bBpfxD4Orxfjf1JS3SgB3qVa//03sYTC4/4fBZfzD4DL+YXAZ/zCQ8m/CD3fzBf91S2TvP/2rvZtENLQwTfvUjNHb49WoJqLUt9pjjU+f7NMr9k/+xzZvj47rMtHvdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+DcAAP//dZ3gaQ==") 53.461384153s ago: executing program 6 (id=1920): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000200)={0x57, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="2e53cbd2955504413decc816de40e7b9c24136ce8a0c24f08f1d4964747c9a3f0d4d03cc3fb3d12cf5a246bcfb1188bdba085195e15797d5fb3cad501e61600a78ffe3e189abe88562d6d6689c204452aac6a8c4fae3e2f6e2be259422e5933d1db31493187c2f", 0x67, 0xfffffffffffffffb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x600800, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x72) prlimit64(0x0, 0x2, &(0x7f0000000080)={0x6, 0x1}, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009e8ffffff0000ffffffffffffffff00000000586f3bf40a00000000000000000000000000000000000000000000000000000000000000ffffffff0400000009000000000000000a0000000000000000000000000000000000000000000000000000ec0000000000000000000000000000230000000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') lseek(r4, 0xffffff60, 0x1) 53.251266225s ago: executing program 6 (id=1923): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x580, &(0x7f00000007c0)="$eJzs3V1rHFUfAPD/bDZ9Sfs8SaEU9UICvbBSu2kSXyoIrZeixYLe1yXZhpJNt2Q3pYmFthf2xhspgogF8QPotZfFL+CnKGihSAl64U1kNrPNNtnN65rdur8fTHLOzCTnnD1zzvxnZ5YNoG+Npj9yES9HxFdJxHDTtnxkG0dX91t+emsqXZJYWfnkjySSbF1j/yT7fSTLvBQRv3wRcTq3sdzq4tJssVwuzWf5sdrc9bHq4tKZq3PFmdJM6drE5OS5tyYn3n3n7Y619fVLf3378cMPzn15cvmbHx8fu5/EhTiabWtuxx7cac6Mxmj2mgzGhXU7jnegsF6SdLsC7MpANs4HI50DhmMgG/XAf9/tiFgB+lRi/EOfasQBjWv7Dl0HvzCevL96AbSx/fnV90biUP3aaGg5ee7KKL3eHelA+WkZP//+4H66xBbvQ9zuQHkADXfuRsTZfH7j/Jdk89/una2/eby59WX02/kHuulhGv+80Sr+yT2Lf6JF/HOkxdjdja3Hf+5xRBzsQFEtpfHfey3j32dT18hAlvtfPeYbTK5cLZfORsT/I+JUDB5M85vdzzm3/Gil3bbm+C9d0vIbsWBWj8f5da2fLtaKe2lzsyd3I15Zi3+T2DD/H6rHuuv7P309Lm2zjBOlB6+227Z1+5t1PgJe+SHitZb9v3ZHK9n8/uRY/XgYaxwVG/1578Sv7crfWfs7L+3/oc3bP5I036+t7ryM7w/9XWq3bbfH/4Hk03r6QLbuZrFWmx+POJB8tHH9xNrfNvKN/dP2nzq5+fzX6vg/HBGfbbP9947fa7trL/T/9I76f+eJRx9+/l278rfX/2/WU6eyNduZ/7Zbwb28dgAAAAAAANBrchFxNJJc4Vk6lysUVp/vOB5DuXKlWjt9pbJwbTrqn5UdicFc4073cNPzEOPZ87CN/MS6/GREHIuIrwcO1/OFqUp5utuNBwAAAAAAAAAAAAAAAAAAgB5xpM3n/1O/DXS7dsC/zld+Q//acvx34puegJ7k/A/9y/iH/pVvmQT6gUEP/atp/CdJNysC7Dvnf+hfa+N/qKv1APaf8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAB01KWLF9NlZfnprak0P31jcWG2cuPMdKk6W5hbmCpMVeavF2YqlZlyqTBVmdvq/5UrlevjE7Fwc6xWqtbGqotLl+cqC9dql6/OFWdKl0uD+9IqAAAAAAAAAAAAAAAAAAAAeLFUF5dmi+VyaV6ibeJ89EQ1dp1Iturl89nBsKsi8t1voMS6xE/Dex/d3ZyVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5/wQAAP//sHcxLQ==") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0)=0xb, 0x4594) recvfrom$packet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000500)={@local, @remote, @val={@val, {0x88a8}}, {@generic={0x19}}}, 0x0) 53.061189157s ago: executing program 6 (id=1930): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000040)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x80000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6f}}, {@norecovery}, {@data_err_ignore}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f0000000b40)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdf, &(0x7f00000009c0)=""/223, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) futex(0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x1000000) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000300)={0x1ff, 0x9}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mlock2(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 52.740845136s ago: executing program 6 (id=1934): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0xbfe5, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0xfffffffc, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xb, 0xe52c, 0xaa8, 0x80000000, 0x1000000d, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x5, 0x3, 0x88, 0x0, 0x3, 0x1, 0xfffffffc, 0xfffffffa, 0xa, 0x8, 0x401, 0xfffff801, 0x5, 0x9, 0x0, 0x7, 0x8, 0x5, 0x0, 0x2, 0x8, 0x23, 0xfc, 0x3, 0x40010, 0x4, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x9000, 0x3, 0x2000005, 0x2, 0x0, 0x5, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x202, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x9, 0x3ff, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0x9, 0x2, 0x6, 0x8, 0x6, 0x4, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0xea1a, 0x80000000, 0xfffffffa]}}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r4, &(0x7f0000000080)=""/196, 0xc4, 0x3) socket$tipc(0x1e, 0x5, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af050007000000000002004e227f000001000000000000000002000100000000020000060c0000008005000400000000000a004e23000000ff00000000000000000010000000000000ff0100000000fc41c48bf2108ddd000029ec0d1b80389a1017269f28aa6001e557355e8863737da88e3710398c422550c1d00715ea8451593373f5577617a82dab0b35d2b9d8304e5b03074464cf80f5d06aa127"], 0x98}, 0x1, 0x7}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x7, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x1ff, 0x80}, {0x3, 0x80000001}]}, 0x14, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x514, &(0x7f0000000040)={0x0, 0x574, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x771e, 0x16, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) 52.617305663s ago: executing program 6 (id=1935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r2) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x54, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004084) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0x8001, 0x1000}], 0x1, 0x0) 52.378334697s ago: executing program 6 (id=1941): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3]}, 0x8) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 52.353249518s ago: executing program 35 (id=1941): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x3]}, 0x8) syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 25.116023213s ago: executing program 3 (id=2463): prctl$PR_SCHED_CORE(0x48, 0x2, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) r2 = socket(0xa, 0x5, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x240081, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r5 = fsmount(r3, 0x0, 0x88) r6 = openat$cgroup(r5, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0xcd6}, &(0x7f0000000200)=0x8) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x10000000000002fb, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002000000010000020300000004000000", @ANYRES32=r8, @ANYBLOB="2000e3c16e57ae00000000000084000000080000002001000000000000000000"], 0x40, 0x4855}, 0x24000052) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 25.038822618s ago: executing program 3 (id=2467): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, 0x0, 0x440b0) 24.98665954s ago: executing program 3 (id=2470): socket(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x2, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x41, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) ioperm(0x0, 0xd, 0x4000000000000020) 24.939880923s ago: executing program 3 (id=2472): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@dioread_lock}, {@nojournal_checksum}, {@acl}, {@usrjquota}, {@acl}, {@delalloc}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$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") chroot(&(0x7f0000000240)='./file0\x00') (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async, rerun: 64) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') (rerun: 64) umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read(r0, &(0x7f0000000340)=""/209, 0xd1) 24.796212241s ago: executing program 3 (id=2473): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) 24.500204849s ago: executing program 3 (id=2479): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2e300000180c200000008004503005c00000000002f907800000000e000000124806558000000000000100008000003000086dd86dd88be00000000eb000000002000000002000000000000000000000008006558000000002688f89ffd0c000689a05124253dab6ce5c7f4dd2f79b4d49d1ef4cef2ed2183f940612e60e47c6d235f54d5980049d0afc20431293883b4f81ad6292b5bd23ba6608f0783b00d2120eb2d002858d4ce436ca7821c7fd0ecea2e07e98c6523a7a4def5"], 0x0) 24.48944666s ago: executing program 36 (id=2479): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2e300000180c200000008004503005c00000000002f907800000000e000000124806558000000000000100008000003000086dd86dd88be00000000eb000000002000000002000000000000000000000008006558000000002688f89ffd0c000689a05124253dab6ce5c7f4dd2f79b4d49d1ef4cef2ed2183f940612e60e47c6d235f54d5980049d0afc20431293883b4f81ad6292b5bd23ba6608f0783b00d2120eb2d002858d4ce436ca7821c7fd0ecea2e07e98c6523a7a4def5"], 0x0) 10.786549727s ago: executing program 7 (id=2727): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$TIOCGRS485(r0, 0x542e, 0x0) 10.765233808s ago: executing program 7 (id=2729): socket(0x28, 0x5, 0x0) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xbffefffe}, &(0x7f0000001a80)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 10.739772419s ago: executing program 7 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002740), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000d80)='./file0\x00', 0x8000, &(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="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", @ANYBLOB="feb1b40a6b1166170a5bb0dcca210d99e6d5eb14790776389ecabe48af72a6beee50f15eafbdd8134eb70d9a84f7435b03932e0151706ce8bc1462ff0602e2bc4e860a360458de7c5ded2f01783da40081dac600069cf1fc1227087f0a332548ea9e548c7086e543d4dfa982fe64caa39aed19c64448a0b69e8c0c753a8b6800487f924da757c3fcd508c71002afe40f30f1691153a5808ec95618bb07b16bfc0dcb7aa45adbe603cde60fe02b84aa8dc1ed4ea32063316440472b702aeea9445f2c19"], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000003000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64], 0x8, 0x2fa, &(0x7f00000000c0)="$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") io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 10.668134594s ago: executing program 7 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) syz_clone3(&(0x7f0000000400)={0x102000080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000007c0), {0x10}, &(0x7f00000006c0)=""/213, 0xfffffffffffffec4, &(0x7f0000000800)=""/78, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x19, r3, 0xf, 0x0) r4 = dup(r2) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) read$usbmon(r5, &(0x7f0000007500)=""/4096, 0x1000) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x438, 0x3f4, 0x1, 0x70bd25, 0x25dfdbfe, {0x6, 0x2, 0x2d, [0x5, 0x10, 0x1, 0x2, 0x8, 0xfffffffe, 0x40, 0x4a1, 0x8000, 0x3, 0x10, 0x2, 0xff, 0x7, 0x1000, 0x5, 0x7fff, 0x6, 0x10, 0x9, 0x0, 0x8, 0xba6, 0x3, 0x8, 0xd, 0xbaf0, 0x8, 0x5, 0x15562b4d, 0xfff, 0x5, 0x0, 0x508, 0x4, 0x5, 0x3, 0x9, 0xffff7fff, 0x1, 0xa4, 0x9, 0x3, 0x2, 0x7f, 0xff, 0x0, 0x7fff, 0x7f, 0x1ff, 0x4, 0x0, 0x81, 0x487a, 0x6, 0x1, 0x5, 0x7, 0x239d097d, 0x7ff, 0x5, 0x2, 0x7ff, 0x5], [0x401, 0x100, 0x9, 0x499, 0x1, 0x7, 0x5, 0x3ff, 0x5, 0x4, 0x9, 0x7f, 0x0, 0x80000000, 0x8001, 0x0, 0x180, 0x0, 0x5, 0x5, 0x2, 0x9, 0x5, 0xffffffff, 0x6, 0x2, 0x0, 0x10, 0x0, 0xe2c, 0x8, 0x9, 0x8, 0xf64, 0xf, 0xfffffff7, 0x2, 0x8, 0x1, 0x6, 0x5ea, 0x0, 0x101, 0xb4c, 0x8001, 0x8, 0x1, 0x54, 0xa, 0x80000001, 0xef, 0x8000, 0x6, 0x4fe3, 0xffffff52, 0x38d1, 0x4, 0xee, 0x9, 0x3, 0x4, 0x2, 0x9, 0x1], [0x6, 0x749, 0x0, 0x40, 0x3ff, 0x3, 0xb11d, 0x7, 0xf, 0x0, 0x3, 0x6, 0xb2f, 0x2, 0x5, 0x0, 0xe, 0x1, 0x2, 0x2, 0x9, 0xfffffffc, 0xfffffffe, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x4, 0x401, 0x0, 0x9, 0x22, 0x7, 0x2, 0x5, 0xffff, 0x3, 0xffffffff, 0x0, 0xffffa447, 0x3, 0x7, 0x8, 0x10001, 0x8, 0x40, 0x2, 0x0, 0x6, 0x6, 0x3, 0x1ff, 0x7, 0xb61a, 0x10001, 0x2, 0x1, 0x80000001, 0x8, 0xc, 0x81, 0x8001, 0x80000000], [0xfffffffd, 0x8000, 0x2, 0x9, 0x7, 0x43, 0x4, 0x2, 0x0, 0xffffc7a7, 0x3ff, 0xc11b, 0x7, 0xf6, 0x8, 0xdc, 0x401, 0x4, 0xffffffff, 0x2, 0x6, 0xd1d8, 0xa, 0x81, 0x3, 0x8, 0x1, 0x3, 0x8000, 0x7, 0x8, 0x10000, 0xe4, 0x3ff, 0x5, 0xffffffff, 0x2, 0x2, 0x80, 0x9, 0xddb2, 0xd7, 0x0, 0x3, 0x3, 0x101, 0x6, 0x3, 0x69f, 0x800, 0x6, 0x1, 0x8000, 0x5f4b, 0x9, 0x4, 0x401, 0x4b82, 0x6, 0x1, 0xa1dd, 0xa2, 0xffffffff, 0x8], 0x16, [')&\x00', '/R*\x00', '\x00', '\x00', '#\x00', '\x00', '*!#\x00', 'b\x00', '[\x00', '\x8b\x00']}, ["", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4044811}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r6, 0x0) 9.783565006s ago: executing program 7 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 9.227602978s ago: executing program 7 (id=2763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) dup(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9034, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6a92}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fstatfs(0xffffffffffffffff, &(0x7f0000000500)=""/131) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 9.179913512s ago: executing program 37 (id=2763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) dup(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9034, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6a92}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fstatfs(0xffffffffffffffff, &(0x7f0000000500)=""/131) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 1.634178444s ago: executing program 0 (id=2892): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010", @ANYRESOCT], 0x3c}}, 0x0) 1.607420606s ago: executing program 8 (id=2894): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xbffefffe}, &(0x7f0000001a80)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.570208668s ago: executing program 0 (id=2896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xbffefffe}, 0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.569676558s ago: executing program 2 (id=2897): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002740), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000003000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64], 0x8, 0x2fa, &(0x7f00000000c0)="$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") io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 1.468058184s ago: executing program 0 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x1, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x20, 0x10, 0x536d, 0xa70b8000}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) write$binfmt_aout(r4, 0x0, 0xaef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x27, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0x6, 0x8, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0xe, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xc88}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000740)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x4, 0x3, 0x87fa}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r1, r1, r1, r1], &(0x7f0000000800)=[{0x0, 0x5, 0xa, 0x5}, {0x5, 0x1, 0x6, 0x6}, {0x3, 0x4, 0xe, 0x9}, {0x4, 0x4, 0x1, 0x3}, {0x2, 0x2, 0xe, 0x9}, {0x4, 0x1, 0x10, 0xf}, {0x3, 0x5, 0x10, 0x3}, {0x5, 0x4, 0x5, 0xb}, {0x3, 0x4, 0x10, 0x9}, {0x1, 0x2, 0x4, 0x2}], 0x10, 0x8}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1c5101, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000002c0)={0x3, {{0x2, 0x4e20, @multicast2}}, 0x1, 0x4, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @empty}}]}, 0x290) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x2}]}}}]}, 0x44}}, 0x0) 1.467898364s ago: executing program 8 (id=2899): r0 = syz_clone(0x19ad1240, 0x0, 0xfffffffffffffe46, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, 0x0) 1.454333445s ago: executing program 2 (id=2900): socket(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x2, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x41, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) ioperm(0x0, 0xd, 0x4000000000000020) 1.279077595s ago: executing program 8 (id=2902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) 1.086135796s ago: executing program 8 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) getsockname(0xffffffffffffffff, &(0x7f0000000340)=@sco, &(0x7f0000000280)=0x80) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0x0, 0x40, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x16, 0x2b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x4, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], &(0x7f0000001900)=[{0x5, 0x5, 0x1}, {0x0, 0x3, 0xd, 0x7}, {0x2, 0x2, 0x9, 0x8}], 0x10, 0x1}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) 1.053473618s ago: executing program 2 (id=2904): preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @random="000200", @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0xf, 0xa2, [@broadcast, @broadcast, @loopback]}, @cipso={0x86, 0x28, 0x1, [{0x2, 0xd, "40c145248185fa72213bac"}, {0x1, 0xc, "a73bea9972281360e363"}, {0x6, 