last executing test programs: 3m29.022278827s ago: executing program 3 (id=16): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40030002, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) socket$kcm(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008084) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000200)='\x00', 0x1) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r2, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) 3m28.878658972s ago: executing program 3 (id=17): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mkdir(0x0, 0x1a3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) memfd_create(0x0, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000640)='oom_score_adj\x00') writev(r6, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000100)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m27.834426155s ago: executing program 3 (id=22): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca000000000095"], 0x0}, 0x94) pselect6(0x40, &(0x7f0000000f80)={0x80000000, 0x1200, 0xffffffffffffffd5, 0x9, 0xfffffffffffffffa, 0x9, 0x5f, 0xfffffffffffffff7}, &(0x7f0000000fc0)={0x7, 0x0, 0x7, 0xff, 0x100, 0xf4e1, 0x2, 0x7}, &(0x7f0000001000)={0x6000000, 0xff, 0x5, 0x1f, 0x8, 0x2, 0xef70, 0xb7d}, &(0x7f0000001040)={0x0, 0x3938700}, &(0x7f00000010c0)={0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x300}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x1, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3m26.890534454s ago: executing program 3 (id=25): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x24810, r0, 0x64f72000) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) write$tun(r5, &(0x7f0000000200)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @remote, @mcast2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x34) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000001000)="ce090000", 0x0, 0x5dce, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) read(r6, &(0x7f0000001400)=""/4096, 0x1000) getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, @generic={0x80, 0x9, 0x9, 0xb, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000540)='syzkaller\x00', 0x40, 0x0, &(0x7f0000000580), 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xf, 0xfffffffb, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x3, 0x5, 0x7, 0x4}], 0x10, 0xdb}, 0x94) 3m24.841943659s ago: executing program 3 (id=32): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x3, 0x2, 0x2d, @remote, @mcast2, 0x8, 0x80, 0xfff}}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@delchain={0x3c, 0x65, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0xc}, {0xfff1, 0xe}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x0) 3m24.275892817s ago: executing program 3 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3m24.18014505s ago: executing program 32 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m36.252636054s ago: executing program 5 (id=312): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140029001000010000000000080000000000000a4c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000c08000340000000080800064000000000140000001000010000000000000000000084000a0000000000"], 0x74}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000100), 0x3}, 0x102802, 0x3, 0x2, 0x9, 0xfff, 0xfffffe01, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x40, 0x7ffc0002}]}) timer_delete(0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KDDELIO(r2, 0x7040, 0x6) sync() sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f00000001c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) 2m35.958918543s ago: executing program 5 (id=315): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000280)={[0x3]}, 0x8, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) r5 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r6, 0xffffffffffffffff, &(0x7f0000000080)={{r7, r8+10000000}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=[@rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x10}}], 0x40, 0x20010841}}], 0x1, 0x20040004) msgsnd(0x0, &(0x7f0000000e40)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r9], 0x8, 0x800) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000004c0)={0x2, 0x9, @start={r4, 0x0, "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", "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"}, [0xfffffffffffffffe, 0x8, 0x36e1, 0x6, 0xffffffffffffffff, 0x5, 0x7fffffffffffffff, 0x12000000000, 0x9, 0x3a06ecf6, 0xab89, 0x2, 0x6, 0xb, 0x3, 0x9, 0xa5a, 0xfffffffffffffffb, 0x4, 0xcc6c, 0x8, 0xf, 0x6, 0x50a845cb, 0x1, 0x2cd, 0x9, 0x3, 0x6, 0x8, 0x6, 0x723a, 0xd7f5, 0x4, 0x5, 0xa8d, 0x4b0, 0x75, 0xffffffffffffffff, 0x800, 0x0, 0x8000, 0x7, 0x5, 0x9, 0x9f, 0x7f, 0x0, 0x3ff, 0x652, 0x1, 0x352cf32d, 0x8c0f, 0x2, 0x9, 0x80000001, 0x2, 0x9, 0x111f, 0x5, 0xfffffffffffffffd, 0x8000000000000001, 0x7, 0x100]}) sendmsg$rds(r3, &(0x7f0000002c00)={&(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000f00)=""/171, 0xab}, {&(0x7f0000000fc0)=""/26, 0x1a}, {&(0x7f0000001000)=""/162, 0xa2}, {&(0x7f00000010c0)=""/173, 0xad}, {&(0x7f0000001180)=""/46, 0x2e}, {&(0x7f00000011c0)=""/58, 0x3a}, {&(0x7f0000001200)=""/168, 0xa8}], 0x8, &(0x7f0000002a80)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x19c0}, &(0x7f00000013c0)=0x7, &(0x7f0000001400)=0x1ff, 0x2, 0x80, 0xc32f, 0x3, 0x2, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0xfffffffa}, &(0x7f0000001440)=0x6c62, &(0x7f0000001480)=0x2, 0x4, 0x5, 0x918a, 0x0, 0x0, 0x400}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffff748, 0x9}, {&(0x7f00000014c0)=""/225, 0xe1}, &(0x7f00000029c0)=[{&(0x7f00000015c0)=""/22, 0x16}, {&(0x7f0000001600)=""/24, 0x18}, {&(0x7f0000001640)=""/73, 0x49}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x4, 0x11, 0x80000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0xb, 0x5481}, &(0x7f0000002a00)=0x4, &(0x7f0000002a40)=0x9, 0x101, 0x80, 0xe, 0x5, 0x4, 0x4}}], 0x150, 0x1}, 0x20040000) read$msr(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r12) r13 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGRAB(r13, 0x40044590, &(0x7f0000000100)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m35.42447633s ago: executing program 5 (id=319): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x6, &(0x7f00000003c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x1}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.279481905s ago: executing program 5 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000000)=ANY=[@ANYBLOB="6e725f696e6f64af13bda4dc47"]) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10e0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x24400, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) r2 = getpid() r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x18) move_mount(r3, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x40) syz_clone(0x40000, &(0x7f0000000280)="0d8b1d3234169fa2cd3174c210f637ba8b6beb8d6f8e3af0b1a5b48831c0ead9", 0x20, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="cb845880059ffd2837994d9b6550919414163cfb5be0af149ee938e1a1541171892661e2aa5c610d243c2aba02f39ebfc8d98e9d011f5fc3db662812e12d4b335fb25e5d8d0a0a80bb527cf7587c55802767a1c527152c6b95fd0c101cfc951d78e5bd681cd3d1ed138f6badc64e9bc915715c9d44092bd830910d798266587e28a6dbcc02a9d1ef898fb15865055d5ce07ffbfbfd95830fb1053c53b3f455d5f4b3306106d5fcafdf451016acfb4eb6fbe20bba") ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000640)={0x1ff, 0x8, 0x689, 0x7, 0x9c, "934a6d0a437cd28d45bb6c60050e91d3a45800", 0x32, 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a300000000064000000060a1104e2ff0000000000000500000008000b40000000000900010073797a30000000003c0004803800018008000100667764"], 0xd8}}, 0x0) r5 = syz_pidfd_open(r2, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x42208c00, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x801021, 0x0) 2m35.1197377s ago: executing program 5 (id=322): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x24) clock_gettime(0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'syz_tun\x00', 0x1}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0) ptrace$setopts(0x6, r1, 0xca9c, 0x100020) unshare(0x2a020400) r4 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_disconnect(r4) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bind$inet6(r5, 0x0, 0x0) pwritev2(r5, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r6, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000300)=""/21, 0x15}], 0x2, 0x0, 0x0, 0x0) 2m34.844073009s ago: executing program 5 (id=327): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2m34.838872999s ago: executing program 33 (id=327): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3.726811062s ago: executing program 6 (id=1261): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x216810, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000000a00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async) r1 = shmget$private(0x0, 0x400000, 0x100, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) waitid(0x1, r2, 0x0, 0x4, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20011) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x5, 0x0) 3.600073327s ago: executing program 6 (id=1262): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="b9cd14", 0x3}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x20008000) (fail_nth: 2) 3.216514839s ago: executing program 6 (id=1265): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f0000000b00)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$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") alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) alarm(0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(r4, r6) 2.564057759s ago: executing program 4 (id=1268): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 2.5322208s ago: executing program 0 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.816029093s ago: executing program 1 (id=1271): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00006e3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.741802775s ago: executing program 4 (id=1273): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe", @ANYRES64], 0x24}}, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001900)=ANY=[@ANYBLOB="e4000000000807030000000000000000000000001c00048008000240000080010800014080000000080002400000a74d2c0004800800014000000003080002400000010108000240000000040800014000000003080001400000000605000300840000002400048008000140000000050800014000010001080001400000247b080001400000000406000240888400000900010073797a3100000000340004800800064000000004080003400000dbe708000240ffff7fff080005"], 0xe4}, 0x1, 0x0, 0x0, 0x400c850}, 0x40000) getpeername(r2, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) read(r2, &(0x7f0000000cc0)=""/245, 0xf5) r4 = socket(0x27, 0x800, 0xbac0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.717180116s ago: executing program 1 (id=1274): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x11}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.644013898s ago: executing program 0 (id=1275): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x11}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.526084802s ago: executing program 4 (id=1277): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000580)={{&(0x7f0000000240)=[{0x7, 0x192, 0x5, {0x21, 0x4}, 0x7fff, 0x3f, 0x2}, {0x9, 0xfff, 0x2, {0x9, 0x6}, 0x0, 0x800}, {0x0, 0x10b6, 0x523, {0x5, 0x2}, 0x6, 0x3, 0x5}, {0x0, 0xaf2, 0x3, {0xa0000, 0xd232}, 0x73e8af2e, 0x3, 0x10000}, {0x7, 0x9, 0x6, {0xfffffffffffffffa, 0x8}, 0x2, 0xff, 0x5}, {0x1000, 0x20c, 0x7, {0x88, 0x2}, 0x400, 0x8, 0x1}, {0xc, 0x6, 0x7d, {0x68fcff62, 0x100000001}, 0x5, 0x271d, 0xfffffffe}], 0x7, 0x40, 0x100, 0x6}, {&(0x7f0000000400)=[{0x4, 0x3ff}, {0xfffffffffffffff8, 0x8000000000}, {0xd3bf, 0x4}], 0x3, 0x10, 0x5, 0x3e4}, {&(0x7f0000000480)=[0x80000001, 0x1, 0x9], 0x3, 0x8, 0x8, 0x8}, {&(0x7f00000004c0)=[{0x6f0, 0x1, 0x9, 0x30, 0x80}, {0x2c, 0x1, 0xcf24, 0xf03f, 0xfffffff8}, {0x0, 0xa41, 0x7, 0xffffffffffffffff, 0x4}], 0x3, 0x28, 0x9, 0x5}, {&(0x7f0000000540)=[0x7fffffffffffffff, 0x401], 0x2, 0x8, 0x0, 0x1}}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14800000420611f5ff000000000000000000ffc2"], 0x14}}, 0x40000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mremap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) read$char_usb(r2, &(0x7f0000000600)=""/200, 0xc8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000700)={0x0, 0x7, 0x7c}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b00)={r5, 0x9, 0x1, [0x5, 0x5, 0x0, 0x3, 0x4b], [0x8, 0x0, 0x6, 0xb5fa, 0x1, 0x2, 0x8, 0x0, 0x1, 0x2, 0x1ff, 0x2, 0x4a5d, 0x9, 0x40bf, 0x2, 0x1e63, 0x8000000000000001, 0x6, 0x6, 0x0, 0xfffffffffffffff8, 0xa67, 0x3, 0x0, 0x5, 0x9f, 0x2, 0x80, 0x6, 0x7, 0x796, 0x1, 0x3, 0xcd00, 0xc59, 0x81, 0x6, 0x3, 0x3, 0x59, 0x2, 0x4e83, 0x5, 0xffffffffffffffff, 0x2862, 0x7c5ff241, 0x3ff, 0x8, 0xeb7, 0x5, 0x2, 0x2, 0x9, 0xffffffff, 0x9, 0xb, 0x8000000000000000, 0x1, 0x68, 0x9, 0xee5, 0xffff, 0x4, 0xc, 0x7, 0x8, 0x9524, 0xa5, 0x2, 0x8, 0x3, 0x87, 0x101, 0x4a12a85c, 0x3, 0x7ff, 0xfffffffffffffffc, 0x3, 0x7, 0x200, 0xf, 0x5, 0xe, 0x100, 0xfff, 0x3, 0x10000, 0x780, 0x3, 0x400, 0x52, 0x101, 0xa, 0x215b, 0x6, 0xf, 0xd, 0x2, 0x0, 0xa, 0x4, 0x8, 0xa8, 0x6, 0x7, 0x9, 0x5, 0xd546, 0x4, 0x7fff, 0x251, 0x8, 0x5, 0x9, 0xffffffffffffe7ab, 0x81, 0x1, 0x8, 0x3, 0x6]}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x4008000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1.497500313s ago: executing program 2 (id=1278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4044090) 1.452310464s ago: executing program 0 (id=1279): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="b9cd14", 0x3}, {&(0x7f0000000380)}], 0x2}}], 0x1, 0x20008000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) 1.331648668s ago: executing program 1 (id=1280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x10020, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10040, 0x0) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x1, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2901, 0x7ffffffb, 0x7, 0x802, 0xc3ef514}, 0x41, 0x1000) io_setup(0x80000000, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x14, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0) 1.216033641s ago: executing program 2 (id=1281): open(0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0xf}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x44) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/44, 0x2c, 0x103, 0x4, 0x6, 0x5, 0xc04}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000500)=""/155, 0x9b}, {0x0}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) 1.086795236s ago: executing program 6 (id=1282): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00080a20000000000a01020000000000000000030020020900010073797a31000000002c000000020a01030000000000000000050000040900010073797a310000000004140000001100010000000000000000000700000a00"/116], 0x74}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000100)="01cdcd94d28552a41ab02a7f53d757ff313eb6cfddf4dbc7187c1e1980b5419dee64232e4a20b4b5791ba33119756fe3307f7bdd163a1229a3f52f242139c3fe342936e3da95e2598e63d4d25afa0b309ca7650da88c7901da822c12c324edbec53634454c700b0666529946867d1cb19ca19abaeed3e5bb60085a3e53", &(0x7f00000001c0)=""/42, &(0x7f0000000200)="2d46ec3678b085804ce6bddcda1beb5572eca5a2af9e3018d8fa38b6af", &(0x7f0000000240)="93070a84934257129ae9b41451", 0x7, r3, 0x4}, 0x38) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x6}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x7, 0x16, 0x6, 0xfff7, 0x8, {0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}, 0x105, 0x9, 0x9, 0x1, 0x80000000}}, &(0x7f0000000540)=0xb0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000700)={&(0x7f00000005c0)=[{0x3, 0x1, 0x0, {0x4}}, {0x3, 0x2, 0x0, {0x9, 0x10000, 0x1}}, {0x2, 0x2, 0x0, {0x7, 0x6, 0x1}}, {0x1, 0x1, 0x0, {0xfff, 0xe8, 0x1}}, {0x9, 0x0, 0x0, {0x4, 0xbd, 0x2}}, {0x6, 0x2, 0x0, {0xae, 0x5}}, {0x5, 0x2, 0x0, {0x6406, 0x4, 0x2}}, {0x15, 0x0, 0x0, {0xec6, 0x6}}, {0x5, 0x1, 0x0, {0x5, 0x4}}], 0x9, 0x20, 0x3ff, 0x3}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000280)={r5, 0x81, 