last executing test programs: 6m16.210507881s ago: executing program 3 (id=5060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0xcb2c, 0x8, 0x0, 0x1000169}) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x18100) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000c5d851f0df6b7eab9878ac505299a78bd09380d537423d233739cd89082a06", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70300000000000067000090b507f1c8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(0xffffffffffffffff) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3eb, 0x200, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x100000001, 0x1000000000000dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m15.325110435s ago: executing program 3 (id=5070): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x8000) unshare(0x62040200) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffddc) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x6a6bd5b8ef86ba17, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x20, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000001080)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5feffffff18450000fbffffff00000000000000005255566de31428af8a134b0e3e9f34ad6823e35fb53dd018d6ae65520a02aa4976407665bae60cfcdaaf71b2959cfd"], &(0x7f0000001040)='GPL\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x810556, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0x1, 0x120d, &(0x7f0000001280)="$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") r2 = socket$inet(0xa, 0x801, 0x84) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/locks\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000004140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x2f, 0x80, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x430000, 0x78e22799f4a46ffe) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x0) fcntl$getflags(r4, 0x401) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000024c0)={'nat\x00', 0x0, [0xfffff07b, 0x2, 0xc56e, 0x3, 0x10000048]}, &(0x7f0000000440)=0x54) 6m15.061908293s ago: executing program 3 (id=5071): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x7, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) acct(0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x80) syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000700)={0x434, 0x3f3, 0x300, 0x70bd28, 0x25dfdbfc, {0x4, 0x0, 0xa, [0xfffffff9, 0x71a, 0xfffff6dd, 0x1000, 0xe1, 0x2, 0x5ee, 0x6, 0x9, 0x0, 0x379, 0x6, 0x3, 0x800, 0xa51a, 0x8, 0xffffffff, 0x80, 0x9, 0x4, 0xffff, 0xf2c, 0x7, 0x9f7, 0xffff, 0x7, 0x6, 0xb45, 0x0, 0x401, 0x8, 0x4, 0x6, 0x0, 0x2a07c9fa, 0x2, 0x9, 0x3, 0xb5, 0x0, 0x9, 0xfffff800, 0x5, 0x5, 0x38e, 0x2, 0x7fff, 0x7, 0x8, 0x2, 0x5, 0x23, 0x61, 0x2d86cc05, 0x7fffffff, 0x1000, 0x4, 0x8, 0x3, 0x1, 0xe825, 0x0, 0xffffffc0, 0xb66], [0x6, 0x7, 0x1, 0x1, 0x6, 0x5, 0x2, 0x3c01, 0x9, 0x3, 0x4, 0x7, 0x0, 0xc50, 0x40, 0x2, 0x9, 0x7f, 0xf, 0x101, 0x5, 0x4, 0x9, 0xf, 0x0, 0xfffffffb, 0x2, 0x3, 0x0, 0x8000, 0xfffffffa, 0x4, 0x3, 0x400, 0x0, 0x7, 0x8001, 0x9, 0x8, 0x1, 0x2, 0x4, 0xffff, 0x8000, 0x2, 0x4, 0x9, 0x7, 0x2, 0x101, 0x1, 0xc2, 0x80, 0x81, 0x4, 0x9, 0x6, 0x2f, 0xffff8372, 0x6, 0x0, 0x3, 0x5, 0x1], [0x5, 0xe, 0x337, 0x0, 0x7, 0x1, 0x726, 0x51780000, 0xc508, 0x5, 0x4, 0x7622edde, 0x96f2, 0x8, 0x1, 0x19e5, 0x5, 0x19, 0xff, 0x5, 0x401, 0x23, 0x0, 0x436, 0xb, 0x6, 0x10001, 0x95ae, 0x8, 0x1, 0x38c, 0x8, 0x0, 0x6, 0xffffffff, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x193, 0x8, 0x7fffffff, 0x0, 0x5, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x3f28, 0x6, 0x3, 0xbde, 0xfff, 0x234b190d, 0x3, 0x10, 0x9, 0xd02, 0x0, 0x14, 0x6], [0x8, 0x6, 0x5, 0x6, 0x5, 0xb22, 0x5, 0x9, 0x1000, 0x6a, 0x3, 0x800, 0xfabc, 0x9, 0x2, 0x10000, 0x1, 0xe, 0x5, 0x39, 0x0, 0x7cb, 0x7, 0x6, 0x6, 0x3, 0xfff, 0xccf8, 0x8, 0x8, 0x7fffffff, 0x70b6, 0xfffffffe, 0x6, 0x0, 0x6, 0x8, 0x5, 0x81, 0x0, 0xffffffff, 0x90ce, 0x8, 0xffffff80, 0x8, 0x5648, 0xa89, 0x2, 0x5, 0x20, 0x8, 0x4, 0x6, 0x6, 0x7ff, 0x12a, 0x3, 0x5, 0xfffffe02, 0xfff, 0x9, 0x3, 0x4, 0x7], 0x12, ['$/(*\x00', '+\x00', '()-@#%{\x00', '\x12\\\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={r4, 0xfff0}, 0x8) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000c00)=@add_del={0x2, &(0x7f0000000bc0)='veth1_to_bridge\x00'}) r5 = socket$kcm(0x29, 0x2, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) 6m14.032294201s ago: executing program 3 (id=5083): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x70271, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 6m13.779776398s ago: executing program 3 (id=5085): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x6400480c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) (fail_nth: 2) 6m13.427926528s ago: executing program 3 (id=5086): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @remote}, 0x10) 6m13.361420909s ago: executing program 32 (id=5086): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @remote}, 0x10) 3m17.219194035s ago: executing program 1 (id=6032): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x174491, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) set_mempolicy(0x8006, 0x0, 0x5) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='unlock m'], 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x84, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x76, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xffffffffffffff23, 0x6}]}}, {"bd58c9fce4ece5c3109bc7f674c5f55baa908602c7e8a61369bbfbf355b9a1e3327d3b4c563b12591ad7d9b49f4ac336e9bc0aab7a80636884e4e44128cf6fcf5ce3"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x4000011, r0, 0x0) 3m14.180951858s ago: executing program 1 (id=6044): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r0], 0x2c}}, 0x20008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setresgid(0x0, 0x0, 0xee00) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240)=[{0x3, 0x2, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x1}, 0x0, 0xff}, {0x3, 0x1, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x3}, 0x2, 0xfe}, {0x0, 0x3, {0x2, 0x1, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0x26597b3436709d76}, {0x3, 0x1, {0x1, 0x0, 0x4}, {0x1, 0x1, 0x3}, 0xfe, 0x2}, {0x2, 0x1, {0x0, 0x0, 0x5}, {0x0, 0xf0, 0x2}, 0x0, 0xfe}, {0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0x1, 0x4}, 0xff, 0x2}], 0xc0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noload}, {@noblock_validity}, {@oldalloc}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r5, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x5) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x101, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0xff, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, @perf_bp={0x0, 0x1}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)=""/99, 0x63}], 0x1, 0x2b90, 0xfffffff9) 3m11.006294126s ago: executing program 1 (id=6055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x6c54ea937fa691ff, @perf_bp={&(0x7f0000000180), 0x9}, 0x10c0e8, 0x0, 0x1, 0x8, 0x6, 0x8001, 0x7f7f}, 0x0, 