last executing test programs: 1m29.863260956s ago: executing program 1 (id=113): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) sendmsg$nl_route_sched(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), 0x0, 0x835, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xa}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0xd, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x1, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x1, r4, 0x30, 0x0, @in6={0xa, 0x4e20, 0x8, @local, 0x3}}}, 0xa0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x1, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xfff2}}}, 0x24}}, 0x0) 1m29.377523387s ago: executing program 1 (id=116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x20880}, 0x20048895) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) setuid(0xee00) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m29.274413679s ago: executing program 1 (id=118): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") r2 = open(&(0x7f0000000280)='./file1\x00', 0x4867e, 0xa2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x6000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000001f80)=""/4110, 0x100e) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) futex(0x0, 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0xfd, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) open(&(0x7f0000000080)='./file0/../file0\x00', 0x2402c0, 0x2) unshare(0x22020600) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0x37) sendfile(r0, r1, &(0x7f0000000880), 0x1000000004) fcntl$addseals(r1, 0x409, 0x8) 1m28.936288257s ago: executing program 1 (id=129): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000280)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000140)={0x0, 0xfffffddc}) timer_create(0x5, &(0x7f0000000000)={0x0, 0x1c, 0x4, @tid=r1}, &(0x7f0000000040)) 1m28.83010583s ago: executing program 1 (id=132): r0 = socket(0x10, 0x80000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xdd0c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m28.327351152s ago: executing program 1 (id=139): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") r2 = open(&(0x7f0000000280)='./file1\x00', 0x4867e, 0xa2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x6000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000001f80)=""/4110, 0x100e) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) futex(0x0, 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0xfd, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) unshare(0x22020600) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0x37) sendfile(r0, r1, &(0x7f0000000880), 0x1000000004) fcntl$addseals(r1, 0x409, 0x8) 1m28.305761513s ago: executing program 32 (id=139): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") r2 = open(&(0x7f0000000280)='./file1\x00', 0x4867e, 0xa2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x6000) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000001f80)=""/4110, 0x100e) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) futex(0x0, 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0xfd, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) unshare(0x22020600) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0x37) sendfile(r0, r1, &(0x7f0000000880), 0x1000000004) fcntl$addseals(r1, 0x409, 0x8) 45.602577767s ago: executing program 0 (id=774): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="6be212c606e010f963cc08b23456be319936b20f932e39b45bdf547c218c1310064f26d5c46506dd1527398f09d6ea0ba9b87a70a7934b6c936e280794c9725c9a330c8b87f09a3d9d681faf080d3dcb7c9aee47235952400784e10fd8b590dc4295c32fe7afd3d2c5d2f171f955abc993a8a667b2e62775995a5f7d46f1d8b2e26a82c10682800593c44a71cc33fee9ba7f91cd6c45410a635c78c959ac0251662feda976400e6f3f8fa0adf9ee15942fa93af16bfeb82edad19a90fa6cdac1bc20ee2b04e9a7d576b09df40cb938963c88045c7e7cb50c2f0826fabdb09f26e5c885affbff8f31e255c1afb30355cf2a92b11ff6eee6", @ANYRES8=r2, @ANYRES32, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES16=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040)=""/213, &(0x7f0000000140), &(0x7f0000000180), 0x3, r3}, 0x38) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x58000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x6a, 0x6, &(0x7f0000000a00)="3f0fb5dc158beccf91d5b6ca3d8f2076ed064eecf03fc8bb693261be3f9a7eb0e8ce05e81b23027fafb3d29e74a4f50b0f006b507792b022ae2231264bd829136ef04f202c02aaf7d474d472050868e1dc2fcbf33ddbb700e4c1c26c18faf23200"/106, &(0x7f0000000140)=""/6, 0x2000024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) membarrier(0x10, 0x0) 45.570767198s ago: executing program 0 (id=778): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) ptrace(0x18, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) setuid(0xee00) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 45.542226178s ago: executing program 0 (id=780): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='c *:* mw'], 0xa) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x4c002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@journal_checksum}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r5 = openat2(r4, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)={0x4000, 0x4, 0x8}, 0x18) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x51) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x3}, @map_idx={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000140001040100000000000000"], 0x20}}, 0x0) r8 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44}) r9 = socket(0x2d, 0x2, 0x0) bind(r9, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) r10 = socket(0x2d, 0x2, 0x0) sendto(r10, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) write(r3, &(0x7f0000000300)="8781126b97", 0xfffffd22) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0xffffffffffffffb6, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 44.62720664s ago: executing program 0 (id=800): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfcdfc612c00000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x549b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x88b}, 0x10ecc8, 0x1224, 0x0, 0x4, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 44.490714613s ago: executing program 0 (id=802): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xa31, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c79, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xa31, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c79, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004095) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 44.288791958s ago: executing program 0 (id=804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x20880}, 0x20048895) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) setuid(0xee00) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 29.07899038s ago: executing program 33 (id=804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x20880}, 0x20048895) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) setuid(0xee00) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 18.312466746s ago: executing program 4 (id=1237): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x58000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) membarrier(0x10, 0x0) 18.310676465s ago: executing program 4 (id=1238): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x28000600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000280)=""/59, 0x5e) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x1, 0x20002fb}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x7000005, 0x11, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000001780)={&(0x7f0000000300), 0xc, &(0x7f0000001740)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x81}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x3}, 0x10c0e8, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) vmsplice(r1, 0x0, 0x0, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x880) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000280)={{0x1, 0x0, 0x9, 0x3, 0x8}}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="141100002f00010000000000fcdbdf250211f2800c0003000aac0f0000000000140001"], 0x1114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x6, 0x4, 0x10}, {0x4, 0x81, 0xa, 0x10000}]}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f0000000180)=""/219, 0xdb, 0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x22, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000080000000000000000080000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000085100000faffffff18210000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850900000000000095000000000000000dd01c4f2609e4c00c98eef65cf702df31c1571ac282cd2fa57f27068da2cdfd66f2b5e9486606799ef719609b2ff81697e0248babfac3b4a947230b907c7a1a985c7db52713ada77ccb8b09dc245a33b82146c11f9f6da5"], &(0x7f0000000440)='syzkaller\x00', 0x65, 0x54, &(0x7f0000000480)=""/133, 0x41100, 0x1a, '\x00', r8, @fallback=0x2e, r1, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x9, 0x0, 0x401}, 0x10, r9, r1, 0x5, 0x0, &(0x7f0000000600)=[{0x2, 0x5, 0x10, 0x5}, {0x0, 0x3, 0xd, 0x3}, {0x0, 0x1, 0x10, 0x5}, {0x2, 0x4, 0x6, 0x7}, {0x0, 0x4, 0x7, 0xc}], 0x10, 0x6}, 0x94) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 18.239544927s ago: executing program 4 (id=1240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18.222600077s ago: executing program 4 (id=1241): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_bond\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x1) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x29168d6ac7abf37b, @host}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)="9c8f19090159115e3a693ac3d7941433", 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, 0x0, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0x0) sendfile(r7, r7, 0x0, 0x7a680000) 18.179897619s ago: executing program 4 (id=1243): io_uring_setup(0x899, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffbfffe}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) 16.44667209s ago: executing program 4 (id=1263): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000100)="0000000001000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect(r0, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) 16.44657438s ago: executing program 34 (id=1263): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000100)="0000000001000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect(r0, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) 9.984166353s ago: executing program 2 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 9.920267405s ago: executing program 2 (id=1357): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mount$nfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r0]) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000500)=0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) close(r0) 9.799116807s ago: executing program 2 (id=1359): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 9.741532919s ago: executing program 2 (id=1361): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc800, 0xff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x8c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r', 0x36, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x804) 9.659205391s ago: executing program 2 (id=1364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) io_uring_setup(0xbf6, &(0x7f0000002840)={0x0, 0x4ae8, 0x400, 0x3, 0x2ce}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0x2, 0x29c}, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x8, 0x2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r5) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1a000000b15b4009bf2c14bf9a96c5f97034d811c4b8febeaea5991116aca1a8cbdafd8fe68887994872f7e294878b7f943af45f46018384ab6232febd4e22bcfbbc7289093e4317714ac866e715a4e20274f72e2f2202612e3b150cace27bc1f9192419cd7874c1b6e0035c7ec83ff2af81f9d8551b23a6d5db8ed9", @ANYRES16=r6, @ANYBLOB="bbdf26bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 3.062177347s ago: executing program 5 (id=1445): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x0, 0x80) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x12, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xae4, 0x3}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4094, 0xffe}], 0x1, 0x60, 0x4}}], 0x48, 0x48004}, 0x0) 2.496161811s ago: executing program 7 (id=1446): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe178, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.494840771s ago: executing program 7 (id=1447): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@delsa={0x40, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {@in=@loopback, 0x4d4, 0xa, 0x2b}, [@mark={0xc, 0x15, {0x350759, 0x3457}}, @mark={0xc, 0x15, {0x35075d, 0x8}}]}, 0x40}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2102, 0x89) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x40) (async) exit(0x40007) (async) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r4 = dup(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0x80079a0) (async) socket$inet6(0xa, 0x80000, 0x8084) (async) mount$bind(&(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x3008080, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x10001, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(r4, 0x4b36) write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000000)={@remote, 0x0, 0x0, 0x40, 0x0, [{}, {@private}, {@dev}, {@empty}]}}) (rerun: 32) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x1}, 0x0, {0x2, 0x4e24, @local}, 'ipvlan0\x00'}) 2.410809763s ago: executing program 5 (id=1448): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(0x0, 0x1ff) 2.332532605s ago: executing program 5 (id=1449): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000301010100000000000000000a0000000c00198008000200bd01000024000280140001"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x2d, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xa}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a010400000000000000000200ffff18000480140001800b0001006578746864050000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x2}, 0x11ec81, 0x1224, 0x0, 0x5, 0x10000000000a, 0x20001, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@local, @in=@empty, 0x0, 0xfffc, 0xfffe, 0x0, 0xa, 0x20}, {0xffffffffffffff7f, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x1, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x1, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=@deltfilter={0x4c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x1, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x4c}}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0xee6b280}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 2.167563779s ago: executing program 3 (id=1453): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a0001fb09000002000000000000000000000400c580"], 0x18}}, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod(0x0, 0x8000, 0xd02) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x440000) write(0xffffffffffffffff, &(0x7f0000000580)="300000001c00010000000000000000002d0000000200000080000001", 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd80) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000202073110000000000202020af00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) shutdown(r4, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={r5, 0x0, 0x2}, &(0x7f0000000400)=0x10) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000140)='\x00', &(0x7f00000001c0)='::\\\x00', &(0x7f0000000200)='+\']$*^$[\\$\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000400)={[&(0x7f00000002c0)='[{*&?