0x10}, &(0x7f0000000080)=0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r8, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000003c0)={r6, 0x4b, "587bc1b5184197cc7dbd3c56020db9a2aa126d4b76122d136e53303e30d57dc85cc171e3ba0bf9e7ef29f92056dc4121299d6707cac7a6e10b360ff1199e5e74b2e448bff807dc771182d5"}, &(0x7f0000000440)=0x53) sendto$inet6(r0, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) 1.024593548s ago: executing program 2 (id=1283): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x20000001}, 0x995d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) sendfile(r2, r2, 0x0, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, 0x0) 967.961699ms ago: executing program 6 (id=1284): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00006e3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 892.224641ms ago: executing program 6 (id=1285): prlimit64(0x0, 0x2, &(0x7f0000000140)={0x1, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r4}}, 0x20) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00feff020200", 0x6, 0xfffffffffffffffc) 820.745674ms ago: executing program 1 (id=1286): socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4044881) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, 0x0, 0x8010) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x100080, 0x10003, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x640100ff, 0x0, 0x1, 'lblcr\x00', 0x0, 0xffffffff, 0x1e}, 0x2c) 679.299879ms ago: executing program 1 (id=1287): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="1400000015000b63d25a9a648c0f9de73d2e4a1d", 0x14}], 0x1}, 0x2000c884) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="740000007600a9dc05baffff9db77085fc00000000184eab5c0001000000ffffffff9eadebbfe8fb3bda8a2edce97202d8e8424b0aae2b06f3cc7b394f81158445eb96b10edc5866664ea95cb8749a7b824b2869cccf0f8fe4b7771724d3fcf46f1a00ef29bf690a2a01ec9a5e9fae01d9fcbcbb", 0x74}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setregid(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe"], 0x24}}, 0x4000000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000740)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@noauto_da_alloc}, {@nodioread_nolock}, {@minixdf}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}], [{@flag='rw'}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7140000"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 675.510729ms ago: executing program 2 (id=1288): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000280), 0xc}, 0x2404, 0xf, 0x2, 0x7, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000000010000060000000400000000040200", @ANYRES32=r1, @ANYBLOB="0700000000000000000100000000000000b50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000030000000900"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00B\x00\x00\x00\b'], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r4, r5}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="080001"], 0x90}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, 0x0, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x2318f000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) socket$rds(0x15, 0x5, 0x0) unshare(0x22020600) 523.900324ms ago: executing program 4 (id=1289): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xffffffffffffc, 0x9}, 0x102270, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) write$selinux_load(r6, 0x0, 0x4b75) sendmsg$NFT_BATCH(r5, 0xfffffffffffffffd, 0x40051) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000280)=""/90, 0x5a) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) preadv2(r7, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000540)=""/37, 0x25}], 0x2, 0x3, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000640), 0x1, 0x5d7, &(0x7f0000000e40)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 516.225894ms ago: executing program 0 (id=1290): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x11}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 447.391276ms ago: executing program 0 (id=1291): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101400, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000780)={{&(0x7f00000006c0)=""/120, 0x78}, &(0x7f0000000740), 0x10}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xcd64732a17f9af38}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x98, 0x2, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x28, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 296.36084ms ago: executing program 0 (id=1292): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./file1\x00', 0x2480444, &(0x7f0000000b00)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="a23b938eabd9436fab39ce57cea13a51c01bc66294352ad6bef3146e17bc31a3747487afeec021ffa241286224d8d7f7acaeb35caad3706b002845f7c1845411ea21248adb20921e0b92a930f3d70e26d279b8ee4a98ff473a41141674200dea402768967bc703cfef6f354f6770c8c9fde0d34d2072bd7ddcd262fbf1bbbf36045c00000000000000"], 0x1, 0x267, &(0x7f0000000740)="$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") alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) alarm(0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(r4, r6) 295.643941ms ago: executing program 4 (id=1293): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe", @ANYRES64], 0x24}}, 0x4000000) r0 = socket(0x10, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 248.564173ms ago: executing program 1 (id=1294): socket(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x4400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffd, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x6, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x6, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fe, 0x6, 0x40000003, 0x49, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0x80000d}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x3, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x853}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x5, 0x10000, 0x6, 0x4}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x9, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x49, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x3, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x7, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x88}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x81, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) 247.683113ms ago: executing program 2 (id=1295): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00006e3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 31.110139ms ago: executing program 4 (id=1296): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000075000000000000000200040085000000280000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd84550d3abc8b1c72ca1", 0x0, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x800000, 0x7, 0x4, 0x8, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20040054) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48) 0s ago: executing program 2 (id=1297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x10020, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x10040, 0x0) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0x1, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x2901, 0x7ffffffb, 0x7, 0x802, 0xc3ef514}, 0x41, 0x1000) io_setup(0x80000000, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x14, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0) kernel console output (not intermixed with test programs): tory bread(block 64) failed [ 182.988294][ T7021] FAT-fs (loop4): Directory bread(block 65) failed [ 182.994999][ T7021] FAT-fs (loop4): Directory bread(block 66) failed [ 183.004015][ T7021] FAT-fs (loop4): Directory bread(block 67) failed [ 183.011510][ T7021] FAT-fs (loop4): Directory bread(block 68) failed [ 183.018099][ T7021] FAT-fs (loop4): Directory bread(block 69) failed [ 183.045080][ T7021] FAT-fs (loop4): Directory bread(block 70) failed [ 183.071801][ T7021] FAT-fs (loop4): Directory bread(block 71) failed [ 183.078406][ T7021] FAT-fs (loop4): Directory bread(block 72) failed [ 183.084934][ T7021] FAT-fs (loop4): Directory bread(block 73) failed [ 183.229397][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 183.229442][ T28] audit: type=1400 audit(1778948710.861:1817): avc: denied { read write } for pid=7029 comm="syz.1.877" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.260651][ T28] audit: type=1400 audit(1778948710.891:1818): avc: denied { open } for pid=7029 comm="syz.1.877" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.272615][ T7030] loop1: detected capacity change from 0 to 512 [ 183.290901][ T28] audit: type=1400 audit(1778948710.891:1819): avc: denied { ioctl } for pid=7029 comm="syz.1.877" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.317034][ T28] audit: type=1400 audit(1778948710.891:1820): avc: denied { bind } for pid=7029 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.345790][ T7030] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.356731][ T7030] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 183.455890][ T7038] loop6: detected capacity change from 0 to 8192 [ 183.524937][ T7038] loop6: p1 < > p2 p4 < > [ 183.543348][ T7038] loop6: partition table partially beyond EOD, truncated [ 183.569161][ T7038] loop6: p1 start 134217728 is beyond EOD, truncated [ 183.591923][ T7038] loop6: p2 size 591360 extends beyond EOD, truncated [ 183.600647][ T7051] loop1: detected capacity change from 0 to 512 [ 183.620143][ T7051] EXT4-fs: Ignoring removed bh option [ 183.635739][ T7051] EXT4-fs: inline encryption not supported [ 183.653531][ T7051] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.684715][ T7051] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 183.724827][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 183.735807][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 183.778800][ T7051] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.882: bg 0: block 248: padding at end of block bitmap is not set [ 183.796584][ T7051] loop1: lost filesystem error report for type 5 error -117 [ 183.796884][ T7051] Quota error (device loop1): write_blk: dquota write failed [ 183.804266][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 183.804305][ C0] EXT4-fs (loop1): last error at time 1778948711: ext4_validate_block_bitmap:441 [ 183.836210][ T7057] loop0: detected capacity change from 0 to 256 [ 183.859243][ T7051] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 183.869318][ T7051] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.882: Failed to acquire dquot type 1 [ 183.880796][ T7051] loop1: lost filesystem error report for type 5 error -28 [ 183.893268][ T7051] EXT4-fs (loop1): 1 truncate cleaned up [ 183.906825][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 183.934816][ T28] audit: type=1326 audit(1778948711.571:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.1.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 183.966952][ T28] audit: type=1326 audit(1778948711.571:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.1.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 184.017584][ T28] audit: type=1326 audit(1778948711.571:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.1.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 184.053206][ T28] audit: type=1326 audit(1778948711.571:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7048 comm="syz.1.882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 184.206992][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.886'. [ 184.331563][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 185.001285][ T7076] tipc: Started in network mode [ 185.007847][ T7076] tipc: Node identity 4, cluster identity 4711 [ 185.015560][ T7076] tipc: Node number set to 4 [ 185.074347][ T7084] FAT-fs (loop1): Directory bread(block 64) failed [ 185.081155][ T7084] FAT-fs (loop1): Directory bread(block 65) failed [ 185.087782][ T7084] FAT-fs (loop1): Directory bread(block 66) failed [ 185.096044][ T7084] FAT-fs (loop1): Directory bread(block 67) failed [ 185.102683][ T7084] FAT-fs (loop1): Directory bread(block 68) failed [ 185.109368][ T7084] FAT-fs (loop1): Directory bread(block 69) failed [ 185.116181][ T7084] FAT-fs (loop1): Directory bread(block 70) failed [ 185.122900][ T7084] FAT-fs (loop1): Directory bread(block 71) failed [ 185.362838][ T7086] set_capacity_and_notify: 2 callbacks suppressed [ 185.362856][ T7086] loop0: detected capacity change from 0 to 512 [ 185.376980][ T7084] FAT-fs (loop1): Directory bread(block 72) failed [ 185.388486][ T7084] FAT-fs (loop1): Directory bread(block 73) failed [ 185.397392][ T7086] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.892: inode has both inline data and extents flags [ 185.411624][ T7086] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.429337][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 185.438622][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 185.438652][ C1] EXT4-fs (loop0): initial error at time 1778948713: ext4_orphan_get:1397: inode 15 [ 185.438741][ C1] EXT4-fs (loop0): last error at time 1778948713: ext4_orphan_get:1397: inode 15 [ 185.483632][ T7086] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.892: couldn't read orphan inode 15 (err -117) [ 185.515803][ T7086] loop0: lost filesystem error report for type 5 error -117 [ 185.534876][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.661878][ T7095] Invalid argument reading file caps for ./file0 [ 186.177649][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.357973][ T7106] loop0: detected capacity change from 0 to 512 [ 186.385085][ T7106] EXT4-fs: Ignoring removed bh option [ 186.397813][ T7106] EXT4-fs: inline encryption not supported [ 186.412943][ T7106] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.433850][ T7106] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.465419][ T7106] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.898: bg 0: block 248: padding at end of block bitmap is not set [ 186.491429][ T7106] loop0: lost filesystem error report for type 5 error -117 [ 186.495920][ T7106] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.898: Failed to acquire dquot type 1 [ 186.511051][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 186.522178][ C1] EXT4-fs (loop0): last error at time 1778948714: ext4_validate_block_bitmap:441 [ 186.536490][ T7106] loop0: lost filesystem error report for type 5 error -28 [ 186.536784][ T7098] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 186.572521][ T7106] EXT4-fs (loop0): 1 truncate cleaned up [ 186.591573][ T7106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 186.617420][ T7115] FAULT_INJECTION: forcing a failure. [ 186.617420][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.634128][ T7115] CPU: 0 UID: 0 PID: 7115 Comm: syz.6.901 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.634167][ T7115] Tainted: [W]=WARN [ 186.634176][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.634198][ T7115] Call Trace: [ 186.634205][ T7115] [ 186.634214][ T7115] __dump_stack+0x1d/0x30 [ 186.634248][ T7115] dump_stack_lvl+0x95/0xd0 [ 186.634273][ T7115] dump_stack+0x15/0x1b [ 186.634292][ T7115] should_fail_ex+0x263/0x280 [ 186.634426][ T7115] should_fail+0xb/0x20 [ 186.634458][ T7115] should_fail_usercopy+0x1a/0x20 [ 186.634578][ T7115] _copy_from_iter+0xcf/0xea0 [ 186.634694][ T7115] ? __alloc_skb+0x4f6/0x690 [ 186.634717][ T7115] ? __alloc_skb+0x200/0x690 [ 186.634742][ T7115] netlink_sendmsg+0x4ae/0x6f0 [ 186.634783][ T7115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.634895][ T7115] ____sys_sendmsg+0x563/0x5b0 [ 186.634929][ T7115] ___sys_sendmsg+0x195/0x1e0 [ 186.634975][ T7115] __x64_sys_sendmsg+0xd4/0x160 [ 186.635083][ T7115] x64_sys_call+0x194c/0x3020 [ 186.635114][ T7115] do_syscall_64+0x12c/0x3b0 [ 186.635152][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.635235][ T7115] RIP: 0033:0x7f4061bdce59 [ 186.635263][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.635285][ T7115] RSP: 002b:00007f4060637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.635380][ T7115] RAX: ffffffffffffffda RBX: 00007f4061e55fa0 RCX: 00007f4061bdce59 [ 186.635474][ T7115] RDX: 0000000000004840 RSI: 0000200000000200 RDI: 0000000000000003 [ 