0xff6fbffffffffffe, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') lseek(r1, 0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x6}, 0xa, 0x7, 0x4, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x30) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [], "13d86558da0a7f6b"}}}}}}}, 0x0) r4 = io_uring_setup(0x4806, &(0x7f0000000000)={0x0, 0xec9b, 0x800, 0x2, 0x8375}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000080)={0x253, 0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/215, 0xd4}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000100)=""/24, 0x18}], &(0x7f0000000280)=[0x0, 0x200000000, 0x9], 0x3}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="010000004b1c691498745cec24673be6e08d2e9715e31e1df9a6aa83687639259ad849b11be57748056627839294f46bb88bcdd0aa578fde3ef641631c2bb6809e2ec4e7e09428b1417cab35f4c839a682c19c5f6316343ebdba5871aa4df14b00225106c8101152f6b5777612ed1afa6a1c91f013fc4b1d14a9dbb39dc060dfea442641d3b3f02d4f35cf45da4817", @ANYRESHEX=r2], 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x35, 0x0, &(0x7f0000001ffc)) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080)=0x58) socket(0x27, 0x80805, 0x0) r5 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xa938, 0x2, 0xfffffffe, 0x181}) close_range(r5, r5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0x4}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x100}, &(0x7f0000000140)=0x8) 3m9.456351918s ago: executing program 1 (id=6063): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd29, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x33, 0x54, 0x0, 0x0, 0x8, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0xc00) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000800000000000000000000000000000000ee7251908fc45c451e0df4803ae89b132f9da1443bb4e1869ea143788e364a714da1"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@ipv6_newnexthop={0x48, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r6}, @NHA_OIF={0x8, 0x5, r6}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe0400050000002008001e0002"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_netfilter(0x10, 0x3, 0xc) 3m8.362095628s ago: executing program 1 (id=6067): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@dax}, {@init_itable}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyad/4WOddkfE4rkC9NCpu9TeFvvybbR1EcGGJO9PaWzYrQAAoB/5Mf6HI+KT7eP/6RhrH80BAAAAoyR7eyr+lURkAAAAwMhKI2IqkrRSjAWYijStVDpjeD8a19N6o9n69HJje2MpnxdRjlK6vFqvzRRjhctRSvLybDHGdr/82pHyXEQ8FxE/nL7WLlcWG/WlYV/8AAAAgCvixouHz///OZ228wAAAMCIKfcsAAAAAKPCKT8AAACMPuf/AAAAMNK++u67ecr23+O99P7O9lrj/TtLteZaZX17sbLY2NqsrDQaK+1n9q2fVl+90dj8bGxs36u2as1Wtbmze3e9sb3Rurt66BXYAAAAwCV67sUHv0siYu/z19opiucAAhzyx2E3ABiksWE3ABia8WE3ABia0qlL2EPAqEtOmX988E7nWmH8+mLaAwAADN6tjx+//z9RzDv92gDw/8xYHwC4etzdg6urdNYRgDcH3RJgWD7U+Xim1/yeD+/o4/5/5xpDlp2pYQAAwMBMtVOSVorj9KlI00ol4tn2awFKyfJqvTZTnB/8drr0TF6eba+ZnDpmGAAAAAAAAAAAAAAAAAAAAAAAAADoyLIkMgAAAGCkRaR/TtpP84+4Nf3K1OGrA0fe+vXT9358b6HV2pqNmEj+Pp1PmoiI1k+K6a9lXgkAAAAAT4HOeXrxOTvs1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwah4/+mBxP11m3L9+MSLK3eKPx2T7czJKEXH9H0mMH1gviYixAcTfux8RN7vFT+JJlmXlohXd4l+74Pjl9qbpHj+NiBsDiA9X2YN8//NOt+9fGi+1P7t//8aLdF6993/pf/d/Yz32P88eKffy/MNfVHvGvx/x/Hj3/c9+/KQT/1CIvPByn3385jd2d7vOOFBlt/gHY1Vb65vV5s7undX1hZXaSm1jbm72jfk351+fn6kur9Zrxd+uYX7wiV8+Oan/13vELx/u/7Ht/0pfvc/i3w/vPfpIp1DqFv/2y91/f2/2iJ8Wv32fKvL5/Fv7+b1O/qAXfv6bF07q/1KP/k+e0v/bffU/Pvfq1773h65zjm0NAOAyNHd21xbq9drWCZnJPpa55MzbT0czBpiJp6MZw8pk3+38P56vnnOufiyTnWf18RhAMyaOfU/H4qwVJhF7eV19/kMCAAAj5n8H/SfdQQIAAAAAAAAAAAAAAAAAAAAu0hkfSzYZEX0vfDTm3nC6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8EAAD//4kX0Xk=") r5 = syz_io_uring_setup(0x1972, 0x0, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000006c0)={0x1, 0x31, 0x4, 0x300, 0x3f00, 0x81, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x20, 0xa7e, 0x6e}, 0x2c) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) 3m5.654044073s ago: executing program 1 (id=6075): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000004) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) madvise(&(0x7f000046b000/0x2000)=nil, 0x2000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0x1800000, 0x1, {0x8, 0x5}, 0x4, 0x800}) 3m5.348256491s ago: executing program 33 (id=6075): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000004) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) madvise(&(0x7f000046b000/0x2000)=nil, 0x2000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0x1800000, 0x1, {0x8, 0x5}, 0x4, 0x800}) 6.557561079s ago: executing program 6 (id=7094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wlan0\x00', 0xc201}) ioctl$TUNSETGROUP(r0, 0x400454cd, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wlan0\x00', 0xc201}) (async) ioctl$TUNSETGROUP(r0, 0x400454cd, 0x0) (async) 6.157599221s ago: executing program 6 (id=7097): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) unshare(0x28000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5.685758874s ago: executing program 6 (id=7100): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000814) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)="d23f6c92fd13fe5fcb225de7cbf83a7cace1721d56fb6328c328c863ea3c63e5b3d39e3d00b65f7a1a3543a34536822f5624093bd603d1a1fd7ce6b30dce395973fac3e8d67db2cd00fc625e902af7bd41a9d8e278e97761468301ba5a144fed296b6df748420295292d62f089b4b2b9", 0x70}, {&(0x7f00000001c0)="fc5ce167f4c1cd69278d9a1bac9a1796c37a7b74b26469a715", 0x19}, {&(0x7f0000000240)="19d16033dad4ec02015fbb4b5b4ba8ff2a2ed6c5ee7fe95172bcc75d583918fd4123189aaf28c2ef2c0bb0f817bca7b0209a8502b02a68468711cfa74179942ef1cd8879be49c009567718c557a6167a0387b0dce36e32ba339928e3c2820be5f7", 0x61}, {&(0x7f00000002c0)="6031051d59c93aaeee9f55e132e49768575cbf9896c92b7101a830e3dbf343fc78d609d74dd97d4e6ecd074c9636f929eff0925412ebfb689ece2da2c54e05bec96207e231e92c518d98a688cfe7ee340bd20072c933f12b1ce99896714082e4605dfddc2a6db094ad198275a471ae2efbceee47", 0x74}], 0x4) write$UHID_INPUT(r7, 0x0, 0x0) bind$can_j1939(r0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x480c5) 4.381200439s ago: executing program 5 (id=7104): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000814) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)="d23f6c92fd13fe5fcb225de7cbf83a7cace1721d56fb6328c328c863ea3c63e5b3d39e3d00b65f7a1a3543a34536822f5624093bd603d1a1fd7ce6b30dce395973fac3e8d67db2cd00fc625e902af7bd41a9d8e278e97761468301ba5a144fed296b6df748420295292d62f089b4b2b9", 0x70}, {&(0x7f00000001c0)="fc5ce167f4c1cd69278d9a1bac9a1796c37a7b74b26469a715", 0x19}, {&(0x7f0000000240)="19d16033dad4ec02015fbb4b5b4ba8ff2a2ed6c5ee7fe95172bcc75d583918fd4123189aaf28c2ef2c0bb0f817bca7b0209a8502b02a68468711cfa74179942ef1cd8879be49c009567718c557a6167a0387b0dce36e32ba339928e3c2820be5f7", 0x61}, {&(0x7f00000002c0)="6031051d59c93aaeee9f55e132e49768575cbf9896c92b7101a830e3dbf343fc78d609d74dd97d4e6ecd074c9636f929eff0925412ebfb689ece2da2c54e05bec96207e231e92c518d98a688cfe7ee340bd20072c933f12b1ce99896714082e4605dfddc2a6db094ad198275a471ae2efbceee47", 