*]-[@\x94X,(\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='+\x00', &(0x7f0000000380)='bic', &(0x7f00000003c0)='\x00']}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000a00000006a0a00ff070000003c000000614a0000950000000000000018100000", @ANYRESOCT=r1, @ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 1.609579802s ago: executing program 7 (id=1457): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe178, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.566996043s ago: executing program 7 (id=1459): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(0x0, 0x1ff) 1.557196094s ago: executing program 6 (id=1460): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) write$vga_arbiter(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0x61}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd7084ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14460700016a030024001280110001006272696467655f736c617661000000000c0005800500010033"], 0x44}, 0x1, 0x0, 0x0, 0x2400c081}, 0x8002) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {0x0, 0x0, 0xb}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_emit_ethernet(0x32b, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x31d, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1, @cc={0x1, 0x0, 0xe, 0x0, 0x1, 0x4, 0x3fc, [@ipv4=@esp={{0x5, 0x4, 0x3, 0x8, 0x2b9, 0x68, 0x0, 0x1, 0x32, 0x0, @local, @private=0xa010101}, {0x4d2, 0x4, @basic={0x0, 0x0, 0xfffc, [@runt="659808f1864782ebc9595f76b7863ae938ab", @runt="ff7b8ff735ab0ed8d7ae4c724fd7c5b972fac0d9f4ddb18e2a4ea23ef4f4d0540b6c99fe476ccf9f7e734d9b69d17365dd4d2684ba784b301e5a7872", @ipv4=@udp={{0x1e, 0x4, 0x3, 0x7, 0x15b, 0x66, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x6, 0x2}, @timestamp={0x44, 0x18, 0x23, 0x0, 0x0, [0x6, 0xc1, 0x1, 0x2, 0x200]}, @end, @generic={0x86, 0x9, "0eca142302141e"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x15}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x0, [{0xd397fcc7f3c9282f, 0x8, "1a72167fd1b7"}]}, @rr={0x7, 0x7, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xca, 0x3, 0x2, [{@multicast1, 0x80000000}, {@empty, 0x2f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xe}]}]}}, {0x4e21, 0x4e22, 0xe3, 0x0, @gue={{0x2, 0x0, 0x2, 0x6b}, "986358c1558ad1e7c59913056eff8f15f83ad5780062d90714cbe03d2d8c0c63c0d443c2eb31980780ada763288b0ecb4312299d12e00686b5e0dd65485649bcef9886172c94b0db7fb5296c0251d22540099d39912c4c88e01e78838cf41878e0d6be3e815f06cb1ba51be704a81439fb1d99934d0cb878ac93339c096cbd7f4a0017aa9e799f21109ca8d06e3dede512ab17f28636f3267b1a8e5bdc841e51d7f463643e106e0e2146897ee8f9aa4031cb4095b950adb407f2cafb3fea18c8f899b27246ed4d5e0d6d004ed35accb0021a90"}}}, @ipv4=@tipc={{0x6, 0x4, 0x1, 0x2, 0xe8, 0x64, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, {[@rr={0x7, 0x3, 0xd8}]}}, @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x69e6, 0x0, 0x1, 0x20, 0x6, 0x1, 0x4e23, 0x4e22, 0x3, 0x2}, [{0x1, 0x280, 0x2, 0x1, 0x8, 0x2, 0x3, 0xffffffc}, {0x9, 0xaa98, 0x9, 0xd, 0x2, 0x20000, 0x9, 0xffffff8}, {0x8000, 0x3, 0x1, 0x18a1, 0x6, 0x1, 0x0, 0x6}, {0x3c68, 0x7ff, 0x0, 0x4, 0x5, 0x1, 0x1, 0x8}, {0x9, 0x0, 0xfffffff7, 0x6cf, 0x1, 0x1, 0x5, 0x3}, {0x90, 0x401, 0x2, 0x1ff, 0x1, 0x3895, 0x9, 0xfffff00}]}}]}, "489b162846e3", 0x6}}, @runt="99c4fef5e8a79ed773cfbe7f11c83210ed40e8c88644ab42cdfbef87c741ec5d914e9fa59d06a3cc1e4884d22bab"]}}}}}}, 0x0) read(0xffffffffffffffff, &(0x7f0000001480)=""/4096, 0x38) 1.452120036s ago: executing program 7 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf/file0\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000007c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="080002007f000081399608000400ac57ea01146a54935504d77721f6c3f1ccc42fff1ad71b73c50b0384f003fce25eb6819e507c45108c66086f51145a468a51c5dad1fbf70b582167b25cdeb4"], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x27b, &(0x7f0000ff9000/0x4000)=nil, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r6, 0x2}, 0x0, &(0x7f0000000780)="0100", 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f}, 0x94) r7 = socket(0x2, 0x80805, 0x0) r8 = msgget$private(0x0, 0x437) msgsnd(r8, &(0x7f0000001880)=ANY=[@ANYBLOB="010000"], 0x1008, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x204000) io_submit(r9, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x40000000, 0x0, 0x0, 0x1, 0x0, r10, 0x0}]) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) msgctl$IPC_RMID(r8, 0x0) sendmmsg$inet(r7, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000) setns(0xc9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @empty, 0x19f4d29}], 0x1c) write(r0, 0x0, 0x0) 1.449709226s ago: executing program 5 (id=1462): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4c000, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000800)={0x7, "ecab6a930ac5a0412dcd8aeca607f4a3c568c5f3633d2219ea01b95d22c059d52d9acfb4026de516ecc306c73c2cdd14fdf81a8802cbc44fb0d2fa101ece7b6873b132890941992be5ccfc780216f1092df01488fdcedd75fd04a324b86ac7961b66b305793f3f5bc0ded89a4465cc1264ad52279167922dbdf4210048b603829a411a6a0ccd4783ee0773912658fdc4c0b0738d55431f060c4bbe3d581908a9c1deb3a8698483852c0fc48ebc80b93c2f10909ab5d0dc03fed7876387fadd5ff33dc8c9fc665f30181fa3fabfa1efc089fb621c268c4425f7e2d09b078a559442b7082901c78f95925434f6e4d8485b32d2e91383a663acf80e2c75b45fc113e22e5e0318d83d299c011af4db73768caf0dd2b59a16266f1f28364ffc69f358fc6a67d145bae64f03152c7fec833e85853effce1854d63961f3382f9c27eb6e59f3910ffeef894c28572e79e75a7e6ad611ad026be470a397a4b317f17e6701dfc2cf33bff239a8ecb936b600ac5824e171211eb1a3ec3227b0d5b053344fadc9adbdae9bedc2382e2b6bd36696fc949e3e9139d376513e5cac2f22b5411f10052d29cd215be72c2a7e08dbf01f0a68a8ef0f0a9e05d8bf49c884e8ab878c882c3664c7674d4d6f8e1ffa7e14ea4516faded13329ff8014922df4bd2233a8d4e74ca722f4e78d02635e4aec92eab82b4017687d89b60694e2e87f5a44f78689"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) syz_emit_ethernet(0x45, &(0x7f00000001c0)=ANY=[], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'geneve1\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x11100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x2e9, &(0x7f0000000840)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x1, 0x714, 0x4e23, 0x405, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xfffffffffffffffb, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 1.361886598s ago: executing program 6 (id=1463): r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x4, 0x4, 0x5, 0x0, 0x3, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf4c3913efaea1d39, @perf_config_ext={0x7, 0x2}, 0x100000, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x8f, 0x6428, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={&(0x7f0000000100)}, 0x204, 0x2, 0x43a1bd76, 0x9, 0x85, 0x6, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x80004000000000, r0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/57) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000010000000000000000000800000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002fcffffff0000080000000000000000f53180e76bf5c6eabd7db50c5c05b5ad41b183e811"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0x10}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff738c, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x3, 0xffff4224, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x6, 0x2f, 0x4000006, 0xb, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x40007, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x8, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0xfffffffc, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x80, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x80, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x600, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x3, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x3ff, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x10001, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0xfffe, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x1be3}}]}}]}, 0x45c}}, 0x8840) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x334) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000000001400000325bd700003dab098b49f54a9", @ANYRES32=r7, @ANYBLOB="0000080018000000000008000400000000000800c703000000000200"/44], 0x48}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000240)=0x3, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = dup(r10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x3c, &(0x7f0000000140)="0e80eee6f269cd570c04a49caf9f0fd220f8d9d67c1942da2630435bbf52c7014cad57a6a5012a78924e1dce44623e022eb0ed5229d65b4f3e3c5369", 0x8c, 0x0, &(0x7f0000000280)="3f005429bc102b32395f1c9e5945c46b4f99609f19f09f6e4d7435eae190d415f2b9b8046653e4112ac3cd6db0780049ef054feab3927bfc82dd6c2fafd1bae6fca91bb53d0bbcbf46214d525146cb27eb587c32272196f6fdff4c1ecdbb3a52f4e35de9e252f97c3ee22b5f25888fa646a15a1e44ee3aaa3317da20ec173da9fbfa7c6637d646f03f1ce464"}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.249734201s ago: executing program 3 (id=1464): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000580)={[{@stripe={'stripe', 0x3d, 0x80}}, {@data_err_ignore}, {@auto_da_alloc}, {@discard}, {@norecovery}, {@grpjquota, 0x2e}, {@test_dummy_encryption_v1}, {@sysvgroups}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4fe, &(0x7f0000000d00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) 1.222225861s ago: executing program 5 (id=1465): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001800000006000000000000000ee845140578e8ff100000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000181100001f5a5dd42669f258789fc1de5c791741634c6d1160e14c4664420f33324e2f6bd137bc3e49d00c16c2fb1a5a72b3ae6379a8bcbe3260f493d10219da53f56802a414dec66f45d1d67c7ba0ecb2f4bdf8b26a43a8f0acc0c18ce26e182941433ed40048e8e37001804a7d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet6(0xa, 0xa, 0x3) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mlock(&(0x7f00006e6000/0x2000)=nil, 0x2000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x100, 0xf9ff, 0x9, 0x9, 0x13ee403f, 0x6}) set_mempolicy(0x6, 0x0, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x6a) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) 1.192147022s ago: executing program 7 (id=1466): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) (async) setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) (async) sendmsg$802154_raw(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, r2, 0xfffffffe, 0x6, 0x3, 0x72, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760bceab91e8ff0055e5c0d48bd623bcb93bd43a847a1597c8ef03da5be42200", 0x15}, 0x60) listen(r0, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x4}]}) socket$packet(0x11, 0x3, 0x300) (async) close_range(r6, 0xffffffffffffffff, 0x0) 1.043095756s ago: executing program 3 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xda) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044881) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) syz_io_uring_setup(0x1efb, 0x0, 0x0, &(0x7f0000000480), 0x0) getpriority(0x1, 0xe6) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 878.772309ms ago: executing program 3 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xc00, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9000002, 0x1000000, 0x10, r0, 0x0) fcntl$getflags(r2, 0x40a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='.\x00', 0x721000, 0x50) clock_settime(0xfffffffb, &(0x7f0000000140)) pipe2$9p(&(0x7f0000001540), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r6, r4, 0x4, r4}, 0x7) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r7, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) write(r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 808.450652ms ago: executing program 3 (id=1469): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xe178, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 778.591992ms ago: executing program 3 (id=1470): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc800, 0xff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x8c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000b00)='INVITE sip:test@127.0.0.1 S', 0x1b, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x804) 725.984093ms ago: executing program 6 (id=1471): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(0x0, 0x1ff) 708.062244ms ago: executing program 6 (id=1472): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x2, 0xfffffffffffffff8, 0x5, 0x6, 0x1, 0x0, [{0x1, 0x0, 0xffff}]}) (fail_nth: 2) 473.871749ms ago: executing program 6 (id=1473): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) setns(0xc9, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f00000001c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 191.442906ms ago: executing program 5 (id=1474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5e687a8a12003300020300ecff3f0005000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff0601150b000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="58ff0000", @ANYRES16=r2, @ANYBLOB="010000000000000000000500000014000180060001000a00000008000500010000003000028014000100000000000000000000000000000000010800030000000000080004000100000006000e004e210000"], 0x58}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 119.266558ms ago: executing program 6 (id=1475): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x14, r3, 0x701, 0x10003, 0xffdfffea, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x198, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20}, 0x4) fchdir(r1) mount(0x0, &(0x7f0000000140)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) 0s ago: executing program 2 (id=1476): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8, 0x400) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402000401"], 0x30}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x7a, 0xd, 0x3, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80, 0x20, 0x3ff}}) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='lapic\n', 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x6}}, @TCA_NETEM_DELAY_DIST={0x1e, 0x2, "b1acc82ca690625815e859a73adda1b56f3fce277b2dddbc09d1"}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x11}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x10, 0x20000000}, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0xd, 0x0, 0x0) write(r7, &(0x7f0000000200)="c7", 0x1) sendfile(r7, r6, 0x0, 0x3ffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c8, 0xffffffff, 0xffffffff, 0x4c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x308, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2, 0x6, 0x4, 0x3, 'syz1\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x3, 0x5, 0x1, 0x0, "8aac9b9c52f8bf21b937e9f4ecbfb04ae94513f4641b1e888ed03b132b756b6333225b61a813fb48aa8b18076a1d05fc716edb0a0e2057d0ac3dacfde3ce76bf"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) sendfile(r7, r6, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): op5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.769881][ T6500] loop3: detected capacity change from 0 to 1024 [ 99.770706][ T6500] EXT4-fs: Ignoring removed orlov option [ 99.786587][ T6500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.818767][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.869'. [ 99.881167][ T29] kauditd_printk_skb: 17245 callbacks suppressed [ 99.881180][ T29] audit: type=1400 audit(1791456762.101:17957): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.881473][ T29] audit: type=1400 audit(1791456762.111:17958): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.881651][ T29] audit: type=1400 audit(1791456762.111:17959): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.881849][ T29] audit: type=1400 audit(1791456762.111:17960): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.882138][ T29] audit: type=1400 audit(1791456762.111:17961): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.882263][ T29] audit: type=1400 audit(1791456762.111:17962): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.882680][ T29] audit: type=1400 audit(1791456762.111:17963): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.882883][ T29] audit: type=1400 audit(1791456762.111:17964): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.883108][ T29] audit: type=1400 audit(1791456762.111:17965): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.883321][ T29] audit: type=1400 audit(1791456762.111:17966): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.955017][ T6518] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 100.024836][ T6517] netlink: 9 bytes leftover after parsing attributes in process `syz.4.878'. [ 100.080933][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.103120][ T6517] netlink: 9 bytes leftover after parsing attributes in process `syz.4.878'. [ 100.203557][ T6532] 9p: Bad value for 'wfdno' [ 100.256320][ T6537] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.256586][ T6537] netlink: 'syz.3.884': attribute type 12 has an invalid length. [ 100.288898][ T6536] loop2: detected capacity change from 0 to 128 [ 100.328134][ T6536] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.330718][ T6536] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.407820][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.433372][ T6528] loop4: detected capacity change from 0 to 512 [ 100.503755][ T6528] EXT4-fs (loop4): 1 orphan inode deleted [ 100.508882][ T6528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.513049][ T6528] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.573688][ T6540] loop2: detected capacity change from 0 to 512 [ 100.651578][ T6540] EXT4-fs (loop2): 1 orphan inode deleted [ 100.658475][ T6540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.662309][ T6540] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.681324][ T51] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 1 [ 101.064549][ T6551] loop3: detected capacity change from 0 to 1024 [ 101.065993][ T6551] EXT4-fs: Ignoring removed orlov option [ 101.066913][ T6553] netlink: 'syz.5.890': attribute type 1 has an invalid length. [ 101.093761][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.134377][ T6560] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 101.159424][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.262865][ T6568] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.263949][ T6568] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.340522][ T6528] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.352765][ T4074] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.517314][ T6584] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 101.616166][ T6589] EXT4-fs: Ignoring removed orlov option [ 101.623001][ T6589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.640973][ T6540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.661095][ T6587] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 101.686711][ T6595] netlink: 9 bytes leftover after parsing attributes in process `syz.2.904'. [ 101.698982][ T6595] netlink: 9 bytes leftover after parsing attributes in process `syz.2.904'. [ 101.724790][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.045657][ T6606] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.049866][ T6606] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.052213][ T6614] netlink: 'syz.5.912': attribute type 1 has an invalid length. [ 102.342564][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.564934][ T6617] 8021q: adding VLAN 0 to HW filter on device eth0 [ 102.567487][ T6617] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.570287][ T6617] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.572827][ T6617] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.575907][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.577799][ T6617] gretap1: left allmulticast mode [ 102.580795][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.583338][ T6617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.585742][ T6617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.689007][ T6624] set_capacity_and_notify: 3 callbacks suppressed [ 102.689023][ T6624] loop4: detected capacity change from 0 to 1024 [ 102.689448][ T6624] EXT4-fs: Ignoring removed orlov option [ 102.714094][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.801997][ T6631] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 102.859462][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 102.859514][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 102.864058][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.916'. [ 102.870366][ T6628] hsr_slave_1 (unregistering): left promiscuous mode [ 102.890578][ T6637] netlink: 9 bytes leftover after parsing attributes in process `syz.2.919'. [ 102.893146][ T6637] netlink: 9 bytes leftover after parsing attributes in process `syz.2.919'. [ 102.984409][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.040299][ T6646] loop4: detected capacity change from 0 to 164 [ 103.056409][ T6646] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 103.096484][ T6655] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 103.189541][ T6666] loop5: detected capacity change from 0 to 1024 [ 103.190027][ T6666] EXT4-fs: Ignoring removed orlov option [ 103.204354][ T6666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.270028][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 103.270077][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'. [ 103.294910][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.355412][ T6678] loop4: detected capacity change from 0 to 512 [ 103.377770][ T6678] EXT4-fs (loop4): 1 orphan inode deleted [ 103.378241][ T6678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.378795][ T6678] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.414308][ T42] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 103.446634][ T6673] loop3: detected capacity change from 0 to 512 [ 103.469862][ T6673] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.470010][ T6673] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.502495][ T6673] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 103.508638][ T6673] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 103.508748][ T6673] System zones: 0-2, 18-18, 34-34 [ 103.510151][ T6673] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.934: bad orphan inode 15 [ 103.510229][ T6673] loop3: lost filesystem error report for type 5 error -117 [ 103.510837][ T6673] ext4_test_bit(bit=14, block=18) = 1 [ 103.510859][ T6673] is_bad_inode(inode)=0 [ 103.510889][ T6673] NEXT_ORPHAN(inode)=2264924160 [ 103.510908][ T6673] max_ino=32 [ 103.510930][ T6673] i_nlink=0 [ 103.511360][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 103.511600][ C0] EXT4-fs (loop3): initial error at time 1791456765: ext4_orphan_get:1429 [ 103.511840][ C0] EXT4-fs (loop3): last error at time 1791456765: ext4_orphan_get:1429 [ 103.523114][ T6673] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.934: corrupted inode contents [ 103.523152][ T6673] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.530274][ T6673] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #15: comm syz.3.934: mark_inode_dirty error [ 103.530364][ T6673] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.533500][ T6673] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.934: corrupted inode contents [ 103.533571][ T6673] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.535591][ T6673] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.934: mark_inode_dirty error [ 103.535654][ T6673] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.536134][ T6673] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #15: comm syz.3.934: mark inode dirty (error -117) [ 103.536225][ T6673] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.536670][ T6673] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 103.554896][ T6673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.610395][ T6687] loop5: detected capacity change from 0 to 512 [ 103.649251][ T6687] EXT4-fs (loop5): 1 orphan inode deleted [ 103.649599][ T6687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.650594][ T6687] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.661370][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:0: Failed to release dquot type 1 [ 103.750330][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 103.756627][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 103.824436][ T6695] futex_wake_op: syz.3.934 tries to shift op by 144; fix this program [ 103.824549][ T6695] futex_wake_op: syz.3.934 tries to shift op by 144; fix this program [ 104.059143][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.102336][ T6697] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 104.173504][ T6700] loop3: detected capacity change from 0 to 128 [ 104.207338][ T6700] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.208591][ T6700] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.257182][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.407505][ T6711] loop3: detected capacity change from 0 to 1024 [ 104.418310][ T6711] EXT4-fs: Ignoring removed orlov option [ 104.423232][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.467324][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.567249][ T6725] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 104.631868][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.710155][ T6728] loop2: detected capacity change from 0 to 128 [ 104.746614][ T6728] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.749262][ T6728] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.820908][ T6678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.878473][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.891450][ T29] kauditd_printk_skb: 28410 callbacks suppressed [ 104.891465][ T29] audit: type=1400 audit(1791456767.121:34617): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.891845][ T29] audit: type=1400 audit(1791456767.121:34618): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.892016][ T29] audit: type=1400 audit(1791456767.121:34619): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.893148][ T29] audit: type=1400 audit(1791456767.121:34620): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.893668][ T29] audit: type=1400 audit(1791456767.121:34621): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.893974][ T29] audit: type=1400 audit(1791456767.121:34622): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.894124][ T29] audit: type=1400 audit(1791456767.121:34623): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.894287][ T29] audit: type=1400 audit(1791456767.121:34624): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.894416][ T29] audit: type=1400 audit(1791456767.121:34625): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.896220][ T29] audit: type=1400 audit(1791456767.121:34626): avc: denied { write } for pid=3297 comm="syz-executor" name="inst1" dev="tracefs" ino=12841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.898797][ T6744] loop4: detected capacity change from 0 to 1024 [ 104.908458][ T6744] EXT4-fs: Ignoring removed orlov option [ 104.955162][ T6744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.068866][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.095874][ T6757] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 105.332671][ T6767] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.965: Attempting to read directory block (0) that is past i_size (16) [ 105.332709][ T6767] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 105.334649][ T6767] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 105.340739][ T6767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.400083][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.474271][ T6787] EXT4-fs: Ignoring removed orlov option [ 105.482705][ T6787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.543173][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.917924][ T6799] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 105.968715][ T6773] EXT4-fs (loop4): 1 orphan inode deleted [ 105.982824][ T55] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 105.982924][ T55] loop4: lost filesystem error report for type 5 error -117 [ 105.983807][ T6773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.986317][ T6773] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.217692][ T6821] EXT4-fs: Ignoring removed orlov option [ 106.229901][ T6821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.270706][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.423625][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'. [ 106.485924][ T6834] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.988: Attempting to read directory block (0) that is past i_size (16) [ 106.486028][ T6834] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 106.486223][ T6834] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 106.486661][ T6834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.567646][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.615709][ T6773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.625786][ T6827] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.986: Attempting to read directory block (0) that is past i_size (16) [ 106.625825][ T6827] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 106.626907][ T6827] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 106.635615][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.695857][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.710282][ T6843] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.990: Attempting to read directory block (0) that is past i_size (16) [ 106.710314][ T6843] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 106.710523][ T6843] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 107.144413][ T6864] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1000: Attempting to read directory block (0) that is past i_size (16) [ 107.144534][ T6864] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 107.146094][ T6864] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 107.462003][ T6882] EXT4-fs (loop5): 1 orphan inode deleted [ 107.468762][ T6882] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.489762][ T337] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 1 [ 107.922455][ T6899] ip_tables: iptables: counters copy to user failed while replacing table [ 108.048008][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 108.067227][ T6915] set_capacity_and_notify: 9 callbacks suppressed [ 108.067316][ T6915] loop2: detected capacity change from 0 to 256 [ 108.133707][ T6920] FAULT_INJECTION: forcing a failure. [ 108.133707][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.133738][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.2.1018 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.133780][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.133793][ T6920] Call Trace: [ 108.133799][ T6920] [ 108.133807][ T6920] __dump_stack+0x1d/0x30 [ 108.133834][ T6920] dump_stack_lvl+0x95/0xd0 [ 108.133855][ T6920] dump_stack+0x15/0x1b [ 108.133920][ T6920] should_fail_ex+0x262/0x280 [ 108.133951][ T6920] should_fail+0xb/0x20 [ 108.133975][ T6920] should_fail_usercopy+0x1a/0x20 [ 108.134034][ T6920] _copy_from_user+0x1c/0xb0 [ 108.134069][ T6920] perf_copy_attr+0x141/0x600 [ 108.134107][ T6920] __se_sys_perf_event_open+0x67/0x1290 [ 108.134133][ T6920] ? do_futex+0x391/0x460 [ 108.134193][ T6920] __x64_sys_perf_event_open+0x67/0x80 [ 108.134238][ T6920] x64_sys_call+0x1f25/0x2550 [ 108.134321][ T6920] do_syscall_64+0x112/0x360 [ 108.134416][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.134447][ T6920] RIP: 0033:0x7f8e93b7e199 [ 108.134461][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.134530][ T6920] RSP: 002b:00007f8e925d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 108.134633][ T6920] RAX: ffffffffffffffda RBX: 00007f8e93e05fa0 RCX: 00007f8e93b7e199 [ 108.134649][ T6920] RDX: 0000004000000000 RSI: 0000000000000000 RDI: 00002000000006c0 [ 108.134710][ T6920] RBP: 00007f8e93c15888 R08: 0000000000000009 R09: 0000000000000000 [ 108.134726][ T6920] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 108.134741][ T6920] R13: 00007f8e93e06038 R14: 00007f8e93e05fa0 R15: 00007ffc059ee838 [ 108.134763][ T6920] [ 108.676022][ T6934] FAULT_INJECTION: forcing a failure. [ 108.676022][ T6934] name failslab, interval 1, probability 0, space 0, times 0 [ 108.676069][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.2.1022 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.676091][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.676103][ T6934] Call Trace: [ 108.676108][ T6934] [ 108.676115][ T6934] __dump_stack+0x1d/0x30 [ 108.676190][ T6934] dump_stack_lvl+0x95/0xd0 [ 108.676210][ T6934] dump_stack+0x15/0x1b [ 108.676232][ T6934] should_fail_ex+0x262/0x280 [ 108.676277][ T6934] ? _kzalloc_noprof+0x52/0xa0 [ 108.676301][ T6934] should_failslab+0x8c/0xb0 [ 108.676378][ T6934] __kmalloc_cache_noprof+0x7a/0x400 [ 108.676457][ T6934] ? xfrm_lookup_with_ifid+0xd61/0x1580 [ 108.676555][ T6934] ? _kzalloc_noprof+0x52/0xa0 [ 108.676577][ T6934] _kzalloc_noprof+0x52/0xa0 [ 108.676595][ T6934] ip6_setup_cork+0x400/0x700 [ 108.676636][ T6934] ip6_append_data+0x11f/0x1d0 [ 108.676655][ T6934] ? __pfx_raw6_getfrag+0x10/0x10 [ 108.676760][ T6934] rawv6_sendmsg+0xf70/0x1150 [ 108.676801][ T6934] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 108.676887][ T6934] inet_sendmsg+0xc5/0xd0 [ 108.677059][ T6934] ? __pfx_inet_sendmsg+0x10/0x10 [ 108.677085][ T6934] ____sys_sendmsg+0x4e8/0x580 [ 108.677187][ T6934] ___sys_sendmsg+0x195/0x1e0 [ 108.677219][ T6934] __sys_sendmmsg+0x185/0x320 [ 108.677250][ T6934] __x64_sys_sendmmsg+0x57/0x70 [ 108.677273][ T6934] x64_sys_call+0x1fb4/0x2550 [ 108.677308][ T6934] do_syscall_64+0x112/0x360 [ 108.677376][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.677419][ T6934] RIP: 0033:0x7f8e93b7e199 [ 108.677435][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.677487][ T6934] RSP: 002b:00007f8e92595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.677542][ T6934] RAX: ffffffffffffffda RBX: 00007f8e93e06180 RCX: 00007f8e93b7e199 [ 108.677555][ T6934] RDX: 040000000000027f RSI: 0000200000002200 RDI: 0000000000000005 [ 108.677694][ T6934] RBP: 00007f8e92595090 R08: 0000000000000000 R09: 0000000000000000 [ 108.677707][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.677722][ T6934] R13: 00007f8e93e06218 R14: 00007f8e93e06180 R15: 00007ffc059ee838 [ 108.677800][ T6934] [ 108.906261][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1023'. [ 109.465948][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 109.538818][ T6965] syzkaller1: entered allmulticast mode [ 109.699204][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.699312][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.699376][ T6944] bridge_slave_0: entered allmulticast mode [ 109.699955][ T6944] bridge_slave_0: entered promiscuous mode [ 109.701060][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.701089][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.701301][ T6944] bridge_slave_1: entered allmulticast mode [ 109.701844][ T6944] bridge_slave_1: entered promiscuous mode [ 109.720884][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.723282][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.744186][ T6944] team0: Port device team_slave_0 added [ 109.745082][ T6944] team0: Port device team_slave_1 added [ 109.764048][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.764062][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.764090][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.764639][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.764650][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.764744][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.789472][ T6944] hsr_slave_0: entered promiscuous mode [ 109.789837][ T6944] hsr_slave_1: entered promiscuous mode [ 109.789993][ T6944] debugfs: 'hsr0' already exists in 'hsr' [ 109.790005][ T6944] Cannot create hsr debugfs directory [ 109.924669][ T6980] 9p: Bad value for 'wfdno' [ 109.947659][ T6944] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.949809][ T6944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.950513][ T6944] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.953173][ T6944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.953808][ T6944] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.958981][ T6982] FAULT_INJECTION: forcing a failure. [ 109.958981][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 109.959064][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.3.1034 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.959129][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.959185][ T6982] Call Trace: [ 109.959192][ T6982] [ 109.959200][ T6982] __dump_stack+0x1d/0x30 [ 109.959229][ T6982] dump_stack_lvl+0x95/0xd0 [ 109.959262][ T6982] dump_stack+0x15/0x1b [ 109.959287][ T6982] should_fail_ex+0x262/0x280 [ 109.959399][ T6982] ? alloc_vfsmnt+0x2d/0x2f0 [ 109.959433][ T6982] should_failslab+0x8c/0xb0 [ 109.959471][ T6982] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 109.959507][ T6982] ? alloc_vfsmnt+0x2d/0x2f0 [ 109.959607][ T6982] alloc_vfsmnt+0x2d/0x2f0 [ 109.959697][ T6982] clone_mnt+0x30/0x5d0 [ 109.959735][ T6982] __do_loopback+0x244/0x280 [ 109.959816][ T6982] open_new_namespace+0x3a9/0xa90 [ 109.959856][ T6982] vfs_open_tree+0x24d/0x2d0 [ 109.959925][ T6982] __x64_sys_open_tree+0x5e/0xd0 [ 109.959950][ T6982] x64_sys_call+0x1d6d/0x2550 [ 109.959979][ T6982] do_syscall_64+0x112/0x360 [ 109.960009][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.960093][ T6982] RIP: 0033:0x7f9f89e6e199 [ 109.960112][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.960132][ T6982] RSP: 002b:00007f9f888c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 109.960156][ T6982] RAX: ffffffffffffffda RBX: 00007f9f8a0f5fa0 RCX: 00007f9f89e6e199 [ 109.960258][ T6982] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 109.960296][ T6982] RBP: 00007f9f89f05888 R08: 0000000000000000 R09: 0000000000000000 [ 109.960312][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.960327][ T6982] R13: 00007f9f8a0f6038 R14: 00007f9f8a0f5fa0 R15: 00007ffd1938a938 [ 109.960378][ T6982] [ 109.975402][ T6944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.975956][ T6944] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.979696][ T6944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.039713][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.039745][ T6944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.040030][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.040060][ T6944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.096870][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.107297][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.114892][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.194900][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.194932][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.282455][ T7001] loop4: detected capacity change from 0 to 1024 [ 110.286629][ T7001] EXT4-fs: Invalid want_extra_isize 127 [ 110.381860][ T7006] FAULT_INJECTION: forcing a failure. [ 110.381860][ T7006] name failslab, interval 1, probability 0, space 0, times 0 [ 110.381896][ T7006] CPU: 0 UID: 0 PID: 7006 Comm: syz.2.1041 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.381949][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.381964][ T7006] Call Trace: [ 110.381970][ T7006] [ 110.381979][ T7006] __dump_stack+0x1d/0x30 [ 110.382007][ T7006] dump_stack_lvl+0x95/0xd0 [ 110.382044][ T7006] dump_stack+0x15/0x1b [ 110.382068][ T7006] should_fail_ex+0x262/0x280 [ 110.382101][ T7006] should_failslab+0x8c/0xb0 [ 110.382190][ T7006] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 110.382272][ T7006] ? kstrdup_const+0x3e/0x50 [ 110.382300][ T7006] ? kstrdup_const+0x3e/0x50 [ 110.382328][ T7006] kstrdup+0x3e/0xd0 [ 110.382398][ T7006] kstrdup_const+0x3e/0x50 [ 110.382422][ T7006] alloc_vfsmnt+0xe2/0x2f0 [ 110.382475][ T7006] clone_mnt+0x30/0x5d0 [ 110.382519][ T7006] lock_mount_exact+0xca/0x460 [ 110.382544][ T7006] open_new_namespace+0x179/0xa90 [ 110.382581][ T7006] vfs_open_tree+0x24d/0x2d0 [ 110.382646][ T7006] __x64_sys_open_tree+0x5e/0xd0 [ 110.382669][ T7006] x64_sys_call+0x1d6d/0x2550 [ 110.382781][ T7006] do_syscall_64+0x112/0x360 [ 110.382809][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.382833][ T7006] RIP: 0033:0x7f8e93b7e199 [ 110.382851][ T7006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.382872][ T7006] RSP: 002b:00007f8e925d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 110.382895][ T7006] RAX: ffffffffffffffda RBX: 00007f8e93e05fa0 RCX: 00007f8e93b7e199 [ 110.382929][ T7006] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 110.382945][ T7006] RBP: 00007f8e93c15888 R08: 0000000000000000 R09: 0000000000000000 [ 110.382960][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.382974][ T7006] R13: 00007f8e93e06038 R14: 00007f8e93e05fa0 R15: 00007ffc059ee838 [ 110.382995][ T7006] [ 110.407902][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'. [ 110.439034][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.618920][ T7025] 9p: Bad value for 'wfdno' [ 110.657911][ T7001] loop4: detected capacity change from 0 to 1024 [ 110.670497][ T7001] EXT4-fs: Ignoring removed i_version option [ 110.691827][ T7001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.692418][ T7001] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.717980][ T7001] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 110.718860][ T7001] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.720008][ T7001] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.1038: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.720070][ T7001] loop4: lost filesystem error report for type 5 error -117 [ 110.720606][ T7001] EXT4-fs (loop4): Remounting filesystem read-only [ 110.721195][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 110.721224][ C1] EXT4-fs (loop4): initial error at time 1791456772: ext4_free_blocks:6719 [ 110.721314][ C1] EXT4-fs (loop4): last error at time 1791456772: ext4_free_blocks:6719 [ 110.735446][ T7001] EXT4-fs (loop4): 1 orphan inode deleted [ 110.747129][ T7033] program syz.5.1046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.960204][ T6944] veth0_vlan: entered promiscuous mode [ 110.974145][ T6944] veth1_vlan: entered promiscuous mode [ 111.033312][ T6944] veth0_macvtap: entered promiscuous mode [ 111.036554][ T6944] veth1_macvtap: entered promiscuous mode [ 111.051358][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.059487][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.064671][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.064779][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.064818][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.064854][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.108285][ T29] kauditd_printk_skb: 19486 callbacks suppressed [ 111.108298][ T29] audit: type=1400 audit(1791456773.341:47223): avc: denied { mount } for pid=6944 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.109816][ T29] audit: type=1400 audit(1791456773.341:47224): avc: denied { mounton } for pid=6944 comm="syz-executor" path="/root/syzkaller.BYnRTc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 111.168260][ T29] audit: type=1400 audit(1791456773.401:47225): avc: denied { mount } for pid=6944 comm="syz-executor" name="/" dev="gadgetfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 111.356814][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1051'. [ 111.375171][ T7062] loop5: detected capacity change from 0 to 256 [ 111.375471][ T7062] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 111.432714][ T7067] 9p: Bad value for 'wfdno' [ 111.465235][ T7070] program syz.6.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.506485][ T7075] tmpfs: Bad value for 'mpol' [ 111.506600][ T29] audit: type=1400 audit(1791456773.731:47226): avc: denied { mounton } for pid=7073 comm="syz.6.1058" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 111.670358][ T7084] loop6: detected capacity change from 0 to 128 [ 111.686626][ T7088] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 111.686653][ T7088] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1064'. [ 111.718569][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 111.746398][ T7084] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.772636][ T7096] netlink: 'syz.5.1066': attribute type 1 has an invalid length. [ 111.772673][ T7096] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1066'. [ 111.798996][ T29] audit: type=1400 audit(1791456774.021:47227): avc: denied { write } for pid=7083 comm="syz.6.1062" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.819589][ T7103] program syz.4.1068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.823674][ T29] audit: type=1400 audit(1791456774.021:47228): avc: denied { write } for pid=7083 comm="syz.6.1062" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.844655][ T29] audit: type=1400 audit(1791456774.071:47229): avc: denied { write } for pid=7083 comm="syz.6.1062" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.872397][ T29] audit: type=1400 audit(1791456774.091:47230): avc: denied { write } for pid=7083 comm="syz.6.1062" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.872428][ T29] audit: type=1400 audit(1791456774.091:47231): avc: denied { write } for pid=7083 comm="syz.6.1062" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.923955][ T29] audit: type=1400 audit(1791456774.151:47232): avc: denied { write } for pid=7083 comm="syz.6.1062" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.020038][ T7098] loop3: detected capacity change from 0 to 512 [ 112.033490][ T7110] loop6: detected capacity change from 0 to 1024 [ 112.035864][ T7110] EXT4-fs (loop6): bad geometry: block count 131584 exceeds size of device (512 blocks) [ 112.096494][ T7098] EXT4-fs (loop3): 1 orphan inode deleted [ 112.100892][ T7098] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.112499][ T31] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 1 [ 112.327021][ T7132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1078'. [ 112.345900][ T7134] program syz.4.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.807210][ T7142] loop4: detected capacity change from 0 to 128 [ 112.873761][ T7142] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.950159][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 113.022882][ T7149] loop4: detected capacity change from 0 to 512 [ 113.088359][ T7149] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.129588][ T7149] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 113.129621][ T7149] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.1083'. [ 113.203364][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 113.250269][ T7169] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 113.283832][ T7174] 9p: Bad value for 'wfdno' [ 113.328637][ T7180] loop6: detected capacity change from 0 to 128 [ 113.362178][ T7182] WARNING! power/level is deprecated; use power/control instead [ 113.381995][ T7180] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.447716][ T7183] loop4: detected capacity change from 0 to 8192 [ 113.549901][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1095'. [ 114.189021][ T7197] loop6: detected capacity change from 0 to 512 [ 114.220379][ T7197] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.243396][ T7197] netlink: 'syz.6.1100': attribute type 1 has an invalid length. [ 114.243431][ T7197] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1100'. [ 114.374133][ T7205] netlink: 'syz.5.1099': attribute type 1 has an invalid length. [ 114.525390][ T7215] 9p: Bad value for 'wfdno' [ 114.631185][ T7217] loop2: detected capacity change from 0 to 128 [ 114.650757][ T7192] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.679247][ T7225] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 114.778283][ T7217] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.852815][ T7238] loop4: detected capacity change from 0 to 512 [ 114.876496][ T7238] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.921616][ T7246] netlink: 'syz.5.1114': attribute type 1 has an invalid length. [ 114.953460][ T7238] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 114.953498][ T7238] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.1112'. [ 114.959134][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.959151][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.960264][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.960280][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.336490][ T7272] se_dev->se_dev_ptr already set for storage object [ 115.371463][ T7274] loop4: detected capacity change from 0 to 128 [ 115.409458][ T7274] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.468434][ T7277] netlink: 'syz.5.1125': attribute type 1 has an invalid length. [ 115.494670][ T7279] loop5: detected capacity change from 0 to 512 [ 115.511583][ T7279] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.538929][ T7279] netlink: 'syz.5.1126': attribute