186.635491][ T7115] RBP: 00007f4060637090 R08: 0000000000000000 R09: 0000000000000000 [ 186.635513][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.635563][ T7115] R13: 00007f4061e56038 R14: 00007f4061e55fa0 R15: 00007fffc95e3308 [ 186.635588][ T7115] [ 186.991135][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 187.010416][ T7126] loop6: detected capacity change from 0 to 256 [ 187.071926][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.907'. [ 187.152823][ T7136] netlink: 700 bytes leftover after parsing attributes in process `syz.0.905'. [ 187.176639][ T7135] loop1: detected capacity change from 0 to 256 [ 187.200165][ T7135] FAT-fs (loop1): Directory bread(block 64) failed [ 187.206791][ T7135] FAT-fs (loop1): Directory bread(block 65) failed [ 187.214101][ T7135] FAT-fs (loop1): Directory bread(block 66) failed [ 187.220641][ T7135] FAT-fs (loop1): Directory bread(block 67) failed [ 187.227218][ T7135] FAT-fs (loop1): Directory bread(block 68) failed [ 187.233760][ T7135] FAT-fs (loop1): Directory bread(block 69) failed [ 187.240355][ T7135] FAT-fs (loop1): Directory bread(block 70) failed [ 187.246924][ T7135] FAT-fs (loop1): Directory bread(block 71) failed [ 187.255839][ T7135] FAT-fs (loop1): Directory bread(block 72) failed [ 187.262370][ T7135] FAT-fs (loop1): Directory bread(block 73) failed [ 187.588258][ T7140] loop2: detected capacity change from 0 to 256 [ 187.696145][ T7140] FAT-fs (loop2): Directory bread(block 64) failed [ 187.702713][ T7140] FAT-fs (loop2): Directory bread(block 65) failed [ 187.709354][ T7140] FAT-fs (loop2): Directory bread(block 66) failed [ 187.716109][ T7140] FAT-fs (loop2): Directory bread(block 67) failed [ 187.722821][ T7140] FAT-fs (loop2): Directory bread(block 68) failed [ 187.729416][ T7140] FAT-fs (loop2): Directory bread(block 69) failed [ 187.735961][ T7140] FAT-fs (loop2): Directory bread(block 70) failed [ 187.742532][ T7140] FAT-fs (loop2): Directory bread(block 71) failed [ 187.749103][ T7140] FAT-fs (loop2): Directory bread(block 72) failed [ 187.755768][ T7140] FAT-fs (loop2): Directory bread(block 73) failed [ 188.224632][ T7149] loop4: detected capacity change from 0 to 512 [ 188.304231][ T7149] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 327694: comm syz.4.911: lblock 0 mapped to illegal pblock 327694 (length 1) [ 188.319360][ T7149] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 188.319966][ T7149] EXT4-fs (loop4): 1 orphan inode deleted [ 188.329171][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 188.329194][ C0] EXT4-fs (loop4): initial error at time 1778948715: ext4_map_blocks:791: inode 11: block 327694 [ 188.329235][ C0] EXT4-fs (loop4): last error at time 1778948715: ext4_map_blocks:791: inode 11: block 327694 [ 188.426250][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.799775][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 188.799793][ T28] audit: type=1400 audit(1778948716.431:1845): avc: denied { getopt } for pid=7152 comm="syz.2.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.838692][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.852626][ T28] audit: type=1400 audit(1778948716.471:1846): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 188.976508][ T7162] loop6: detected capacity change from 0 to 512 [ 189.025890][ T7162] netlink: 168 bytes leftover after parsing attributes in process `syz.6.916'. [ 189.048370][ T7165] loop0: detected capacity change from 0 to 512 [ 189.073292][ T7165] EXT4-fs: Ignoring removed bh option [ 189.110042][ T7165] EXT4-fs: inline encryption not supported [ 189.127909][ T7172] loop2: detected capacity change from 0 to 256 [ 189.143733][ T7165] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.293319][ T28] audit: type=1326 audit(1778948716.891:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.4.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 189.464574][ T7165] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 189.536146][ T7165] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.915: bg 0: block 248: padding at end of block bitmap is not set [ 189.590741][ T7165] loop0: lost filesystem error report for type 5 error -117 [ 189.591410][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 189.605225][ C1] EXT4-fs (loop0): last error at time 1778948717: ext4_validate_block_bitmap:441 [ 189.617769][ T7165] Quota error (device loop0): write_blk: dquota write failed [ 189.643164][ T7165] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 189.696861][ T7165] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.915: Failed to acquire dquot type 1 [ 189.767138][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.923'. [ 189.782015][ T7165] loop0: lost filesystem error report for type 5 error -28 [ 189.782729][ T7165] EXT4-fs (loop0): 1 truncate cleaned up [ 189.838448][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 189.856888][ T7165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 189.961196][ T28] audit: type=1326 audit(1778948716.891:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.4.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 189.987853][ T28] audit: type=1326 audit(1778948716.901:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.4.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 190.017508][ T28] audit: type=1326 audit(1778948716.901:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.4.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 190.055770][ T28] audit: type=1326 audit(1778948716.901:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.4.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 190.099812][ T7195] netlink: 'syz.6.924': attribute type 1 has an invalid length. [ 190.108858][ T28] audit: type=1326 audit(1778948716.901:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.4.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 190.147400][ T7197] FAULT_INJECTION: forcing a failure. [ 190.147400][ T7197] name failslab, interval 1, probability 0, space 0, times 0 [ 190.164154][ T7195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.173709][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.2.925 Tainted: G W syzkaller #0 PREEMPT(full) [ 190.173748][ T7197] Tainted: [W]=WARN [ 190.173755][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.173768][ T7197] Call Trace: [ 190.173774][ T7197] [ 190.173782][ T7197] __dump_stack+0x1d/0x30 [ 190.173811][ T7197] dump_stack_lvl+0x95/0xd0 [ 190.173838][ T7197] dump_stack+0x15/0x1b [ 190.173862][ T7197] should_fail_ex+0x263/0x280 [ 190.173896][ T7197] should_failslab+0x8c/0xb0 [ 190.173982][ T7197] __kmalloc_noprof+0xb8/0x4d0 [ 190.174014][ T7197] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 190.174088][ T7197] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 190.174124][ T7197] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 190.174144][ T7197] ? selinux_capable+0x31/0x40 [ 190.174175][ T7197] ? security_capable+0x7b/0x90 [ 190.174252][ T7197] ? ns_capable+0x7c/0xb0 [ 190.174285][ T7197] genl_rcv_msg+0x432/0x470 [ 190.174305][ T7197] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 190.174418][ T7197] netlink_rcv_skb+0x123/0x220 [ 190.174445][ T7197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.174469][ T7197] genl_rcv+0x28/0x40 [ 190.174541][ T7197] netlink_unicast+0x5a8/0x680 [ 190.174638][ T7197] netlink_sendmsg+0x5c8/0x6f0 [ 190.174706][ T7197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.174756][ T7197] ____sys_sendmsg+0x563/0x5b0 [ 190.174783][ T7197] ___sys_sendmsg+0x195/0x1e0 [ 190.174818][ T7197] __x64_sys_sendmsg+0xd4/0x160 [ 190.174845][ T7197] x64_sys_call+0x194c/0x3020 [ 190.174929][ T7197] do_syscall_64+0x12c/0x3b0 [ 190.174966][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.174995][ T7197] RIP: 0033:0x7fc676e3ce59 [ 190.175015][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.175062][ T7197] RSP: 002b:00007fc675876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.175081][ T7197] RAX: ffffffffffffffda RBX: 00007fc6770b6090 RCX: 00007fc676e3ce59 [ 190.175120][ T7197] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 190.175137][ T7197] RBP: 00007fc675876090 R08: 0000000000000000 R09: 0000000000000000 [ 190.175154][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.175169][ T7197] R13: 00007fc6770b6128 R14: 00007fc6770b6090 R15: 00007ffcce51fe68 [ 190.175194][ T7197] [ 190.411992][ T7198] bond1: entered promiscuous mode [ 190.417236][ T7198] bond1: entered allmulticast mode [ 190.440503][ T7195] macvlan2: entered promiscuous mode [ 190.446017][ T7195] macvlan2: entered allmulticast mode [ 190.452090][ T7195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.591539][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 190.741036][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.930'. [ 190.762427][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.930'. [ 190.794214][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 190.947734][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.932'. [ 190.978029][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.931'. [ 191.049809][ T7225] loop4: detected capacity change from 0 to 256 [ 191.142569][ T7230] netlink: 92 bytes leftover after parsing attributes in process `syz.0.933'. [ 191.828455][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.838277][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.225586][ T7243] loop0: detected capacity change from 0 to 2048 [ 192.238017][ T7240] loop6: detected capacity change from 0 to 512 [ 192.255121][ T7240] EXT4-fs: Ignoring removed bh option [ 192.260568][ T7240] EXT4-fs: inline encryption not supported [ 192.268631][ T7240] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.280976][ T7246] loop1: detected capacity change from 0 to 512 [ 192.288190][ T7246] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 192.330416][ T7240] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 192.352744][ T7243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.369023][ T7240] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.939: bg 0: block 248: padding at end of block bitmap is not set [ 192.386621][ T7243] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.397210][ T7253] loop1: detected capacity change from 0 to 512 [ 192.397808][ T7240] loop6: lost filesystem error report for type 5 error -117 [ 192.431413][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 192.433145][ T7253] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 192.438752][ C1] EXT4-fs (loop6): last error at time 1778948720: ext4_validate_block_bitmap:441 [ 192.445170][ T7253] EXT4-fs: error: could not find journal device path [ 192.475561][ C1] [ 192.478985][ T7240] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.939: Failed to acquire dquot type 1 [ 192.496870][ T7240] loop6: lost filesystem error report for type 5 error -28 [ 192.497521][ T7240] EXT4-fs (loop6): 1 truncate cleaned up [ 192.513695][ T7240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 192.545159][ T7255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.940: bg 0: block 345: padding at end of block bitmap is not set [ 192.577613][ T7253] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.942'. [ 192.580903][ T7255] EXT4-fs (loop0): Remounting filesystem read-only [ 192.593548][ T4053] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 192.642467][ T7257] netlink: 'syz.1.943': attribute type 9 has an invalid length. [ 192.662769][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.804951][ T7268] loop4: detected capacity change from 0 to 256 [ 192.834252][ T7268] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 192.867403][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 192.883153][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 192.932973][ T7274] FAULT_INJECTION: forcing a failure. [ 192.932973][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 192.964413][ T7281] loop6: detected capacity change from 0 to 256 [ 192.983816][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.1.949 Tainted: G W syzkaller #0 PREEMPT(full) [ 192.983858][ T7274] Tainted: [W]=WARN [ 192.983867][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.983882][ T7274] Call Trace: [ 192.983889][ T7274] [ 192.983896][ T7274] __dump_stack+0x1d/0x30 [ 192.983928][ T7274] dump_stack_lvl+0x95/0xd0 [ 192.983948][ T7274] dump_stack+0x15/0x1b [ 192.983968][ T7274] should_fail_ex+0x263/0x280 [ 192.984002][ T7274] should_failslab+0x8c/0xb0 [ 192.984101][ T7274] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 192.984146][ T7274] ? __alloc_skb+0x2d6/0x690 [ 192.984169][ T7274] __alloc_skb+0x2d6/0x690 [ 192.984192][ T7274] ? __alloc_skb+0x200/0x690 [ 192.984268][ T7274] netlink_alloc_large_skb+0xbf/0xf0 [ 192.984303][ T7274] netlink_sendmsg+0x40c/0x6f0 [ 192.984390][ T7274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.984451][ T7274] ____sys_sendmsg+0x563/0x5b0 [ 192.984477][ T7274] ___sys_sendmsg+0x195/0x1e0 [ 192.984518][ T7274] __x64_sys_sendmsg+0xd4/0x160 [ 192.984669][ T7274] x64_sys_call+0x194c/0x3020 [ 192.984693][ T7274] do_syscall_64+0x12c/0x3b0 [ 192.984724][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.984808][ T7274] RIP: 0033:0x7fd8fe93ce59 [ 192.984829][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.984848][ T7274] RSP: 002b:00007fd8fd38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.984873][ T7274] RAX: ffffffffffffffda RBX: 00007fd8febb5fa0 RCX: 00007fd8fe93ce59 [ 192.984892][ T7274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 192.984911][ T7274] RBP: 00007fd8fd38f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.984924][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.984936][ T7274] R13: 00007fd8febb6038 R14: 00007fd8febb5fa0 R15: 00007fff70120928 [ 192.984962][ T7274] [ 193.915901][ T7296] loop1: detected capacity change from 0 to 2048 [ 194.083801][ T7296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.183160][ T7296] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.195104][ T3630] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 194.362988][ T7335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 194.384915][ T7335] EXT4-fs (loop1): Remounting filesystem read-only [ 194.503493][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 194.503511][ T28] audit: type=1326 audit(1778948722.141:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.4.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 194.560057][ T28] audit: type=1326 audit(1778948722.141:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.4.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 194.597295][ T28] audit: type=1326 audit(1778948722.141:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.4.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 194.667038][ T28] audit: type=1326 audit(1778948722.241:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.4.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 194.743058][ T28] audit: type=1326 audit(1778948722.241:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.4.955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa91dce59 code=0x7ffc0000 [ 194.927234][ T7352] loop6: detected capacity change from 0 to 512 [ 194.980673][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.981165][ T7352] EXT4-fs: Ignoring removed bh option [ 195.039466][ T7352] EXT4-fs: inline encryption not supported [ 195.060671][ T7352] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.093647][ T28] audit: type=1400 audit(1778948722.731:1947): avc: denied { setopt } for pid=7353 comm="syz.4.