0x9, "70a37eb6112569"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 990.831172ms ago: executing program 4 (id=2906): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00', @ANYRESOCT], 0x3c}}, 0x0) 990.298382ms ago: executing program 2 (id=2907): fchmod(0xffffffffffffffff, 0xcc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 795.575534ms ago: executing program 9 (id=2908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xbffefffe}, 0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 794.875084ms ago: executing program 4 (id=2909): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x40) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x20081) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x5, 0x9, "b4a39c62098d5a2b8164309049643dceb5013884806c9ad2ad0723981568867519362a0a1076b9216eaa79f7d9d8b43a2dbef76bbc218598938fb69e82402878", "06692924d8ee043f163fd58f0a19688f9c189e30999e6ce017105cd6ab5c0c7c3fe6dd8ad5c1b860c60becc2b4983aff68dab6c682f6596217a92f87c3d710ba", "3c4864540e92fc1244fd2e585c87f81a36c2d07295f2cc023174e21240388fa1", [0x1, 0xcff]}) close_range(r0, r0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) write$qrtrtun(r5, &(0x7f0000000140)="563cc3099b820a19e224389334735a5e5db1839a35445111740c60a1", 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 552.118528ms ago: executing program 9 (id=2910): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xbffefffe}, &(0x7f0000001a80)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 475.269513ms ago: executing program 9 (id=2911): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 434.075005ms ago: executing program 2 (id=2912): syz_io_uring_setup(0x308f, &(0x7f0000000740)={0x0, 0xef69, 0x2, 0x1, 0x29}, &(0x7f00000007c0), &(0x7f0000000800)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x72f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbe4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3a2}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2a7e}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 377.347128ms ago: executing program 0 (id=2913): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) 376.491508ms ago: executing program 4 (id=2914): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x400d090) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="ccf8af3b40370825115472c8971a8b73defed97c11edaead4854ce140b26272f958f753ff6a5c8a3580f4a00b1b7e5ecbebe3a6fadb49ad2fd507ded79d46f58ceef72b47e5d81779740297dd6125c5b177aa6085e115d0f5c572daf77813632589ac8d14c96759f8bee226ad0aa7b09000496838f363dd9fb09b60274b674aee8f0203013778574731e6cc727cc61948adda2f3fb18474d13f7d6fdf3b0fe03b1d5432893ea4198600a0ab567", 0xad}, {&(0x7f0000000100)="48b9dd483a8f799b898294d3e762d7737a3392bdcd255ad81c7c252fcedd5d7e3fdb93dea7c3c142f1e9f11dc5a054494de794f35defe62439531ad56d2cc835a3ecb1f5746c4ba90bb3afc2ac2cd15edf2f281313b9f7650db9c3a9dcfc3a11c4796969624aa7ee69b048409ea47ef6c29b9ae71ef5", 0x76}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000001c0)="52e6e93014349a4c99f899", 0xb}, {&(0x7f0000000400)="debd1cfd5e0b6b8037a4aa307a3f3d6531ed21869ce7085beb2840afa69d02e922440729d11290aa2f5d8fbf8520f508ba6905cd610e113aea340f8c8221363f11a2bdaf8112e1d9a2290fe049d5c037074ff8fc3a26651824ac07761c43a0a5b1ceddc3d272920cc2f7204a52279e3c686aed223c59704be566e92c9aeef554bb0a7eb1de0b1746405cdf22", 0x8c}, {&(0x7f0000000280)="fda693d159e8912a2b5747ab8467208b751fe633d6a94ee57973e70fb9f68b8e5beb08937414609b5c8292504fa4828b57d94d806c9bf5db3351e216b1168e90008f4d79690aa5", 0x47}], 0x6}}, {{&(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000600)="d1cd49c7489767e839d5d6c0f56961c6153709ec911fb747abedf5721d2851cf6c7f3ff3c4a73127ba772fa79b0212dbd005749f5a4fea319c0cbba91ffb04a4b9ba8d8b046b9dacb67dfea2721567d533e7ee4857cf9bdc1e2b58294ef132821329471f66aa28453970c1b9d98b234d0106d1b0cbecca0c89a705d24b09fee9c8946b44c4ccae0f2737d2bbca4bd11605bcc2fa2e6715ac06f6d836c01bd1e71576d40bf286438c22582093e061e4ded87572f6668e", 0xb6}, {&(0x7f00000007c0)="e45ede7bef3b97da09b1e5c6a4f6fae963cf514a023348313d5616ceb8765bfb3c4ff3b92ab6763611d6a607045a3f7dea24ee974cc9599d2ace08c3596cd9c776fd7a3812fe32870bc5892b03ff0a8b629224df4292e375e92dabec992d8b4af1edc4b34c90845c0dc45a0f3ee516e0c42fb2d33d276f9a1858e975adf8fd8a6edfed538c16c42a65463b4c6e515f3288cdf7041259", 0x96}, {&(0x7f0000000540)="9cb4d35ce6a84c9479657ed9f3f4cbf98bfa9b3db9ccf152c5a5c2468a", 0x1d}, {&(0x7f0000000880)="07043c640934b1b9a765630a06638a6638bfd15188b114e4922e12fbb09cecb2b7af4bed9dc19fd2662f4b89d1f20b0d772c00fbc824bd41e10d464c9df21e548777c9a107566efcfb4aa3c0abba9f0f7cc2ee62c81e33af090be6f20c7f3880bb80c38a76688cf625c67194555ae66da5c104f1f5d0cc4721b6dce5c4a56b8acde124b8e36656c32a80ceba87dfa09ad062da1d41fe03f2cd4526bd791ebe", 0x9f}, {&(0x7f0000000940)="bc02ac4ef004d5793398381e72d1d4353f61ad8e27a774801502f0130fb4e712db7bd9dbf1131512c88554b5ff9aa7a662dfb89e196210bb99433a77ae50227a94a08617e77adc06ade6c92b7eb8e5e44b3b44207d23546ecedf9f082cd5e61d19528464bae7c5e2cd1315f78fd692ccac6d8bc3ace061426876e5d668fe05920ebb8325bed08eb229169f6956793dbb1be99a533e9d74d945b25f04d9fa56cefb9cd8e74f166a2ffe78cf", 0xab}], 0x5, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf9}}], 0x18}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@noop, @cipso={0x86, 0x5c, 0x3, [{0x7, 0x11, "0ae2b2985f55129036f0d2ebd7e362"}, {0x6, 0x9, "6fe2f14fb2fc96"}, {0x0, 0xf, "695bc8e7a3eeb5bca9ca779a2d"}, {0x1, 0x7, "ee1735bb56"}, {0x7, 0xe, "f1dfcea36bffcfb87f1517dd"}, {0x5, 0xa, "d94d7e93ab117a79"}, {0x6, 0x6, "ab64d17e"}, {0x2, 0x8, "83b00fe8c008"}]}, @timestamp={0x44, 0x28, 0x31, 0x0, 0x5, [0x6, 0x3, 0x2, 0x9, 0x2, 0x5, 0xf, 0x101, 0x8000]}, @end, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x3, [{@rand_addr=0x64010100, 0x5}, {@multicast2, 0xdf}, {@remote, 0x100}, {@private=0xa010100, 0x10}, {@multicast2, 0x7fff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x130}}], 0x3, 0x4044044) ioctl$TCFLSH(r0, 0x800455cc, 0x0) 311.643702ms ago: executing program 0 (id=2915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}, 0x1, 0x0, 0x0, 0x200448c0}, 0x4008000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [@call={0x85, 0x0, 0x0, 0x6c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xa, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001200010627bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="800000000010000008001d0081"], 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x4000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") 306.676202ms ago: executing program 4 (id=2916): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) 235.410307ms ago: executing program 9 (id=2917): r0 = socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000002ec0)='1', 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r3, 0x852ac000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000000, 0xfffffffffffffe89, 0x0, &(0x7f0000000900)="c123612d6821d308091674888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = epoll_create1(0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8002, 0x0) openat(r6, &(0x7f0000000100)='./file0\x00', 0x242000, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}], 0x1, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000080)={0x8000000a}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getpeername$packet(r0, 0x0, 0x0) 234.890907ms ago: executing program 8 (id=2918): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0x8001, 0x1000}], 0x1, 0x0) 176.13027ms ago: executing program 9 (id=2919): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00', @ANYRESOCT], 0x3c}}, 0x0) 175.93204ms ago: executing program 4 (id=2920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xbffefffe}, &(0x7f0000001a80)=0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 62.456196ms ago: executing program 4 (id=2921): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x8, 0x683, 0x80000001, {{0x19, 0x4, 0x3, 0x4, 0x64, 0x68, 0x0, 0xe2, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x2b, 0xd, [@private=0xa010100, @private=0xa010102, @remote, @private=0xa010101, @remote, @multicast2, @private=0xa010100, @multicast2, @empty, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0xd, [{@multicast2, 0xc}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @rr={0x7, 0x7, 0x4, [@rand_addr=0x64010102]}]}}}}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c"]) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8001, 0x9dd4, 0x47f, 0x822, r2, 0xd, '\x00', r3, r4, 0x0, 0x2, 0x5, 0x5}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sysinfo(&(0x7f00000000c0)=""/8) 61.796966ms ago: executing program 2 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@usrjquota}, {@nombcache}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noload}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file1\x00', 0x20fe000002) socket$kcm(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) truncate(0x0, 0x2fffffd) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8900, &(0x7f0000001dc0)={0x8f, 0x74, 0x100000}, 0x20) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x2, {{0x2, 0x4e22, @remote}}, 0x1, 0x8, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @remote}}]}, 0x490) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x0, 0x3, 0x0, 0x400000007, 0x74120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000006, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x10008, 0xf8, 0x80000001, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1843}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="6bcdafa401871d26432c60599828f1ca6aa7a7ef6ca95e1f2ddd8d8d092c2440923059a3b0f425b739cb8ed6496de1a39add4992cc4fff699b63e9ef727edf7df8478405400572264d", 0x49}, {&(0x7f00000000c0)="f721ad128b24332fcc916112be04754efbc555ee97818b00d41fdbf082a613d60edd62d57f8d46324ee1149a1843fdc5da903918c29bb58a09ac09a8938ddefdb081e6bff93bb54e29eaaf199c7ee2bc4a", 0x51}, {&(0x7f0000000240)="c788ef4767bfad14dd527b9a0f89dc7299d7c691622a1d25d02a05d441f672d12ceeb634b87701d0005ba5e08368aba53bdd1c9c1a35c34356b5", 0x3a}, {&(0x7f0000000140)="8a1d963c25221c5bf8b90868386d18243a7ba1b3ff01f6d386488595059c485c7c36d4728dc3d58203b5d2d1cbc9ba597c2dc2ba05a8e91d", 0x38}, {&(0x7f00000001c0)="ec09d1d44f048f7d", 0x8}], 0x5, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0xb28}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7394}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dstopts={{0x28, 0x29, 0x37, {0x3a, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x3b, 0xa, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x38, "7a7b88c6df6190332c4fae41e65183af53c55bcac5cf6fe7b4f04f8e276198f581b6cffdd304ba14ff1fdca0f5b6cab6570f311aa4a476294afea7ca765104ff47010c0c9067"}, @ra]}}}, @rthdr={{0x48, 0x29, 0x39, {0x33, 0x6, 0x2, 0xe, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x32, 0x10, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3c, 0x6c, "141b68b4833d74d6dd35db33ad6c591528d131c8cd72b89bf4de5ff2f87fb6e8735ef21288098cd63d636bfb463b41397bb7a9c1cf9a89603405616ee748b24ed396de53c6b3ff3ebbe5d30e8df4928c7d139d83bab1c95d85bd17fd59f81acde1ffb3d7d92c6d55ca9e96bd"}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x101}]}}}, @rthdr={{0x0, 0x29, 0x39, {0x0, 0x0, 0x2, 0xd6, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x218}}], 0x1, 0x24000020) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x7e23, 0x8001, @empty, 0xffffff5d}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x8, 0x0, 0x1, 0x0, 0x2, 0x8000}, 0x20) 60.683057ms ago: executing program 0 (id=2923): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4}, 0x5) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$inet_pktinfo(r4, 0x29, 0x8, 0x0, &(0x7f00000003c0)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) r8 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r8, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0502000000000000180012800c0001006d6163766c616e00080002800400058008000500", @ANYRES32=r7, @ANYBLOB="08000400ed09"], 0x48}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x80000, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0x4) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'gre0\x00'}}, 0x1e) sendfile(0xffffffffffffffff, r11, 0x0, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 57.244917ms ago: executing program 9 (id=2924): mbind(&(0x7f00004c2000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x1fc9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x3}, 0x4020, 0x10000, 0x40008, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 0s ago: executing program 8 (id=2925): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) kernel console output (not intermixed with test programs): sercopy, interval 1, probability 0, space 0, times 0 [ 162.546076][T10714] CPU: 1 UID: 0 PID: 10714 Comm: syz.4.2306 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.546168][T10714] Tainted: [W]=WARN [ 162.546176][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.546191][T10714] Call Trace: [ 162.546199][T10714] [ 162.546208][T10714] __dump_stack+0x1d/0x30 [ 162.546237][T10714] dump_stack_lvl+0x95/0xd0 [ 162.546276][T10714] dump_stack+0x15/0x1b [ 162.546296][T10714] should_fail_ex+0x263/0x280 [ 162.546366][T10714] should_fail+0xb/0x20 [ 162.546395][T10714] should_fail_usercopy+0x1a/0x20 [ 162.546425][T10714] _copy_from_user+0x1c/0xb0 [ 162.546447][T10714] __sys_bind+0x106/0x290 [ 162.546585][T10714] __x64_sys_bind+0x3f/0x50 [ 162.546631][T10714] x64_sys_call+0x2ceb/0x3000 [ 162.546663][T10714] do_syscall_64+0xc0/0x2a0 [ 162.546695][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.546715][T10714] RIP: 0033:0x7efe508daeb9 [ 162.546777][T10714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.546800][T10714] RSP: 002b:00007efe4f337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 162.546824][T10714] RAX: ffffffffffffffda RBX: 00007efe50b55fa0 RCX: 00007efe508daeb9 [ 162.546838][T10714] RDX: 0000000000000010 RSI: 0000200000010180 RDI: 0000000000000003 [ 162.546854][T10714] RBP: 00007efe4f337090 R08: 0000000000000000 R09: 0000000000000000 [ 162.546867][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.546905][T10714] R13: 00007efe50b56038 R14: 00007efe50b55fa0 R15: 00007ffcecaea428 [ 162.546932][T10714] [ 162.780894][T10720] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 162.788990][T10719] usb usb1: usbfs: process 10719 (syz.4.2308) did not claim interface 7 before use [ 162.811122][T10720] bond12: entered promiscuous mode [ 162.816376][T10720] bond12: entered allmulticast mode [ 162.821923][T10720] 8021q: adding VLAN 0 to HW filter on device bond12 [ 162.903292][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2313'. [ 162.992608][T10739] loop4: detected capacity change from 0 to 4096 [ 163.008911][T10739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.021926][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'. [ 163.047376][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.121293][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.191327][T10755] netlink: 'syz.0.2322': attribute type 1 has an invalid length. [ 163.212268][T10753] loop7: detected capacity change from 0 to 2048 [ 163.236830][T10755] bond13: entered promiscuous mode [ 163.242134][T10755] bond13: entered allmulticast mode [ 163.248331][T10755] 8021q: adding VLAN 0 to HW filter on device bond13 [ 163.296338][T10753] Alternate GPT is invalid, using primary GPT. [ 163.302927][T10753] loop7: p2 p3 p7 [ 163.482074][T10780] loop8: detected capacity change from 0 to 512 [ 163.488922][T10780] EXT4-fs: Invalid want_extra_isize 111 [ 163.518939][T10783] loop0: detected capacity change from 0 to 512 [ 163.531085][T10783] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.539908][T10783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 163.554178][T10783] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 163.564505][T10783] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 163.574187][T10783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.594436][T10783] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 163.606911][T10787] netlink: 'syz.7.2335': attribute type 1 has an invalid length. [ 163.621853][T10787] bond4: entered promiscuous mode [ 163.626994][T10787] bond4: entered allmulticast mode [ 163.632559][T10787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.782181][T10797] 9p: Bad value for 'wfdno' [ 163.851495][T10805] FAULT_INJECTION: forcing a failure. [ 163.851495][T10805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.864726][T10805] CPU: 1 UID: 0 PID: 10805 Comm: syz.3.2342 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.864777][T10805] Tainted: [W]=WARN [ 163.864784][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.864860][T10805] Call Trace: [ 163.864868][T10805] [ 163.864878][T10805] __dump_stack+0x1d/0x30 [ 163.864918][T10805] dump_stack_lvl+0x95/0xd0 [ 163.865003][T10805] dump_stack+0x15/0x1b [ 163.865029][T10805] should_fail_ex+0x263/0x280 [ 163.865072][T10805] should_fail+0xb/0x20 [ 163.865108][T10805] should_fail_usercopy+0x1a/0x20 [ 163.865148][T10805] _copy_to_user+0x20/0xa0 [ 163.865194][T10805] simple_read_from_buffer+0xb5/0x130 [ 163.865236][T10805] proc_fail_nth_read+0x10e/0x150 [ 163.865269][T10805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.865319][T10805] vfs_read+0x1ab/0x7f0 [ 163.865347][T10805] ? mutex_lock+0x57/0x90 [ 163.865374][T10805] ksys_read+0xdc/0x1a0 [ 163.865401][T10805] __x64_sys_read+0x40/0x50 [ 163.865426][T10805] x64_sys_call+0x2889/0x3000 [ 163.865539][T10805] do_syscall_64+0xc0/0x2a0 [ 163.865574][T10805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.865596][T10805] RIP: 0033:0x7f3d4442b78e [ 163.865675][T10805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.865699][T10805] RSP: 002b:00007f3d42ec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.865724][T10805] RAX: ffffffffffffffda RBX: 00007f3d42ec76c0 RCX: 00007f3d4442b78e [ 163.865739][T10805] RDX: 000000000000000f RSI: 00007f3d42ec70a0 RDI: 0000000000000007 [ 163.865783][T10805] RBP: 00007f3d42ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.865801][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.865813][T10805] R13: 00007f3d446e6038 R14: 00007f3d446e5fa0 R15: 00007fff1aef3c38 [ 163.865833][T10805] [ 164.167909][T10817] netlink: 'syz.4.2346': attribute type 1 has an invalid length. [ 164.195015][T10817] bond14: entered promiscuous mode [ 164.200203][T10817] bond14: entered allmulticast mode [ 164.243688][T10817] 8021q: adding VLAN 0 to HW filter on device bond14 [ 164.336196][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.376848][T10822] loop3: detected capacity change from 0 to 512 [ 164.394003][T10838] usb usb1: usbfs: process 10838 (syz.7.2356) did not claim interface 7 before use [ 164.404620][T10833] loop8: detected capacity change from 0 to 1024 [ 164.411336][T10833] EXT4-fs: Ignoring removed orlov option [ 164.414195][T10839] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2358'. [ 164.437840][T10833] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 164.453269][T10822] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2350: bg 0: block 248: padding at end of block bitmap is not set [ 164.480632][T10822] __quota_error: 148 callbacks suppressed [ 164.480688][T10822] Quota error (device loop3): write_blk: dquota write failed [ 164.484085][T10833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.487001][T10822] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 164.517070][T10822] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2350: Failed to acquire dquot type 1 [ 164.536742][ T29] audit: type=1400 audit(2033554536.533:7139): avc: denied { setopt } for pid=10834 comm="syz.4.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.557947][T10822] EXT4-fs (loop3): 1 truncate cleaned up [ 164.574187][T10822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.612164][ T29] audit: type=1326 audit(2033554536.603:7140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.618493][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2360'. [ 164.637483][ T29] audit: type=1326 audit(2033554536.603:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.653667][T10822] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.670030][ T29] audit: type=1326 audit(2033554536.603:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.702790][ T29] audit: type=1326 audit(2033554536.603:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.726831][ T29] audit: type=1326 audit(2033554536.603:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.736545][T10852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2360'. [ 164.752484][ T29] audit: type=1326 audit(2033554536.603:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.759342][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2360'. [ 164.783609][ T29] audit: type=1326 audit(2033554536.603:7146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 164.834095][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.882586][T10848] rdma_rxe: rxe_newlink: failed to add syz_tun [ 164.905268][T10858] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 164.935837][T10856] syzkaller0: entered promiscuous mode [ 164.941367][T10856] syzkaller0: entered allmulticast mode [ 164.969448][T10858] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2363: bad orphan inode 131083 [ 164.984951][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2366'. [ 165.005575][T10858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.034752][T10858] EXT4-fs error (device loop8): empty_inline_dir:1770: inode #12: block 7: comm syz.8.2363: bad entry in directory: directory entry overrun - offset=20, inode=1560281102, rec_len=1024, size=60 fake=0 [ 165.080425][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.089636][T10858] EXT4-fs warning (device loop8): empty_inline_dir:1777: bad inline directory (dir #12) - inode 1560281102, rec_len 65535, name_len 255inline size 60 [ 165.146689][T10858] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.8.2363: path /90/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 165.202139][T10865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.254420][T10874] usb usb1: usbfs: process 10874 (syz.4.2370) did not claim interface 7 before use [ 165.282420][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.310093][T10877] usb usb1: usbfs: process 10877 (syz.7.2372) did not claim interface 7 before use [ 165.323491][T10878] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 165.367308][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.449488][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2377'. [ 165.470022][T10888] netlink: 'syz.8.2378': attribute type 1 has an invalid length. [ 165.478850][T10886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2377'. [ 165.518668][T10886] rdma_rxe: rxe_newlink: failed to add syz_tun [ 165.527188][T10891] EXT4-fs: Ignoring removed bh option [ 165.532638][T10891] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.549303][T10891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.575829][T10899] FAULT_INJECTION: forcing a failure. [ 165.575829][T10899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.588988][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.3.2380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.589065][T10899] Tainted: [W]=WARN [ 165.589072][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.589085][T10899] Call Trace: [ 165.589092][T10899] [ 165.589178][T10899] __dump_stack+0x1d/0x30 [ 165.589228][T10899] dump_stack_lvl+0x95/0xd0 [ 165.589373][T10899] dump_stack+0x15/0x1b [ 165.589395][T10899] should_fail_ex+0x263/0x280 [ 165.589438][T10899] should_fail+0xb/0x20 [ 165.589512][T10899] should_fail_usercopy+0x1a/0x20 [ 165.589627][T10899] _copy_to_user+0x20/0xa0 [ 165.589656][T10899] simple_read_from_buffer+0xb5/0x130 [ 165.589703][T10899] proc_fail_nth_read+0x10e/0x150 [ 165.589763][T10899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.589865][T10899] vfs_read+0x1ab/0x7f0 [ 165.589885][T10899] ? __rcu_read_unlock+0x4e/0x70 [ 165.589956][T10899] ? __fget_files+0x184/0x1c0 [ 165.589986][T10899] ? mutex_lock+0x57/0x90 [ 165.590017][T10899] ksys_read+0xdc/0x1a0 [ 165.590077][T10899] __x64_sys_read+0x40/0x50 [ 165.590101][T10899] x64_sys_call+0x2889/0x3000 [ 165.590134][T10899] do_syscall_64+0xc0/0x2a0 [ 165.590175][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.590254][T10899] RIP: 0033:0x7f3d4442b78e [ 165.590274][T10899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.590299][T10899] RSP: 002b:00007f3d42ec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.590326][T10899] RAX: ffffffffffffffda RBX: 00007f3d42ec76c0 RCX: 00007f3d4442b78e [ 165.590345][T10899] RDX: 000000000000000f RSI: 00007f3d42ec70a0 RDI: 0000000000000003 [ 165.590362][T10899] RBP: 00007f3d42ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.590452][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.590464][T10899] R13: 00007f3d446e6038 R14: 00007f3d446e5fa0 R15: 00007fff1aef3c38 [ 165.590488][T10899] [ 165.832380][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.991168][T10921] rdma_rxe: rxe_newlink: failed to add syz_tun [ 166.115072][T10931] set_capacity_and_notify: 3 callbacks suppressed [ 166.115092][T10931] loop0: detected capacity change from 0 to 4096 [ 166.130836][T10931] EXT4-fs: Ignoring removed bh option [ 166.136348][T10931] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.147427][T10931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.239328][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.282831][T10945] loop7: detected capacity change from 0 to 1024 [ 166.293881][T10945] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2397: bad orphan inode 134217728 [ 166.305365][T10945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.354566][T10944] loop0: detected capacity change from 0 to 256 [ 166.400195][T10944] FAULT_INJECTION: forcing a failure. [ 166.400195][T10944] name failslab, interval 1, probability 0, space 0, times 0 [ 166.412984][T10944] CPU: 0 UID: 0 PID: 10944 Comm: syz.0.2399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.413022][T10944] Tainted: [W]=WARN [ 166.413084][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.413100][T10944] Call Trace: [ 166.413109][T10944] [ 166.413118][T10944] __dump_stack+0x1d/0x30 [ 166.413215][T10944] dump_stack_lvl+0x95/0xd0 [ 166.413264][T10944] dump_stack+0x15/0x1b [ 166.413322][T10944] should_fail_ex+0x263/0x280 [ 166.413430][T10944] should_failslab+0x8c/0xb0 [ 166.413520][T10944] kmem_cache_alloc_noprof+0x68/0x490 [ 166.413548][T10944] ? getname_flags+0x7f/0x3b0 [ 166.413581][T10944] getname_flags+0x7f/0x3b0 [ 166.413684][T10944] user_path_at+0x28/0x130 [ 166.413720][T10944] do_sys_truncate+0x5c/0x130 [ 166.413750][T10944] __x64_sys_truncate+0x31/0x40 [ 166.413774][T10944] x64_sys_call+0x1864/0x3000 [ 166.413947][T10944] do_syscall_64+0xc0/0x2a0 [ 166.414004][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.414048][T10944] RIP: 0033:0x7fbea6cbaeb9 [ 166.414068][T10944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.414092][T10944] RSP: 002b:00007fbea5717028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 166.414118][T10944] RAX: ffffffffffffffda RBX: 00007fbea6f35fa0 RCX: 00007fbea6cbaeb9 [ 166.414136][T10944] RDX: 0000000000000000 RSI: 00000020fffffffc RDI: 0000200000000200 [ 166.414154][T10944] RBP: 00007fbea5717090 R08: 0000000000000000 R09: 0000000000000000 [ 166.414235][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.414250][T10944] R13: 00007fbea6f36038 R14: 00007fbea6f35fa0 R15: 00007ffd92e1c268 [ 166.414338][T10944] [ 166.596754][T10956] netlink: 'syz.4.2401': attribute type 5 has an invalid length. [ 166.604740][T10956] netlink: 'syz.4.2401': attribute type 11 has an invalid length. [ 166.618141][T10956] loop4: detected capacity change from 0 to 128 [ 166.640011][T10956] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.673105][T10956] ext4 filesystem being mounted at /529/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.778949][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.996196][T10991] loop0: detected capacity change from 0 to 512 [ 167.002939][T10991] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ¥B' [ 167.066820][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.339698][T11020] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 167.486201][T11028] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.532470][T11032] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 167.539060][T11032] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 167.547519][T11032] vhci_hcd vhci_hcd.0: Device attached [ 167.562788][T11033] vhci_hcd: connection closed [ 167.562887][ T12] vhci_hcd vhci_hcd.7: stop threads [ 167.572996][ T12] vhci_hcd vhci_hcd.7: release socket [ 167.579309][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 167.854545][T11066] loop3: detected capacity change from 0 to 1024 [ 167.882189][T11068] __nla_validate_parse: 11 callbacks suppressed [ 167.882206][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2446'. [ 167.900450][T11066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.917711][T11066] program syz.3.2444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.994305][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.054371][T11085] FAULT_INJECTION: forcing a failure. [ 168.054371][T11085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.067562][T11085] CPU: 0 UID: 0 PID: 11085 Comm: syz.4.2452 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.067665][T11085] Tainted: [W]=WARN [ 168.067674][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.067692][T11085] Call Trace: [ 168.067698][T11085] [ 168.067736][T11085] __dump_stack+0x1d/0x30 [ 168.067763][T11085] dump_stack_lvl+0x95/0xd0 [ 168.067828][T11085] dump_stack+0x15/0x1b [ 168.067853][T11085] should_fail_ex+0x263/0x280 [ 168.067892][T11085] should_fail+0xb/0x20 [ 168.068016][T11085] should_fail_usercopy+0x1a/0x20 [ 168.068058][T11085] _copy_to_user+0x20/0xa0 [ 168.068085][T11085] simple_read_from_buffer+0xb5/0x130 [ 168.068134][T11085] proc_fail_nth_read+0x10e/0x150 [ 168.068176][T11085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.068210][T11085] vfs_read+0x1ab/0x7f0 [ 168.068232][T11085] ? poll_select_finish+0x3f0/0x440 [ 168.068279][T11085] ? __se_sys_ppoll+0x1f6/0x220 [ 168.068301][T11085] ksys_read+0xdc/0x1a0 [ 168.068348][T11085] __x64_sys_read+0x40/0x50 [ 168.068448][T11085] x64_sys_call+0x2889/0x3000 [ 168.068473][T11085] do_syscall_64+0xc0/0x2a0 [ 168.068508][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.068566][T11085] RIP: 0033:0x7efe5089b78e [ 168.068585][T11085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.068664][T11085] RSP: 002b:00007efe4f336fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.068687][T11085] RAX: ffffffffffffffda RBX: 00007efe4f3376c0 RCX: 00007efe5089b78e [ 168.068760][T11085] RDX: 000000000000000f RSI: 00007efe4f3370a0 RDI: 0000000000000004 [ 168.068775][T11085] RBP: 00007efe4f337090 R08: 0000000000000000 R09: 0000000000000000 [ 168.068791][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.068807][T11085] R13: 00007efe50b56038 R14: 00007efe50b55fa0 R15: 00007ffcecaea428 [ 168.068874][T11085] [ 168.095817][T11084] loop3: detected capacity change from 0 to 4096 [ 168.296149][T11084] EXT4-fs: Ignoring removed bh option [ 168.301593][T11084] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.326161][T11084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.343739][T11095] loop7: detected capacity change from 0 to 512 [ 168.364574][T11095] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 168.372532][T11095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 168.398932][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2456'. [ 168.410252][T11098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2456'. [ 168.419321][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 168.436876][T11095] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 168.446511][T11095] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 168.456883][T11095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 168.480536][T11095] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 168.512965][T11098] bridge0: port 1(syz_tun) entered blocking state [ 168.519544][T11098] bridge0: port 1(syz_tun) entered disabled state [ 168.527001][T11098] syz_tun: entered allmulticast mode [ 168.533442][T11098] syz_tun: entered promiscuous mode [ 168.538938][T11098] bridge0: port 1(syz_tun) entered blocking state [ 168.545507][T11098] bridge0: port 1(syz_tun) entered forwarding state [ 168.555270][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.566445][T11098] syz1: rxe_newlink: already configured on syz_tun [ 168.747302][T11122] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 168.769636][T11122] bond11: entered promiscuous mode [ 168.775895][T11122] 8021q: adding VLAN 0 to HW filter on device bond11 [ 168.809699][T11129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2470'. [ 168.821120][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 168.835757][T11129] rdma_rxe: rxe_newlink: failed to add syz_tun [ 168.867719][T11133] loop3: detected capacity change from 0 to 512 [ 168.892871][T11133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.902666][T11133] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2472: iget: bad i_size value: 38620345925642 [ 168.916116][T11133] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2472: couldn't read orphan inode 15 (err -117) [ 168.928693][T11133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.958237][ T3315] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=76, inode=16, rec_len=16, size=1024 fake=0 [ 169.041400][ T4703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.152996][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.188141][T11150] loop7: detected capacity change from 0 to 128 [ 169.280843][ T3328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.347083][ T3328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.398256][ T3328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.460584][ T3328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.722584][ T3328] bond7 (unregistering): (slave vti0): Releasing backup interface [ 169.796524][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 169.796541][ T29] audit: type=1326 audit(2033554541.793:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.833982][ T3328] vti0 (unregistering): left promiscuous mode [ 169.834810][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2482'. [ 169.846410][ T29] audit: type=1326 audit(2033554541.823:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.873362][ T29] audit: type=1326 audit(2033554541.823:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.896951][ T29] audit: type=1326 audit(2033554541.823:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.921305][ T29] audit: type=1326 audit(2033554541.823:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.945654][ T29] audit: type=1326 audit(2033554541.823:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.969102][ T29] audit: type=1326 audit(2033554541.823:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 169.993334][ T29] audit: type=1326 audit(2033554541.823:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 170.010458][T11179] rdma_rxe: rxe_newlink: failed to add syz_tun [ 170.016815][ T29] audit: type=1326 audit(2033554541.823:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 170.047298][ T29] audit: type=1326 audit(2033554541.823:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.8.