type 1 has an invalid length. [ 115.538957][ T7279] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1126'. [ 115.649546][ T7288] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 115.810852][ T7306] gretap1: entered allmulticast mode [ 115.890451][ T7309] loop4: detected capacity change from 0 to 128 [ 115.939551][ T7309] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.974973][ T7318] loop5: detected capacity change from 0 to 512 [ 115.986273][ T7320] FAULT_INJECTION: forcing a failure. [ 115.986273][ T7320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.986300][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.6.1141 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.986328][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.986384][ T7320] Call Trace: [ 115.986391][ T7320] [ 115.986400][ T7320] __dump_stack+0x1d/0x30 [ 115.986427][ T7320] dump_stack_lvl+0x95/0xd0 [ 115.986452][ T7320] dump_stack+0x15/0x1b [ 115.986475][ T7320] should_fail_ex+0x262/0x280 [ 115.986555][ T7320] should_fail+0xb/0x20 [ 115.986576][ T7320] should_fail_usercopy+0x1a/0x20 [ 115.986672][ T7320] _copy_from_user+0x1c/0xb0 [ 115.986705][ T7320] vmemdup_user+0x5e/0xd0 [ 115.986761][ T7320] path_setxattrat+0x1b3/0x320 [ 115.986802][ T7320] __x64_sys_setxattr+0x6e/0x90 [ 115.986891][ T7320] x64_sys_call+0xf6c/0x2550 [ 115.986959][ T7320] do_syscall_64+0x112/0x360 [ 115.986989][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.987013][ T7320] RIP: 0033:0x7fcf7936e199 [ 115.987027][ T7320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.987085][ T7320] RSP: 002b:00007fcf77dc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 115.987112][ T7320] RAX: ffffffffffffffda RBX: 00007fcf795f5fa0 RCX: 00007fcf7936e199 [ 115.987128][ T7320] RDX: 0000200000000980 RSI: 00002000000003c0 RDI: 0000200000000380 [ 115.987143][ T7320] RBP: 00007fcf77dc7090 R08: 0000000000000002 R09: 0000000000000000 [ 115.987157][ T7320] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 115.987174][ T7320] R13: 00007fcf795f6038 R14: 00007fcf795f5fa0 R15: 00007ffcc598bfd8 [ 115.987193][ T7320] [ 116.013350][ T7318] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.072186][ T7326] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1140'. [ 116.117926][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 116.117942][ T29] audit: type=1400 audit(1791459338.349:47281): avc: denied { write } for pid=7308 comm="syz.4.1137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.292725][ T7316] loop3: detected capacity change from 0 to 1024 [ 116.297830][ T7316] EXT4-fs: Ignoring removed i_version option [ 116.301028][ T7316] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.324319][ T7316] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.343130][ T7316] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.345433][ T7316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.346478][ T7316] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.1139: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.346580][ T7316] loop3: lost filesystem error report for type 5 error -117 [ 116.348687][ T7316] EXT4-fs (loop3): Remounting filesystem read-only [ 116.348946][ T7316] EXT4-fs (loop3): 1 orphan inode deleted [ 116.793160][ T29] audit: type=1400 audit(1791459339.029:47282): avc: denied { recv } for pid=7337 comm="syz.4.1146" saddr=10.128.0.163 src=30036 daddr=10.128.1.66 dest=49530 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 116.894008][ T7362] validate_nla: 3 callbacks suppressed [ 116.894022][ T7362] netlink: 'syz.5.1155': attribute type 1 has an invalid length. [ 116.897286][ T7360] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.949146][ T29] audit: type=1400 audit(1791459339.179:47283): avc: denied { write } for pid=7359 comm="syz.6.1154" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.994836][ T29] audit: type=1400 audit(1791459339.229:47284): avc: denied { write } for pid=7359 comm="syz.6.1154" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.005907][ T29] audit: type=1400 audit(1791459339.239:47285): avc: denied { write } for pid=7359 comm="syz.6.1154" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.036580][ T29] audit: type=1400 audit(1791459339.259:47286): avc: denied { write } for pid=7359 comm="syz.6.1154" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.036686][ T29] audit: type=1400 audit(1791459339.269:47287): avc: denied { write } for pid=7359 comm="syz.6.1154" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.079211][ T29] audit: type=1400 audit(1791459339.309:47288): avc: denied { write } for pid=7359 comm="syz.6.1154" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.369692][ T7388] EXT4-fs: Ignoring removed oldalloc option [ 117.369713][ T7388] EXT4-fs: Ignoring removed orlov option [ 117.385545][ T7388] ext4 filesystem being mounted at /256/_err=ignore,noblock_validity, supports timestamps until 2038-01-19 (0x7fffffff) [ 117.436199][ T7397] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 117.449798][ T29] audit: type=1400 audit(1791459339.679:47289): avc: denied { ioctl } for pid=7400 comm="syz.5.1168" path="socket:[19077]" dev="sockfs" ino=19077 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.496096][ T7401] EXT4-fs: dax option not supported [ 117.541541][ T7406] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.542442][ T29] audit: type=1400 audit(1791459339.779:47290): avc: denied { write } for pid=7405 comm="syz.3.1169" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.618410][ T7412] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.636633][ T7413] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1172: Attempting to read directory block (0) that is past i_size (16) [ 117.636696][ T7413] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 117.650985][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 117.651010][ C0] EXT4-fs (loop5): initial error at time 1791459339: dx_probe:791: inode 2 [ 117.651056][ C0] EXT4-fs (loop5): last error at time 1791459339: dx_probe:791: inode 2 [ 117.651945][ T7412] EXT4-fs (loop6): 1 truncate cleaned up [ 117.652732][ T7413] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 117.723621][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.723770][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.730223][ T7423] xt_hashlimit: size too large, truncated to 1048576 [ 117.795097][ T7434] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 117.812763][ T7436] FAULT_INJECTION: forcing a failure. [ 117.812763][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 117.812849][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.5.1180 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.812907][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.812919][ T7436] Call Trace: [ 117.812925][ T7436] [ 117.812931][ T7436] __dump_stack+0x1d/0x30 [ 117.812955][ T7436] dump_stack_lvl+0x95/0xd0 [ 117.813039][ T7436] dump_stack+0x15/0x1b [ 117.813063][ T7436] should_fail_ex+0x262/0x280 [ 117.813092][ T7436] ? do_set_mempolicy+0x17c/0x3c0 [ 117.813119][ T7436] should_failslab+0x8c/0xb0 [ 117.813209][ T7436] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 117.813239][ T7436] ? do_set_mempolicy+0x17c/0x3c0 [ 117.813269][ T7436] do_set_mempolicy+0x17c/0x3c0 [ 117.813317][ T7436] __se_sys_set_mempolicy+0x13c/0x3a0 [ 117.813343][ T7436] __x64_sys_set_mempolicy+0x43/0x50 [ 117.813367][ T7436] x64_sys_call+0x12d5/0x2550 [ 117.813432][ T7436] do_syscall_64+0x112/0x360 [ 117.813460][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.813558][ T7436] RIP: 0033:0x7f88d4c9e199 [ 117.813575][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.813595][ T7436] RSP: 002b:00007f88d36f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 117.813616][ T7436] RAX: ffffffffffffffda RBX: 00007f88d4f25fa0 RCX: 00007f88d4c9e199 [ 117.813680][ T7436] RDX: 000000000000000f RSI: 0000200000000000 RDI: 0000000000000005 [ 117.813695][ T7436] RBP: 00007f88d36f7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.813707][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.813718][ T7436] R13: 00007f88d4f26038 R14: 00007f88d4f25fa0 R15: 00007fff2df134d8 [ 117.813735][ T7436] [ 117.996389][ T7441] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1183'. [ 118.073307][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'. [ 118.544551][ T7481] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 118.570958][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1198'. [ 118.747656][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 118.800461][ T7496] bond0: (slave bond_slave_0): Releasing backup interface [ 118.960568][ T7515] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 118.994081][ T7519] set_capacity_and_notify: 6 callbacks suppressed [ 118.994125][ T7519] loop3: detected capacity change from 0 to 512 [ 119.022236][ T7519] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.033689][ T7519] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 119.033722][ T7519] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.1212'. [ 119.183408][ T7540] program syz.5.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.239299][ T7546] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 119.246712][ T7551] loop6: detected capacity change from 0 to 512 [ 119.262289][ T7551] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.281237][ T7556] loop5: detected capacity change from 0 to 1024 [ 119.284154][ T7551] netlink: 'syz.6.1224': attribute type 1 has an invalid length. [ 119.284181][ T7551] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1224'. [ 119.327998][ T7556] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1225'. [ 119.393665][ T7569] FAULT_INJECTION: forcing a failure. [ 119.393665][ T7569] name fail_futex, interval 1, probability 0, space 0, times 1 [ 119.393711][ T7569] CPU: 0 UID: 0 PID: 7569 Comm: syz.2.1226 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.393791][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.393812][ T7569] Call Trace: [ 119.393819][ T7569] [ 119.393827][ T7569] __dump_stack+0x1d/0x30 [ 119.393877][ T7569] dump_stack_lvl+0x95/0xd0 [ 119.393900][ T7569] dump_stack+0x15/0x1b [ 119.393922][ T7569] should_fail_ex+0x262/0x280 [ 119.393952][ T7569] should_fail+0xb/0x20 [ 119.393978][ T7569] get_futex_key+0x12d/0xb10 [ 119.394061][ T7569] futex_wait_multiple_setup+0x103/0x4a0 [ 119.394117][ T7569] futex_wait_multiple+0xae/0x2d0 [ 119.394186][ T7569] __se_sys_futex_waitv+0x169/0x1c0 [ 119.394228][ T7569] __x64_sys_futex_waitv+0x67/0x80 [ 119.394264][ T7569] x64_sys_call+0x1e49/0x2550 [ 119.394346][ T7569] do_syscall_64+0x112/0x360 [ 119.394415][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.394512][ T7569] RIP: 0033:0x7f8e93b7e199 [ 119.394526][ T7569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.394543][ T7569] RSP: 002b:00007f8e925b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 119.394562][ T7569] RAX: ffffffffffffffda RBX: 00007f8e93e06090 RCX: 00007f8e93b7e199 [ 119.394579][ T7569] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 119.394629][ T7569] RBP: 00007f8e925b6090 R08: 0000000000000001 R09: 0000000000000000 [ 119.394643][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.394688][ T7569] R13: 00007f8e93e06128 R14: 00007f8e93e06090 R15: 00007ffc059ee838 [ 119.394709][ T7569] [ 119.985655][ T7590] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 120.030463][ T7596] loop4: detected capacity change from 0 to 512 [ 120.042028][ T7596] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.051328][ T7596] netlink: 'syz.4.1238': attribute type 1 has an invalid length. [ 120.051364][ T7596] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.1238'. [ 120.120086][ T7609] loop4: detected capacity change from 0 to 512 [ 120.153393][ T3298] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 120.153419][ T3298] FAT-fs (loop4): Filesystem has been set read-only [ 120.153549][ T3298] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 120.260055][ T7619] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 120.267625][ T7621] loop3: detected capacity change from 0 to 128 [ 120.272192][ T7621] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.359959][ T7628] loop2: detected capacity change from 0 to 512 [ 120.375920][ T7628] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.422327][ T7628] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 120.422375][ T7628] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1250'. [ 120.458254][ T7640] FAULT_INJECTION: forcing a failure. [ 120.458254][ T7640] name failslab, interval 1, probability 0, space 0, times 0 [ 120.458282][ T7640] CPU: 1 UID: 0 PID: 7640 Comm: syz.3.1254 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.458309][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.458320][ T7640] Call Trace: [ 120.458326][ T7640] [ 120.458379][ T7640] __dump_stack+0x1d/0x30 [ 120.458470][ T7640] dump_stack_lvl+0x95/0xd0 [ 120.458499][ T7640] dump_stack+0x15/0x1b [ 120.458522][ T7640] should_fail_ex+0x262/0x280 [ 120.458568][ T7640] ? skb_clone+0x151/0x1f0 [ 120.458595][ T7640] should_failslab+0x8c/0xb0 [ 120.458625][ T7640] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 120.458721][ T7640] ? skb_clone+0x151/0x1f0 [ 120.458801][ T7640] skb_clone+0x151/0x1f0 [ 120.458825][ T7640] __netlink_deliver_tap+0x2be/0x510 [ 120.458848][ T7640] netlink_unicast+0x656/0x680 [ 120.458925][ T7640] netlink_sendmsg+0x5be/0x6f0 [ 120.458991][ T7640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.459010][ T7640] ____sys_sendmsg+0x532/0x580 [ 120.459116][ T7640] ___sys_sendmsg+0x195/0x1e0 [ 120.459154][ T7640] __x64_sys_sendmsg+0xd4/0x160 [ 120.459190][ T7640] x64_sys_call+0x22ab/0x2550 [ 120.459213][ T7640] do_syscall_64+0x112/0x360 [ 120.459300][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.459326][ T7640] RIP: 0033:0x7f9f89e6e199 [ 120.459342][ T7640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.459420][ T7640] RSP: 002b:00007f9f888c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.459442][ T7640] RAX: ffffffffffffffda RBX: 00007f9f8a0f5fa0 RCX: 00007f9f89e6e199 [ 120.459458][ T7640] RDX: 0000000024000084 RSI: 00002000000002c0 RDI: 0000000000000003 [ 120.459473][ T7640] RBP: 00007f9f888c7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.459566][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.459581][ T7640] R13: 00007f9f8a0f6038 R14: 00007f9f8a0f5fa0 R15: 00007ffd1938a938 [ 120.459602][ T7640] [ 120.509435][ T7642] loop6: detected capacity change from 0 to 164 [ 120.578610][ T7642] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1253'. [ 120.614902][ T7642] Cannot find set identified by id 0 to match [ 120.910605][ T7656] loop5: detected capacity change from 0 to 2048 [ 121.431458][ T7664] loop3: detected capacity change from 0 to 512 [ 121.699096][ T7664] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1260: Attempting to read directory block (0) that is past i_size (16) [ 121.699199][ T7664] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 121.699363][ T7664] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 121.742413][ T7656] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 121.742495][ T7656] EXT4-fs error (device loop5) in ext4_setattr:6247: error 28 [ 121.781433][ T7656] netlink: 'syz.5.1258': attribute type 2 has an invalid length. [ 121.803134][ T7656] 0: entered promiscuous mode [ 121.907211][ T7672] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.947902][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 121.947918][ T29] audit: type=1400 audit(1791459344.139:47847): avc: denied { write } for pid=7671 comm="syz.5.1262" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.014218][ T7669] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 122.028005][ T29] audit: type=1400 audit(1791459344.249:47848): avc: denied { write } for pid=7671 comm="syz.5.1262" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.056619][ T29] audit: type=1400 audit(1791459344.289:47849): avc: denied { write } for pid=7671 comm="syz.5.1262" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.057807][ T29] audit: type=1400 audit(1791459344.289:47850): avc: denied { write } for pid=7671 comm="syz.5.1262" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.057835][ T29] audit: type=1400 audit(1791459344.289:47851): avc: denied { write } for pid=7671 comm="syz.5.1262" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.110880][ T29] audit: type=1400 audit(1791459344.319:47852): avc: denied { write } for pid=7671 comm="syz.5.1262" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.321263][ T7686] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.360310][ T7686] netlink: 'syz.6.1267': attribute type 1 has an invalid length. [ 122.360342][ T7686] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1267'. [ 122.433476][ T7706] netlink: 'syz.5.1265': attribute type 16 has an invalid length. [ 122.433494][ T7706] netlink: 'syz.5.1265': attribute type 17 has an invalid length. [ 122.628170][ T7706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.631028][ T7706] gretap1: left allmulticast mode [ 122.633974][ T7706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.638032][ T7706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.641853][ T7706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.645712][ T7706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 122.649930][ T7706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 122.720463][ T29] audit: type=1400 audit(1791459344.949:47853): avc: denied { egress } for pid=3391 comm="kworker/1:6" saddr=fe80::1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 122.720584][ T29] audit: type=1400 audit(1791459344.949:47854): avc: denied { sendto } for pid=3391 comm="kworker/1:6" saddr=fe80::1c daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 122.858350][ T7711] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.1271: Attempting to read directory block (0) that is past i_size (16) [ 122.858381][ T7711] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 122.859524][ T7711] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 122.914802][ T7700] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.939946][ T29] audit: type=1400 audit(1791459345.169:47855): avc: denied { setopt } for pid=7708 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.965412][ T29] audit: type=1400 audit(1791459345.199:47856): avc: denied { write } for pid=7699 comm="syz.3.1270" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.970321][ T7719] program syz.6.