0x74}], 0x4) bind$can_j1939(r0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000024c0)=""/218, 0xda}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) 4.35786231s ago: executing program 0 (id=7105): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$urandom(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'ip6gretap0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r3, 0x25, 0x8, @void}, 0x10) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0xeaa9, 0x7fffffffffffffff, 0x9, 0x462, 0x100000001, 0x100, 0x7, 0x994}, 0x0, &(0x7f0000000500)={0x4cf, 0x1, 0x100000000, 0x5, 0x6, 0x8000000000000001, 0x7, 0x1}, &(0x7f0000000580), &(0x7f0000000780)={&(0x7f0000000740)={[0x9]}, 0x8}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) fcntl$setstatus(r5, 0x4, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000080)=@rnullb, r10, &(0x7f00000007c0)={0x15b3, 0x3, 0x2, 0x8, 0xf185, 0x8000000000000000, 0xd, 0x1, 0x2}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r9], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="b54300000000f87346bf24"], 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) 3.616130681s ago: executing program 6 (id=7106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000cf7800000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000020013"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000040) 3.364966347s ago: executing program 2 (id=7107): mmap(&(0x7f00004b4000/0x3000)=nil, 0x3000, 0x0, 0x2011, 0xffffffffffffffff, 0x10000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f0000462000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7ff, 0x0, 0x0, 0x4, 0x20, 0xec, 0x6, 0x10}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000a80)={[{@noblock_validity}, {@auto_da_alloc}, {@abort}, {}, {@test_dummy_encryption}, {@barrier}]}, 0x47, 0x607, &(0x7f00000001c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sched_getparam(0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r3 = openat(r2, &(0x7f0000000880)='./file0/file0\x00', 0x20c00, 0x1a) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000070a010100000000000000000500000208000b400000000208000a4000000400000003400000000000000005cc000740f43df91e61e41c2f10b5aafe86864407a42f9f19f5062f7d8f26da717969932da9b9035c4d9e218300bfb3845633904375d0ebce3bd3e2a2c7dbe96ecf2a40bfc4dd8f9cd6ee64e22cc1ee17749275fad0ff7cd6ccfc6aeb41cdc742d5afc5d665887db15d59776ff45127482f64efa262abd304cb69382b7cfc0cf629722bd465ad61f0cfeed43b2f1373c05cab5d336c8608da0a2564b3683a47f46ddb3760d37d8ef163eb525be7533b0274f2"], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x4) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) sendmsg$IPVS_CMD_FLUSH(r5, 0x0, 0x4) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = accept4$llc(r5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000800)=0x10, 0x800) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000840)={'\x00', {0x2, 0x0, @dev}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000101049de1c0cb0000000000"], 0x28}}, 0x0) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 3.290603439s ago: executing program 6 (id=7109): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x5) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000003c0)={0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r4, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000020000000000000000180000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0x0, 0x112) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') 3.022168567s ago: executing program 2 (id=7110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000280)) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2148c5, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x3, 0x2cf, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) lsm_list_modules(0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf56c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x1, @perf_bp={0x0, 0x4}, 0x1919e, 0x26e1, 0x5, 0x7, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000001180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) socket(0x1, 0x80006, 0x8000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a"], 0x50}}, 0x4000000) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000240)=0xcb0, 0x4) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x8000}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e20, 0x8, @loopback, 0xcd8}]}, &(0x7f0000000100)=0x10) 2.757056384s ago: executing program 5 (id=7111): unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400374bcd71fcf85e5b303a00fe8000000000000000000000000e00"/61], 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 10) 2.708201605s ago: executing program 0 (id=7112): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x80002) unshare(0x28000600) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.446647243s ago: executing program 5 (id=7113): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) signalfd(r0, &(0x7f0000000200)={[0x1000]}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x8001, 0x0, 0xd3, 0x7d1}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x5, 0x7}, &(0x7f0000000180)=0x8) 2.446142032s ago: executing program 4 (id=7114): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026"], 0x1c}}, 0x840) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x200000, 0xa, 0x20002f7}) 2.363097265s ago: executing program 4 (id=7115): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) (fail_nth: 8) unshare(0x28000600) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000004c0)='./file3\x00', 0x4002, &(0x7f0000001140)={[{@discard}, {@debug}, {@resgid}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 2.111732452s ago: executing program 4 (id=7116): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0)=0x400, 0x4) ioperm(0x2000000004, 0x47, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x14, &(0x7f0000002980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf08000000000000009653b7020000010000008500000000000095000000000000000000000000009ce56800c883e563fde991b5eb4027dd40ba31c8c62416c791e13bb8473051a783fe4a465de7e78a14683cebeb37102184c27f5b122342bd9ce33298c90e3343fb0082bd07cbadb5fcdc8bc66e6ac2a8a26fca4593d27465303306a649102d21a4eda691c481127fb1d364ef0000b603f2480666ad6aa3a230be4affc400465ef8ec9a1df9831a1385a688e5113323373f407520218200"/232], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x1002, &(0x7f0000002b00)=""/4098, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0xffffffffffffffff, 0x1], &(0x7f00000012c0)=[{0x1, 0x2}, {0x5, 0x4, 0x0, 0x1}, {0x5, 0x2, 0x2, 0x8}, {0x5, 0x4, 0x9, 0xa}, {0x5, 0x2, 0x6, 0x9}, {0x2, 0x4, 0xc, 0xa}, {0x2, 0x2, 0x1, 0xb}], 0x10, 0x5}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x30, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bind$l2tp(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x0, @loopback, 0x1}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r5, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={r7, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001780)={r7, 