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 170.092867][ T3328] bond1 (unregistering): (slave bond0): Releasing backup interface [ 170.116132][ T3328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.128942][ T3328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.140223][ T3328] bond0 (unregistering): (slave veth5): Releasing backup interface [ 170.161730][ T3328] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 170.179126][T11189] EXT4-fs: Ignoring removed bh option [ 170.184796][T11189] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.194680][ T3328] bond0 (unregistering): Released all slaves [ 170.202148][T11189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.219349][ T3328] bond1 (unregistering): Released all slaves [ 170.246370][ T3328] bond2 (unregistering): Released all slaves [ 170.256529][ T3328] bond3 (unregistering): Released all slaves [ 170.265888][ T3328] bond4 (unregistering): Released all slaves [ 170.276214][ T3328] bond5 (unregistering): Released all slaves [ 170.278423][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.291200][ T3328] bond6 (unregistering): Released all slaves [ 170.297675][ T3328] bond7 (unregistering): Released all slaves [ 170.307890][ T3328] bond8 (unregistering): Released all slaves [ 170.316874][ T3328] bond9 (unregistering): Released all slaves [ 170.332225][ T3328] bond10 (unregistering): Released all slaves [ 170.344591][ T3328] bond11 (unregistering): Released all slaves [ 170.401540][T11200] FAULT_INJECTION: forcing a failure. [ 170.401540][T11200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.414799][T11200] CPU: 0 UID: 0 PID: 11200 Comm: syz.8.2488 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.414855][T11200] Tainted: [W]=WARN [ 170.414864][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.414886][T11200] Call Trace: [ 170.414895][T11200] [ 170.414905][T11200] __dump_stack+0x1d/0x30 [ 170.414938][T11200] dump_stack_lvl+0x95/0xd0 [ 170.414967][T11200] dump_stack+0x15/0x1b [ 170.414997][T11200] should_fail_ex+0x263/0x280 [ 170.415039][T11200] should_fail+0xb/0x20 [ 170.415075][T11200] should_fail_usercopy+0x1a/0x20 [ 170.415167][T11200] _copy_from_user+0x1c/0xb0 [ 170.415196][T11200] get_user_ifreq+0x52/0x110 [ 170.415226][T11200] sock_ioctl+0x54e/0x610 [ 170.415360][T11200] ? __pfx_sock_ioctl+0x10/0x10 [ 170.415391][T11200] __se_sys_ioctl+0xce/0x140 [ 170.415434][T11200] __x64_sys_ioctl+0x43/0x50 [ 170.415527][T11200] x64_sys_call+0x14b0/0x3000 [ 170.415561][T11200] do_syscall_64+0xc0/0x2a0 [ 170.415599][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.415674][T11200] RIP: 0033:0x7f93bd4daeb9 [ 170.415691][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.415710][T11200] RSP: 002b:00007f93bbf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.415735][T11200] RAX: ffffffffffffffda RBX: 00007f93bd755fa0 RCX: 00007f93bd4daeb9 [ 170.415754][T11200] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000003 [ 170.415844][T11200] RBP: 00007f93bbf37090 R08: 0000000000000000 R09: 0000000000000000 [ 170.415862][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.415879][T11200] R13: 00007f93bd756038 R14: 00007f93bd755fa0 R15: 00007fff7de91648 [ 170.415906][T11200] [ 170.600388][T11204] sctp: [Deprecated]: syz.7.2489 (pid 11204) Use of int in max_burst socket option. [ 170.600388][T11204] Use struct sctp_assoc_value instead [ 170.620057][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2489'. [ 170.642509][T11154] chnl_net:caif_netlink_parms(): no params data found [ 170.724151][T11218] warn_alloc: 1 callbacks suppressed [ 170.724167][T11218] syz.7.2490: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 170.744438][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.7.2490 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.744481][T11218] Tainted: [W]=WARN [ 170.744490][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.744508][T11218] Call Trace: [ 170.744515][T11218] [ 170.744524][T11218] __dump_stack+0x1d/0x30 [ 170.744628][T11218] dump_stack_lvl+0x95/0xd0 [ 170.744657][T11218] dump_stack+0x15/0x1b [ 170.744685][T11218] warn_alloc+0x145/0x1c0 [ 170.744805][T11218] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 170.744845][T11218] ? __futex_wait+0x1fd/0x260 [ 170.744877][T11218] ? __pfx_futex_wake_mark+0x10/0x10 [ 170.744973][T11218] ? __rcu_read_unlock+0x4e/0x70 [ 170.745006][T11218] ? avc_has_perm_noaudit+0xab/0x130 [ 170.745044][T11218] vmalloc_user_noprof+0x7d/0xb0 [ 170.745215][T11218] ? xskq_create+0x80/0xe0 [ 170.745252][T11218] xskq_create+0x80/0xe0 [ 170.745282][T11218] xsk_init_queue+0x91/0xe0 [ 170.745397][T11218] xsk_setsockopt+0x3f5/0x640 [ 170.745441][T11218] ? __pfx_xsk_setsockopt+0x10/0x10 [ 170.745491][T11218] __sys_setsockopt+0x184/0x200 [ 170.745578][T11218] __x64_sys_setsockopt+0x64/0x80 [ 170.745621][T11218] x64_sys_call+0x21d5/0x3000 [ 170.745666][T11218] do_syscall_64+0xc0/0x2a0 [ 170.745707][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.745736][T11218] RIP: 0033:0x7f35ad2caeb9 [ 170.745756][T11218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.745775][T11218] RSP: 002b:00007f35abd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.745913][T11218] RAX: ffffffffffffffda RBX: 00007f35ad546090 RCX: 00007f35ad2caeb9 [ 170.745927][T11218] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 170.745943][T11218] RBP: 00007f35ad338c1f R08: 0000000000000004 R09: 0000000000000000 [ 170.745960][T11218] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.745999][T11218] R13: 00007f35ad546128 R14: 00007f35ad546090 R15: 00007ffd77129778 [ 170.746024][T11218] [ 170.746033][T11218] Mem-Info: [ 170.841858][T11219] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2490: bad orphan inode 134217728 [ 170.842090][T11218] active_anon:30533 inactive_anon:0 isolated_anon:0 [ 170.842090][T11218] active_file:15064 inactive_file:12642 isolated_file:0 [ 170.842090][T11218] unevictable:0 dirty:321 writeback:0 [ 170.842090][T11218] slab_reclaimable:3905 slab_unreclaimable:22745 [ 170.842090][T11218] mapped:30318 shmem:20722 pagetables:1762 [ 170.842090][T11218] sec_pagetables:0 bounce:0 [ 170.842090][T11218] kernel_misc_reclaimable:0 [ 170.842090][T11218] free:1839623 free_pcp:13284 free_cma:0 [ 170.848556][T11219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.852043][T11218] Node 0 active_anon:122132kB inactive_anon:0kB active_file:60256kB inactive_file:50568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121272kB dirty:1284kB writeback:0kB shmem:82888kB kernel_stack:5296kB pagetables:7048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 170.868063][T11219] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2490'. [ 170.871994][T11218] Node 0 [ 170.878108][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2490'. [ 170.882329][T11218] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.107676][T11218] lowmem_reserve[]: 0 2879 7858 7858 [ 171.113035][T11218] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 171.144939][T11218] lowmem_reserve[]: 0 0 4978 4978 [ 171.150061][T11218] Node 0 Normal free:4398060kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:122364kB inactive_anon:0kB active_file:60256kB inactive_file:50568kB unevictable:0kB writepending:1284kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:49628kB local_pcp:20244kB free_cma:0kB [ 171.183948][T11218] lowmem_reserve[]: 0 0 0 0 [ 171.188748][T11218] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.201710][T11218] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB [ 171.218844][T11218] Node 0 Normal: 1415*4kB (UME) 944*8kB (UM) 173*16kB (UM) 50*32kB (ME) 217*64kB (UME) 126*128kB (UME) 72*256kB (UME) 57*512kB (UME) 18*1024kB (UME) 16*2048kB (UME) 1038*4096kB (UM) = 4398060kB [ 171.238241][T11218] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 171.248362][T11218] 48590 total pagecache pages [ 171.253105][T11218] 0 pages in swap cache [ 171.257289][T11218] Free swap = 124996kB [ 171.261471][T11218] Total swap = 124996kB [ 171.265745][T11218] 2097051 pages RAM [ 171.269612][T11218] 0 pages HighMem/MovableOnly [ 171.275023][T11218] 81557 pages reserved [ 171.374536][T11213] set_capacity_and_notify: 3 callbacks suppressed [ 171.374557][T11213] loop8: detected capacity change from 0 to 4096 [ 171.388941][T11213] EXT4-fs: Ignoring removed bh option [ 171.394428][T11213] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.406884][ T3328] hsr_slave_0: left promiscuous mode [ 171.412813][ T3328] hsr_slave_1: left promiscuous mode [ 171.420851][T11213] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.438046][ T3328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.445585][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.456541][T11239] loop4: detected capacity change from 0 to 4096 [ 171.465881][ T3328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.468236][T11239] EXT4-fs: Ignoring removed bh option [ 171.473345][ T3328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.486109][T11239] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.499369][ T3328] veth1_macvtap: left promiscuous mode [ 171.527862][ T3328] veth0_macvtap: left promiscuous mode [ 171.541301][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.542283][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.561353][ T3328] veth1_vlan: left promiscuous mode [ 171.562661][T11239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.567114][ T3328] veth0_vlan: left promiscuous mode [ 171.673666][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.809819][T11256] rdma_rxe: rxe_newlink: failed to add syz_tun [ 171.863449][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.870579][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.888666][T11154] bridge_slave_0: entered allmulticast mode [ 171.896128][T11154] bridge_slave_0: entered promiscuous mode [ 171.948941][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.956191][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.964757][T11154] bridge_slave_1: entered allmulticast mode [ 171.971537][T11154] bridge_slave_1: entered promiscuous mode [ 172.062566][T11154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.089888][T11154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.109586][T11272] loop8: detected capacity change from 0 to 1024 [ 172.117199][T11154] team0: Port device team_slave_0 added [ 172.128256][T11272] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2503: bad orphan inode 134217728 [ 172.141686][T11272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.146913][T11154] team0: Port device team_slave_1 added [ 172.226311][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.233417][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.260179][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.321557][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.329268][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.356273][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.461854][T11287] loop4: detected capacity change from 0 to 4096 [ 172.468660][T11287] EXT4-fs: Ignoring removed bh option [ 172.474731][T11287] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.489824][T11154] hsr_slave_0: entered promiscuous mode [ 172.498937][T11154] hsr_slave_1: entered promiscuous mode [ 172.505685][T11154] debugfs: 'hsr0' already exists in 'hsr' [ 172.511493][T11154] Cannot create hsr debugfs directory [ 172.534076][T11287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.624156][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.710561][T11154] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 172.748437][T11306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.775371][T11154] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 172.797739][T11154] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 172.823300][T11306] bridge0: port 1(syz_tun) entered blocking state [ 172.829827][T11306] bridge0: port 1(syz_tun) entered disabled state [ 172.839520][T11306] syz_tun: entered allmulticast mode [ 172.846356][T11306] syz_tun: entered promiscuous mode [ 172.852215][T11306] bridge0: port 1(syz_tun) entered blocking state [ 172.857393][T11325] rdma_rxe: rxe_newlink: failed to add syz_tun [ 172.858818][T11306] bridge0: port 1(syz_tun) entered forwarding state [ 172.872904][T11154] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 172.897784][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.997251][T11343] loop4: detected capacity change from 0 to 128 [ 173.022417][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.030103][T11343] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 173.039762][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.073962][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.081077][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.122553][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.129738][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.176484][T11357] x_tables: duplicate underflow at hook 4 [ 173.242904][T11362] __nla_validate_parse: 6 callbacks suppressed [ 173.242922][T11362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2526'. [ 173.313589][T11362] rdma_rxe: rxe_newlink: failed to add syz_tun [ 173.330427][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.495238][T11154] veth0_vlan: entered promiscuous mode [ 173.504630][T11154] veth1_vlan: entered promiscuous mode [ 173.535750][T11154] veth0_macvtap: entered promiscuous mode [ 173.543658][T11154] veth1_macvtap: entered promiscuous mode [ 173.556336][T11154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.571779][T11154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.591784][ T3328] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.602612][ T3328] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.614966][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.632675][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.713366][T11413] netlink: 'syz.9.2480': attribute type 1 has an invalid length. [ 173.743381][T11416] sctp: [Deprecated]: syz.9.2538 (pid 11416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.743381][T11416] Use struct sctp_sack_info instead [ 173.889370][T11423] loop7: detected capacity change from 0 to 512 [ 173.895978][T11421] loop9: detected capacity change from 0 to 2048 [ 173.897729][T11423] EXT4-fs: Ignoring removed i_version option [ 173.911424][T11423] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 173.920886][T11423] EXT4-fs (loop7): orphan cleanup on readonly fs [ 173.927633][T11423] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 173.944377][ T6108] loop9: p4 < > [ 173.947771][T11423] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 173.955119][T11423] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.2540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 173.955389][T11421] loop9: p4 < > [ 173.976675][T11423] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2540: couldn't read