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.029547][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.029583][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.029726][ T7675] bridge_slave_0: entered allmulticast mode [ 123.036700][ T7675] bridge_slave_0: entered promiscuous mode [ 123.038584][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.038616][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.038814][ T7675] bridge_slave_1: entered allmulticast mode [ 123.039300][ T7675] bridge_slave_1: entered promiscuous mode [ 123.052194][ T7709] FAULT_INJECTION: forcing a failure. [ 123.052194][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 123.052270][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.2.1272 Not tainted syzkaller #0 PREEMPT(lazy) [ 123.052352][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.052364][ T7709] Call Trace: [ 123.052370][ T7709] [ 123.052441][ T7709] __dump_stack+0x1d/0x30 [ 123.052466][ T7709] dump_stack_lvl+0x95/0xd0 [ 123.052542][ T7709] dump_stack+0x15/0x1b [ 123.052562][ T7709] should_fail_ex+0x262/0x280 [ 123.052599][ T7709] ? io_wq_create+0x4b/0x4b0 [ 123.052636][ T7709] should_failslab+0x8c/0xb0 [ 123.052698][ T7709] __kmalloc_cache_noprof+0x7a/0x400 [ 123.052795][ T7709] ? io_wq_create+0x4b/0x4b0 [ 123.052828][ T7709] io_wq_create+0x4b/0x4b0 [ 123.052866][ T7709] io_uring_alloc_task_context+0x17b/0x350 [ 123.052908][ T7709] __io_uring_add_tctx_node+0x2b9/0x3b0 [ 123.052986][ T7709] io_uring_create+0x3e1/0x4f0 [ 123.053017][ T7709] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 123.053078][ T7709] __x64_sys_io_uring_setup+0x31/0x40 [ 123.053118][ T7709] x64_sys_call+0x1fbf/0x2550 [ 123.053149][ T7709] do_syscall_64+0x112/0x360 [ 123.053179][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.053206][ T7709] RIP: 0033:0x7f8e93b7e199 [ 123.053299][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.053316][ T7709] RSP: 002b:00007f8e925d6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 123.053339][ T7709] RAX: ffffffffffffffda RBX: 00002000000008c0 RCX: 00007f8e93b7e199 [ 123.053355][ T7709] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000ec6 [ 123.053371][ T7709] RBP: 00007f8e93c15888 R08: 0000000000000000 R09: 00007f8e925d79c8 [ 123.053395][ T7709] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.053408][ T7709] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc059ee838 [ 123.053428][ T7709] [ 123.072397][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.076449][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.124844][ T7724] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.129701][ T7675] team0: Port device team_slave_0 added [ 123.137832][ T7675] team0: Port device team_slave_1 added [ 123.195140][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.195152][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.195176][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.195813][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.195824][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.195850][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.230854][ T7727] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 123.269522][ T7675] hsr_slave_0: entered promiscuous mode [ 123.269864][ T7675] hsr_slave_1: entered promiscuous mode [ 123.274326][ T7675] debugfs: 'hsr0' already exists in 'hsr' [ 123.274339][ T7675] Cannot create hsr debugfs directory [ 123.528842][ T7675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.533986][ T7675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.534705][ T7675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.539655][ T7675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.540810][ T7675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.545705][ T7675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.546664][ T7675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.555126][ T7675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.574617][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.574650][ T7675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.574715][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.574747][ T7675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.677875][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.698913][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.699505][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.703123][ T7745] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.732877][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.748627][ T7745] netlink: 'syz.5.1280': attribute type 1 has an invalid length. [ 123.748656][ T7745] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1280'. [ 123.771391][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.771428][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.773876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.773910][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.050899][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.283751][ T7675] veth0_vlan: entered promiscuous mode [ 124.286477][ T7675] veth1_vlan: entered promiscuous mode [ 124.298526][ T7675] veth0_macvtap: entered promiscuous mode [ 124.302913][ T7675] veth1_macvtap: entered promiscuous mode [ 124.309161][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.314395][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.325055][ T7766] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1282: Attempting to read directory block (0) that is past i_size (16) [ 124.325088][ T7766] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 124.325228][ T7766] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 124.361142][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.361469][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.361560][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.361616][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.465076][ T7792] set_capacity_and_notify: 8 callbacks suppressed [ 124.465092][ T7792] loop3: detected capacity change from 0 to 128 [ 124.489379][ T7792] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.564768][ T7806] loop6: detected capacity change from 0 to 512 [ 124.588477][ T7808] loop3: detected capacity change from 0 to 512 [ 124.598678][ T7808] EXT4-fs: Ignoring removed nobh option [ 124.607199][ T7806] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.624372][ T7816] loop2: detected capacity change from 0 to 512 [ 124.626432][ T7808] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 124.626727][ T7808] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1291: attempt to clear invalid blocks 1 len 1 [ 124.626755][ T7808] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.628770][ T7808] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 124.628888][ T7808] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1291: invalid indirect mapped block 1819239214 (level 0) [ 124.628917][ T7808] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.629197][ T7808] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1291: invalid indirect mapped block 1819239214 (level 1) [ 124.629248][ T7808] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.629844][ C0] EXT4-fs (loop3): error count since last fsck: 4 [ 124.629862][ C0] EXT4-fs (loop3): initial error at time 1791459346: ext4_clear_blocks:876: inode 13 [ 124.629898][ C0] EXT4-fs (loop3): last error at time 1791459346: ext4_free_branches:1023: inode 13 [ 124.632225][ T7816] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1293: Attempting to read directory block (0) that is past i_size (16) [ 124.632256][ T7816] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 124.632490][ T7808] EXT4-fs (loop3): 1 truncate cleaned up [ 124.633678][ T7816] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 124.644891][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.644997][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.661971][ T7806] netlink: 'syz.6.1290': attribute type 1 has an invalid length. [ 124.662025][ T7806] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1290'. [ 124.828183][ T7808] xt_hashlimit: size too large, truncated to 1048576 [ 124.837053][ T7829] –: renamed from vxcan1 (while UP) [ 124.993300][ T7843] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 125.048303][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1296'. [ 125.532151][ T7858] loop2: detected capacity change from 0 to 512 [ 125.544076][ T7858] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1305: Attempting to read directory block (0) that is past i_size (16) [ 125.544106][ T7858] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 125.545239][ T7858] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 125.598916][ T7861] loop5: detected capacity change from 0 to 512 [ 125.621627][ T7861] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.661646][ T7861] netlink: 'syz.5.1306': attribute type 1 has an invalid length. [ 125.661680][ T7861] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1306'. [ 125.885813][ T7883] ip_tables: iptables: counters copy to user failed while replacing table [ 125.886689][ T7879] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 125.942187][ T7883] ip6t_srh: unknown srh invflags 4000 [ 125.944561][ T7885] FAULT_INJECTION: forcing a failure. [ 125.944561][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.944662][ T7885] CPU: 0 UID: 0 PID: 7885 Comm: syz.6.1314 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.944760][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.944818][ T7885] Call Trace: [ 125.944831][ T7885] [ 125.944839][ T7885] __dump_stack+0x1d/0x30 [ 125.944864][ T7885] dump_stack_lvl+0x95/0xd0 [ 125.944888][ T7885] dump_stack+0x15/0x1b [ 125.944910][ T7885] should_fail_ex+0x262/0x280 [ 125.945009][ T7885] should_fail+0xb/0x20 [ 125.945075][ T7885] should_fail_usercopy+0x1a/0x20 [ 125.945106][ T7885] _copy_to_user+0x20/0xa0 [ 125.945138][ T7885] simple_read_from_buffer+0xb5/0x130 [ 125.945265][ T7885] proc_fail_nth_read+0x10e/0x150 [ 125.945292][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.945317][ T7885] vfs_read+0x18e/0x7c0 [ 125.945376][ T7885] ? __rcu_read_unlock+0x4e/0x70 [ 125.945444][ T7885] ? __fget_files+0x184/0x1c0 [ 125.945476][ T7885] ? mutex_lock+0x57/0x90 [ 125.945511][ T7885] ksys_read+0xdc/0x1a0 [ 125.945544][ T7885] __x64_sys_read+0x40/0x50 [ 125.945576][ T7885] x64_sys_call+0x2135/0x2550 [ 125.945651][ T7885] do_syscall_64+0x112/0x360 [ 125.945678][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.945702][ T7885] RIP: 0033:0x7fcf7932e9ce [ 125.945718][ T7885] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 125.945737][ T7885] RSP: 002b:00007fcf77dc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.945800][ T7885] RAX: ffffffffffffffda RBX: 00007fcf77dc76c0 RCX: 00007fcf7932e9ce [ 125.945815][ T7885] RDX: 000000000000000f RSI: 00007fcf77dc70a0 RDI: 0000000000000004 [ 125.945835][ T7885] RBP: 00007fcf77dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.945849][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.945907][ T7885] R13: 00007fcf795f6038 R14: 00007fcf795f5fa0 R15: 00007ffcc598bfd8 [ 125.945924][ T7885] [ 126.135832][ T7893] loop3: detected capacity change from 0 to 512 [ 126.137372][ T7893] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1318: Attempting to read directory block (0) that is past i_size (16) [ 126.137407][ T7893] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 126.137622][ T7893] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 126.138085][ T7893] EXT4-fs mount: 86 callbacks suppressed [ 126.138095][ T7893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.183302][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.519502][ T7883] loop5: detected capacity change from 0 to 512 [ 126.554579][ T7883] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 126.568514][ T7909] FAULT_INJECTION: forcing a failure. [ 126.568514][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.568569][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.3.1324 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.568595][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.568609][ T7909] Call Trace: [ 126.568616][ T7909] [ 126.568624][ T7909] __dump_stack+0x1d/0x30 [ 126.568650][ T7909] dump_stack_lvl+0x95/0xd0 [ 126.568674][ T7909] dump_stack+0x15/0x1b [ 126.568714][ T7909] should_fail_ex+0x262/0x280 [ 126.568743][ T7909] should_fail+0xb/0x20 [ 126.568773][ T7909] should_fail_usercopy+0x1a/0x20 [ 126.568803][ T7909] _copy_from_user+0x1c/0xb0 [ 126.568846][ T7909] ___sys_sendmsg+0xc1/0x1e0 [ 126.568872][ T7909] ? _raw_spin_unlock+0x9/0x30 [ 126.568911][ T7909] __x64_sys_sendmsg+0xd4/0x160 [ 126.568976][ T7909] x64_sys_call+0x22ab/0x2550 [ 126.569002][ T7909] do_syscall_64+0x112/0x360 [ 126.569030][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.569054][ T7909] RIP: 0033:0x7f9f89e6e199 [ 126.569071][ T7909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.569149][ T7909] RSP: 002b:00007f9f888c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.569170][ T7909] RAX: ffffffffffffffda RBX: 00007f9f8a0f5fa0 RCX: 00007f9f89e6e199 [ 126.569185][ T7909] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 126.569219][ T7909] RBP: 00007f9f888c7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.569233][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.569247][ T7909] R13: 00007f9f8a0f6038 R14: 00007f9f8a0f5fa0 R15: 00007ffd1938a938 [ 126.569317][ T7909] [ 126.766672][ T7907] loop6: detected capacity change from 0 to 512 [ 126.793853][ T7926] loop7: detected capacity change from 0 to 512 [ 126.808402][ T7926] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1330: Attempting to read directory block (0) that is past i_size (16) [ 126.808435][ T7926] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 