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.206176][ T7352] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.212567][ T28] audit: type=1400 audit(1778948722.821:1948): avc: denied { ioctl } for pid=7353 comm="syz.4.960" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17355 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.274833][ T7352] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.959: bg 0: block 248: padding at end of block bitmap is not set [ 195.310840][ T7352] loop6: lost filesystem error report for type 5 error -117 [ 195.311374][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 195.325187][ C0] EXT4-fs (loop6): last error at time 1778948722: ext4_validate_block_bitmap:441 [ 195.336408][ T7352] Quota error (device loop6): write_blk: dquota write failed [ 195.340460][ T7368] __nla_validate_parse: 4 callbacks suppressed [ 195.340578][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 195.364307][ T7352] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 195.387723][ T7352] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.959: Failed to acquire dquot type 1 [ 195.437655][ T7352] loop6: lost filesystem error report for type 5 error -28 [ 195.446537][ T7352] EXT4-fs (loop6): 1 truncate cleaned up [ 195.485305][ T7352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.549648][ T7382] loop4: detected capacity change from 0 to 512 [ 195.583054][ T7382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.596977][ T7382] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.609555][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 195.627507][ T28] audit: type=1400 audit(1778948723.261:1949): avc: denied { write } for pid=7380 comm="syz.4.966" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.826842][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 197.834774][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.874755][ T7391] loop6: detected capacity change from 0 to 256 [ 198.153693][ T7407] FAULT_INJECTION: forcing a failure. [ 198.153693][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.198420][ T7409] loop0: detected capacity change from 0 to 4096 [ 198.227143][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.6.973 Tainted: G W syzkaller #0 PREEMPT(full) [ 198.227179][ T7407] Tainted: [W]=WARN [ 198.227187][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.227202][ T7407] Call Trace: [ 198.227210][ T7407] [ 198.227219][ T7407] __dump_stack+0x1d/0x30 [ 198.227245][ T7407] dump_stack_lvl+0x95/0xd0 [ 198.227276][ T7407] dump_stack+0x15/0x1b [ 198.227294][ T7407] should_fail_ex+0x263/0x280 [ 198.227342][ T7407] should_fail+0xb/0x20 [ 198.227365][ T7407] should_fail_usercopy+0x1a/0x20 [ 198.227397][ T7407] _copy_to_user+0x20/0xa0 [ 198.227520][ T7407] simple_read_from_buffer+0xb5/0x130 [ 198.227568][ T7407] proc_fail_nth_read+0x10e/0x150 [ 198.227643][ T7407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.227669][ T7407] vfs_read+0x1ab/0x7f0 [ 198.227762][ T7407] ? __rcu_read_unlock+0x4e/0x70 [ 198.227841][ T7407] ? __fget_files+0x184/0x1c0 [ 198.227861][ T7407] ? mutex_lock+0x57/0x90 [ 198.227890][ T7407] ksys_read+0xdc/0x1a0 [ 198.227937][ T7407] __x64_sys_read+0x40/0x50 [ 198.227967][ T7407] x64_sys_call+0x2886/0x3020 [ 198.227990][ T7407] do_syscall_64+0x12c/0x3b0 [ 198.228085][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.228163][ T7407] RIP: 0033:0x7f4061b9d68e [ 198.228178][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.228195][ T7407] RSP: 002b:00007f4060636fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.228278][ T7407] RAX: ffffffffffffffda RBX: 00007f40606376c0 RCX: 00007f4061b9d68e [ 198.228293][ T7407] RDX: 000000000000000f RSI: 00007f40606370a0 RDI: 000000000000000a [ 198.228305][ T7407] RBP: 00007f4060637090 R08: 0000000000000000 R09: 0000000000000000 [ 198.228319][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.228330][ T7407] R13: 00007f4061e56038 R14: 00007f4061e55fa0 R15: 00007fffc95e3308 [ 198.228350][ T7407] [ 198.501020][ T7409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.665637][ T7412] loop1: detected capacity change from 0 to 512 [ 198.676027][ T7412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.706554][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.975'. [ 198.838462][ T7412] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 198.846158][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.977'. [ 198.942529][ T7430] loop2: detected capacity change from 0 to 1024 [ 199.237572][ T7436] loop4: detected capacity change from 0 to 1024 [ 199.249997][ T7436] EXT4-fs: quotafile must be on filesystem root [ 199.457310][ T7430] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 199.468352][ T7430] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 199.478466][ T7430] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.976: inode #1: comm syz.2.976: iget: illegal inode # [ 199.491493][ T7430] loop2: lost filesystem error report for type 5 error -117 [ 199.557099][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 199.570877][ C0] EXT4-fs (loop2): initial error at time 1778948727: ext4_get_journal_inode:5896 [ 199.580027][ C0] EXT4-fs (loop2): last error at time 1778948727: ext4_get_journal_inode:5896 [ 200.394825][ T7412] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.969: corrupted in-inode xattr: e_value size too large [ 200.417372][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.435684][ T7412] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.435862][ T7412] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.969: couldn't read orphan inode 15 (err -117) [ 200.445067][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 200.445083][ C0] EXT4-fs (loop1): initial error at time 1778948728: ext4_iget_extra_inode:5128: inode 15 [ 200.445108][ C0] EXT4-fs (loop1): last error at time 1778948728: ext4_iget_extra_inode:5128: inode 15 [ 201.830480][ T7412] loop1: lost filesystem error report for type 5 error -117 [ 201.836483][ T7412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.575908][ T7430] EXT4-fs (loop2): no journal found [ 202.584411][ T7440] loop4: detected capacity change from 0 to 512 [ 202.592369][ T7430] EXT4-fs (loop2): can't get journal size [ 202.598157][ T7430] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 202.598184][ T7430] EXT4-fs: failed to create workqueue [ 202.613080][ T7430] EXT4-fs (loop2): mount failed [ 202.833284][ T7440] EXT4-fs (loop4): 1 orphan inode deleted [ 202.840790][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.873973][ T4056] __quota_error: 16 callbacks suppressed [ 202.874004][ T4056] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.874067][ T7440] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.893186][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 202.956530][ T7446] loop0: detected capacity change from 0 to 512 [ 203.024131][ T4056] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:21: Failed to release dquot type 1 [ 203.074673][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.088833][ T7446] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.112677][ T28] audit: type=1400 audit(1778948730.751:1966): avc: denied { listen } for pid=7450 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.146824][ T28] audit: type=1400 audit(1778948730.771:1967): avc: denied { write } for pid=7445 comm="syz.0.982" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.180288][ T7446] vhci_hcd vhci_hcd.3: invalid port number 9 [ 203.194658][ T7448] loop2: detected capacity change from 0 to 256 [ 203.198017][ T7446] vhci_hcd vhci_hcd.3: invalid port number 9 [ 203.215914][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.454184][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.500285][ T7462] loop4: detected capacity change from 0 to 512 [ 203.541606][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.552864][ T7464] FAULT_INJECTION: forcing a failure. [ 203.552864][ T7464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.565982][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.0.988 Tainted: G W syzkaller #0 PREEMPT(full) [ 203.566020][ T7464] Tainted: [W]=WARN [ 203.566027][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.566038][ T7464] Call Trace: [ 203.566046][ T7464] [ 203.566057][ T7464] __dump_stack+0x1d/0x30 [ 203.566081][ T7464] dump_stack_lvl+0x95/0xd0 [ 203.566171][ T7464] dump_stack+0x15/0x1b [ 203.566259][ T7464] should_fail_ex+0x263/0x280 [ 203.566290][ T7464] should_fail+0xb/0x20 [ 203.566319][ T7464] should_fail_usercopy+0x1a/0x20 [ 203.566386][ T7464] _copy_from_user+0x1c/0xb0 [ 203.566415][ T7464] ___sys_sendmsg+0xc1/0x1e0 [ 203.566454][ T7464] __x64_sys_sendmsg+0xd4/0x160 [ 203.566566][ T7464] x64_sys_call+0x194c/0x3020 [ 203.566592][ T7464] do_syscall_64+0x12c/0x3b0 [ 203.566630][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.566657][ T7464] RIP: 0033:0x7f4ccf7dce59 [ 203.566672][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.566767][ T7464] RSP: 002b:00007f4cce237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.566871][ T7464] RAX: ffffffffffffffda RBX: 00007f4ccfa55fa0 RCX: 00007f4ccf7dce59 [ 203.566888][ T7464] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 0000000000000004 [ 203.566901][ T7464] RBP: 00007f4cce237090 R08: 0000000000000000 R09: 0000000000000000 [ 203.566913][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.566924][ T7464] R13: 00007f4ccfa56038 R14: 00007f4ccfa55fa0 R15: 00007ffc9da30078 [ 203.566943][ T7464] [ 203.798434][ T7462] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 203.832834][ T7462] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.877842][ T7462] EXT4-fs (loop4): mount failed [ 203.887924][ T28] audit: type=1400 audit(1778948731.521:1968): avc: denied { ioctl } for pid=7474 comm="syz.1.992" path="socket:[18501]" dev="sockfs" ino=18501 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.949820][ T28] audit: type=1400 audit(1778948731.581:1969): avc: denied { ioctl } for pid=7474 comm="syz.1.992" path="socket:[18510]" dev="sockfs" ino=18510 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.983309][ T7481] loop1: detected capacity change from 0 to 128 [ 203.995661][ T7481] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.011509][ T7483] loop4: detected capacity change from 0 to 512 [ 204.024248][ T28] audit: type=1400 audit(1778948731.581:1970): avc: denied { setattr } for pid=7474 comm="syz.1.992" name="SCO" dev="sockfs" ino=18501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.056527][ T7483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.079071][ T7483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.086169][ T28] audit: type=1400 audit(1778948731.701:1971): avc: denied { remount } for pid=7474 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 204.140661][ T7483] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.227651][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.238516][ T4035] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.285808][ T28] audit: type=1400 audit(1778948731.921:1972): avc: denied { shutdown } for pid=7491 comm="syz.6.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.367920][ T28] audit: type=1400 audit(1778948731.921:1973): avc: denied { read } for pid=7491 comm="syz.6.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.503024][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1000'. [ 204.559214][ T7512] FAULT_INJECTION: forcing a failure. [ 204.559214][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 204.592877][ T7522] loop6: detected capacity change from 0 to 256 [ 204.598966][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.1.1001 Tainted: G W syzkaller #0 PREEMPT(full) [ 204.599088][ T7512] Tainted: [W]=WARN [ 204.599109][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.599152][ T7512] Call Trace: [ 204.599175][ T7512] [ 204.599185][ T7512] __dump_stack+0x1d/0x30 [ 204.599213][ T7512] dump_stack_lvl+0x95/0xd0 [ 204.599233][ T7512] dump_stack+0x15/0x1b [ 204.599341][ T7512] should_fail_ex+0x263/0x280 [ 204.599467][ T7512] should_failslab+0x8c/0xb0 [ 204.599603][ T7512] kmem_cache_alloc_noprof+0x66/0x3f0 [ 204.599695][ T7512] ? skb_clone+0x151/0x1f0 [ 204.599773][ T7512] skb_clone+0x151/0x1f0 [ 204.599830][ T7512] __netlink_deliver_tap+0x2c9/0x500 [ 204.599987][ T7512] netlink_unicast+0x653/0x680 [ 204.600077][ T7512] netlink_sendmsg+0x5c8/0x6f0 [ 204.600184][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.600347][ T7512] ____sys_sendmsg+0x563/0x5b0 [ 204.600427][ T7512] ___sys_sendmsg+0x195/0x1e0 [ 204.600535][ T7512] __x64_sys_sendmsg+0xd4/0x160 [ 204.600744][ T7512] x64_sys_call+0x194c/0x3020 [ 204.600844][ T7512] do_syscall_64+0x12c/0x3b0 [ 204.601009][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.601079][ T7512] RIP: 0033:0x7fd8fe93ce59 [ 204.601129][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.601189][ T7512] RSP: 002b:00007fd8fd38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.601251][ T7512] RAX: ffffffffffffffda RBX: 00007fd8febb5fa0 RCX: 00007fd8fe93ce59 [ 204.601366][ T7512] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000003 [ 204.601405][ T7512] RBP: 00007fd8fd38f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.601439][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.601478][ T7512] R13: 00007fd8febb6038 R14: 00007fd8febb5fa0 R15: 00007fff70120928 [ 204.601546][ T7512] [ 205.809329][ T7545] FAULT_INJECTION: forcing a failure. [ 205.809329][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 205.826507][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.6.1011 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.826604][ T7545] Tainted: [W]=WARN [ 205.826611][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.826623][ T7545] Call Trace: [ 205.826630][ T7545] [ 205.826637][ T7545] __dump_stack+0x1d/0x30 [ 205.826665][ T7545] dump_stack_lvl+0x95/0xd0 [ 205.826685][ T7545] dump_stack+0x15/0x1b [ 205.826814][ T7545] should_fail_ex+0x263/0x280 [ 205.826843][ T7545] should_failslab+0x8c/0xb0 [ 205.826873][ T7545] __kvmalloc_node_noprof+0x155/0x640 [ 205.826892][ T7545] ? traverse+0xa2/0x3a0 [ 205.826968][ T7545] traverse+0xa2/0x3a0 [ 205.827074][ T7545] seq_read_iter+0x85f/0x940 [ 205.827132][ T7545] seq_read+0x279/0x2c0 [ 205.827205][ T7545] ? __pfx_seq_read+0x10/0x10 [ 205.827231][ T7545] proc_reg_read+0x128/0x1c0 [ 205.827266][ T7545] ? __pfx_proc_reg_read+0x10/0x10 [ 205.827304][ T7545] vfs_readv+0x432/0x6e0 [ 205.827339][ T7545] __x64_sys_preadv+0xfd/0x1c0 [ 205.827378][ T7545] x64_sys_call+0x2915/0x3020 [ 205.827488][ T7545] do_syscall_64+0x12c/0x3b0 [ 205.827520][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.827541][ T7545] RIP: 0033:0x7f4061bdce59 [ 205.827561][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.827656][ T7545] RSP: 002b:00007f4060637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 205.827675][ T7545] RAX: ffffffffffffffda RBX: 00007f4061e55fa0 RCX: 00007f4061bdce59 [ 205.827689][ T7545] RDX: 0000000000000001 RSI: 0000200000001b80 RDI: 0000000000000005 [ 205.827761][ T7545] RBP: 00007f4060637090 R08: 000000000000fd4c R09: 0000000000000000 [ 205.827773][ T7545] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000001 [ 205.827785][ T7545] R13: 00007f4061e56038 R14: 00007f4061e55fa0 R15: 00007fffc95e3308 [ 205.827803][ T7545] [ 206.115413][ T7557] loop6: detected capacity change from 0 to 256 [ 206.283356][ T7560] bridge0: port 1(gretap0) entered blocking state [ 206.289869][ T7560] bridge0: port 1(gretap0) entered disabled state [ 206.296401][ T7560] gretap0: entered allmulticast mode [ 206.302279][ T7560] gretap0: entered promiscuous mode [ 206.372847][ T7560] vlan2: entered promiscuous mode [ 206.377936][ T7560] geneve0: entered promiscuous mode [ 206.383450][ T7560] bridge0: port 1(gretap0) entered blocking state [ 206.389913][ T7560] bridge0: port 1(gretap0) entered forwarding state [ 206.611373][ T7570] loop0: detected capacity change from 0 to 128 [ 206.664262][ T7570] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 207.097243][ T7577] loop1: detected capacity change from 0 to 256 [ 207.263572][ T7581] loop0: detected capacity change from 0 to 512 [ 207.800085][ T7581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.067001][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 208.067017][ T28] audit: type=1400 audit(1778948735.701:2074): avc: denied { remount } for pid=7579 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 208.108934][ T7580] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 208.120576][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1026'. [ 208.210352][ T28] audit: type=1400 audit(1778948735.761:2075): avc: denied { setopt } for pid=7600 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.246963][ T28] audit: type=1400 audit(1778948735.781:2076): avc: denied { create } for pid=7601 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 208.287227][ T7607] loop1: detected capacity change from 0 to 256 [ 208.946802][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.070314][ T28] audit: type=1400 audit(1778948736.701:2077): avc: denied { write } for pid=7614 comm="syz.0.1031" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 209.124667][ T7615] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1031'. [ 209.154090][ T7615] net_ratelimit: 28 callbacks suppressed [ 209.154109][ T7615] netlink: zone id is out of range [ 209.199163][ T7615] netlink: zone id is out of range [ 209.212717][ T7615] netlink: zone id is out of range [ 209.242989][ T7615] netlink: set zone limit has 8 unknown bytes [ 209.260229][ T7622] SELinux: policydb version 0 does not match my version range 15-35 [ 209.287115][ T7622] SELinux: failed to load policy [ 209.557774][ T28] audit: type=1400 audit(1778948737.191:2078): avc: denied { listen } for pid=7626 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.604972][ T7625] loop1: detected capacity change from 0 to 1764 [ 209.766880][ T7634] loop0: detected capacity change from 0 to 256 [ 209.816521][ T28] audit: type=1400 audit(1778948737.221:2079): avc: denied { ioctl } for pid=7626 comm="syz.0.1036" path="socket:[18048]" dev="sockfs" ino=18048 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.915275][ T7635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.925620][ T7635] bridge0: port 3(vlan2) entered blocking state [ 209.931954][ T7635] bridge0: port 3(vlan2) entered forwarding state [ 209.945045][ T7635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.415904][ T7643] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1040'. [ 210.757096][ T7649] GUP no longer grows the stack in syz.0.1042 (7649): 200000004000-200000006000 (200000002000) [ 210.867835][ T28] audit: type=1400 audit(1778948738.491:2080): avc: denied { setopt } for pid=7645 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 210.964830][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.0.1042 Tainted: G W syzkaller #0 PREEMPT(full) [ 210.964974][ T7649] Tainted: [W]=WARN [ 210.964981][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.964995][ T7649] Call Trace: [ 210.965003][ T7649] [ 210.965013][ T7649] __dump_stack+0x1d/0x30 [ 210.965042][ T7649] dump_stack_lvl+0x95/0xd0 [ 210.965150][ T7649] dump_stack+0x15/0x1b [ 210.965199][ T7649] __get_user_pages+0x1b26/0x1f10 [ 210.965239][ T7649] ? __rcu_read_unlock+0x4e/0x70 [ 210.965262][ T7649] get_user_pages_remote+0x1d5/0x6b0 [ 210.965297][ T7649] __access_remote_vm+0x154/0x4c0 [ 210.965336][ T7649] access_remote_vm+0x32/0x40 [ 210.965389][ T7649] proc_pid_cmdline_read+0x32b/0x6b0 [ 210.965424][ T7649] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 210.965455][ T7649] vfs_readv+0x432/0x6e0 [ 210.965488][ T7649] __x64_sys_preadv+0xfd/0x1c0 [ 210.965579][ T7649] x64_sys_call+0x2915/0x3020 [ 210.965604][ T7649] do_syscall_64+0x12c/0x3b0 [ 210.965635][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.965727][ T7649] RIP: 0033:0x7f4ccf7dce59 [ 210.965747][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.965848][ T7649] RSP: 002b:00007f4cce237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 210.965872][ T7649] RAX: ffffffffffffffda RBX: 00007f4ccfa55fa0 RCX: 00007f4ccf7dce59 [ 210.965888][ T7649] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000008 [ 210.965901][ T7649] RBP: 00007f4ccf872d6f R08: 00000000000006cd R09: 0000000000000000 [ 210.965913][ T7649] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 210.965972][ T7649] R13: 00007f4ccfa56038 R14: 00007f4ccfa55fa0 R15: 00007ffc9da30078 [ 210.966114][ T7649] [ 211.490650][ T7653] loop0: detected capacity change from 0 to 1024 [ 211.560647][ T7653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.584258][ T7653] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.598934][ T7660] loop6: detected capacity change from 0 to 256 [ 211.616105][ T28] audit: type=1400 audit(1778948739.251:2081): avc: denied { write } for pid=7647 comm="syz.0.1042" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.616170][ T7653] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1042: lblock 0 mapped to illegal pblock 0 (length 2) [ 211.637824][ T28] audit: type=1400 audit(1778948739.251:2082): avc: denied { append } for pid=7647 comm="syz.0.1042" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.679553][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 211.791616][ T7653] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 211.810471][ T7653] EXT4-fs (loop0): This should not happen!! Data will be lost [ 211.810471][ T7653] [ 211.853260][ T7661] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 2: comm syz.0.1042: lblock 2 mapped to illegal pblock 2 (length 4) [ 211.885318][ T7661] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 4 with error 117 [ 212.066366][ T7661] EXT4-fs (loop0): This should not happen!! Data will be lost [ 212.066366][ T7661] [ 212.092897][ T7662] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1042: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.109108][ T7662] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1042: Freeing blocks not in datazone - block = 1, count = 5 [ 212.288482][ T7657] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 212.525644][ T28] audit: type=1400 audit(1778948740.151:2083): avc: denied { create } for pid=7673 comm="syz.6.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 212.664595][ T3301] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 212.697085][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.754774][ T7681] atomic_op ffff8881797c6d28 conn xmit_atomic 0000000000000000 [ 212.773089][ T7681] netlink: 'syz.1.1050': attribute type 21 has an invalid length. [ 212.910438][ T7686] loop1: detected capacity change from 0 to 256 [ 213.200797][ T7693] netlink: 700 bytes leftover after parsing attributes in process `syz.0.1054'. [ 213.392903][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 213.392932][ T28] audit: type=1400 audit(1778948741.001:2088): avc: denied { ioctl } for pid=7694 comm="syz.4.1055" path="socket:[18886]" dev="sockfs" ino=18886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.456861][ T7697] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 213.553006][ T7697] audit: out of memory in audit_log_start [ 213.700232][ T28] audit: type=1400 audit(1778948741.001:2089): avc: denied { bind } for pid=7694 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.755850][ T7701] loop6: detected capacity change from 0 to 512 [ 213.776152][ T7701] EXT4-fs: Ignoring removed bh option [ 213.799780][ T7701] EXT4-fs: inline encryption not supported [ 213.813997][ T7701] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.831209][ T7703] loop4: detected capacity change from 0 to 256 [ 214.049752][ T7701] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 214.112634][ T7701] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1056: bg 0: block 248: padding at end of block bitmap is not set [ 214.143726][ T7701] loop6: lost filesystem error report for type 5 error -117 [ 214.145627][ T7701] Quota error (device loop6): write_blk: dquota write failed [ 214.153086][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 214.153101][ C0] EXT4-fs (loop6): last error at time 1778948741: ext4_validate_block_bitmap:441 [ 214.193206][ T7701] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 214.204723][ T7701] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1056: Failed to acquire dquot type 1 [ 214.217772][ T7701] loop6: lost filesystem error report for type 5 error -28 [ 214.222899][ T7701] EXT4-fs (loop6): 1 truncate cleaned up [ 214.261102][ T7701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 214.410786][ T28] audit: type=1326 audit(1778948742.041:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.6.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061bdce59 code=0x7ffc0000 [ 214.448252][ T28] audit: type=1326 audit(1778948742.041:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.6.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061bdce59 code=0x7ffc0000 [ 214.475507][ T28] audit: type=1326 audit(1778948742.081:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.6.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061bdce59 code=0x7ffc0000 [ 214.509453][ T28] audit: type=1326 audit(1778948742.081:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.6.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4061bdce59 code=0x7ffc0000 [ 214.757945][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 214.772681][ T7735] loop2: detected capacity change from 0 to 256 [ 214.864232][ T7739] loop1: detected capacity change from 0 to 128 [ 214.896515][ T7739] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 214.956632][ T7739] FAT-fs (loop1): Filesystem has been set read-only [ 215.580494][ T7752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1073'. [ 215.767719][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 215.913550][ T7758] loop1: detected capacity change from 0 to 256 [ 215.936802][ T7758] FAT-fs (loop1): Directory bread(block 64) failed [ 215.943366][ T7758] FAT-fs (loop1): Directory bread(block 65) failed [ 215.949956][ T7758] FAT-fs (loop1): Directory bread(block 66) failed [ 215.956557][ T7758] FAT-fs (loop1): Directory bread(block 67) failed [ 215.963174][ T7758] FAT-fs (loop1): Directory bread(block 68) failed [ 215.969710][ T7758] FAT-fs (loop1): Directory bread(block 69) failed [ 215.976362][ T7758] FAT-fs (loop1): Directory bread(block 70) failed [ 215.982911][ T7758] FAT-fs (loop1): Directory bread(block 71) failed [ 215.989492][ T7758] FAT-fs (loop1): Directory bread(block 72) failed [ 215.996034][ T7758] FAT-fs (loop1): Directory bread(block 73) failed [ 216.018681][ T7767] loop2: detected capacity change from 0 to 512 [ 216.038813][ T7767] EXT4-fs: Ignoring removed bh option [ 216.045799][ T7767] EXT4-fs: inline encryption not supported [ 216.057777][ T7767] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.097041][ T7767] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 216.163855][ T7767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1077: bg 0: block 248: padding at end of block bitmap is not set [ 216.195904][ T7767] loop2: lost filesystem error report for type 5 error -117 [ 216.197043][ T7767] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1077: Failed to acquire dquot type 1 [ 216.204427][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 216.204475][ C1] EXT4-fs (loop2): last error at time 1778948743: ext4_validate_block_bitmap:441 [ 216.236941][ T7767] loop2: lost filesystem error report for type 5 error -28 [ 216.240613][ T7767] EXT4-fs (loop2): 1 truncate cleaned up [ 216.269107][ T7767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 216.318920][ T7780] loop4: detected capacity change from 0 to 164 [ 216.429175][ T7787] loop0: detected capacity change from 0 to 512 [ 216.458278][ T7785] loop4: detected capacity change from 0 to 2048 [ 216.753552][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 216.800228][ T7798] loop2: detected capacity change from 0 to 256 [ 217.605415][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 218.169441][ T7829] FAT-fs (loop0): Directory bread(block 64) failed [ 218.176131][ T7829] FAT-fs (loop0): Directory bread(block 65) failed [ 218.182776][ T7829] FAT-fs (loop0): Directory bread(block 66) failed [ 218.189297][ T7829] FAT-fs (loop0): Directory bread(block 67) failed [ 218.195859][ T7829] FAT-fs (loop0): Directory bread(block 68) failed [ 218.202393][ T7829] FAT-fs (loop0): Directory bread(block 69) failed [ 218.208931][ T7829] FAT-fs (loop0): Directory bread(block 70) failed [ 218.215529][ T7829] FAT-fs (loop0): Directory bread(block 71) failed [ 218.222055][ T7829] FAT-fs (loop0): Directory bread(block 72) failed [ 218.228584][ T7829] FAT-fs (loop0): Directory bread(block 73) failed [ 219.010944][ T7840] set_capacity_and_notify: 1 callbacks suppressed [ 219.010971][ T7840] loop2: detected capacity change from 0 to 2048 [ 219.036176][ T7842] loop1: detected capacity change from 0 to 256 [ 220.103068][ T7846] loop0: detected capacity change from 0 to 1764 [ 220.123138][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 220.144011][ T7840] GPT:first_usable_lbas don't match. [ 220.440467][ T7853] loop4: detected capacity change from 0 to 1024 [ 220.616885][ T7840] GPT:34 != 290 [ 220.621137][ T7840] GPT: Use GNU Parted to correct GPT errors. [ 220.628548][ T7840] loop2: p1 p2 p3 [ 220.675111][ T7853] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.690724][ T7853] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 220.700658][ T7853] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.1107: inode #1: comm syz.4.1107: iget: illegal inode # [ 220.713807][ T7853] loop4: lost filesystem error report for type 5 error -117 [ 220.716110][ T7853] EXT4-fs (loop4): no journal found [ 220.733229][ T7853] EXT4-fs (loop4): can't get journal size [ 220.790004][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 220.797475][ C0] EXT4-fs (loop4): initial error at time 1778948748: ext4_get_journal_inode:5896 [ 220.807515][ C0] EXT4-fs (loop4): last error at time 1778948748: ext4_get_journal_inode:5896 [ 220.988165][ T7853] EXT4-fs (loop4): failed to initialize system zone (-22) [ 221.003831][ T7853] EXT4-fs (loop4): mount failed [ 221.193877][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 221.193899][ T28] audit: type=1400 audit(1778948748.791:2284): avc: denied { read } for pid=7847 comm="syz.4.1107" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.190246][ T28] audit: type=1400 audit(1778948748.791:2285): avc: denied { open } for pid=7847 comm="syz.4.1107" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.222898][ T28] audit: type=1400 audit(1778948748.791:2286): avc: denied { ioctl } for pid=7847 comm="syz.4.1107" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 222.535851][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 222.544868][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 222.567249][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 222.985131][ T7885] loop2: detected capacity change from 0 to 1024 [ 223.024491][ T7885] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 223.035547][ T7885] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 223.045598][ T7885] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.1114: inode #1: comm syz.2.1114: iget: illegal inode # [ 223.058840][ T7885] loop2: lost filesystem error report for type 5 error -117 [ 223.060526][ T7885] EXT4-fs (loop2): no journal found [ 223.080324][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 223.080340][ C0] EXT4-fs (loop2): initial error at time 1778948750: ext4_get_journal_inode:5896 [ 223.080359][ C0] EXT4-fs (loop2): last error at time 1778948750: ext4_get_journal_inode:5896 [ 223.105006][ T7885] EXT4-fs (loop2): can't get journal size [ 223.278151][ T7885] EXT4-fs (loop2): failed to initialize system zone (-22) [ 223.285422][ T7885] EXT4-fs (loop2): mount failed [ 224.571401][ T7889] loop1: detected capacity change from 0 to 1024 [ 224.902859][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1121'. [ 225.062931][ T7889] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 225.082884][ T7889] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 225.092865][ T7889] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.1120: inode #1: comm syz.1.1120: iget: illegal inode # [ 225.106176][ T7889] loop1: lost filesystem error report for type 5 error -117 [ 225.181446][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 225.195256][ C0] EXT4-fs (loop1): initial error at time 1778948752: ext4_get_journal_inode:5896 [ 225.204416][ C0] EXT4-fs (loop1): last error at time 1778948752: ext4_get_journal_inode:5896 [ 225.248795][ T28] audit: type=1400 audit(1778948752.881:2287): avc: denied { associate } for pid=7895 comm="syz.6.1123" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.342686][ T7889] EXT4-fs (loop1): no journal found [ 225.348505][ T7889] EXT4-fs (loop1): can't get journal size [ 226.052828][ T7889] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 226.053692][ T7889] EXT4-fs: failed to create workqueue [ 226.071841][ T7889] EXT4-fs (loop1): mount failed [ 226.152309][ T28] audit: type=1400 audit(1778948752.881:2288): avc: denied { append } for pid=7895 comm="syz.6.1123" name="pfkey" dev="proc" ino=4026533467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 226.355392][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 226.367488][ T7919] loop2: detected capacity change from 0 to 512 [ 226.372832][ T7918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.501206][ T7919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.513993][ T7923] loop6: detected capacity change from 0 to 4096 [ 226.522867][ T7919] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.535864][ T28] audit: type=1400 audit(1778948754.171:2289): avc: denied { write } for pid=7917 comm="syz.2.1129" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.560175][ T28] audit: type=1400 audit(1778948754.171:2290): avc: denied { setattr } for pid=7917 comm="syz.2.1129" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.577281][ T7923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.605768][ T7923] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.1131: invalid fast symlink length 131109 [ 226.608443][ T28] audit: type=1400 audit(1778948754.241:2291): avc: denied { write } for pid=7921 comm="syz.6.1131" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.653332][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.685925][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.704272][ T7932] loop1: detected capacity change from 0 to 2048 [ 226.766222][ T7932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.780116][ T7932] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.833794][ T7936] loop2: detected capacity change from 0 to 256 [ 226.846628][ T7936] vfat: Unknown parameter '00000000000000000000006' [ 226.908851][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.987105][ T28] audit: type=1400 audit(1778948754.621:2292): avc: denied { execute } for pid=7942 comm="syz.1.1136" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 227.075870][ T7952] netlink: 'syz.2.1140': attribute type 2 has an invalid length. [ 227.137474][ T7955] loop0: detected capacity change from 0 to 256 [ 227.150823][ T7957] loop2: detected capacity change from 0 to 512 [ 227.205527][ T7957] EXT4-fs: Ignoring removed nobh option [ 227.218436][ T7959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1143'. [ 227.235102][ T7957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.248005][ T7955] FAT-fs (loop0): Directory bread(block 64) failed [ 227.250234][ T7959] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1143'. [ 227.254870][ T7957] EXT4-fs (loop2): 1 truncate cleaned up [ 227.269734][ T7955] FAT-fs (loop0): Directory bread(block 65) failed [ 227.277753][ T7955] FAT-fs (loop0): Directory bread(block 66) failed [ 227.284763][ T7955] FAT-fs (loop0): Directory bread(block 67) failed [ 227.291351][ T7955] FAT-fs (loop0): Directory bread(block 68) failed [ 227.294446][ T7959] netlink: 'syz.1.1143': attribute type 5 has an invalid length. [ 227.298879][ T7957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.318042][ T7955] FAT-fs (loop0): Directory bread(block 69) failed [ 227.324623][ T7955] FAT-fs (loop0): Directory bread(block 70) failed [ 227.330290][ T7959] netlink: 'syz.1.1143': attribute type 6 has an invalid length. [ 227.340538][ T7959] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1143'. [ 227.352348][ T7955] FAT-fs (loop0): Directory bread(block 71) failed [ 227.359916][ T28] audit: type=1400 audit(1778948754.971:2293): avc: denied { write } for pid=7956 comm="syz.2.1142" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.388874][ T7955] FAT-fs (loop0): Directory bread(block 72) failed [ 227.395433][ T7955] FAT-fs (loop0): Directory bread(block 73) failed [ 227.445070][ T28] audit: type=1400 audit(1778948755.071:2294): avc: denied { write } for pid=7956 comm="syz.2.1142" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.460124][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 227.538815][ T28] audit: type=1400 audit(1778948755.171:2295): avc: denied { write } for pid=7956 comm="syz.2.1142" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.597668][ T7967] loop4: detected capacity change from 0 to 1024 [ 227.683308][ T7967] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 227.700533][ T7967] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 227.715387][ T7967] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.1138: inode #1: comm syz.4.1138: iget: illegal inode # [ 227.786641][ T7967] loop4: lost filesystem error report for type 5 error -117 [ 227.791960][ T7967] EXT4-fs (loop4): no journal found [ 227.804515][ T7967] EXT4-fs (loop4): can't get journal size [ 227.810540][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 227.810641][ C1] EXT4-fs (loop4): initial error at time 1778948755: ext4_get_journal_inode:5896 [ 227.810771][ C1] EXT4-fs (loop4): last error at time 1778948755: ext4_get_journal_inode:5896 [ 227.954630][ T7974] loop1: detected capacity change from 0 to 2048 [ 227.977765][ T7967] EXT4-fs (loop4): failed to initialize system zone (-22) [ 227.992389][ T7977] loop6: detected capacity change from 0 to 1024 [ 228.023021][ T7977] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 228.045950][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.057853][ T7974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.064644][ T7977] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.1147: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.093766][ T7967] EXT4-fs (loop4): mount failed [ 228.122994][ T7974] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.152631][ T7977] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.152855][ T7977] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 228.201399][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 228.207896][ C1] EXT4-fs (loop6): initial error at time 1778948755: ext4_map_blocks:791: inode 3: block 2 [ 228.218015][ C1] EXT4-fs (loop6): last error at time 1778948755: ext4_map_blocks:791: inode 3: block 2 [ 228.240641][ T7977] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.1147: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.283132][ T7977] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.283257][ T7977] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 228.304179][ T7977] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1147: Failed to acquire dquot type 0 [ 228.328120][ T7977] loop6: lost filesystem error report for type 5 error -117 [ 228.328319][ T7977] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 228.348058][ T7977] loop6: lost filesystem error report for type 5 error -117 [ 228.348202][ T7977] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.1147: mark_inode_dirty error [ 228.349189][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.359148][ T7977] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 228.409722][ T7977] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 228.462524][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 228.482941][ T7977] EXT4-fs (loop6): 1 orphan inode deleted [ 228.502688][ T7991] FAULT_INJECTION: forcing a failure. [ 228.502688][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 228.503182][ T4066] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.515885][ T7977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.524245][ T7991] CPU: 1 UID: 0 PID: 7991 Comm: syz.1.1149 Tainted: G W syzkaller #0 PREEMPT(full) [ 228.524350][ T7991] Tainted: [W]=WARN [ 228.524371][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.524399][ T7991] Call Trace: [ 228.524420][ T7991] [ 228.524443][ T7991] __dump_stack+0x1d/0x30 [ 228.524574][ T7991] dump_stack_lvl+0x95/0xd0 [ 228.524708][ T7991] dump_stack+0x15/0x1b [ 228.524770][ T7991] should_fail_ex+0x263/0x280 [ 228.524861][ T7991] should_failslab+0x8c/0xb0 [ 228.525039][ T7991] kmem_cache_alloc_noprof+0x66/0x3f0 [ 228.525172][ T7991] ? skb_clone+0x151/0x1f0 [ 228.525263][ T7991] skb_clone+0x151/0x1f0 [ 228.525349][ T7991] __netlink_deliver_tap+0x2c9/0x500 [ 228.525532][ T7991] ? netlink_attachskb+0x2e2/0x660 [ 228.525607][ T7991] netlink_sendskb+0x126/0x150 [ 228.525687][ T7991] netlink_unicast+0x28a/0x680 [ 228.525772][ T7991] netlink_ack+0x4c8/0x500 [ 228.525886][ T7991] netlink_rcv_skb+0x192/0x220 [ 228.526004][ T7991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.526085][ T7991] genl_rcv+0x28/0x40 [ 228.526138][ T7991] netlink_unicast+0x5a8/0x680 [ 228.526237][ T7991] netlink_sendmsg+0x5c8/0x6f0 [ 228.526333][ T7991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.526448][ T7991] ____sys_sendmsg+0x563/0x5b0 [ 228.526609][ T7991] ___sys_sendmsg+0x195/0x1e0 [ 228.526717][ T7991] __x64_sys_sendmsg+0xd4/0x160 [ 228.526810][ T7991] x64_sys_call+0x194c/0x3020 [ 228.527029][ T7991] do_syscall_64+0x12c/0x3b0 [ 228.527129][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.527208][ T7991] RIP: 0033:0x7fd8fe93ce59 [ 228.527342][ T7991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.527395][ T7991] RSP: 002b:00007fd8fd38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.527515][ T7991] RAX: ffffffffffffffda RBX: 00007fd8febb5fa0 RCX: 00007fd8fe93ce59 [ 228.527557][ T7991] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 228.527598][ T7991] RBP: 00007fd8fd38f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.527650][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.527692][ T7991] R13: 00007fd8febb6038 R14: 00007fd8febb5fa0 R15: 00007fff70120928 [ 228.527755][ T7991] [ 228.785422][ T7997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7997 comm=syz.2.1151 [ 228.811870][ T4066] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 228.811896][ T4066] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:25: Failed to release dquot type 0 [ 228.812741][ T7977] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.1147: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.836900][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.837363][ T4942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 228.837447][ T4942] loop6: lost filesystem error report for type 5 error -117 [ 228.837584][ T4942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 228.837659][ T4942] loop6: lost filesystem error report for type 5 error -117 [ 228.837767][ T4942] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 228.837796][ T4942] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 229.007481][ T8002] vfat: Unknown parameter '00000000000000000000006' [ 229.063936][ T8002] FAULT_INJECTION: forcing a failure. [ 229.063936][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 229.102122][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.6.1154 Tainted: G W syzkaller #0 PREEMPT(full) [ 229.102208][ T8002] Tainted: [W]=WARN [ 229.102217][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.102232][ T8002] Call Trace: [ 229.102239][ T8002] [ 229.102249][ T8002] __dump_stack+0x1d/0x30 [ 229.102279][ T8002] dump_stack_lvl+0x95/0xd0 [ 229.102300][ T8002] dump_stack+0x15/0x1b [ 229.102349][ T8002] should_fail_ex+0x263/0x280 [ 229.102379][ T8002] ? __se_sys_mount+0xef/0x2e0 [ 229.102411][ T8002] should_failslab+0x8c/0xb0 [ 229.102491][ T8002] __kmalloc_cache_noprof+0x5f/0x400 [ 229.102526][ T8002] ? memdup_user+0x99/0xd0 [ 229.102635][ T8002] __se_sys_mount+0xef/0x2e0 [ 229.102674][ T8002] __x64_sys_mount+0x67/0x80 [ 229.102742][ T8002] x64_sys_call+0x2d61/0x3020 [ 229.102823][ T8002] do_syscall_64+0x12c/0x3b0 [ 229.102858][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.102957][ T8002] RIP: 0033:0x7f4061bdce59 [ 229.103025][ T8002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.103048][ T8002] RSP: 002b:00007f4060637028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.103076][ T8002] RAX: ffffffffffffffda RBX: 00007f4061e55fa0 RCX: 00007f4061bdce59 [ 229.103182][ T8002] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 0000000000000000 [ 229.103200][ T8002] RBP: 00007f4060637090 R08: 0000200000000080 R09: 0000000000000000 [ 229.103218][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.103259][ T8002] R13: 00007f4061e56038 R14: 00007f4061e55fa0 R15: 00007fffc95e3308 [ 229.103357][ T8002] [ 229.468866][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 229.695471][ T8014] set_capacity_and_notify: 2 callbacks suppressed [ 229.695503][ T8014] loop1: detected capacity change from 0 to 2048 [ 229.735372][ T8014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.746750][ T8012] xt_hashlimit: size too large, truncated to 1048576 [ 229.765903][ T8012] xt_hashlimit: max too large, truncated to 1048576 [ 229.767118][ T8014] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.934856][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.979229][ T3398] IPVS: starting estimator thread 0... [ 230.082634][ T8026] IPVS: using max 2256 ests per chain, 112800 per kthread [ 230.367491][ T8034] loop1: detected capacity change from 0 to 1024 [ 230.411336][ T8034] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.422346][ T8034] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 230.442376][ T8034] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.1165: inode #1: comm syz.1.1165: iget: illegal inode # [ 230.462542][ T8034] loop1: lost filesystem error report for type 5 error -117 [ 230.464704][ T8034] EXT4-fs (loop1): no journal found [ 230.477302][ T8034] EXT4-fs (loop1): can't get journal size [ 230.483339][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 230.483742][ C1] EXT4-fs (loop1): initial error at time 1778948758: ext4_get_journal_inode:5896 [ 230.483881][ C1] EXT4-fs (loop1): last error at time 1778948758: ext4_get_journal_inode:5896 [ 230.642987][ T8034] EXT4-fs (loop1): failed to initialize system zone (-22) [ 230.650234][ T8034] EXT4-fs (loop1): mount failed [ 230.955393][ T8037] loop2: detected capacity change from 0 to 512 [ 231.019759][ T8037] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.100971][ T8037] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 231.176350][ T8037] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1164: corrupted in-inode xattr: e_value size too large [ 231.267860][ T8037] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.269018][ T8037] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1164: couldn't read orphan inode 15 (err -117) [ 231.278255][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 231.278271][ C1] EXT4-fs (loop2): initial error at time 1778948758: ext4_iget_extra_inode:5128: inode 15 [ 231.278299][ C1] EXT4-fs (loop2): last error at time 1778948758: ext4_iget_extra_inode:5128: inode 15 [ 231.572761][ T8037] loop2: lost filesystem error report for type 5 error -117 [ 231.573357][ T8037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.619098][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 232.214236][ T8044] loop0: detected capacity change from 0 to 256 [ 232.528398][ T8049] FAULT_INJECTION: forcing a failure. [ 232.528398][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.561419][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.1.1168 Tainted: G W syzkaller #0 PREEMPT(full) [ 232.561530][ T8049] Tainted: [W]=WARN [ 232.561538][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.561553][ T8049] Call Trace: [ 232.561562][ T8049] [ 232.561573][ T8049] __dump_stack+0x1d/0x30 [ 232.561602][ T8049] dump_stack_lvl+0x95/0xd0 [ 232.561628][ T8049] dump_stack+0x15/0x1b [ 232.561717][ T8049] should_fail_ex+0x263/0x280 [ 232.561751][ T8049] should_fail+0xb/0x20 [ 232.561779][ T8049] should_fail_usercopy+0x1a/0x20 [ 232.561808][ T8049] _copy_to_user+0x20/0xa0 [ 232.561918][ T8049] simple_read_from_buffer+0xb5/0x130 [ 232.561960][ T8049] proc_fail_nth_read+0x10e/0x150 [ 232.562010][ T8049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.562044][ T8049] vfs_read+0x1ab/0x7f0 [ 232.562069][ T8049] ? __rcu_read_unlock+0x4e/0x70 [ 232.562091][ T8049] ? __fget_files+0x184/0x1c0 [ 232.562109][ T8049] ? mutex_lock+0x57/0x90 [ 232.562199][ T8049] ksys_read+0xdc/0x1a0 [ 232.562234][ T8049] __x64_sys_read+0x40/0x50 [ 232.562337][ T8049] x64_sys_call+0x2886/0x3020 [ 232.562361][ T8049] do_syscall_64+0x12c/0x3b0 [ 232.562395][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.562417][ T8049] RIP: 0033:0x7fd8fe8fd68e [ 232.562433][ T8049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.562535][ T8049] RSP: 002b:00007fd8fd38efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.562554][ T8049] RAX: ffffffffffffffda RBX: 00007fd8fd38f6c0 RCX: 00007fd8fe8fd68e [ 232.562567][ T8049] RDX: 000000000000000f RSI: 00007fd8fd38f0a0 RDI: 0000000000000004 [ 232.562584][ T8049] RBP: 00007fd8fd38f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.562596][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.562667][ T8049] R13: 00007fd8febb6038 R14: 00007fd8febb5fa0 R15: 00007fff70120928 [ 232.562754][ T8049] [ 232.806263][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.818110][ T8054] loop1: detected capacity change from 0 to 2048 [ 232.846330][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 232.891947][ T8056] loop2: detected capacity change from 0 to 256 [ 233.055408][ T8054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.096782][ T8054] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.192207][ T8062] loop0: detected capacity change from 0 to 256 [ 233.223011][ T8062] FAT-fs (loop0): Directory bread(block 1285) failed [ 233.282753][ T8062] FAT-fs (loop0): Directory bread(block 1286) failed [ 233.397936][ T8062] FAT-fs (loop0): Directory bread(block 1287) failed [ 233.474969][ T8062] FAT-fs (loop0): Directory bread(block 1288) failed [ 233.593115][ T8062] FAT-fs (loop0): Directory bread(block 1285) failed [ 233.631070][ T8062] FAT-fs (loop0): Directory bread(block 1286) failed [ 233.685564][ T8062] FAT-fs (loop0): Directory bread(block 1287) failed [ 233.693608][ T8062] FAT-fs (loop0): Directory bread(block 1288) failed [ 233.700463][ T8062] FAT-fs (loop0): Directory bread(block 1285) failed [ 233.708330][ T8062] FAT-fs (loop0): Directory bread(block 1286) failed [ 233.859620][ T8073] loop4: detected capacity change from 0 to 1024 [ 233.884578][ T8073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.887858][ T8082] loop2: detected capacity change from 0 to 256 [ 233.904379][ T8073] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.946867][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.028262][ T8073] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1178: bg 0: block 112: padding at end of block bitmap is not set [ 234.043714][ T8073] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1178: Freeing blocks not in datazone - block = 0, count = 16 [ 234.058197][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 234.059610][ T28] audit: type=1400 audit(1778948761.611:2298): avc: denied { write } for pid=8072 comm="syz.4.1178" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.089811][ T28] audit: type=1400 audit(1778948761.661:2299): avc: denied { write } for pid=8072 comm="syz.4.1178" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.111701][ T28] audit: type=1400 audit(1778948761.661:2300): avc: denied { create } for pid=8072 comm="syz.4.1178" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 234.115473][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.132328][ T28] audit: type=1400 audit(1778948761.661:2301): avc: denied { getopt } for pid=8072 comm="syz.4.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.593479][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 234.943734][ T8097] loop4: detected capacity change from 0 to 512 [ 234.950455][ T8097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.980814][ T8097] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 234.996085][ T8097] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1182: corrupted in-inode xattr: e_value size too large [ 235.032684][ T8097] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.032945][ T8097] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1182: couldn't read orphan inode 15 (err -117) [ 235.042418][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 235.042446][ C0] EXT4-fs (loop4): initial error at time 1778948762: ext4_iget_extra_inode:5128: inode 15 [ 235.042473][ C0] EXT4-fs (loop4): last error at time 1778948762: ext4_iget_extra_inode:5128: inode 15 [ 235.087016][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1185'. [ 235.162684][ T8097] loop4: lost filesystem error report for type 5 error -117 [ 235.180674][ T8097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.181306][ T23] IPVS: starting estimator thread 0... [ 235.228661][ T8100] pim6reg: entered allmulticast mode [ 235.263585][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 235.274072][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1189'. [ 235.355807][ T8120] netlink: 'syz.2.1190': attribute type 9 has an invalid length. [ 235.363676][ T8120] netlink: 'syz.2.1190': attribute type 7 has an invalid length. [ 235.371419][ T8120] netlink: 'syz.2.1190': attribute type 8 has an invalid length. [ 235.378242][ T8109] IPVS: using max 2256 ests per chain, 112800 per kthread [ 235.513926][ T8126] loop0: detected capacity change from 0 to 2048 [ 235.546307][ T8126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.563715][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.639106][ T8126] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.714526][ T8133] loop1: detected capacity change from 0 to 1024 [ 235.731503][ T8133] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 235.742545][ T8133] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 235.752426][ T8133] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.1188: inode #1: comm syz.1.1188: iget: illegal inode # [ 235.779446][ T8133] loop1: lost filesystem error report for type 5 error -117 [ 235.779722][ T8133] EXT4-fs (loop1): no journal found [ 235.806637][ T8133] EXT4-fs (loop1): can't get journal size [ 235.822384][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 235.822403][ C0] EXT4-fs (loop1): initial error at time 1778948763: ext4_get_journal_inode:5896 [ 235.822437][ C0] EXT4-fs (loop1): last error at time 1778948763: ext4_get_journal_inode:5896 [ 235.887589][ T8133] EXT4-fs (loop1): failed to initialize system zone (-22) [ 235.894839][ T8133] EXT4-fs (loop1): mount failed [ 236.010946][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.198035][ T8149] gtp0: entered promiscuous mode [ 236.212662][ T8149] gtp0: entered allmulticast mode [ 236.229190][ T8149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8149 comm=syz.2.1198 [ 236.326998][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 236.604120][ T8156] loop6: detected capacity change from 0 to 512 [ 236.618657][ T8156] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 236.721567][ T28] audit: type=1400 audit(1778948764.341:2302): avc: denied { mount } for pid=8157 comm="syz.6.1202" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 237.241270][ T8166] loop0: detected capacity change from 0 to 256 [ 237.262787][ T8166] FAT-fs (loop0): Directory bread(block 64) failed [ 237.269483][ T8166] FAT-fs (loop0): Directory bread(block 65) failed [ 237.276283][ T8166] FAT-fs (loop0): Directory bread(block 66) failed [ 237.282954][ T8166] FAT-fs (loop0): Directory bread(block 67) failed [ 237.289689][ T8166] FAT-fs (loop0): Directory bread(block 68) failed [ 237.296320][ T8166] FAT-fs (loop0): Directory bread(block 69) failed [ 237.302974][ T8166] FAT-fs (loop0): Directory bread(block 70) failed [ 237.309668][ T8166] FAT-fs (loop0): Directory bread(block 71) failed [ 237.316230][ T8166] FAT-fs (loop0): Directory bread(block 72) failed [ 237.322861][ T8166] FAT-fs (loop0): Directory bread(block 73) failed [ 237.575297][ T8168] loop2: detected capacity change from 0 to 2048 [ 237.605932][ T8168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.711253][ T8168] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.943973][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.159146][ T8176] loop6: detected capacity change from 0 to 512 [ 238.199426][ T8176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.264064][ T8176] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 238.310233][ T8176] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1203: corrupted in-inode xattr: e_value size too large [ 238.388067][ T8176] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.390812][ T8176] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1203: couldn't read orphan inode 15 (err -117) [ 238.400077][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 238.400094][ C0] EXT4-fs (loop6): initial error at time 1778948766: ext4_iget_extra_inode:5128: inode 15 [ 238.400140][ C0] EXT4-fs (loop6): last error at time 1778948766: ext4_iget_extra_inode:5128: inode 15 [ 238.607063][ T8176] loop6: lost filesystem error report for type 5 error -117 [ 238.624645][ T8176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.665748][ T8187] loop2: detected capacity change from 0 to 256 [ 238.946288][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1203'. [ 240.209367][ T8196] netlink: 'syz.0.1212': attribute type 17 has an invalid length. [ 240.235061][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 240.262740][ T28] audit: type=1400 audit(1778948767.891:2303): avc: denied { map } for pid=8194 comm="syz.0.1212" path="socket:[19942]" dev="sockfs" ino=19942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 240.287315][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1212'. [ 240.416180][ T8202] FAULT_INJECTION: forcing a failure. [ 240.416180][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.450821][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.0.1213 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.450862][ T8202] Tainted: [W]=WARN [ 240.450872][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.450884][ T8202] Call Trace: [ 240.450891][ T8202] [ 240.450899][ T8202] __dump_stack+0x1d/0x30 [ 240.450922][ T8202] dump_stack_lvl+0x95/0xd0 [ 240.450946][ T8202] dump_stack+0x15/0x1b [ 240.450967][ T8202] should_fail_ex+0x263/0x280 [ 240.451059][ T8202] should_fail+0xb/0x20 [ 240.451144][ T8202] should_fail_usercopy+0x1a/0x20 [ 240.451173][ T8202] _copy_from_iter+0xcf/0xea0 [ 240.451297][ T8202] ? __alloc_skb+0x4f6/0x690 [ 240.451315][ T8202] ? __alloc_skb+0x200/0x690 [ 240.451337][ T8202] netlink_sendmsg+0x4ae/0x6f0 [ 240.451393][ T8202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.451430][ T8202] ____sys_sendmsg+0x563/0x5b0 [ 240.451531][ T8202] ___sys_sendmsg+0x195/0x1e0 [ 240.451574][ T8202] __x64_sys_sendmsg+0xd4/0x160 [ 240.451666][ T8202] x64_sys_call+0x194c/0x3020 [ 240.451710][ T8202] do_syscall_64+0x12c/0x3b0 [ 240.451749][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.451835][ T8202] RIP: 0033:0x7f4ccf7dce59 [ 240.451855][ T8202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.451875][ T8202] RSP: 002b:00007f4cce237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.451967][ T8202] RAX: ffffffffffffffda RBX: 00007f4ccfa55fa0 RCX: 00007f4ccf7dce59 [ 240.451984][ T8202] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 240.451997][ T8202] RBP: 00007f4cce237090 R08: 0000000000000000 R09: 0000000000000000 [ 240.452019][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.452032][ T8202] R13: 00007f4ccfa56038 R14: 00007f4ccfa55fa0 R15: 00007ffc9da30078 [ 240.452132][ T8202] [ 241.099026][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.333941][ T8208] loop1: detected capacity change from 0 to 1024 [ 241.356127][ T8208] EXT4-fs: quotafile must be on filesystem root [ 241.509807][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 241.765047][ T8225] loop2: detected capacity change from 0 to 256 [ 241.853796][ T8232] netlink: 'syz.0.1224': attribute type 17 has an invalid length. [ 241.907289][ T8234] loop1: detected capacity change from 0 to 2048 [ 241.954611][ T8236] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.955200][ T8234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.962307][ T8236] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.968704][ T8231] loop2: detected capacity change from 0 to 512 [ 241.978253][ T8234] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.164159][ T8245] loop0: detected capacity change from 0 to 128 [ 242.165654][ T8231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.176825][ T8245] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.197679][ T8231] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 242.206617][ T8245] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.222288][ T8245] FAULT_INJECTION: forcing a failure. [ 242.222288][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 242.253540][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.0.1228 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.253596][ T8245] Tainted: [W]=WARN [ 242.253608][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.253621][ T8245] Call Trace: [ 242.253629][ T8245] [ 242.253638][ T8245] __dump_stack+0x1d/0x30 [ 242.253664][ T8245] dump_stack_lvl+0x95/0xd0 [ 242.253767][ T8245] dump_stack+0x15/0x1b [ 242.253787][ T8245] should_fail_ex+0x263/0x280 [ 242.253822][ T8245] ? getname_long+0x32/0x100 [ 242.253846][ T8245] should_failslab+0x8c/0xb0 [ 242.253924][ T8245] __kmalloc_cache_noprof+0x5f/0x400 [ 242.254023][ T8245] ? should_fail_usercopy+0x1a/0x20 [ 242.254057][ T8245] getname_long+0x32/0x100 [ 242.254080][ T8245] do_getname+0x12e/0x1c0 [ 242.254126][ T8245] __se_sys_mkdirat+0x21/0xf0 [ 242.254156][ T8245] __x64_sys_mkdirat+0x43/0x50 [ 242.254243][ T8245] x64_sys_call+0x2c4e/0x3020 [ 242.254270][ T8245] do_syscall_64+0x12c/0x3b0 [ 242.254303][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.254367][ T8245] RIP: 0033:0x7f4ccf7dbcc7 [ 242.254384][ T8245] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.254403][ T8245] RSP: 002b:00007f4cce236e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 242.254445][ T8245] RAX: ffffffffffffffda RBX: 00007f4cce236ee0 RCX: 00007f4ccf7dbcc7 [ 242.254461][ T8245] RDX: 00000000000001ff RSI: 0000200000000800 RDI: 00000000ffffff9c [ 242.254474][ T8245] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000 [ 242.254486][ T8245] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000800 [ 242.254501][ T8245] R13: 00007f4cce236ea0 R14: 0000000000000000 R15: 0000000000000000 [ 242.254525][ T8245] [ 242.509194][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.523270][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.606190][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1233'. [ 242.612685][ T8259] sctp: [Deprecated]: syz.6.1231 (pid 8259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.612685][ T8259] Use struct sctp_sack_info instead [ 242.620875][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1233'. [ 242.673845][ T8261] loop2: detected capacity change from 0 to 256 [ 242.809373][ T8263] loop1: detected capacity change from 0 to 512 [ 242.810726][ T8270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.823720][ T8263] EXT4-fs: Ignoring removed bh option [ 242.837593][ T8263] EXT4-fs: inline encryption not supported [ 242.849462][ T8263] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.881248][ T8263] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 242.934578][ T8263] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1229: bg 0: block 248: padding at end of block bitmap is not set [ 242.950785][ T8263] loop1: lost filesystem error report for type 5 error -117 [ 242.951572][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 242.965381][ C0] EXT4-fs (loop1): last error at time 1778948770: ext4_validate_block_bitmap:441 [ 242.976228][ T8263] Quota error (device loop1): write_blk: dquota write failed [ 242.992607][ T8277] loop6: detected capacity change from 0 to 2048 [ 242.999204][ T8263] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 243.049920][ T8263] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1229: Failed to acquire dquot type 1 [ 243.069267][ T8263] loop1: lost filesystem error report for type 5 error -28 [ 243.069779][ T8263] EXT4-fs (loop1): 1 truncate cleaned up [ 243.075764][ T8277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.082193][ T8263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 243.110258][ T8277] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.152713][ T28] audit: type=1326 audit(1778948770.781:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 243.179485][ T28] audit: type=1326 audit(1778948770.781:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 243.207413][ T28] audit: type=1326 audit(1778948770.781:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 243.207455][ T28] audit: type=1326 audit(1778948770.781:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd8fe93ce59 code=0x7ffc0000 [ 243.207549][ T28] audit: type=1326 audit(1778948770.841:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fe8fd68e code=0x7ffc0000 [ 243.305657][ T28] audit: type=1326 audit(1778948770.921:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fe8fd68e code=0x7ffc0000 [ 243.338432][ T28] audit: type=1326 audit(1778948770.921:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8253 comm="syz.1.1229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8fe8fd68e code=0x7ffc0000 [ 243.398540][ T8241] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 243.424655][ T8241] EXT4-fs (loop6): Remounting filesystem read-only [ 243.438532][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.478277][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 243.639920][ T8296] loop6: detected capacity change from 0 to 764 [ 243.690877][ T8295] Symlink component flag not implemented [ 243.767731][ T8295] Symlink component flag not implemented (15) [ 243.864480][ T8314] loop6: detected capacity change from 0 to 512 [ 243.902785][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 243.940847][ T8314] EXT4-fs (loop6): orphan cleanup on readonly fs [ 243.978729][ T8314] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1248: Failed to acquire dquot type 1 [ 244.003964][ T8322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.030913][ T8322] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.040531][ T8314] loop6: lost filesystem error report for type 5 error -117 [ 244.060864][ T8314] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1248: Failed to acquire dquot type 1 [ 244.069615][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 244.069657][ C1] EXT4-fs (loop6): last error at time 1778948771: ext4_acquire_dquot:7034 [ 244.104540][ T8327] EXT4-fs: Ignoring removed bh option [ 244.122802][ T8327] EXT4-fs: inline encryption not supported [ 244.162780][ T8327] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.198027][ T8314] loop6: lost filesystem error report for type 5 error -117 [ 244.198380][ T8314] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1248: bg 0: block 248: padding at end of block bitmap is not set [ 244.223003][ T8314] loop6: lost filesystem error report for type 5 error -117 [ 244.223165][ T8314] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 244.224697][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.231138][ T8314] loop6: lost filesystem error report for type 5 error -117 [ 244.245553][ T8327] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 244.276961][ T8314] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1248: Failed to acquire dquot type 1 [ 244.277729][ T8327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1252: bg 0: block 248: padding at end of block bitmap is not set [ 244.304546][ T8327] loop4: lost filesystem error report for type 5 error -117 [ 244.305055][ T8327] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1252: Failed to acquire dquot type 1 [ 244.309784][ T8314] loop6: lost filesystem error report for type 5 error -117 [ 244.312456][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 244.312477][ C1] EXT4-fs (loop4): last error at time 1778948771: ext4_validate_block_bitmap:441 [ 244.315031][ T8327] loop4: lost filesystem error report for type 5 error -28 [ 244.408616][ T8314] EXT4-fs (loop6): 1 orphan inode deleted [ 244.430719][ T8327] EXT4-fs (loop4): 1 truncate cleaned up [ 244.438279][ T8314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.453935][ T8314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.462920][ T8327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 244.513438][ T8338] hub 8-0:1.0: USB hub found [ 244.518170][ T8338] hub 8-0:1.0: 8 ports detected [ 244.528699][ T8338] netlink: 'syz.0.1253': attribute type 36 has an invalid length. [ 244.541757][ T8338] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 244.552928][ T8338] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.567197][ T8338] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 244.578331][ T8344] FAULT_INJECTION: forcing a failure. [ 244.578331][ T8344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.626516][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.2.1256 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.626557][ T8344] Tainted: [W]=WARN [ 244.626565][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.626581][ T8344] Call Trace: [ 244.626590][ T8344] [ 244.626660][ T8344] __dump_stack+0x1d/0x30 [ 244.626692][ T8344] dump_stack_lvl+0x95/0xd0 [ 244.626719][ T8344] dump_stack+0x15/0x1b [ 244.626745][ T8344] should_fail_ex+0x263/0x280 [ 244.626822][ T8344] should_fail+0xb/0x20 [ 244.626854][ T8344] should_fail_usercopy+0x1a/0x20 [ 244.626942][ T8344] _copy_from_user+0x1c/0xb0 [ 244.626984][ T8344] ___sys_sendmsg+0xc1/0x1e0 [ 244.627034][ T8344] __x64_sys_sendmsg+0xd4/0x160 [ 244.627118][ T8344] x64_sys_call+0x194c/0x3020 [ 244.627150][ T8344] do_syscall_64+0x12c/0x3b0 [ 244.627191][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.627216][ T8344] RIP: 0033:0x7fc676e3ce59 [ 244.627304][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.627328][ T8344] RSP: 002b:00007fc675897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.627387][ T8344] RAX: ffffffffffffffda RBX: 00007fc6770b5fa0 RCX: 00007fc676e3ce59 [ 244.627406][ T8344] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 0000000000000003 [ 244.627423][ T8344] RBP: 00007fc675897090 R08: 0000000000000000 R09: 0000000000000000 [ 244.627436][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.627449][ T8344] R13: 00007fc6770b6038 R14: 00007fc6770b5fa0 R15: 00007ffcce51fe68 [ 244.627598][ T8344] [ 244.669017][ T8338] ipvlan0: entered allmulticast mode [ 244.799726][ T8338] veth0_vlan: entered allmulticast mode [ 244.811951][ T8338] team0: Device ipvlan0 failed to register rx_handler [ 244.897721][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 245.008760][ T8363] FAULT_INJECTION: forcing a failure. [ 245.008760][ T8363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.084528][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.6.1262 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.084649][ T8363] Tainted: [W]=WARN [ 245.084660][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.084678][ T8363] Call Trace: [ 245.084688][ T8363] [ 245.084699][ T8363] __dump_stack+0x1d/0x30 [ 245.084734][ T8363] dump_stack_lvl+0x95/0xd0 [ 245.084768][ T8363] dump_stack+0x15/0x1b [ 245.084830][ T8363] should_fail_ex+0x263/0x280 [ 245.084934][ T8363] should_fail+0xb/0x20 [ 245.084969][ T8363] should_fail_usercopy+0x1a/0x20 [ 245.085009][ T8363] _copy_from_user+0x1c/0xb0 [ 245.085130][ T8363] __copy_msghdr+0x244/0x300 [ 245.085163][ T8363] ___sys_sendmsg+0x10c/0x1e0 [ 245.085194][ T8363] ? path_openat+0x1b01/0x2050 [ 245.085249][ T8363] __sys_sendmmsg+0x185/0x320 [ 245.085372][ T8363] __x64_sys_sendmmsg+0x57/0x70 [ 245.085431][ T8363] x64_sys_call+0x27aa/0x3020 [ 245.085464][ T8363] do_syscall_64+0x12c/0x3b0 [ 245.085504][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.085534][ T8363] RIP: 0033:0x7f4061bdce59 [ 245.085556][ T8363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.085663][ T8363] RSP: 002b:00007f4060637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.085690][ T8363] RAX: ffffffffffffffda RBX: 00007f4061e55fa0 RCX: 00007f4061bdce59 [ 245.085711][ T8363] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 245.085729][ T8363] RBP: 00007f4060637090 R08: 0000000000000000 R09: 0000000000000000 [ 245.085744][ T8363] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 245.085759][ T8363] R13: 00007f4061e56038 R14: 00007f4061e55fa0 R15: 00007fffc95e3308 [ 245.085806][ T8363] [ 245.302716][ T8367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.315555][ T8367] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.764593][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.910690][ T8365] rock: directory entry would overflow storage [ 245.935186][ T8365] rock: sig=0x4f50, size=4, remaining=3 [ 245.956207][ T8365] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 246.178950][ T8392] EXT4-fs: Ignoring removed bh option [ 246.195526][ T8392] EXT4-fs: inline encryption not supported [ 246.213934][ T8392] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.249811][ T8392] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 246.307126][ T8392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1269: bg 0: block 248: padding at end of block bitmap is not set [ 246.370814][ T8392] loop0: lost filesystem error report for type 5 error -117 [ 246.371139][ T8392] __quota_error: 67 callbacks suppressed [ 246.371155][ T8392] Quota error (device loop0): write_blk: dquota write failed [ 246.378578][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 246.378600][ C1] EXT4-fs (loop0): last error at time 1778948774: ext4_validate_block_bitmap:441 [ 246.497939][ T8392] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 246.522747][ T8392] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1269: Failed to acquire dquot type 1 [ 246.535821][ T8392] EXT4-fs (loop0): 1 truncate cleaned up [ 246.541978][ T8392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 246.582215][ T28] audit: type=1326 audit(1778948774.221:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf7dce59 code=0x7ffc0000 [ 246.628750][ T28] audit: type=1326 audit(1778948774.241:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf7dce59 code=0x7ffc0000 [ 246.657512][ T28] audit: type=1326 audit(1778948774.241:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf7dce59 code=0x7ffc0000 [ 246.685400][ T28] audit: type=1326 audit(1778948774.241:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf7dce59 code=0x7ffc0000 [ 246.745669][ T28] audit: type=1326 audit(1778948774.241:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ccf7dce59 code=0x7ffc0000 [ 246.819262][ T28] audit: type=1326 audit(1778948774.241:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4ccf7dce59 code=0x7ffc0000 [ 246.908185][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1273'. [ 246.927580][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1273'. [ 246.955071][ T8406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 246.956808][ T28] audit: type=1326 audit(1778948774.291:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.0.1269" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4ccf79d68e code=0x7ffc0000 [ 247.000918][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 247.396627][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.408364][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.423647][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.441536][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.457835][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.471387][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.486195][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.501364][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.517423][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.532575][ T35] hid-generic 0103:0004:0006.0001: unknown main item tag 0x0 [ 247.556914][ T35] hid-generic 0103:0004:0006.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 247.579893][ T8436] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 247.669412][ T8437] fido_id[8437]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.676031][ T8439] set_capacity_and_notify: 7 callbacks suppressed [ 247.676081][ T8439] loop2: detected capacity change from 0 to 512 [ 247.820525][ T8445] mmap: syz.6.1285 (8445): VmData 29204480 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 247.853993][ T8439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.867045][ T8439] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.959316][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.975733][ T8454] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 248.015701][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'. [ 248.021145][ T8454] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1287'. [ 248.036123][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'. [ 248.056861][ T8457] netlink: 'syz.1.1287': attribute type 1 has an invalid length. [ 248.100501][ T8457] loop1: detected capacity change from 0 to 512 [ 248.172517][ T8457] EXT4-fs: Mount option(s) incompatible with ext3 [ 248.205307][ T8465] loop4: detected capacity change from 0 to 512 [ 248.256019][ T8465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.283257][ T8460] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 248.295328][ T8467] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1291'. [ 248.304500][ T8467] veth0_to_bond: entered promiscuous mode [ 248.339331][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.354025][ T8471] loop0: detected capacity change from 0 to 256 [ 248.454676][ T8475] loop1: detected capacity change from 0 to 1024 [ 248.478731][ T8475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 248.497602][ T8475] System zones: 0-1, 3-36 [ 248.506604][ T8475] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1294: bad orphan inode 134217728 [ 248.519203][ T8475] fserror_report: 1 callbacks suppressed [ 248.519232][ T8475] loop1: lost filesystem error report for type 5 error -117 [ 248.527752][ T8475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.532771][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 248.560438][ T8475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'. [ 248.673544][ T8485] ================================================================== [ 248.681691][ T8485] BUG: KCSAN: data-race in filemap_read / filemap_read [ 248.688678][ T8485] [ 248.691011][ T8485] write to 0xffff88810511eb20 of 8 bytes by task 8475 on cpu 0: [ 248.698665][ T8485] filemap_read+0x98d/0xa10 [ 248.703255][ T8485] generic_file_read_iter+0x79/0x330 [ 248.708586][ T8485] ext4_file_read_iter+0x1cc/0x290 [ 248.713744][ T8485] copy_splice_read+0x471/0x6c0 [ 248.718653][ T8485] splice_direct_to_actor+0x28f/0x670 [ 248.724091][ T8485] do_splice_direct+0x119/0x1a0 [ 248.728988][ T8485] do_sendfile+0x382/0x650 [ 248.733421][ T8485] __x64_sys_sendfile64+0x105/0x150 [ 248.738667][ T8485] x64_sys_call+0x2dc4/0x3020 [ 248.743397][ T8485] do_syscall_64+0x12c/0x3b0 [ 248.748025][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.753944][ T8485] [ 248.756290][ T8485] read to 0xffff88810511eb20 of 8 bytes by task 8485 on cpu 1: [ 248.763876][ T8485] filemap_read+0x6f/0xa10 [ 248.768350][ T8485] generic_file_read_iter+0x79/0x330 [ 248.773665][ T8485] ext4_file_read_iter+0x1cc/0x290 [ 248.778937][ T8485] copy_splice_read+0x471/0x6c0 [ 248.783829][ T8485] splice_direct_to_actor+0x28f/0x670 [ 248.789246][ T8485] do_splice_direct+0x119/0x1a0 [ 248.794225][ T8485] do_sendfile+0x382/0x650 [ 248.798676][ T8485] __x64_sys_sendfile64+0x105/0x150 [ 248.803911][ T8485] x64_sys_call+0x2dc4/0x3020 [ 248.808626][ T8485] do_syscall_64+0x12c/0x3b0 [ 248.813247][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.819168][ T8485] [ 248.821510][ T8485] value changed: 0x0000000000000087 -> 0x0000000000000088 [ 248.828652][ T8485] [ 248.831006][ T8485] Reported by Kernel Concurrency Sanitizer on: [ 248.837174][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.1.1294 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.848059][ T8485] Tainted: [W]=WARN [ 248.851881][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.861962][ T8485] ================================================================== [ 249.316975][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.