orphan inode 13 (err -117) [ 174.010781][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 174.033838][T11423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.046831][T11423] FAULT_INJECTION: forcing a failure. [ 174.046831][T11423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.060063][T11423] CPU: 0 UID: 0 PID: 11423 Comm: syz.7.2540 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.060103][T11423] Tainted: [W]=WARN [ 174.060111][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.060130][T11423] Call Trace: [ 174.060137][T11423] [ 174.060147][T11423] __dump_stack+0x1d/0x30 [ 174.060217][T11423] dump_stack_lvl+0x95/0xd0 [ 174.060297][T11423] dump_stack+0x15/0x1b [ 174.060317][T11423] should_fail_ex+0x263/0x280 [ 174.060351][T11423] should_fail+0xb/0x20 [ 174.060383][T11423] should_fail_usercopy+0x1a/0x20 [ 174.060492][T11423] strncpy_from_user+0x27/0x250 [ 174.060529][T11423] getname_flags+0xad/0x3b0 [ 174.060559][T11423] user_path_at+0x28/0x130 [ 174.060680][T11423] __se_sys_mount+0x25b/0x2e0 [ 174.060739][T11423] ? fput+0x8f/0xc0 [ 174.060806][T11423] __x64_sys_mount+0x67/0x80 [ 174.060832][T11423] x64_sys_call+0x2cca/0x3000 [ 174.060941][T11423] do_syscall_64+0xc0/0x2a0 [ 174.061008][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.061031][T11423] RIP: 0033:0x7f35ad2caeb9 [ 174.061050][T11423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.061072][T11423] RSP: 002b:00007f35abd27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.061097][T11423] RAX: ffffffffffffffda RBX: 00007f35ad545fa0 RCX: 00007f35ad2caeb9 [ 174.061116][T11423] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 174.061189][T11423] RBP: 00007f35abd27090 R08: 0000000000000000 R09: 0000000000000000 [ 174.061205][T11423] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000001 [ 174.061221][T11423] R13: 00007f35ad546038 R14: 00007f35ad545fa0 R15: 00007ffd77129778 [ 174.061278][T11423] [ 174.290209][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2546'. [ 174.300854][T11434] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2546'. [ 174.329038][T11435] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2545'. [ 174.348747][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.361448][T11437] loop8: detected capacity change from 0 to 512 [ 174.376839][T11437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.436532][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.452452][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2550'. [ 174.492142][T11444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.514652][T11444] bridge0: port 3(syz_tun) entered blocking state [ 174.521142][T11444] bridge0: port 3(syz_tun) entered disabled state [ 174.529736][T11444] syz_tun: entered allmulticast mode [ 174.536464][T11444] syz_tun: entered promiscuous mode [ 174.541943][T11444] bridge0: port 3(syz_tun) entered blocking state [ 174.548494][T11444] bridge0: port 3(syz_tun) entered forwarding state [ 174.557110][T11444] rdma_rxe: rxe_newlink: failed to add syz_tun [ 174.594736][T11459] xt_l2tp: missing protocol rule (udp|l2tpip) [ 174.654537][T11468] IPVS: sh: FWM 3 0x00000003 - no destination available [ 174.661613][ T9075] IPVS: starting estimator thread 0... [ 174.691361][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 174.741576][T11475] FAULT_INJECTION: forcing a failure. [ 174.741576][T11475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.755582][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.9.2561 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.755622][T11475] Tainted: [W]=WARN [ 174.755630][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.755668][T11475] Call Trace: [ 174.755677][T11475] [ 174.755687][T11475] __dump_stack+0x1d/0x30 [ 174.755779][T11475] dump_stack_lvl+0x95/0xd0 [ 174.755803][T11475] dump_stack+0x15/0x1b [ 174.755825][T11475] should_fail_ex+0x263/0x280 [ 174.755865][T11475] should_fail+0xb/0x20 [ 174.755919][T11475] should_fail_usercopy+0x1a/0x20 [ 174.755958][T11475] _copy_from_iter+0xcf/0xea0 [ 174.755978][T11475] ? alloc_pages_mpol+0x217/0x260 [ 174.756098][T11475] copy_page_from_iter+0x178/0x2a0 [ 174.756119][T11475] tun_get_user+0xbbd/0x27c0 [ 174.756150][T11475] ? ref_tracker_alloc+0x1f2/0x2f0 [ 174.756248][T11475] tun_chr_write_iter+0x15e/0x210 [ 174.756318][T11475] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 174.756339][T11475] vfs_write+0x5a6/0x9f0 [ 174.756369][T11475] ksys_write+0xdc/0x1a0 [ 174.756395][T11475] __x64_sys_write+0x40/0x50 [ 174.756486][T11475] x64_sys_call+0x2847/0x3000 [ 174.756518][T11475] do_syscall_64+0xc0/0x2a0 [ 174.756552][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.756581][T11475] RIP: 0033:0x7f5ec914b78e [ 174.756672][T11475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.756755][T11475] RSP: 002b:00007f5ec7be6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.756781][T11475] RAX: ffffffffffffffda RBX: 00007f5ec7be76c0 RCX: 00007f5ec914b78e [ 174.756800][T11475] RDX: 000000000000004e RSI: 0000200000000240 RDI: 00000000000000c8 [ 174.756817][T11475] RBP: 00007f5ec7be7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.756833][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.756848][T11475] R13: 00007f5ec9406038 R14: 00007f5ec9405fa0 R15: 00007ffdcdb6cd08 [ 174.756952][T11475] [ 174.957983][T11471] IPVS: using max 2304 ests per chain, 115200 per kthread [ 174.969386][T11478] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2562'. [ 174.978668][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2562'. [ 175.023005][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 175.023022][ T29] audit: type=1326 audit(2033554546.993:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 175.053953][ T29] audit: type=1326 audit(2033554546.993:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbea6cbac22 code=0x7ffc0000 [ 175.077715][ T29] audit: type=1326 audit(2033554546.993:7964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbea6cbacb7 code=0x7ffc0000 [ 175.101970][ T29] audit: type=1326 audit(2033554546.993:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbea6c77c51 code=0x7ffc0000 [ 175.126118][ T29] audit: type=1326 audit(2033554546.993:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbea6cbbcc9 code=0x7ffc0000 [ 175.149936][ T29] audit: type=1326 audit(2033554546.993:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbea6c77cbb code=0x7ffc0000 [ 175.174143][ T29] audit: type=1326 audit(2033554546.993:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 175.197665][ T29] audit: type=1326 audit(2033554546.993:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea6cbaeb9 code=0x7ffc0000 [ 175.221948][ T29] audit: type=1326 audit(2033554546.993:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbea6c773ac code=0x7ffc0000 [ 175.246279][ T29] audit: type=1326 audit(2033554546.993:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.0.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbea6c7740e code=0x7ffc0000 [ 175.523123][T11488] loop7: detected capacity change from 0 to 512 [ 175.548234][T11488] EXT4-fs: Ignoring removed oldalloc option [ 175.561194][T11488] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 175.642664][T11488] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #11: comm syz.7.2564: corrupted in-inode xattr: invalid ea_ino [ 175.670481][T11488] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2564: couldn't read orphan inode 11 (err -117) [ 175.688609][T11488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.729514][T11500] loop8: detected capacity change from 0 to 512 [ 175.759611][T11500] EXT4-fs: Ignoring removed i_version option [ 175.770268][T11500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 175.779526][T11500] EXT4-fs (loop8): orphan cleanup on readonly fs [ 175.780986][T11502] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2570'. [ 175.788796][T11500] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 175.812315][T11500] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 175.823640][T11500] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #13: comm syz.8.2569: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 175.848700][T11506] rdma_rxe: rxe_newlink: failed to add syz_tun [ 175.861842][T11500] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2569: couldn't read orphan inode 13 (err -117) [ 175.884144][T11500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.917506][T11511] futex_wake_op: syz.9.2574 tries to shift op by 35; fix this program [ 175.929273][T11500] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.2569: deleted inode referenced: 12 [ 175.957046][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.983027][T11514] EXT4-fs (loop0): invalid inodes per group: 4294967295 [ 175.983027][T11514] [ 176.321088][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.418870][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2593'. [ 176.433017][T11556] syz1: rxe_newlink: already configured on syz_tun [ 176.522469][T11563] set_capacity_and_notify: 2 callbacks suppressed [ 176.522488][T11563] loop0: detected capacity change from 0 to 512 [ 176.546538][T11563] EXT4-fs: Ignoring removed bh option [ 176.552021][T11563] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.563311][T11563] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 176.569997][T11566] loop7: detected capacity change from 0 to 1024 [ 176.591444][T11563] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 176.602614][T11563] EXT4-fs (loop0): orphan cleanup on readonly fs [ 176.617241][T11563] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2597: Failed to acquire dquot type 1 [ 176.624483][T11570] loop8: detected capacity change from 0 to 1024 [ 176.629540][T11566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.650076][T11563] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2597: Invalid block bitmap block 0 in block_group 0 [ 176.664185][T11563] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2597: Invalid block bitmap block 0 in block_group 0 [ 176.679211][T11563] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2597: Invalid block bitmap block 0 in block_group 0 [ 176.694036][T11563] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2597: Failed to acquire dquot type 1 [ 176.694624][T11570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.719381][T11563] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2597: Failed to acquire dquot type 1 [ 176.734069][T11563] EXT4-fs (loop0): 1 orphan inode deleted [ 176.740656][T11563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.753701][T11563] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.769681][T11570] FAULT_INJECTION: forcing a failure. [ 176.769681][T11570] name failslab, interval 1, probability 0, space 0, times 0 [ 176.782359][T11570] CPU: 0 UID: 0 PID: 11570 Comm: syz.8.2599 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.782391][T11570] Tainted: [W]=WARN [ 176.782398][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.782413][T11570] Call Trace: [ 176.782422][T11570] [ 176.782432][T11570] __dump_stack+0x1d/0x30 [ 176.782495][T11570] dump_stack_lvl+0x95/0xd0 [ 176.782522][T11570] dump_stack+0x15/0x1b [ 176.782546][T11570] should_fail_ex+0x263/0x280 [ 176.782618][T11570] should_failslab+0x8c/0xb0 [ 176.782705][T11570] kmem_cache_alloc_noprof+0x68/0x490 [ 176.782730][T11570] ? getname_flags+0x7f/0x3b0 [ 176.782773][T11570] getname_flags+0x7f/0x3b0 [ 176.782843][T11570] do_sys_openat2+0x60/0x150 [ 176.782951][T11570] __x64_sys_creat+0x65/0x90 [ 176.782984][T11570] x64_sys_call+0x2f1c/0x3000 [ 176.783067][T11570] do_syscall_64+0xc0/0x2a0 [ 176.783156][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.783248][T11570] RIP: 0033:0x7f93bd4daeb9 [ 176.783264][T11570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.783284][T11570] RSP: 002b:00007f93bbf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 176.783323][T11570] RAX: ffffffffffffffda RBX: 00007f93bd755fa0 RCX: 00007f93bd4daeb9 [ 176.783338][T11570] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000e00 [ 176.783351][T11570] RBP: 00007f93bbf37090 R08: 0000000000000000 R09: 0000000000000000 [ 176.783365][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.783378][T11570] R13: 00007f93bd756038 R14: 00007f93bd755fa0 R15: 00007fff7de91648 [ 176.783449][T11570] [ 176.980726][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.055105][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.130602][T11584] rdma_rxe: rxe_newlink: failed to add syz_tun [ 177.185753][T11594] loop0: detected capacity change from 0 to 512 [ 177.193653][T11594] EXT4-fs (loop0): filesystem is read-only [ 177.200397][T11594] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 177.213834][T11594] EXT4-fs (loop0): filesystem is read-only [ 177.219774][T11594] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.227578][T11594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2609: bg 0: block 64: padding at end of block bitmap is not set [ 177.242661][T11594] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 177.252482][T11594] EXT4-fs (loop0): 1 orphan inode deleted [ 177.258940][T11594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 177.284784][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.434290][T11615] FAULT_INJECTION: forcing a failure. [ 177.434290][T11615] name failslab, interval 1, probability 0, space 0, times 0 [ 177.447740][T11615] CPU: 1 UID: 0 PID: 11615 Comm: syz.9.2618 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.447782][T11615] Tainted: [W]=WARN [ 177.447790][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.447807][T11615] Call Trace: [ 177.447814][T11615] [ 177.447871][T11615] __dump_stack+0x1d/0x30 [ 177.447973][T11615] dump_stack_lvl+0x95/0xd0 [ 177.447996][T11615] dump_stack+0x15/0x1b [ 177.448016][T11615] should_fail_ex+0x263/0x280 [ 177.448114][T11615] should_failslab+0x8c/0xb0 [ 177.448143][T11615] __kmalloc_cache_noprof+0x64/0x4a0 [ 177.448178][T11615] ? __hw_addr_add_ex+0x15b/0x3b0 [ 177.448254][T11615] __hw_addr_add_ex+0x15b/0x3b0 [ 177.448289][T11615] ? __pfx_veth_setup+0x10/0x10 [ 177.448368][T11615] dev_addr_init+0xb1/0x120 [ 177.448409][T11615] alloc_netdev_mqs+0x1ca/0xa40 [ 177.448483][T11615] rtnl_create_link+0x239/0x720 [ 177.448597][T11615] rtnl_newlink_create+0x174/0x650 [ 177.448690][T11615] ? security_capable+0x7b/0x90 [ 177.448732][T11615] ? netlink_ns_capable+0x86/0xa0 [ 177.448783][T11615] rtnl_newlink+0xf5b/0x1370 [ 177.448860][T11615] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.448888][T11615] rtnetlink_rcv_msg+0x64b/0x720 [ 177.448923][T11615] netlink_rcv_skb+0x123/0x220 [ 177.448998][T11615] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.449036][T11615] rtnetlink_rcv+0x1c/0x30 [ 177.449061][T11615] netlink_unicast+0x5c0/0x690 [ 177.449139][T11615] netlink_sendmsg+0x5c8/0x6f0 [ 177.449160][T11615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.449180][T11615] ____sys_sendmsg+0x5af/0x600 [ 177.449260][T11615] ___sys_sendmsg+0x195/0x1e0 [ 177.449292][T11615] __x64_sys_sendmsg+0xd4/0x160 [ 177.449320][T11615] x64_sys_call+0x17ba/0x3000 [ 177.449352][T11615] do_syscall_64+0xc0/0x2a0 [ 177.449434][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.449461][T11615] RIP: 0033:0x7f5ec918aeb9 [ 177.449480][T11615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.449504][T11615] RSP: 002b:00007f5ec7be7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.449577][T11615] RAX: ffffffffffffffda RBX: 00007f5ec9405fa0 RCX: 00007f5ec918aeb9 [ 177.449591][T11615] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 177.449603][T11615] RBP: 00007f5ec7be7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.449614][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.449683][T11615] R13: 00007f5ec9406038 R14: 00007f5ec9405fa0 R15: 00007ffdcdb6cd08 [ 177.449709][T11615] [ 177.749299][T11596] loop7: detected capacity change from 0 to 512 [ 177.771852][T11596] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #12: comm syz.7.2610: corrupted in-inode xattr: bad e_name length [ 177.794425][T11596] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2610: couldn't read orphan inode 12 (err -117) [ 177.817831][T11596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.856920][T11622] syz1: rxe_newlink: already configured on syz_tun [ 178.076156][T11596] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.187523][T11596] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.274174][T11651] __nla_validate_parse: 7 callbacks suppressed [ 178.274194][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2631'. [ 178.292411][T11651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2631'. [ 178.383144][T11596] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.408218][T11651] rdma_rxe: rxe_newlink: failed to add syz_tun [ 