126.809620][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 126.809758][ C1] EXT4-fs (loop7): initial error at time 1791459349: dx_probe:791: inode 2 [ 126.809819][ C1] EXT4-fs (loop7): last error at time 1791459349: dx_probe:791: inode 2 [ 126.830402][ T7926] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 126.830923][ T7926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.851397][ T7924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.851482][ T7924] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.895684][ T7675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.952825][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 126.952848][ T29] audit: type=1400 audit(1791459349.190:47886): avc: denied { read } for pid=7923 comm="syz.5.1329" path="socket:[21541]" dev="sockfs" ino=21541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.998241][ T7907] EXT4-fs (loop6): 1 orphan inode deleted [ 127.009879][ T55] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.009908][ T55] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 1 [ 127.009931][ T55] loop6: lost filesystem error report for type 5 error -117 [ 127.012612][ T7924] capability: warning: `syz.5.1329' uses deprecated v2 capabilities in a way that may be insecure [ 127.018087][ T7907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.052987][ T7907] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.071013][ T29] audit: type=1400 audit(1791459349.300:47887): avc: denied { write } for pid=7906 comm="syz.6.1323" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.133141][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.329644][ T29] audit: type=1400 audit(1791459349.560:47888): avc: denied { ioctl } for pid=7957 comm="syz.5.1339" path="socket:[21651]" dev="sockfs" ino=21651 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.432124][ T7963] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1341: Attempting to read directory block (0) that is past i_size (16) [ 127.432159][ T7963] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 127.432329][ T7963] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 127.432803][ T7963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.496983][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.586598][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.586660][ T7973] IPv6: NLM_F_CREATE should be set when creating new route [ 127.586894][ T7973] IPv6: NLM_F_CREATE should be set when creating new route [ 127.586958][ T7973] IPv6: NLM_F_CREATE should be set when creating new route [ 127.626276][ T29] audit: type=1326 audit(1791459349.860:47889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.5.1346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88d4c9e199 code=0x6fff0000 [ 127.686685][ T7973] netlink: 'syz.3.1345': attribute type 21 has an invalid length. [ 127.786935][ T7985] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 127.895952][ T7987] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.970558][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.007135][ T7991] ip_tables: iptables: counters copy to user failed while replacing table [ 128.076632][ T29] audit: type=1400 audit(1791459350.310:47890): avc: denied { accept } for pid=7990 comm="syz.6.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.147360][ T29] audit: type=1400 audit(1791459350.380:47891): avc: denied { getopt } for pid=7988 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.204037][ T7995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.204116][ T7995] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.244870][ T7995] netlink: 'syz.6.1353': attribute type 1 has an invalid length. [ 128.244899][ T7995] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1353'. [ 128.279102][ T8002] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1354: Attempting to read directory block (0) that is past i_size (16) [ 128.279139][ T8002] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 128.279253][ T8002] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 128.279873][ T8002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.349129][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.387420][ T3303] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 128.387442][ T3303] FAT-fs (loop3): Filesystem has been set read-only [ 128.433722][ T8010] --map-set only usable from mangle table [ 128.447062][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.620721][ T8022] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 128.751566][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1362'. [ 128.825263][ T8055] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.1365: Attempting to read directory block (0) that is past i_size (16) [ 128.825298][ T8055] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 128.825580][ T8055] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 128.826003][ T8055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.853610][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.938264][ T29] audit: type=1400 audit(1791459351.170:47892): avc: denied { read } for pid=8068 comm="syz.6.1366" dev="sockfs" ino=21755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.133148][ T8073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.133280][ T8073] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.188123][ T8078] netlink: 'syz.6.1368': attribute type 1 has an invalid length. [ 129.188142][ T8078] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1368'. [ 129.257922][ T8026] EXT4-fs (loop7): 1 orphan inode deleted [ 129.267313][ T8026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.270009][ T8026] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.275198][ T29] audit: type=1400 audit(1791459351.510:47893): avc: denied { write } for pid=8025 comm="syz.7.1363" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.281919][ T8059] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 129.281970][ T8059] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:33: Failed to release dquot type 1 [ 129.536693][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.668553][ T8088] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1370'. [ 129.669688][ T8090] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1370'. [ 129.838809][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1375'. [ 129.853289][ T8099] gretap1: entered allmulticast mode [ 130.094423][ T8109] set_capacity_and_notify: 9 callbacks suppressed [ 130.094441][ T8109] loop6: detected capacity change from 0 to 512 [ 130.164055][ T8109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.164125][ T8109] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.213896][ T8109] netlink: 'syz.6.1380': attribute type 1 has an invalid length. [ 130.213925][ T8109] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1380'. [ 130.431708][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.560940][ T8119] loop6: detected capacity change from 0 to 512 [ 130.561452][ T8119] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 130.564292][ T8119] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #17: comm syz.6.1382: iget: immutable or append flags not allowed on symlinks [ 130.564368][ T8119] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 130.564652][ T8119] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1382: couldn't read orphan inode 17 (err -117) [ 130.564782][ T8119] loop6: lost filesystem error report for type 5 error -117 [ 130.565325][ T8119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.596004][ T8107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.669827][ T8119] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.1382: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 130.691185][ T8119] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1382: bg 0: block 7: invalid block bitmap [ 130.724014][ T8124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.730530][ T8126] FAULT_INJECTION: forcing a failure. [ 130.730530][ T8126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.730557][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.5.1383 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.730581][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.730593][ T8126] Call Trace: [ 130.730599][ T8126] [ 130.730606][ T8126] __dump_stack+0x1d/0x30 [ 130.730631][ T8126] dump_stack_lvl+0x95/0xd0 [ 130.730652][ T8126] dump_stack+0x15/0x1b [ 130.730672][ T8126] should_fail_ex+0x262/0x280 [ 130.730699][ T8126] should_fail_alloc_page+0xf2/0x100 [ 130.730733][ T8126] __alloc_frozen_pages_noprof+0x157/0x400 [ 130.730758][ T8126] alloc_pages_mpol+0xaf/0x1d0 [ 130.730784][ T8126] alloc_pages_noprof+0x94/0x140 [ 130.730809][ T8126] pte_alloc_one+0x1c/0xc0 [ 130.730829][ T8126] __pte_alloc+0x32/0x2a0 [ 130.730859][ T8126] ? percpu_counter_add_batch+0x117/0x120 [ 130.730886][ T8126] copy_page_range+0x2cd0/0x33c0 [ 130.730935][ T8126] dup_mmap+0x874/0x10c0 [ 130.730960][ T8126] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 130.730989][ T8126] ? __list_add_valid_or_report+0x38/0xe0 [ 130.731029][ T8126] copy_mm+0xf5/0x350 [ 130.731051][ T8126] copy_process+0x108a/0x2360 [ 130.731081][ T8126] kernel_clone+0x1c0/0x5f0 [ 130.731107][ T8126] __x64_sys_clone+0x143/0x180 [ 130.731138][ T8126] x64_sys_call+0x2479/0x2550 [ 130.731164][ T8126] do_syscall_64+0x112/0x360 [ 130.731189][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.731219][ T8126] RIP: 0033:0x7f88d4c9e199 [ 130.731234][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.731252][ T8126] RSP: 002b:00007f88d36f6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 130.731272][ T8126] RAX: ffffffffffffffda RBX: 00007f88d4f25fa0 RCX: 00007f88d4c9e199 [ 130.731286][ T8126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c30e3400 [ 130.731299][ T8126] RBP: 00007f88d36f7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.731312][ T8126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 130.731324][ T8126] R13: 00007f88d4f26038 R14: 00007f88d4f25fa0 R15: 00007fff2df134d8 [ 130.731343][ T8126] [ 130.745849][ T8124] loop3: detected capacity change from 0 to 512 [ 130.774798][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.787737][ T8124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.787803][ T8124] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.822169][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.887921][ T8132] program syz.6.1385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.915009][ T8134] loop3: detected capacity change from 0 to 512 [ 130.925592][ T8134] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1387: Attempting to read directory block (0) that is past i_size (16) [ 130.925624][ T8134] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 130.925728][ T8134] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 130.926108][ T8134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.940960][ T8026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.996575][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.107133][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1391'. [ 131.118041][ T8143] gretap1: entered allmulticast mode [ 131.909636][ T8148] Illegal XDP return value 4294967274 on prog (id 221) dev N/A, expect packet loss! [ 131.993267][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 131.993282][ T29] audit: type=1400 audit(1791459354.231:47903): avc: denied { map } for pid=8159 comm="syz.6.1395" path="socket:[22005]" dev="sockfs" ino=22005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.993309][ T29] audit: type=1400 audit(1791459354.231:47904): avc: denied { read write } for pid=8159 comm="syz.6.1395" path="socket:[22005]" dev="sockfs" ino=22005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.106623][ T8168] xt_hashlimit: size too large, truncated to 1048576 [ 132.128958][ T8170] program syz.7.1399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.158062][ T8172] loop3: detected capacity change from 0 to 512 [ 132.181457][ T8172] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1400: Attempting to read directory block (0) that is past i_size (16) [ 132.181493][ T8172] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 132.181708][ T8172] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 132.182157][ T8172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.191869][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1398'. [ 132.240249][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.269648][ T8178] loop3: detected capacity change from 0 to 128 [ 132.297108][ T8178] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.297304][ T8178] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.345897][ T29] audit: type=1400 audit(1791459354.581:47905): avc: denied { write } for pid=8177 comm="syz.3.1402" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.360240][ T29] audit: type=1400 audit(1791459354.591:47906): avc: denied { write } for pid=8177 comm="syz.3.1402" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.365033][ T29] audit: type=1400 audit(1791459354.591:47907): avc: denied { write } for pid=8177 comm="syz.3.1402" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.370464][ T29] audit: type=1400 audit(1791459354.591:47908): avc: denied { write } for pid=8177 comm="syz.3.1402" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.416757][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.464455][ T8176] loop7: detected capacity change from 0 to 512 [ 132.510594][ T8176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.511124][ T8176] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.614768][ T29] audit: type=1400 audit(1791459354.841:47909): avc: denied { write } for pid=8175 comm="syz.7.1401" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.617729][ T29] audit: type=1400 audit(1791459354.841:47910): avc: denied { write } for pid=8175 comm="syz.7.1401" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.617758][ T29] audit: type=1400 audit(1791459354.851:47911): avc: denied { rename } for pid=8175 comm="syz.7.1401" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.649436][ T29] audit: type=1400 audit(1791459354.861:47912): avc: denied { write } for pid=8175 comm="syz.7.1401" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.159367][ T8200] loop5: detected capacity change from 0 to 512 [ 133.166058][ T8200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.166120][ T8200] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.178263][ T8200] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1409: corrupted xattr block 33: invalid checksum [ 133.180026][ T8200] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop5 ino=15 [ 133.180161][ T8200] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1409: corrupted xattr block 33: invalid checksum [ 133.180955][ T8200] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop5 ino=15 [ 133.220833][ T8193] pim6reg: entered allmulticast mode [ 133.255862][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.257004][ T8193] pim6reg: left allmulticast mode [ 133.357264][ T8208] program syz.3.1411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.440037][ T8211] loop3: detected capacity change from 0 to 128 [ 133.448442][ T8212] loop5: detected capacity change from 0 to 512 [ 133.467959][ T8212] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1412: Attempting to read directory block (0) that is past i_size (16) [ 133.468003][ T8212] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 133.468174][ T8212] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 133.468598][ T8212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.517332][ T8211] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 133.517485][ T8211] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.566055][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.596577][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.818392][ T8228] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 133.828975][ T8228] FAULT_INJECTION: forcing a failure. [ 133.828975][ T8228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.829016][ T8228] CPU: 1 UID: 0 PID: 8228 Comm: syz.3.1418 