0x9}, 0x19) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002800)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="0200000002000000", @ANYRES32=r2, @ANYBLOB="ce71af7e1f022d73d3817781dbe5a75e34664110f3b9e583292542b32ebbeeb862db3560b79171aeee1b32f37fc996d3fa39953996058fe36397237ce3ced0ee0fc543c9ac207ab496e5856422ae40b470a45a9fb3888dac488d108c4408c396ef8e0000000000ba2ce3d87c40038e2d5df615123670e20643330af7224bbcf2c6e6c5a00438f43409ac5b5af3f433e1c23b57821aaa8204c49616b319ae0c41335ea683ef6ffe28a58f80cabe9908ddd1de7f485ec68ff212f8970e1c8fa6689e7bb94d89e303abe4748f8488b8b876678ba468", @ANYRES32, @ANYBLOB="40b34874f092d6150ca8eac09e1333954eb3ae1206d857d5596dd9f40e6af69b03d964a8e7c05c4a68415ca71dde2bbf4af535ff86eeea9452052ec56b66c604f33b5a129ebc9220e6f389209d3936a576b03bba7a447e80eb38f400470b9194303e813bb94191981b12", @ANYRES64=r4], 0x20) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x400, 0x20000, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lgetxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000280)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.079772413s ago: executing program 0 (id=7117): epoll_create(0x200) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xc, 0x0}, 0x20004000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680801bff6adaf7f0000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket(0x10, 0x3, 0x0) r4 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write(r4, &(0x7f0000000180)="f5", 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10}, @timestamp], 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, 0x0, &(0x7f00000004c0)=r1}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r5 = accept4$inet(r3, 0x0, &(0x7f0000000340), 0x80800) setsockopt$inet_buf(r5, 0x0, 0x2c, &(0x7f0000000380)="ae146f32", 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8d, 0xf}]}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 1.969766566s ago: executing program 2 (id=7118): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x6) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4000001, 0x0) poll(0x0, 0x0, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x2, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) setrlimit(0xf, 0x0) socket$kcm(0x2, 0x3, 0x84) close(0x3) 1.913501467s ago: executing program 4 (id=7119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@newtaction={0x1a4, 0x30, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{0xe8, 0x1, [@m_skbedit={0xe4, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x0, 0x5, 0xfff, 0xfffff9c8}}]}, {0x9d, 0x6, "f643c569d99a33828c21009a8b36cd2425f3ea1c5cdb4c9902e695845c8bda64c4c0f6793cc9dfb95f5b02bdec32b00edaf1af3fee1766a5b897873b1582c19142edd7d8b12775f4af9ef030debda433b362e61c7fae8594dc65b0782d218d815de8bc73131b38b5e566fc972e749b9887a864fa5a8767ee05c053d31bca7d1c9e46e98a3db11a3fd61c525c218c1aa30d17e6839121addf3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xa8, 0x1, [@m_simple={0xa4, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0x5d, 0x6, "ebc6d23aaa5ba80d0f802173a723fcfa0cf2d0ebb06113a27802ae394942b641c58b2d19d2d38e2d3aefaedd845a777ce244c34529788bec9caea801696b43e73eba1d5f57253ded4007888d4dfb2d4d560cc3a21e5362d732"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000880}, 0x400088c) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 9) 1.610210155s ago: executing program 4 (id=7120): r0 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000100)="0000000001", 0x0, 0x7228, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x50, 0x1412, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x8, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.537616487s ago: executing program 5 (id=7121): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setresgid(0x0, 0x0, 0xee00) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000240)=[{0x3, 0x2, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x1}, 0x0, 0xff}, {0x3, 0x1, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x3}, 0x2, 0xfe}, {0x0, 0x3, {0x2, 0x1, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0x26597b3436709d76}, {0x3, 0x1, {0x1, 0x0, 0x4}, {0x1, 0x1, 0x3}, 0xfe, 0x2}, {0x2, 0x1, {0x0, 0x0, 0x5}, {0x0, 0xf0, 0x2}, 0x0, 0xfe}, {0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0x1, 0x4}, 0xff, 0x2}], 0xc0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noload}, {@noblock_validity}, {@oldalloc}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.529987228s ago: executing program 4 (id=7122): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000814) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)="d23f6c92fd13fe5fcb225de7cbf83a7cace1721d56fb6328c328c863ea3c63e5b3d39e3d00b65f7a1a3543a34536822f5624093bd603d1a1fd7ce6b30dce395973fac3e8d67db2cd00fc625e902af7bd41a9d8e278e97761468301ba5a144fed296b6df748420295292d62f089b4b2b9", 0x70}, {&(0x7f00000001c0)="fc5ce167f4c1cd69278d9a1bac9a1796c37a7b74b26469a715", 0x19}, {&(0x7f0000000240)="19d16033dad4ec02015fbb4b5b4ba8ff2a2ed6c5ee7fe95172bcc75d583918fd4123189aaf28c2ef2c0bb0f817bca7b0209a8502b02a68468711cfa74179942ef1cd8879be49c009567718c557a6167a0387b0dce36e32ba339928e3c2820be5f7", 0x61}, {&(0x7f00000002c0)="6031051d59c93aaeee9f55e132e49768575cbf9896c92b7101a830e3dbf343fc78d609d74dd97d4e6ecd074c9636f929eff0925412ebfb689ece2da2c54e05bec96207e231e92c518d98a688cfe7ee340bd20072c933f12b1ce99896714082e4605dfddc2a6db094ad198275a471ae2efbceee47", 0x74}], 0x4) bind$can_j1939(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000024c0)=""/218, 0xda}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) 1.009475702s ago: executing program 0 (id=7123): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xb}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb9}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@ifindex, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2f0000001800000004000000", @ANYRES32=r0], 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 708.06051ms ago: executing program 0 (id=7124): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x4, 0x3, 0x1d, 0x19, 0xb, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc000001}, 0x0) 707.34892ms ago: executing program 5 (id=7125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r2, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) 613.735103ms ago: executing program 0 (id=7126): unshare(0x28000600) r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'wlan0\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94988, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000040), 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) syz_clone3(0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004704002c14140c83028606000000024e214e2204519078089cc7e80394125f65354d00"/61], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 546.492995ms ago: executing program 5 (id=7127): bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02055125", 0x96}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = socket(0x2b, 0x1, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (fail_nth: 5) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 372.91276ms ago: executing program 2 (id=7128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000400)=""/239, 0xef, 0x0, &(0x7f0000000500)=""/124, 0x7c}}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x9, 0x0, 0x0, 0x0, 0x9, 0xf42c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_bp={0x0}, 0x204, 0xfffffffffffffffd, 0x43a13d76, 0x6, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, r2, 0x12) (async) r4 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}) msgsnd(r4, &(0x7f00000010c0)=ANY=[@ANYBLOB="02"], 0x2a, 0x0) msgsnd(r4, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRESOCT=r4], 0x2000, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x5, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd26, 0x0, 0x2, 0x1, 0xfd, 0x18}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) (async, rerun: 32) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x10}}, 0xe8) (async) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$TIOCMGET(r7, 0x5415, 0x0) msgsnd(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0100000051067b00f0"], 0xdf9, 0x0) (async) msgctl$IPC_RMID(0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x2000000000000036, &(0x7f00000009c0)=[{0x80, 0x3, 0x6, 0x2}, {0x996, 0x81, 0x6d, 0x8}]}) (async) readlink(0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex=r0, 0x16, 0x0, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000380)=[0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r0, 0x29, 0x0, 0x3, 0x7, 0x5, @mcast1, @mcast1, 0x8000, 0x700, 0x67, 0x1ff}}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r8, r0, 0x25, 0x2, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0e000000102000000000b4df68702c2c0f4adebc0000", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r9], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x2, 0x1, 0x3, 0xa, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='GPL\x00', 0x2022fa, 0x69, &(0x7f0000000100)=""/105, 0x40f00, 0x20, '\x00', r0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x8, 0xd, 0x3}, 0x10, r1, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000600)=[{0x5, 0x4, 0xb, 0xb}, {0x3, 0x5, 0xd, 0x9}, {0x5, 0x1, 0x2, 0x1}, {0x0, 0x5, 0xe, 0xb}, {0x5, 0x4, 0x6, 0x6}, {0x5ccaa97f, 0x1, 0xa}, {0x3, 0x1, 0xe, 0xb}], 0x10, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) 49.873778ms ago: executing program 2 (id=7129): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") socket(0x10, 0x803, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 34.080518ms ago: executing program 6 (id=7130): ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000000)=0x2) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005040)=[{&(0x7f00000001c0)="06f2da4cc04d8670c1f0dcc422b856d751a2e787a1c36180a266ae4c4a0a4c690b65bde00f84cc89feb2ec3cf512ca83dc60ad19dcb62cb8eac74990d9feb2bf3085592cd871918bb814a81ee86077fd1e63850498cb77b8bd532dd3f30022cd9231ae0db79499f43e08a0dcb4d6f6091044a9e424f2e8cef7e584dd6e2fed55117a1209c2920ea8d639f2342a62e31b9f9e1f617c64baaf68440c940ebde60272840941e79839bcbf05b79f1d1f", 0xae}, {&(0x7f0000001300)="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", 0x6fe}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'macvlan0\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffffffffffffa8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 0s ago: executing program 2 (id=7131): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) signalfd(r0, &(0x7f0000000200)={[0x1000]}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x5, 0x7}, &(0x7f0000000180)=0x8) kernel console output (not intermixed with test programs): audit: type=1400 audit(2000000029.770:4516): avc: denied { read } for pid=2174 comm="syz.0.6794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1150.568907][ T2177] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1150.576843][ T2177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1150.605137][ T2181] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1150.635364][ T2177] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1150.657409][ T2181] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1150.680855][ T2177] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1150.706812][ T2179] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1150.718080][ T2187] FAULT_INJECTION: forcing a failure. [ 1150.718080][ T2187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.732220][ T2181] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.6797: bad orphan inode 4 [ 1150.742579][ T2177] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1150.757881][ T2179] System zones: 0-1, 3-36 [ 1150.765402][ T2181] loop0: lost filesystem error report for type 5 error -117 [ 1150.765603][ T2181] EXT4-fs (loop0): 1 orphan inode deleted [ 1150.772960][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1150.772998][ C0] EXT4-fs (loop0): initial error at time 2000000030: ext4_orphan_get:1423 [ 1150.773041][ C0] EXT4-fs (loop0): last error at time 2000000030: ext4_orphan_get:1423 [ 1150.807184][ T2187] CPU: 0 UID: 0 PID: 2187 Comm: syz.5.6798 Tainted: G W syzkaller #0 PREEMPT(full) [ 1150.807271][ T2187] Tainted: [W]=WARN [ 1150.807281][ T2187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1150.807297][ T2187] Call Trace: [ 1150.807304][ T2187] [ 1150.807312][ T2187] __dump_stack+0x1d/0x30 [ 1150.807336][ T2187] dump_stack_lvl+0x95/0xd0 [ 1150.807377][ T2187] dump_stack+0x15/0x1b [ 1150.807402][ T2187] should_fail_ex+0x263/0x280 [ 1150.807431][ T2187] should_fail+0xb/0x20 [ 1150.807519][ T2187] should_fail_usercopy+0x1a/0x20 [ 1150.807554][ T2187] _copy_from_user+0x1c/0xb0 [ 1150.807592][ T2187] bpf_test_init+0xb9/0x130 [ 1150.807641][ T2187] bpf_prog_test_run_xdp+0x306/0xa10 [ 1150.807677][ T2187] ? __rcu_read_unlock+0x4e/0x70 [ 1150.807703][ T2187] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1150.807803][ T2187] bpf_prog_test_run+0x204/0x340 [ 1150.807843][ T2187] __sys_bpf+0x52e/0x7e0 [ 1150.807882][ T2187] __x64_sys_bpf+0x41/0x50 [ 1150.807908][ T2187] x64_sys_call+0x10cb/0x3020 [ 1150.807947][ T2187] do_syscall_64+0x12c/0x3b0 [ 1150.808005][ T2187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.808052][ T2187] RIP: 0033:0x7fa9e744cdd9 [ 1150.808072][ T2187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.808096][ T2187] RSP: 002b:00007fa9e5ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1150.808121][ T2187] RAX: ffffffffffffffda RBX: 00007fa9e76c5fa0 RCX: 00007fa9e744cdd9 [ 1150.808181][ T2187] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1150.808200][ T2187] RBP: 00007fa9e5ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.808217][ T2187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.808233][ T2187] R13: 00007fa9e76c6038 R14: 00007fa9e76c5fa0 R15: 00007ffd4dc93068 [ 1150.808256][ T2187] [ 1150.808350][ T2177] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1151.009695][ T2181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.024372][ T2179] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.6796: bad orphan inode 134217728 [ 1151.145120][ T2179] loop6: lost filesystem error report for type 5 error -117 [ 1151.152974][ T2179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.177689][ T2179] netlink: 'syz.6.6796': attribute type 2 has an invalid length. [ 1151.197028][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.223507][ T2189] vlan2: entered promiscuous mode [ 1151.228773][ T2189] bond0: entered promiscuous mode [ 1151.237757][ T2177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6795: bg 0: block 40: padding at end of block bitmap is not set [ 1151.276774][ T2192] FAULT_INJECTION: forcing a failure. [ 1151.276774][ T2192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.289955][ T2192] CPU: 1 UID: 0 PID: 2192 Comm: syz.2.6800 Tainted: G W syzkaller #0 PREEMPT(full) [ 1151.289994][ T2192] Tainted: [W]=WARN [ 1151.290004][ T2192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1151.290020][ T2192] Call Trace: [ 1151.290029][ T2192] [ 1151.290039][ T2192] __dump_stack+0x1d/0x30 [ 1151.290066][ T2192] dump_stack_lvl+0x95/0xd0 [ 1151.290171][ T2192] dump_stack+0x15/0x1b [ 1151.290197][ T2192] should_fail_ex+0x263/0x280 [ 1151.290321][ T2192] should_fail+0xb/0x20 [ 1151.290400][ T2192] should_fail_usercopy+0x1a/0x20 [ 1151.290440][ T2192] _copy_from_user+0x1c/0xb0 [ 1151.290474][ T2192] bpf_test_init+0xb9/0x130 [ 1151.290504][ T2192] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 1151.290573][ T2192] ? kstrtoull+0x111/0x140 [ 1151.290605][ T2192] ? __rcu_read_unlock+0x4e/0x70 [ 1151.290632][ T2192] ? __fget_files+0x184/0x1c0 [ 1151.290656][ T2192] ? __rcu_read_unlock+0x4e/0x70 [ 1151.290742][ T2192] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1151.290825][ T2192] bpf_prog_test_run+0x204/0x340 [ 1151.290857][ T2192] __sys_bpf+0x52e/0x7e0 [ 1151.290925][ T2192] __x64_sys_bpf+0x41/0x50 [ 1151.290973][ T2192] x64_sys_call+0x10cb/0x3020 [ 1151.291004][ T2192] do_syscall_64+0x12c/0x3b0 [ 1151.291029][ T2192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.291050][ T2192] RIP: 0033:0x7f7d24d1cdd9 [ 1151.291078][ T2192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.291102][ T2192] RSP: 002b:00007f7d2376f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1151.291136][ T2192] RAX: ffffffffffffffda RBX: 00007f7d24f95fa0 RCX: 00007f7d24d1cdd9 [ 1151.291155][ T2192] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1151.291172][ T2192] RBP: 00007f7d2376f090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.291218][ T2192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.291232][ T2192] R13: 00007f7d24f96038 R14: 00007f7d24f95fa0 R15: 00007fff57069278 [ 1151.291330][ T2192] [ 1151.296884][ T2177] loop4: lost filesystem error report for type 5 error -117 [ 1151.500928][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1151.514718][ C0] EXT4-fs (loop4): initial error at time 2000000030: ext4_validate_block_bitmap:441 [ 1151.524161][ C0] EXT4-fs (loop4): last error at time 2000000030: ext4_validate_block_bitmap:441 [ 1151.533501][ T2177] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1151.542244][ T2177] loop4: lost filesystem error report for type 5 error -117 [ 1151.542467][ T2177] EXT4-fs (loop4): 1 truncate cleaned up [ 1151.577910][ T2177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1151.598179][ T2204] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1151.615239][ T2177] EXT4-fs (loop4): shut down requested (2) [ 1151.631596][ T2206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1151.643796][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.670587][ T2208] loop6: detected capacity change from 0 to 2048 [ 1151.679087][ T2213] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 1151.689424][ T2212] loop0: detected capacity change from 0 to 512 [ 1151.695867][ T2213] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 1151.705610][ T2212] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1151.728378][ T2208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.748374][ T2212] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.6809: corrupted xattr entries [ 1151.761127][ T2212] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1151.763770][ T2212] EXT4-fs (loop0): 1 truncate cleaned up [ 1151.772986][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1151.773004][ C1] EXT4-fs (loop0): initial error at time 2000000031: xattr_find_entry:337: inode 15 [ 1151.773040][ C1] EXT4-fs (loop0): last error at time 2000000031: xattr_find_entry:337: inode 15 [ 1151.807180][ T2219] netlink: 'syz.2.6810': attribute type 21 has an invalid length. [ 1151.817798][ T2219] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1151.827121][ T28] audit: type=1400 audit(2000000031.190:4517): avc: denied { write } for pid=2207 comm="syz.6.6807" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1151.850228][ T28] audit: type=1400 audit(2000000031.190:4518): avc: denied { open } for pid=2207 comm="syz.6.6807" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1151.874721][ T2212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.971045][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1151.992712][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.038923][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.244362][ T2240] loop4: detected capacity change from 0 to 512 [ 1152.269023][ T2240] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1152.286061][ T2240] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1152.295756][ T2240] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.6819: bad orphan inode 4 [ 1152.313115][ T2240] loop4: lost filesystem error report for type 5 error -117 [ 1152.313333][ T2240] EXT4-fs (loop4): 1 orphan inode deleted [ 1152.327293][ T2240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.520733][ T2245] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1152.528281][ T2245] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1152.535765][ T2245] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1152.544566][ T2245] xt_hashlimit: max too large, truncated to 1048576 [ 1152.764144][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.196665][ T2256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6821'. [ 1153.232585][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.267519][ T2260] loop5: detected capacity change from 0 to 512 [ 1153.336677][ T2260] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1153.366738][ T2269] program syz.0.6827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1153.379461][ T28] audit: type=1400 audit(2000000032.740:4519): avc: denied { write } for pid=2265 comm="syz.0.6827" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1153.413307][ T2260] EXT4-fs (loop5): mount failed [ 1153.447754][ T2269] loop0: detected capacity change from 0 to 512 [ 1153.492765][ T2269] EXT4-fs: user quota file already specified [ 1153.511838][ T2271] FAULT_INJECTION: forcing a