178.519425][T11596] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.542277][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2635'. [ 178.552698][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2635'. [ 178.561707][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2635'. [ 178.780163][ T3328] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.824459][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.850718][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.931008][T11684] loop9: detected capacity change from 0 to 512 [ 178.940549][T11684] EXT4-fs (loop9): orphan cleanup on readonly fs [ 178.947317][T11684] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 178.956754][T11684] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 1024: comm syz.9.2643: invalid block [ 178.968933][T11684] EXT4-fs (loop9): Remounting filesystem read-only [ 178.975763][T11684] EXT4-fs (loop9): 1 truncate cleaned up [ 178.982000][T11684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.009515][ T3328] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.018266][T11154] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.049111][ T8462] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.071819][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2645'. [ 179.081965][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2645'. [ 179.102434][T11689] rdma_rxe: rxe_newlink: failed to add syz_tun [ 179.195749][T11697] loop9: detected capacity change from 0 to 512 [ 179.207509][T11697] EXT4-fs: Ignoring removed nobh option [ 179.213470][T11697] EXT4-fs: quotafile must be on filesystem root [ 179.306098][ T3000] Alternate GPT is invalid, using primary GPT. [ 179.312538][ T3000] loop2: p2 p3 p7 [ 179.391155][T11721] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2659'. [ 179.408497][T11718] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2657'. [ 179.458086][T11718] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2657'. [ 179.487480][T11718] rdma_rxe: rxe_newlink: failed to add syz_tun [ 179.496676][T11727] netlink: 'syz.8.2661': attribute type 21 has an invalid length. [ 179.558294][T11736] loop7: detected capacity change from 0 to 512 [ 179.569001][T11736] EXT4-fs: Ignoring removed nobh option [ 179.601854][T11736] EXT4-fs (loop7): 1 orphan inode deleted [ 179.613104][T11741] FAULT_INJECTION: forcing a failure. [ 179.613104][T11741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.615491][T11736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.626326][T11741] CPU: 1 UID: 0 PID: 11741 Comm: syz.9.2664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.626362][T11741] Tainted: [W]=WARN [ 179.626370][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.626385][T11741] Call Trace: [ 179.626393][T11741] [ 179.626404][T11741] __dump_stack+0x1d/0x30 [ 179.626482][T11741] dump_stack_lvl+0x95/0xd0 [ 179.626508][T11741] dump_stack+0x15/0x1b [ 179.626534][T11741] should_fail_ex+0x263/0x280 [ 179.626585][T11741] should_fail+0xb/0x20 [ 179.626625][T11741] should_fail_usercopy+0x1a/0x20 [ 179.626723][T11741] _copy_from_iter+0xcf/0xea0 [ 179.626771][T11741] ? alloc_pages_mpol+0x217/0x260 [ 179.626812][T11741] copy_page_from_iter+0x178/0x2a0 [ 179.626837][T11741] tun_get_user+0xbbd/0x27c0 [ 179.626874][T11741] ? ref_tracker_alloc+0x1f2/0x2f0 [ 179.626981][T11741] tun_chr_write_iter+0x15e/0x210 [ 179.627119][T11741] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 179.627207][T11741] vfs_write+0x5a6/0x9f0 [ 179.627301][T11741] ksys_write+0xdc/0x1a0 [ 179.627379][T11741] __x64_sys_write+0x40/0x50 [ 179.627439][T11741] x64_sys_call+0x2847/0x3000 [ 179.627663][T11741] do_syscall_64+0xc0/0x2a0 [ 179.627755][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.627846][T11741] RIP: 0033:0x7f5ec914b78e [ 179.627898][T11741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.627959][T11741] RSP: 002b:00007f5ec7bc5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.628022][T11741] RAX: ffffffffffffffda RBX: 00007f5ec7bc66c0 RCX: 00007f5ec914b78e [ 179.628070][T11741] RDX: 0000000000000016 RSI: 0000200000000500 RDI: 00000000000000c8 [ 179.628112][T11741] RBP: 00007f5ec7bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.628203][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.628242][T11741] R13: 00007f5ec9406128 R14: 00007f5ec9406090 R15: 00007ffdcdb6cd08 [ 179.628298][T11741] [ 179.896167][T11750] loop7: detected capacity change from 0 to 128 [ 179.928012][T11748] loop9: detected capacity change from 0 to 128 [ 179.948808][T11752] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 179.971140][T11752] bond15: entered promiscuous mode [ 179.976860][T11752] 8021q: adding VLAN 0 to HW filter on device bond15 [ 180.021597][T11759] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 180.040625][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 180.040642][ T29] audit: type=1400 audit(2033554552.014:8635): avc: denied { mount } for pid=11755 comm="syz.9.2671" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.118273][T11758] infiniband !yz!: set down [ 180.122895][T11758] infiniband !yz!: added team_slave_0 [ 180.146207][T11758] RDS/IB: !yz!: added [ 180.154731][T11758] smc: adding ib device !yz! with port count 1 [ 180.160937][T11758] smc: ib device !yz! port 1 has no pnetid [ 180.272375][T11764] FAULT_INJECTION: forcing a failure. [ 180.272375][T11764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.285616][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.8.2673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.285675][T11764] Tainted: [W]=WARN [ 180.285685][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.285702][T11764] Call Trace: [ 180.285710][T11764] [ 180.285720][T11764] __dump_stack+0x1d/0x30 [ 180.285748][T11764] dump_stack_lvl+0x95/0xd0 [ 180.285770][T11764] dump_stack+0x15/0x1b [ 180.285820][T11764] should_fail_ex+0x263/0x280 [ 180.285860][T11764] should_fail+0xb/0x20 [ 180.285920][T11764] should_fail_usercopy+0x1a/0x20 [ 180.285952][T11764] _copy_from_iter+0xcf/0xea0 [ 180.285973][T11764] ? alloc_pages_mpol+0x217/0x260 [ 180.286081][T11764] copy_page_from_iter+0x178/0x2a0 [ 180.286110][T11764] tun_get_user+0xbbd/0x27c0 [ 180.286159][T11764] ? ref_tracker_alloc+0x1f2/0x2f0 [ 180.286207][T11764] tun_chr_write_iter+0x15e/0x210 [ 180.286235][T11764] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 180.286262][T11764] vfs_write+0x5a6/0x9f0 [ 180.286323][T11764] ksys_write+0xdc/0x1a0 [ 180.286369][T11764] __x64_sys_write+0x40/0x50 [ 180.286404][T11764] x64_sys_call+0x2847/0x3000 [ 180.286434][T11764] do_syscall_64+0xc0/0x2a0 [ 180.286470][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.286570][T11764] RIP: 0033:0x7f93bd49b78e [ 180.286591][T11764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.286614][T11764] RSP: 002b:00007f93bbf36fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.286642][T11764] RAX: ffffffffffffffda RBX: 00007f93bbf376c0 RCX: 00007f93bd49b78e [ 180.286726][T11764] RDX: 000000000000002a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 180.286739][T11764] RBP: 00007f93bbf37090 R08: 0000000000000000 R09: 0000000000000000 [ 180.286752][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.286766][T11764] R13: 00007f93bd756038 R14: 00007f93bd755fa0 R15: 00007fff7de91648 [ 180.286819][T11764] [ 180.526241][ T29] audit: type=1326 audit(2033554552.514:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.550561][ T29] audit: type=1326 audit(2033554552.514:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.574920][ T29] audit: type=1326 audit(2033554552.514:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.598364][ T29] audit: type=1326 audit(2033554552.514:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.622812][ T29] audit: type=1326 audit(2033554552.514:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.646392][ T29] audit: type=1326 audit(2033554552.514:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.670685][ T29] audit: type=1326 audit(2033554552.514:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.695001][ T29] audit: type=1326 audit(2033554552.514:8643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.718507][ T29] audit: type=1326 audit(2033554552.514:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd4daeb9 code=0x7ffc0000 [ 180.864671][T11780] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.882889][T11780] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 180.898241][T11780] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2679: bg 0: block 248: padding at end of block bitmap is not set [ 180.917807][T11780] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2679: Failed to acquire dquot type 1 [ 180.947265][T11780] EXT4-fs (loop9): 1 truncate cleaned up [ 180.979017][T11769] rdma_rxe: rxe_newlink: failed to add syz_tun [ 181.082672][T11787] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 181.090701][T11787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 181.110314][T11795] netlink: 'syz.9.2682': attribute type 1 has an invalid length. [ 181.129601][T11787] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 181.139923][T11787] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 181.151778][T11786] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 181.157058][T11795] bond2: entered promiscuous mode [ 181.167285][T11795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.208058][T11802] EXT4-fs: Ignoring removed bh option [ 181.213611][T11802] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.221087][T11802] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 181.232774][T11802] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 181.240789][T11802] EXT4-fs (loop9): orphan cleanup on readonly fs [ 181.254346][T11802] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2686: Failed to acquire dquot type 1 [ 181.274953][T11802] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2686: Invalid block bitmap block 0 in block_group 0 [ 181.291384][T11802] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2686: Invalid block bitmap block 0 in block_group 0 [ 181.306491][T11802] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2686: Invalid block bitmap block 0 in block_group 0 [ 181.320785][T11802] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2686: Failed to acquire dquot type 1 [ 181.333470][T11802] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2686: Failed to acquire dquot type 1 [ 181.345164][T11802] EXT4-fs (loop9): 1 orphan inode deleted [ 181.415161][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.442942][T11817] ip6tnl1: entered promiscuous mode [ 181.458236][T11816] rdma_rxe: rxe_newlink: failed to add syz_tun [ 181.512798][T11820] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.529482][T11822] ip6gretap1: entered promiscuous mode [ 181.563123][T11826] warn_alloc: 2 callbacks suppressed [ 181.563144][T11826] syz.4.2695: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 181.583945][T11826] CPU: 1 UID: 0 PID: 11826 Comm: syz.4.2695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.584057][T11826] Tainted: [W]=WARN [ 181.584066][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.584081][T11826] Call Trace: [ 181.584087][T11826] [ 181.584094][T11826] __dump_stack+0x1d/0x30 [ 181.584119][T11826] dump_stack_lvl+0x95/0xd0 [ 181.584142][T11826] dump_stack+0x15/0x1b [ 181.584188][T11826] warn_alloc+0x145/0x1c0 [ 181.584237][T11826] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 181.584304][T11826] ? __futex_wait+0x1fd/0x260 [ 181.584335][T11826] ? __pfx_futex_wake_mark+0x10/0x10 [ 181.584363][T11826] ? ___slab_alloc+0xb8/0xb00 [ 181.584399][T11826] ? avc_has_perm_noaudit+0xab/0x130 [ 181.584541][T11826] ? xskq_create+0x36/0xe0 [ 181.584575][T11826] vmalloc_user_noprof+0x7d/0xb0 [ 181.584604][T11826] ? xskq_create+0x80/0xe0 [ 181.584713][T11826] xskq_create+0x80/0xe0 [ 181.584752][T11826] xsk_init_queue+0x91/0xe0 [ 181.584859][T11826] xsk_setsockopt+0x3f5/0x640 [ 181.584890][T11826] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.584994][T11826] __sys_setsockopt+0x184/0x200 [ 181.585086][T11826] __x64_sys_setsockopt+0x64/0x80 [ 181.585119][T11826] x64_sys_call+0x21d5/0x3000 [ 181.585149][T11826] do_syscall_64+0xc0/0x2a0 [ 181.585241][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.585331][T11826] RIP: 0033:0x7efe508daeb9 [ 181.585351][T11826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.585377][T11826] RSP: 002b:00007efe4f316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.585395][T11826] RAX: ffffffffffffffda RBX: 00007efe50b56090 RCX: 00007efe508daeb9 [ 181.585407][T11826] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 181.585419][T11826] RBP: 00007efe50948c1f R08: 0000000000000004 R09: 0000000000000000 [ 181.585461][T11826] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.585473][T11826] R13: 00007efe50b56128 R14: 00007efe50b56090 R15: 00007ffcecaea428 [ 181.585493][T11826] [ 181.585500][T11826] Mem-Info: [ 181.800658][T11826] active_anon:30706 inactive_anon:0 isolated_anon:0 [ 181.800658][T11826] active_file:15064 inactive_file:12649 isolated_file:0 [ 181.800658][T11826] unevictable:0 dirty:271 writeback:0 [ 181.800658][T11826] slab_reclaimable:4000 slab_unreclaimable:23877 [ 181.800658][T11826] mapped:29655 shmem:20621 pagetables:1887 [ 181.800658][T11826] sec_pagetables:0 bounce:0 [ 181.800658][T11826] kernel_misc_reclaimable:0 [ 181.800658][T11826] free:1847827 free_pcp:4359 free_cma:0 [ 181.846608][T11826] Node 0 active_anon:122824kB inactive_anon:0kB active_file:60256kB inactive_file:50596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118620kB dirty:1084kB writeback:0kB shmem:82484kB kernel_stack:5536kB pagetables:7548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.874878][T11826] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.905231][T11826] lowmem_reserve[]: 0 2879 7858 7858 [ 181.910605][T11826] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 181.943046][T11826] lowmem_reserve[]: 0 0 4978 4978 [ 181.948226][T11826] Node 0 Normal free:4431100kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:122592kB inactive_anon:0kB active_file:60256kB inactive_file:50596kB unevictable:0kB writepending:1084kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:14040kB local_pcp:4648kB free_cma:0kB [ 181.982169][T11826] lowmem_reserve[]: 0 0 0 0 [ 181.986772][T11826] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.999682][T11826] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB [ 182.015842][T11826] Node 0 Normal: 1611*4kB (UME) 1552*8kB (UM) 471*16kB (UME) 423*32kB (UME) 314*64kB (UME) 127*128kB (UM) 73*256kB (UM) 57*512kB (UME) 18*1024kB (UME) 18*2048kB (UME) 1038*4096kB (UM) = 4431100kB [ 182.036123][T11826] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 182.045470][T11826] 48322 total pagecache pages [ 182.050170][T11826] 0 pages in swap cache [ 182.054421][T11826] Free swap = 124996kB [ 182.058660][T11826] Total swap = 124996kB [ 182.063727][T11826] 2097051 pages RAM [ 182.067558][T11826] 0 pages HighMem/MovableOnly [ 182.072256][T11826] 81557 pages reserved [ 182.136711][T11834] set_capacity_and_notify: 3 callbacks suppressed [ 182.136729][T11834] loop7: detected capacity change from 0 to 512 [ 182.161069][T11834] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 182.169101][T11834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 182.185022][T11834] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 182.195322][T11834] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 182.205750][T11834] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 182.265434][T11839] loop9: detected capacity change from 0 to 128 [ 182.420694][T11848] syz1: rxe_newlink: already configured on syz_tun [ 182.659342][T11868] loop9: detected capacity change from 0 to 512 [ 182.671067][T11868] EXT4-fs (loop9): orphan cleanup on readonly fs [ 182.684426][T11868] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2706: bg 0: block 248: padding at end of block bitmap is not set [ 182.710463][T11868] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2706: Failed to acquire dquot type 1 [ 182.723004][T11871] loop0: detected capacity change from 0 to 128 [ 182.733557][T11868] EXT4-fs (loop9): 1 truncate cleaned up [ 182.787494][T11879] tipc: Started in network mode [ 182.793251][T11879] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 182.800530][T11879] tipc: Enabled bearer , priority 10 [ 182.859635][T11851] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 182.875839][T11851] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 182.885246][T11851] ext4 filesystem being remounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.918119][T11851] EXT4-fs error (device loop9): ext4_lookup:1785: inode #15: comm syz.9.2706: iget: bad i_size value: 360287970189639690 [ 