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.829041][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.829106][ T8228] Call Trace: [ 133.829113][ T8228] [ 133.829121][ T8228] __dump_stack+0x1d/0x30 [ 133.829147][ T8228] dump_stack_lvl+0x95/0xd0 [ 133.829237][ T8228] dump_stack+0x15/0x1b [ 133.829290][ T8228] should_fail_ex+0x262/0x280 [ 133.829329][ T8228] should_fail+0xb/0x20 [ 133.829358][ T8228] should_fail_usercopy+0x1a/0x20 [ 133.829412][ T8228] _copy_to_user+0x20/0xa0 [ 133.829452][ T8228] __se_sys_keyctl+0x422/0xb70 [ 133.829511][ T8228] ? schedule+0x5b/0xa0 [ 133.829541][ T8228] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 133.829651][ T8228] __x64_sys_keyctl+0x67/0x80 [ 133.829719][ T8228] x64_sys_call+0x1fe0/0x2550 [ 133.829748][ T8228] do_syscall_64+0x112/0x360 [ 133.829776][ T8228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.829800][ T8228] RIP: 0033:0x7f9f89e6e199 [ 133.829884][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.829905][ T8228] RSP: 002b:00007f9f888c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 133.829926][ T8228] RAX: ffffffffffffffda RBX: 00007f9f8a0f5fa0 RCX: 00007f9f89e6e199 [ 133.829940][ T8228] RDX: 0000000000000009 RSI: 0000200000000400 RDI: 000000000000001f [ 133.830003][ T8228] RBP: 00007f9f888c7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.830018][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.830033][ T8228] R13: 00007f9f8a0f6038 R14: 00007f9f8a0f5fa0 R15: 00007ffd1938a938 [ 133.830050][ T8228] [ 133.910474][ T8237] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 133.987303][ T7675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.072305][ T8243] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1424: Attempting to read directory block (0) that is past i_size (16) [ 134.072392][ T8243] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 134.072523][ T8243] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 134.072885][ T8243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.145393][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.297317][ T8258] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1429'. [ 134.297435][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1429'. [ 134.383066][ T8262] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.383264][ T8262] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.458159][ T7675] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.640934][ T8273] program syz.7.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.702789][ T8276] EXT4-fs: Ignoring removed bh option [ 134.722152][ T8276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.758787][ T7675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.016715][ T8291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.016765][ T8291] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.085522][ T8291] netlink: 'syz.5.1442': attribute type 1 has an invalid length. [ 135.085559][ T8291] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.1442'. [ 135.270176][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.321423][ T8304] set_capacity_and_notify: 6 callbacks suppressed [ 135.321512][ T8304] loop6: detected capacity change from 0 to 512 [ 135.324972][ T8304] EXT4-fs: Ignoring removed bh option [ 135.325119][ T8304] EXT4-fs: dax option not supported [ 135.331933][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1444'. [ 135.823980][ T8311] program syz.7.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.865523][ T8323] loop5: detected capacity change from 0 to 128 [ 135.873018][ T8323] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 135.873802][ T8323] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.007262][ T4074] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.034461][ T8327] loop3: detected capacity change from 0 to 512 [ 136.058749][ T8327] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1450: Attempting to read directory block (0) that is past i_size (16) [ 136.058787][ T8327] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 136.062017][ T8327] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 136.062440][ T8327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.138097][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1449'. [ 136.138138][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1449'. [ 136.165651][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.209124][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 136.320759][ T8329] loop5: detected capacity change from 0 to 512 [ 136.354537][ T8329] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.354583][ T8329] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 136.365147][ T8329] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 136.365718][ T8329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 136.365908][ T8329] System zones: 0-2, 18-18, 34-34 [ 136.403295][ T8329] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1449: bad orphan inode 15 [ 136.403395][ T8329] loop5: lost filesystem error report for type 5 error -117 [ 136.408505][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 136.408737][ C0] EXT4-fs (loop5): initial error at time 1791459358: ext4_orphan_get:1429 [ 136.408796][ C0] EXT4-fs (loop5): last error at time 1791459358: ext4_orphan_get:1429 [ 136.412055][ T8329] ext4_test_bit(bit=14, block=18) = 1 [ 136.412137][ T8329] is_bad_inode(inode)=0 [ 136.412156][ T8329] NEXT_ORPHAN(inode)=2264924160 [ 136.412187][ T8329] max_ino=32 [ 136.412204][ T8329] i_nlink=0 [ 136.413799][ T8329] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1449: corrupted inode contents [ 136.413846][ T8329] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.415766][ T8329] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #15: comm syz.5.1449: mark_inode_dirty error [ 136.415929][ T8329] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.416485][ T8329] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.1449: corrupted inode contents [ 136.416554][ T8329] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.417453][ T8329] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.1449: mark_inode_dirty error [ 136.417490][ T8329] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.417980][ T8329] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2965: inode #15: comm syz.5.1449: mark inode dirty (error -117) [ 136.419636][ T8329] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.420211][ T8329] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 136.451648][ T8329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.628504][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 136.630968][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 136.695649][ T8348] futex_wake_op: syz.5.1449 tries to shift op by 144; fix this program [ 136.695702][ T8348] futex_wake_op: syz.5.1449 tries to shift op by 144; fix this program [ 136.709543][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1456'. [ 136.738962][ T8352] program syz.7.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.780000][ T8356] loop7: detected capacity change from 0 to 128 [ 136.801756][ T8356] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 136.801954][ T8356] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.875665][ T7675] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.888579][ T8343] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 136.889773][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.017607][ T8367] loop5: detected capacity change from 0 to 256 [ 137.039001][ T8367] FAT-fs (loop5): bogus number of FAT sectors [ 137.039079][ T8367] FAT-fs (loop5): Can't find a valid FAT filesystem [ 137.095505][ T8374] loop3: detected capacity change from 0 to 512 [ 137.116168][ T8374] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1464: Attempting to read directory block (0) that is past i_size (16) [ 137.116203][ T8374] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 137.116949][ T8374] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 137.117569][ T8374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.168271][ T8384] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.169361][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 137.169373][ T29] audit: type=1400 audit(1791459359.401:47945): avc: denied { listen } for pid=8379 comm="syz.7.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.171530][ T29] audit: type=1326 audit(1791459359.401:47946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8379 comm="syz.7.1466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f743b9ee199 code=0x0 [ 137.268733][ T8387] loop5: detected capacity change from 0 to 512 [ 137.290115][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.291549][ T8387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.291813][ T8387] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.341645][ T8391] ip_tables: iptables: counters copy to user failed while replacing table [ 137.467232][ T29] audit: type=1400 audit(1791459359.691:47947): avc: denied { map } for pid=8394 comm="syz.3.1468" path="/291/proc/729/task/730/fail-nth" dev="proc" ino=22402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 137.544399][ T8397] program syz.3.1469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.571446][ T8401] loop6: detected capacity change from 0 to 128 [ 137.598939][ T8401] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.599185][ T8401] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.605972][ T29] audit: type=1400 audit(1791459359.831:47948): avc: denied { write } for pid=8400 comm="syz.6.1471" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.606000][ T29] audit: type=1400 audit(1791459359.831:47949): avc: denied { write } for pid=8400 comm="syz.6.1471" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.606025][ T29] audit: type=1400 audit(1791459359.831:47950): avc: denied { write } for pid=8400 comm="syz.6.1471" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.620783][ T29] audit: type=1400 audit(1791459359.841:47951): avc: denied { write } for pid=8400 comm="syz.6.1471" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.620809][ T29] audit: type=1400 audit(1791459359.841:47952): avc: denied { write } for pid=8400 comm="syz.6.1471" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.756924][ T6944] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.774497][ T8406] loop6: detected capacity change from 0 to 512 [ 137.792131][ T8406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.792195][ T8406] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.792730][ T29] audit: type=1400 audit(1791459360.021:47953): avc: denied { write } for pid=8405 comm="syz.6.1472" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.793108][ T8406] FAULT_INJECTION: forcing a failure. [ 137.793108][ T8406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.793132][ T8406] CPU: 1 UID: 0 PID: 8406 Comm: syz.6.1472 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.793159][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.793179][ T8406] Call Trace: [ 137.793186][ T8406] [ 137.793199][ T8406] __dump_stack+0x1d/0x30 [ 137.793306][ T8406] dump_stack_lvl+0x95/0xd0 [ 137.793374][ T8406] dump_stack+0x15/0x1b [ 137.793393][ T8406] should_fail_ex+0x262/0x280 [ 137.793418][ T8406] should_fail+0xb/0x20 [ 137.793443][ T8406] should_fail_usercopy+0x1a/0x20 [ 137.793547][ T8406] _copy_to_user+0x20/0xa0 [ 137.793575][ T8406] fiemap_fill_next_extent+0x137/0x1e0 [ 137.793637][ T8406] iomap_fiemap+0x47a/0x4f0 [ 137.793667][ T8406] ext4_fiemap+0x204/0x230 [ 137.793693][ T8406] ? __pfx_ext4_fiemap+0x10/0x10 [ 137.793717][ T8406] do_vfs_ioctl+0xc83/0xe50 [ 137.793806][ T8406] ? selinux_file_ioctl+0x33c/0x3c0 [ 137.793869][ T8406] ? __fget_files+0x184/0x1c0 [ 137.793892][ T8406] ? mutex_lock+0x57/0x90 [ 137.793928][ T8406] __se_sys_ioctl+0x82/0x140 [ 137.793959][ T8406] __x64_sys_ioctl+0x43/0x50 [ 137.794045][ T8406] x64_sys_call+0x239d/0x2550 [ 137.794074][ T8406] do_syscall_64+0x112/0x360 [ 137.794176][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.794344][ T8406] RIP: 0033:0x7fcf7936e199 [ 137.794362][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.794382][ T8406] RSP: 002b:00007fcf77dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.794448][ T8406] RAX: ffffffffffffffda RBX: 00007fcf795f5fa0 RCX: 00007fcf7936e199 [ 137.794507][ T8406] RDX: 00002000000001c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 137.794522][ T8406] RBP: 00007fcf77dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.794536][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.794606][ T8406] R13: 00007fcf795f6038 R14: 00007fcf795f5fa0 R15: 00007ffcc598bfd8 [ 137.794626][ T8406] [ 138.104048][ T6944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.141066][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.229132][ T29] audit: type=1400 audit(1791459360.461:47954): avc: denied { mounton } for pid=8413 comm="syz.6.1475" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 138.651171][ T8422] ================================================================== [ 138.651207][ T8422] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 138.651244][ T8422] [ 138.651251][ T8422] write to 0xffff88811b995ecc of 4 bytes by task 8421 on cpu 1: [ 138.651273][ T8422] xas_set_mark+0x12b/0x140 [ 138.651299][ T8422] __folio_start_writeback+0x16b/0x370 [ 138.651331][ T8422] ext4_bio_write_folio+0x5a2/0xa10 [ 138.651354][ T8422] mpage_process_page_bufs+0x484/0x5e0 [ 138.651392][ T8422] mpage_prepare_extent_to_map+0x83e/0xca0 [ 138.651439][ T8422] ext4_do_writepages+0xa10/0x2870 [ 138.651467][ T8422] ext4_writepages+0x191/0x300 [ 138.651502][ T8422] do_writepages+0x1b9/0x300 [ 138.651536][ T8422] file_write_and_wait_range+0x178/0x2f0 [ 138.651562][ T8422] ext4_sync_file+0x114/0x5c0 [ 138.651595][ T8422] vfs_fsync_range+0xc5/0xe0 [ 138.651623][ T8422] ext4_buffered_write_iter+0x427/0x480 [ 138.651650][ T8422] ext4_file_write_iter+0x36e/0x1020 [ 138.651690][ T8422] iter_file_splice_write+0x6a0/0xa60 [ 138.651718][ T8422] direct_splice_actor+0x158/0x280 [ 138.651742][ T8422] splice_direct_to_actor+0x2f9/0x680 [ 138.651767][ T8422] do_splice_direct+0x119/0x1a0 [ 138.651799][ T8422] do_sendfile+0x37d/0x640 [ 138.651822][ T8422] __x64_sys_sendfile64+0x105/0x150 [ 138.651847][ T8422] x64_sys_call+0x1015/0x2550 [ 138.651870][ T8422] do_syscall_64+0x112/0x360 [ 138.651892][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.651916][ T8422] [ 138.651922][ T8422] read to 0xffff88811b995ecc of 4 bytes by task 8422 on cpu 0: [ 138.651941][ T8422] xas_find_marked+0x602/0x650 [ 138.651969][ T8422] filemap_get_folios_tag+0xf7/0x400 [ 138.651997][ T8422] mpage_prepare_extent_to_map+0x32a/0xca0 [ 138.652031][ T8422] ext4_do_writepages+0xa10/0x2870 [ 138.652055][ T8422] ext4_writepages+0x191/0x300 [ 138.652090][ T8422] do_writepages+0x1b9/0x300 [ 138.652122][ T8422] file_write_and_wait_range+0x178/0x2f0 [ 138.652148][ T8422] ext4_sync_file+0x114/0x5c0 [ 138.652179][ T8422] vfs_fsync_range+0xc5/0xe0 [ 138.652206][ T8422] ext4_buffered_write_iter+0x427/0x480 [ 138.652239][ T8422] ext4_file_write_iter+0x36e/0x1020 [ 138.652264][ T8422] iter_file_splice_write+0x6a0/0xa60 [ 138.652286][ T8422] direct_splice_actor+0x158/0x280 [ 138.652310][ T8422] splice_direct_to_actor+0x2f9/0x680 [ 138.652335][ T8422] do_splice_direct+0x119/0x1a0 [ 138.652358][ T8422] do_sendfile+0x37d/0x640 [ 138.652382][ T8422] __x64_sys_sendfile64+0x105/0x150 [ 138.652405][ T8422] x64_sys_call+0x1015/0x2550 [ 138.652431][ T8422] do_syscall_64+0x112/0x360 [ 138.652455][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.652479][ T8422] [ 138.652483][ T8422] value changed: 0x05000021 -> 0x02000021 [ 138.652496][ T8422] [ 138.652501][ T8422] Reported by Kernel Concurrency Sanitizer on: [ 138.652513][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.2.1476 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.652541][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.652552][ T8422] ================================================================== [ 139.184422][ T8422] syz.2.1476 (8422) used greatest stack depth: 9144 bytes left [ 140.150248][ T8380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512