failure. [ 1153.511838][ T2271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.566417][ T2271] CPU: 1 UID: 0 PID: 2271 Comm: syz.5.6828 Tainted: G W syzkaller #0 PREEMPT(full) [ 1153.566533][ T2271] Tainted: [W]=WARN [ 1153.566540][ T2271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1153.566553][ T2271] Call Trace: [ 1153.566562][ T2271] [ 1153.566572][ T2271] __dump_stack+0x1d/0x30 [ 1153.566603][ T2271] dump_stack_lvl+0x95/0xd0 [ 1153.566630][ T2271] dump_stack+0x15/0x1b [ 1153.566677][ T2271] should_fail_ex+0x263/0x280 [ 1153.566788][ T2271] should_fail+0xb/0x20 [ 1153.566826][ T2271] should_fail_usercopy+0x1a/0x20 [ 1153.566864][ T2271] _copy_from_user+0x1c/0xb0 [ 1153.566896][ T2271] bpf_test_init+0xb9/0x130 [ 1153.566982][ T2271] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 1153.567013][ T2271] ? kstrtoull+0x111/0x140 [ 1153.567037][ T2271] ? __rcu_read_unlock+0x4e/0x70 [ 1153.567057][ T2271] ? __fget_files+0x184/0x1c0 [ 1153.567139][ T2271] ? __rcu_read_unlock+0x4e/0x70 [ 1153.567167][ T2271] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1153.567193][ T2271] bpf_prog_test_run+0x204/0x340 [ 1153.567280][ T2271] __sys_bpf+0x52e/0x7e0 [ 1153.567314][ T2271] __x64_sys_bpf+0x41/0x50 [ 1153.567335][ T2271] x64_sys_call+0x10cb/0x3020 [ 1153.567378][ T2271] do_syscall_64+0x12c/0x3b0 [ 1153.567404][ T2271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.567426][ T2271] RIP: 0033:0x7fa9e744cdd9 [ 1153.567441][ T2271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.567463][ T2271] RSP: 002b:00007fa9e5ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1153.567485][ T2271] RAX: ffffffffffffffda RBX: 00007fa9e76c5fa0 RCX: 00007fa9e744cdd9 [ 1153.567533][ T2271] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1153.567551][ T2271] RBP: 00007fa9e5ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.567664][ T2271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.567678][ T2271] R13: 00007fa9e76c6038 R14: 00007fa9e76c5fa0 R15: 00007ffd4dc93068 [ 1153.567704][ T2271] [ 1154.176921][ T2282] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1154.411826][ T2293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6837'. [ 1154.553075][ T2297] loop5: detected capacity change from 0 to 256 [ 1154.595322][ T2297] FAT-fs (loop5): Directory bread(block 64) failed [ 1154.602164][ T2297] FAT-fs (loop5): Directory bread(block 65) failed [ 1154.608736][ T2297] FAT-fs (loop5): Directory bread(block 66) failed [ 1154.615528][ T2297] FAT-fs (loop5): Directory bread(block 67) failed [ 1154.622151][ T2297] FAT-fs (loop5): Directory bread(block 68) failed [ 1154.628891][ T2297] FAT-fs (loop5): Directory bread(block 69) failed [ 1154.635495][ T2297] FAT-fs (loop5): Directory bread(block 70) failed [ 1154.642260][ T2297] FAT-fs (loop5): Directory bread(block 71) failed [ 1154.648987][ T2297] FAT-fs (loop5): Directory bread(block 72) failed [ 1154.655551][ T2297] FAT-fs (loop5): Directory bread(block 73) failed [ 1154.839910][ T2301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6839'. [ 1154.886563][ T2299] loop4: detected capacity change from 0 to 512 [ 1154.977329][ T2299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1155.331480][ T2299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.416922][ T2299] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.491989][ T28] audit: type=1400 audit(2000000034.860:4520): avc: denied { bind } for pid=2298 comm="syz.4.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1155.582277][ T28] audit: type=1326 audit(2000000034.960:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.610440][ T28] audit: type=1326 audit(2000000034.980:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.633610][ T28] audit: type=1326 audit(2000000034.980:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.722633][ T28] audit: type=1326 audit(2000000034.980:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.774271][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.790998][ T28] audit: type=1326 audit(2000000034.980:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.853934][ T28] audit: type=1326 audit(2000000034.980:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.880299][ T28] audit: type=1326 audit(2000000034.980:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1155.991922][ T28] audit: type=1326 audit(2000000034.980:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1156.041125][ T28] audit: type=1326 audit(2000000034.980:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.2.6842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d24d1cdd9 code=0x50000 [ 1156.186852][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6846'. [ 1156.450437][ T2332] loop4: detected capacity change from 0 to 2048 [ 1156.590604][ T2333] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1156.598194][ T2333] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1156.605607][ T2333] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1156.614819][ T2333] xt_hashlimit: max too large, truncated to 1048576 [ 1156.712327][ T2332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.802770][ T2338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6849'. [ 1156.869870][ T2332] random: crng reseeded on system resumption [ 1156.951855][ T2340] FAULT_INJECTION: forcing a failure. [ 1156.951855][ T2340] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.070395][ T2340] CPU: 1 UID: 0 PID: 2340 Comm: syz.4.6843 Tainted: G W syzkaller #0 PREEMPT(full) [ 1157.070434][ T2340] Tainted: [W]=WARN [ 1157.070444][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.070461][ T2340] Call Trace: [ 1157.070515][ T2340] [ 1157.070523][ T2340] __dump_stack+0x1d/0x30 [ 1157.070547][ T2340] dump_stack_lvl+0x95/0xd0 [ 1157.070624][ T2340] dump_stack+0x15/0x1b [ 1157.070642][ T2340] should_fail_ex+0x263/0x280 [ 1157.070782][ T2340] should_failslab+0x8c/0xb0 [ 1157.070842][ T2340] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1157.070890][ T2340] ? do_getname+0x2e/0x1c0 [ 1157.070907][ T2340] ? should_fail_ex+0xd9/0x280 [ 1157.070934][ T2340] do_getname+0x2e/0x1c0 [ 1157.070975][ T2340] user_path_at+0x28/0x100 [ 1157.071007][ T2340] __se_sys_mount+0x25b/0x2e0 [ 1157.071054][ T2340] __x64_sys_mount+0x67/0x80 [ 1157.071103][ T2340] x64_sys_call+0x2d61/0x3020 [ 1157.071135][ T2340] do_syscall_64+0x12c/0x3b0 [ 1157.071162][ T2340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.071187][ T2340] RIP: 0033:0x7f5efcaccdd9 [ 1157.071221][ T2340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.071245][ T2340] RSP: 002b:00007f5efb506028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1157.071271][ T2340] RAX: ffffffffffffffda RBX: 00007f5efcd46090 RCX: 00007f5efcaccdd9 [ 1157.071289][ T2340] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 1157.071305][ T2340] RBP: 00007f5efb506090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.071352][ T2340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.071367][ T2340] R13: 00007f5efcd46128 