183.063108][T11909] loop7: detected capacity change from 0 to 128 [ 183.169164][T11918] loop7: detected capacity change from 0 to 4096 [ 183.375739][T11946] loop9: detected capacity change from 0 to 8192 [ 183.399100][T11946] bio_check_eod: 65 callbacks suppressed [ 183.399195][T11946] syz.9.2737: attempt to access beyond end of device [ 183.399195][T11946] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 183.418963][T11946] Buffer I/O error on dev loop9, logical block 57847, async page read [ 183.428322][T11946] syz.9.2737: attempt to access beyond end of device [ 183.428322][T11946] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 183.442344][T11946] Buffer I/O error on dev loop9, logical block 57847, async page read [ 183.444341][T11813] Bluetooth: hci0: command 0x1003 tx timeout [ 183.450763][ T3522] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.485673][T11946] syz.9.2737: attempt to access beyond end of device [ 183.485673][T11946] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 183.499738][T11946] Buffer I/O error on dev loop9, logical block 57847, async page read [ 183.538787][T11951] netlink: 'syz.4.2739': attribute type 6 has an invalid length. [ 183.789595][T11985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11985 comm=syz.9.2748 [ 183.803340][ T9053] tipc: Node number set to 8432298 [ 183.923752][T11996] __nla_validate_parse: 11 callbacks suppressed [ 183.923819][T11996] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2754'. [ 183.946813][T11996] bond3: down delay (2) is not a multiple of miimon (129), value rounded to 0 ms [ 183.995412][T12003] loop8: detected capacity change from 0 to 1024 [ 184.023185][T12003] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2753: bad orphan inode 134217728 [ 184.047026][ T8462] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 184.101406][ T8462] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 184.127522][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2760'. [ 184.193235][T11929] bridge0: port 1(syz_tun) entered disabled state [ 184.211577][T11929] syz_tun (unregistering): left allmulticast mode [ 184.218189][T11929] syz_tun (unregistering): left promiscuous mode [ 184.224638][T11929] bridge0: port 1(syz_tun) entered disabled state [ 184.504485][ T9082] IPVS: starting estimator thread 0... [ 184.528513][ T37] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.587334][ T37] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.598167][T12029] IPVS: using max 2448 ests per chain, 122400 per kthread [ 184.644660][ T37] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.694047][ T37] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.763194][T12055] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2768'. [ 184.842979][ T37] bridge_slave_1: left allmulticast mode [ 184.848710][ T37] bridge_slave_1: left promiscuous mode [ 184.854510][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.968633][T12073] netlink: 'syz.4.2772': attribute type 10 has an invalid length. [ 184.976660][T12073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2772'. [ 185.013420][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2771'. [ 185.045405][ T37] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 185.053998][ T37] xfrm1 (unregistering): left promiscuous mode [ 185.147396][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.159473][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.170378][ T37] bond0 (unregistering): Released all slaves [ 185.179369][ T37] bond1 (unregistering): Released all slaves [ 185.190660][ T37] bond2 (unregistering): Released all slaves [ 185.200793][ T37] bond3 (unregistering): Released all slaves [ 185.211831][ T37] bond4 (unregistering): Released all slaves [ 185.218049][T12094] loop8: detected capacity change from 0 to 1024 [ 185.226516][ T37] bond5 (unregistering): Released all slaves [ 185.240343][T12094] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2779: bad orphan inode 134217728 [ 185.289269][T12073] team0: Port device geneve1 added [ 185.349090][T12104] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 185.371186][T12104] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 185.454543][T12113] FAULT_INJECTION: forcing a failure. [ 185.454543][T12113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.467834][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.9.2782 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.467875][T12113] Tainted: [W]=WARN [ 185.467881][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.467894][T12113] Call Trace: [ 185.467901][T12113] [ 185.467951][T12113] __dump_stack+0x1d/0x30 [ 185.467974][T12113] dump_stack_lvl+0x95/0xd0 [ 185.467994][T12113] dump_stack+0x15/0x1b [ 185.468084][T12113] should_fail_ex+0x263/0x280 [ 185.468121][T12113] should_fail+0xb/0x20 [ 185.468177][T12113] should_fail_usercopy+0x1a/0x20 [ 185.468221][T12113] _copy_to_user+0x20/0xa0 [ 185.468246][T12113] simple_read_from_buffer+0xb5/0x130 [ 185.468290][T12113] proc_fail_nth_read+0x10e/0x150 [ 185.468325][T12113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.468419][T12113] vfs_read+0x1ab/0x7f0 [ 185.468440][T12113] ? __rcu_read_unlock+0x4e/0x70 [ 185.468477][T12113] ? __fget_files+0x184/0x1c0 [ 185.468558][T12113] ? mutex_lock+0x57/0x90 [ 185.468587][T12113] ksys_read+0xdc/0x1a0 [ 185.468611][T12113] __x64_sys_read+0x40/0x50 [ 185.468635][T12113] x64_sys_call+0x2889/0x3000 [ 185.468661][T12113] do_syscall_64+0xc0/0x2a0 [ 185.468703][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.468747][T12113] RIP: 0033:0x7f5ec914b78e [ 185.468765][T12113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.468783][T12113] RSP: 002b:00007f5ec7be6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.468801][T12113] RAX: ffffffffffffffda RBX: 00007f5ec7be76c0 RCX: 00007f5ec914b78e [ 185.468816][T12113] RDX: 000000000000000f RSI: 00007f5ec7be70a0 RDI: 0000000000000004 [ 185.468831][T12113] RBP: 00007f5ec7be7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.468903][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.468916][T12113] R13: 00007f5ec9406038 R14: 00007f5ec9405fa0 R15: 00007ffdcdb6cd08 [ 185.468934][T12113] [ 185.711171][ T37] hsr_slave_0: left promiscuous mode [ 185.725335][ T37] hsr_slave_1: left promiscuous mode [ 185.737560][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.745701][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.775357][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.782984][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.805364][ T37] veth1_macvtap: left promiscuous mode [ 185.810908][ T37] veth0_macvtap: left promiscuous mode [ 185.821042][ T37] veth1_vlan: left promiscuous mode [ 185.851083][ T37] veth0_vlan: left promiscuous mode [ 185.868651][T12127] loop0: detected capacity change from 0 to 512 [ 185.884511][T12127] msdos: Bad value for 'uid' [ 185.889154][T12127] msdos: Bad value for 'uid' [ 185.966137][T12131] tmpfs: Bad value for 'mpol' [ 186.016363][T12135] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2791'. [ 186.100099][ T37] team0 (unregistering): Port device team_slave_1 removed [ 186.116878][ T37] team0 (unregistering): Port device team_slave_0 removed [ 186.138618][T12140] netlink: 'syz.8.2791': attribute type 1 has an invalid length. [ 186.147039][T12140] netlink: 'syz.8.2791': attribute type 2 has an invalid length. [ 186.176508][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2791'. [ 186.208560][T12136] bond4: Unable to set up delay as MII monitoring is disabled [ 186.232480][T12136] bond4 (unregistering): Released all slaves [ 186.347087][T12047] chnl_net:caif_netlink_parms(): no params data found [ 186.361487][T12140] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #4: comm syz.8.2791: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 186.391499][T12140] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.2791: Bad quota inode: 4, type: 1 [ 186.405664][T12140] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.421834][T12140] EXT4-fs (loop8): mount failed [ 186.453199][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 186.453219][ T29] audit: type=1400 audit(2033554558.444:8830): avc: denied { map } for pid=12154 comm="syz.9.2795" path="socket:[36725]" dev="sockfs" ino=36725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.530689][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2794'. [ 186.634345][T12047] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.641456][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.649338][T12047] bridge_slave_0: entered allmulticast mode [ 186.660031][T12047] bridge_slave_0: entered promiscuous mode [ 186.668273][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.675497][T12047] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.683623][T12047] bridge_slave_1: entered allmulticast mode [ 186.690273][T12047] bridge_slave_1: entered promiscuous mode [ 186.755751][T12047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.805328][T12047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.906533][T12047] team0: Port device team_slave_0 added [ 186.951769][ T29] audit: type=1400 audit(2033554558.924:8831): avc: denied { map } for pid=12199 comm="syz.9.2802" path="socket:[36828]" dev="sockfs" ino=36828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.013550][T12047] team0: Port device team_slave_1 added [ 187.070761][T12047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.078677][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.104671][T12047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.146935][T12047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.154044][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.180830][T12047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.248473][T12047] hsr_slave_0: entered promiscuous mode [ 187.255231][T12047] hsr_slave_1: entered promiscuous mode [ 187.264284][ T37] IPVS: stop unused estimator thread 0... [ 187.292223][ T29] audit: type=1400 audit(2033554559.264:8832): avc: denied { setopt } for pid=12213 comm="syz.4.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.312762][ T29] audit: type=1400 audit(2033554559.264:8833): avc: denied { connect } for pid=12213 comm="syz.4.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.393295][T12218] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2807'. [ 187.425196][ T29] audit: type=1400 audit(2033554559.334:8834): avc: denied { getopt } for pid=12213 comm="syz.4.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.445554][ T29] audit: type=1400 audit(2033554559.334:8835): avc: denied { getopt } for pid=12213 comm="syz.4.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 187.632902][ T29] audit: type=1326 audit(2033554559.624:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe508daeb9 code=0x7ffc0000 [ 187.708506][ T29] audit: type=1326 audit(2033554559.644:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe508daeb9 code=0x7ffc0000 [ 187.732932][ T29] audit: type=1326 audit(2033554559.644:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe508daeb9 code=0x7ffc0000 [ 187.756521][ T29] audit: type=1326 audit(2033554559.644:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.4.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe508daeb9 code=0x7ffc0000 [ 187.780966][T12247] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 187.794937][T12244] gretap0: entered promiscuous mode [ 187.804797][T12244] gretap0: left promiscuous mode [ 187.817545][T12252] No source specified [ 187.842226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.921816][T12258] set_capacity_and_notify: 2 callbacks suppressed [ 187.921836][T12258] loop9: detected capacity change from 0 to 2048 [ 187.949768][T12262] loop0: detected capacity change from 0 to 1024 [ 187.983899][ T3305] loop9: p4 < > [ 187.996690][T12258] loop9: p4 < > [ 188.067190][T12278] loop8: detected capacity change from 0 to 1024 [ 188.102946][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 188.112975][T12278] EXT4-fs: Ignoring removed oldalloc option [ 188.118940][T12278] EXT4-fs: Ignoring removed bh option [ 188.131355][T12047] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.146182][T12286] loop9: detected capacity change from 0 to 1024 [ 188.158785][T12047] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.184003][T12286] EXT4-fs: Ignoring removed oldalloc option [ 188.190054][T12286] EXT4-fs: Ignoring removed bh option [ 188.199842][T12047] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.210414][T12289] loop0: detected capacity change from 0 to 512 [ 188.226900][T12278] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 188.235609][T12047] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.237264][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 188.250893][T12289] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.275699][T12286] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 188.295695][T12278] FAULT_INJECTION: forcing a failure. [ 188.295695][T12278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.309682][T12278] CPU: 0 UID: 0 PID: 12278 Comm: syz.8.2822 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.309732][T12278] Tainted: [W]=WARN [ 188.309741][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.309757][T12278] Call Trace: [ 188.309765][T12278] [ 188.309775][T12278] __dump_stack+0x1d/0x30 [ 188.309873][T12278] dump_stack_lvl+0x95/0xd0 [ 188.309901][T12278] dump_stack+0x15/0x1b [ 188.309931][T12278] should_fail_ex+0x263/0x280 [ 188.309962][T12278] should_fail+0xb/0x20 [ 188.310068][T12278] should_fail_usercopy+0x1a/0x20 [ 188.310108][T12278] _copy_from_user+0x1c/0xb0 [ 188.310129][T12278] vmemdup_user+0x5e/0xd0 [ 188.310156][T12278] path_setxattrat+0x1b6/0x310 [ 188.310254][T12278] __x64_sys_lsetxattr+0x71/0x90 [ 188.310366][T12278] x64_sys_call+0x2ef0/0x3000 [ 188.310400][T12278] do_syscall_64+0xc0/0x2a0 [ 188.310477][T12278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.310549][T12278] RIP: 0033:0x7f93bd4daeb9 [ 188.310570][T12278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.310655][T12278] RSP: 002b:00007f93bbf37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 188.310683][T12278] RAX: ffffffffffffffda RBX: 00007f93bd755fa0 RCX: 00007f93bd4daeb9 [ 188.310777][T12278] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 188.310796][T12278] RBP: 00007f93bbf37090 R08: 0000000000000000 R09: 0000000000000000 [ 188.310814][T12278] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000001 [ 188.310831][T12278] R13: 00007f93bd756038 R14: 00007f93bd755fa0 R15: 00007fff7de91648 [ 188.310858][T12278] [ 188.506343][T12289] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 188.525796][T12289] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2823: attempt to clear invalid blocks 2 len 1 [ 188.539940][T12305] veth21: entered promiscuous mode [ 188.544021][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 188.570038][T12289] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 188.609553][T12315] loop8: detected capacity change from 0 to 512 [ 188.620289][T12289] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2823: invalid indirect mapped block 1819239214 (level 0) [ 188.671862][T12315] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.682815][T12289] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2823: invalid indirect mapped block 1819239214 (level 1) [ 188.698308][T12047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.743165][T12289] EXT4-fs (loop0): 1 truncate cleaned up [ 188.768661][T12047] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.788399][T12315] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.2828: Allocating blocks 41-42 which overlap fs metadata [ 188.829693][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.836822][ T9706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.846607][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.853795][ T9706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.863907][T12315] EXT4-fs (loop8): Remounting filesystem read-only [ 188.873555][T12315] EXT4-fs (loop8): 1 truncate cleaned up [ 188.926751][T12289] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.2823: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 188.928492][T12339] loop9: detected capacity change from 0 to 2048 [ 188.959365][T12047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.098164][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2837'. [ 189.131886][T12047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.148858][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2837'. [ 189.157905][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2837'. [ 189.220408][T12364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2840'. [ 189.224979][T12354] rdma_rxe: rxe_newlink: failed to add syz_tun [ 189.257426][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.271545][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 189.281363][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2840'. [ 189.289277][T12360] bond1: (slave bond0): Enslaving as an active interface with an up link [ 189.439880][T12047] veth0_vlan: entered promiscuous mode [ 189.468812][T12047] veth1_vlan: entered promiscuous mode [ 189.491409][T12395] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2845'. [ 189.519133][T12047] veth0_macvtap: entered promiscuous mode [ 189.528993][T12395] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2845'. [ 189.538131][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 189.559420][T12047] veth1_macvtap: entered promiscuous mode [ 189.597205][T12047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.643702][T12047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.675666][ T3328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.725910][ T3328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.745179][ T3328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.786327][ T3328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.908691][T12441] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 189.982045][T12441] SELinux: failed to load policy [ 189.987805][T12452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 190.383303][T12455] loop0: detected capacity change from 0 to 1024 [ 190.389947][T12498] loop8: detected capacity change from 0 to 512 [ 190.401346][T12455] EXT4-fs: Ignoring removed orlov option [ 190.407242][T12455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.418688][T12498] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 190.459435][T12498] EXT4-fs (loop8): orphan cleanup on readonly fs [ 190.466589][T12498] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2870: bg 0: block 16: invalid block bitmap [ 190.500010][T12498] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 190.516011][T12498] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.2870: attempt to clear invalid blocks 1669132790 len 1 [ 190.558553][T12498] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2870: invalid indirect mapped block 4294967295 (level 1) [ 190.652936][T12498] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2870: invalid indirect mapped block 4294967295 (level 2) [ 190.701758][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.709353][T12498] EXT4-fs (loop8): 1 truncate cleaned up [ 190.743128][T12534] FAULT_INJECTION: forcing a failure. [ 190.743128][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 190.743169][T12534] CPU: 1 UID: 0 PID: 12534 Comm: syz.0.2876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 190.743243][T12534] Tainted: [W]=WARN [ 190.743252][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.743340][T12534] Call Trace: [ 190.743346][T12534] [ 190.743353][T12534] __dump_stack+0x1d/0x30 [ 190.743377][T12534] dump_stack_lvl+0x95/0xd0 [ 190.743461][T12534] dump_stack+0x15/0x1b [ 190.743486][T12534] should_fail_ex+0x263/0x280 [ 190.743572][T12534] should_failslab+0x8c/0xb0 [ 190.743609][T12534] __kmalloc_cache_noprof+0x64/0x4a0 [ 190.743641][T12534] ? nfnetlink_rcv+0xa66/0x1720 [ 190.743710][T12534] nfnetlink_rcv+0xa66/0x1720 [ 190.743764][T12534] netlink_unicast+0x5c0/0x690 [ 190.743805][T12534] netlink_sendmsg+0x5c8/0x6f0 [ 190.743860][T12534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.743881][T12534] ____sys_sendmsg+0x5af/0x600 [ 190.743906][T12534] ___sys_sendmsg+0x195/0x1e0 [ 190.744058][T12534] __x64_sys_sendmsg+0xd4/0x160 [ 190.744085][T12534] x64_sys_call+0x17ba/0x3000 [ 190.744107][T12534] do_syscall_64+0xc0/0x2a0 [ 190.744155][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.744182][T12534] RIP: 0033:0x7fbea6cbaeb9 [ 190.744200][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.744240][T12534] RSP: 002b:00007fbea5717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.744261][T12534] RAX: ffffffffffffffda RBX: 00007fbea6f35fa0 RCX: 00007fbea6cbaeb9 [ 190.744278][T12534] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 190.744294][T12534] RBP: 00007fbea5717090 R08: 0000000000000000 R09: 0000000000000000 [ 190.744306][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.744317][T12534] R13: 00007fbea6f36038 R14: 00007fbea6f35fa0 R15: 00007ffd92e1c268 [ 190.744354][T12534] [ 190.768730][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.768874][T12513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.784236][T12513] bridge_slave_0: left allmulticast mode [ 190.784262][T12513] bridge_slave_0: left promiscuous mode [ 190.784452][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.789381][T12513] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.993835][T12541] loop2: detected capacity change from 0 to 128 [ 191.019937][T12541] FAT-fs (loop2): bogus sectors per cluster 0 [ 191.019963][T12541] FAT-fs (loop2): Can't find a valid FAT filesystem [ 191.251688][T12575] netlink: 'syz.0.2877': attribute type 13 has an invalid length. [ 191.362878][T12583] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 191.362906][T12583] FAT-fs (loop8): Filesystem has been set read-only [ 191.432844][T12590] rdma_rxe: rxe_newlink: failed to add syz_tun [ 191.527819][T12597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.527833][T12597] IPv6: NLM_F_CREATE should be set when creating new route [ 191.837265][T12609] Cannot find del_set index 0 as target [ 191.936079][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 191.936099][ T29] audit: type=1326 audit(2033554563.924:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.9.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918aeb9 code=0x7ffc0000 [ 191.978673][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.988774][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.008901][ T29] audit: type=1326 audit(2033554563.934:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.9.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918aeb9 code=0x7ffc0000 [ 192.038804][T12609] No such timeout policy "syz1" [ 192.042540][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.063195][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.234338][T12634] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 192.245091][T12634] FAT-fs (loop2): Filesystem has been set read-only [ 192.313836][T12639] loop9: p4 < > [ 192.385035][ T29] audit: type=1326 audit(2033554564.374:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.408726][ T29] audit: type=1326 audit(2033554564.374:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.465161][T12647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.482703][ T29] audit: type=1326 audit(2033554564.424:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.494483][T12651] netlink: 'syz.9.2901': attribute type 1 has an invalid length. [ 192.507765][ T29] audit: type=1326 audit(2033554564.424:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.538354][ T29] audit: type=1326 audit(2033554564.424:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.562742][ T29] audit: type=1326 audit(2033554564.424:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.586360][ T29] audit: type=1326 audit(2033554564.424:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.593854][T12647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.610638][ T29] audit: type=1326 audit(2033554564.424:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12645 comm="syz.2.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2594aaeb9 code=0x7ffc0000 [ 192.646012][T12647] bond1: (slave bond0): Enslaving as an active interface with an up link [ 192.662133][T12651] bond4: entered promiscuous mode [ 192.667372][T12651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.681622][T12647] rdma_rxe: rxe_newlink: failed to add syz_tun [ 192.719237][T12664] bond14: option tlb_dynamic_lb: invalid value (2) [ 192.748803][T12664] bond14 (unregistering): Released all slaves [ 192.766335][T12672] warn_alloc: 2 callbacks suppressed [ 192.766415][T12672] syz.8.2903: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 192.787134][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.8.2903 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.787164][T12672] Tainted: [W]=WARN [ 192.787215][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.787295][T12672] Call Trace: [ 192.787302][T12672] [ 192.787310][T12672] __dump_stack+0x1d/0x30 [ 192.787336][T12672] dump_stack_lvl+0x95/0xd0 [ 192.787362][T12672] dump_stack+0x15/0x1b [ 192.787396][T12672] warn_alloc+0x145/0x1c0 [ 192.787445][T12672] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 192.787489][T12672] ? __futex_wait+0x1fd/0x260 [ 192.787530][T12672] ? __pfx_futex_wake_mark+0x10/0x10 [ 192.787633][T12672] ? __rcu_read_unlock+0x4e/0x70 [ 192.787666][T12672] ? avc_has_perm_noaudit+0xab/0x130 [ 192.787757][T12672] ? should_fail_ex+0x30/0x280 [ 192.787792][T12672] ? should_failslab+0x8c/0xb0 [ 192.787869][T12672] vmalloc_user_noprof+0x7d/0xb0 [ 192.787953][T12672] ? xskq_create+0x80/0xe0 [ 192.788054][T12672] xskq_create+0x80/0xe0 [ 192.788091][T12672] xsk_init_queue+0x91/0xe0 [ 192.788129][T12672] xsk_setsockopt+0x3f5/0x640 [ 192.788178][T12672] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.788206][T12672] __sys_setsockopt+0x184/0x200 [ 192.788321][T12672] __x64_sys_setsockopt+0x64/0x80 [ 192.788360][T12672] x64_sys_call+0x21d5/0x3000 [ 192.788384][T12672] do_syscall_64+0xc0/0x2a0 [ 192.788449][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.788530][T12672] RIP: 0033:0x7f93bd4daeb9 [ 192.788551][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.788574][T12672] RSP: 002b:00007f93bbf16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.788599][T12672] RAX: ffffffffffffffda RBX: 00007f93bd756090 RCX: 00007f93bd4daeb9 [ 192.788617][T12672] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 192.788630][T12672] RBP: 00007f93bd548c1f R08: 0000000000000004 R09: 0000000000000000 [ 192.788672][T12672] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.788687][T12672] R13: 00007f93bd756128 R14: 00007f93bd756090 R15: 00007fff7de91648 [ 192.788714][T12672] [ 192.788723][T12672] Mem-Info: [ 193.010928][T12672] active_anon:31039 inactive_anon:0 isolated_anon:0 [ 193.010928][T12672] active_file:15133 inactive_file:12656 isolated_file:0 [ 193.010928][T12672] unevictable:0 dirty:456 writeback:0 [ 193.010928][T12672] slab_reclaimable:4037 slab_unreclaimable:61554 [ 193.010928][T12672] mapped:32402 shmem:20991 pagetables:1936 [ 193.010928][T12672] sec_pagetables:0 bounce:0 [ 193.010928][T12672] kernel_misc_reclaimable:0 [ 193.010928][T12672] free:1799095 free_pcp:12144 free_cma:0 [ 193.057058][T12672] Node 0 active_anon:124272kB inactive_anon:0kB active_file:60532kB inactive_file:50624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130536kB dirty:1824kB writeback:0kB shmem:83964kB kernel_stack:5488kB pagetables:7976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.085301][T12672] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.115697][T12672] lowmem_reserve[]: 0 2879 7858 7858 [ 193.121050][T12672] Node 0 DMA32 free:2944848kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 193.153604][T12672] lowmem_reserve[]: 0 0 4978 4978 [ 193.158761][T12672] Node 0 Normal free:4232076kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:124504kB inactive_anon:0kB active_file:60532kB inactive_file:50624kB unevictable:0kB writepending:1824kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:44436kB local_pcp:9384kB free_cma:0kB [ 193.192635][T12672] lowmem_reserve[]: 0 0 0 0 [ 193.197205][T12672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.209947][T12672] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944848kB [ 193.226962][T12672] Node 0 Normal: 515*4kB (UE) 784*8kB (UME) 0*16kB 278*32kB (UM) 303*64kB (M) 129*128kB (UME) 76*256kB (UM) 62*512kB (UM) 21*1024kB (UME) 21*2048kB (UME) 992*4096kB (UM) = 4232076kB [ 193.245198][T12672] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 193.255254][T12672] 48767 total pagecache pages [ 193.259953][T12672] 0 pages in swap cache [ 193.264152][T12672] Free swap = 124996kB [ 193.268364][T12672] Total swap = 124996kB [ 193.272557][T12672] 2097051 pages RAM [ 193.276426][T12672] 0 pages HighMem/MovableOnly [ 193.281110][T12672] 81557 pages reserved [ 193.306669][T12673] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2903: bad orphan inode 134217728 [ 193.318924][T12673] EXT4-fs mount: 31 callbacks suppressed [ 193.318942][T12673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.419957][T12689] set_capacity_and_notify: 4 callbacks suppressed [ 193.419977][T12689] loop9: detected capacity change from 0 to 2048 [ 193.479644][T12707] loop0: detected capacity change from 0 to 1024 [ 193.492084][T12707] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.520149][T12707] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2915: Invalid block bitmap block 0 in block_group 0 [ 193.559051][ T9526] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.572511][T12707] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2915: Failed to acquire dquot type 0 [ 193.600997][T12707] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.2915: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.619951][T12707] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2915: Invalid inode bitmap blk 0 in block_group 0 [ 193.634144][T12707] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 193.644210][T12707] EXT4-fs (loop0): 1 orphan inode deleted [ 193.646784][ T3451] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 193.650882][T12707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.740154][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.778057][ T3312] ================================================================== [ 193.786286][ T3312] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 193.793892][ T3312] [ 193.796232][ T3312] read-write to 0xffff888237d26468 of 1 bytes by task 12730 on cpu 1: [ 193.804399][ T3312] folio_add_lru+0xa4/0x1e0 [ 193.808935][ T3312] shmem_get_folio_gfp+0x7b0/0xd60 [ 193.814067][ T3312] shmem_write_begin+0xfc/0x1f0 [ 193.818960][ T3312] generic_perform_write+0x183/0x490 [ 193.824271][ T3312] shmem_file_write_iter+0xc5/0xf0 [ 193.829429][ T3312] vfs_write+0x5a6/0x9f0 [ 193.833804][ T3312] ksys_write+0xdc/0x1a0 [ 193.838072][ T3312] __x64_sys_write+0x40/0x50 [ 193.842686][ T3312] x64_sys_call+0x2847/0x3000 [ 193.847397][ T3312] do_syscall_64+0xc0/0x2a0 [ 193.851924][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.857834][ T3312] [ 193.860163][ T3312] read to 0xffff888237d26468 of 1 bytes by task 3312 on cpu 0: [ 193.867729][ T3312] __lru_add_drain_all+0x17e/0x450 [ 193.872889][ T3312] lru_add_drain_all+0x10/0x20 [ 193.877679][ T3312] invalidate_bdev+0x47/0x70 [ 193.882292][ T3312] ext4_put_super+0x624/0x7d0 [ 193.886991][ T3312] generic_shutdown_super+0xe6/0x210 [ 193.892313][ T3312] kill_block_super+0x2a/0x70 [ 193.897004][ T3312] ext4_kill_sb+0x42/0x80 [ 193.901356][ T3312] deactivate_locked_super+0x75/0x1c0 [ 193.906745][ T3312] deactivate_super+0x97/0xa0 [ 193.911441][ T3312] cleanup_mnt+0x2bb/0x330 [ 193.915872][ T3312] __cleanup_mnt+0x19/0x20 [ 193.920307][ T3312] task_work_run+0x130/0x1a0 [ 193.924923][ T3312] exit_to_user_mode_loop+0x1f7/0x6f0 [ 193.930365][ T3312] do_syscall_64+0x1d3/0x2a0 [ 193.934990][ T3312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.940910][ T3312] [ 193.943247][ T3312] value changed: 0x0b -> 0x0c [ 193.947925][ T3312] [ 193.950258][ T3312] Reported by Kernel Concurrency Sanitizer on: [ 193.956420][ T3312] CPU: 0 UID: 0 PID: 3312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.967885][ T3312] Tainted: [W]=WARN [ 193.971700][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.981765][ T3312] ================================================================== [ 193.995384][T12730] loop2: detected capacity change from 0 to 1024 [ 194.009305][T12730] EXT4-fs: Ignoring removed orlov option [ 194.062802][T12730] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 194.210988][T12730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.256118][T12732] loop9: detected capacity change from 0 to 512 [ 194.273372][T12047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.284831][T12732] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2924: bg 0: block 248: padding at end of block bitmap is not set [ 194.303364][T12732] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2924: Failed to acquire dquot type 1 [ 194.353309][T12732] EXT4-fs (loop9): 1 truncate cleaned up [ 194.359638][T12732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.377252][T12732] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.504890][T11154] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.