R14: 00007f5efcd46090 R15: 00007ffea18dd7b8 [ 1157.071391][ T2340] [ 1157.431853][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.443339][ T2343] loop5: detected capacity change from 0 to 128 [ 1158.408130][ T2359] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1158.637992][ T2369] loop4: detected capacity change from 0 to 1024 [ 1158.667390][ T2369] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1158.697019][ T2369] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1158.716917][ T2369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1158.858791][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.986863][ T2383] loop4: detected capacity change from 0 to 512 [ 1159.001011][ T2383] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1159.017801][ T2383] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.6865: corrupted xattr entries [ 1159.029458][ T2383] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1159.029700][ T2383] EXT4-fs (loop4): 1 truncate cleaned up [ 1159.038881][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1159.038928][ C0] EXT4-fs (loop4): initial error at time 2000000038: xattr_find_entry:337: inode 15 [ 1159.038963][ C0] EXT4-fs (loop4): last error at time 2000000038: xattr_find_entry:337: inode 15 [ 1159.070734][ T2383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1159.290735][ T2387] loop5: detected capacity change from 0 to 256 [ 1159.319101][ T2387] FAT-fs (loop5): Directory bread(block 64) failed [ 1159.325738][ T2387] FAT-fs (loop5): Directory bread(block 65) failed [ 1159.332342][ T2387] FAT-fs (loop5): Directory bread(block 66) failed [ 1159.339035][ T2387] FAT-fs (loop5): Directory bread(block 67) failed [ 1159.345708][ T2387] FAT-fs (loop5): Directory bread(block 68) failed [ 1159.352288][ T2387] FAT-fs (loop5): Directory bread(block 69) failed [ 1159.358849][ T2387] FAT-fs (loop5): Directory bread(block 70) failed [ 1159.365432][ T2387] FAT-fs (loop5): Directory bread(block 71) failed [ 1159.372191][ T2387] FAT-fs (loop5): Directory bread(block 72) failed [ 1159.378737][ T2387] FAT-fs (loop5): Directory bread(block 73) failed [ 1159.631378][ T2392] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1159.639109][ T2392] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1159.646502][ T2392] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1159.655262][ T2392] xt_hashlimit: max too large, truncated to 1048576 [ 1160.831800][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.984262][ T2406] loop5: detected capacity change from 0 to 1024 [ 1161.000228][ T2406] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1161.035035][ T2406] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1161.061095][ T2406] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1161.083240][ T2406] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #5: comm syz.5.6874: unexpected bad inode w/o EXT4_IGET_BAD [ 1161.110942][ T2406] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 1161.111067][ T2406] EXT4-fs (loop5): no journal found [ 1161.125554][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1161.125576][ C1] EXT4-fs (loop5): initial error at time 2000000040: ext4_get_journal_inode:5896: inode 5 [ 1161.125601][ C1] EXT4-fs (loop5): last error at time 2000000040: ext4_get_journal_inode:5896: inode 5 [ 1161.195186][ T2406] EXT4-fs (loop5): can't get journal size [ 1161.205980][ T2406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1161.232017][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 1161.232068][ T28] audit: type=1400 audit(2000000040.610:4662): avc: denied { read } for pid=2405 comm="syz.5.6874" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1161.291016][ T28] audit: type=1400 audit(2000000040.640:4663): avc: denied { open } for pid=2405 comm="syz.5.6874" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1161.387036][ T2413] syzkaller0: entered promiscuous mode [ 1161.533219][T27384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.604606][ T2423] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6879'. [ 1161.627378][ T2425] loop6: detected capacity change from 0 to 512 [ 1161.679169][ T2425] EXT4-fs: Ignoring removed oldalloc option [ 1161.685680][ T2425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1161.774821][ T28] audit: type=1400 audit(2000000041.140:4664): avc: denied { watch watch_reads } for pid=2422 comm="syz.5.6879" path="/333" dev="tmpfs" ino=1823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1161.998142][ T2425] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1162.009873][ T2425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1162.030142][ T2425] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1162.583268][ T2425] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1162.596197][ T2425] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1162.618135][ T2425] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1162.824016][ T2425] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6880: bg 0: block 40: padding at end of block bitmap is not set [ 1162.838312][ T2425] loop6: lost filesystem error report for type 5 error -117 [ 1162.856727][ T2425] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1162.923737][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1162.930205][ C0] EXT4-fs (loop6): initial error at time 2000000042: ext4_validate_block_bitmap:441 [ 1162.939625][ C0] EXT4-fs (loop6): last error at time 2000000042: ext4_validate_block_bitmap:441 [ 1162.962449][ T2433] loop4: detected capacity change from 0 to 256 [ 1163.578593][ T2425] loop6: lost filesystem error report for type 5 error -117 [ 1163.629457][ T2425] EXT4-fs (loop6): 1 truncate cleaned up [ 1163.642947][ T2425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1163.930013][ T2436] loop5: detected capacity change from 0 to 512 [ 1164.565043][ T2433] FAT-fs (loop4): Directory bread(block 64) failed [ 1164.571681][ T2433] FAT-fs (loop4): Directory bread(block 65) failed [ 1164.578252][ T2433] FAT-fs (loop4): Directory bread(block 66) failed [ 1164.584883][ T2433] FAT-fs (loop4): Directory bread(block 67) failed [ 1164.591617][ T2433] FAT-fs (loop4): Directory bread(block 68) failed [ 1164.598228][ T2433] FAT-fs (loop4): Directory bread(block 69) failed [ 1164.604793][ T2433] FAT-fs (loop4): Directory bread(block 70) failed [ 1164.611406][ T2433] FAT-fs (loop4): Directory bread(block 71) failed [ 1164.618113][ T2433] FAT-fs (loop4): Directory bread(block 72) failed [ 1164.618800][ T2436] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1164.624705][ T2433] FAT-fs (loop4): Directory bread(block 73) failed [ 1164.657813][ T2425] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.6880: bad symlink. [ 1164.705514][ T2441] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 1164.716424][ T2436] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.6883: corrupted xattr entries [ 1164.738003][ T2436] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1164.738365][ T2436] EXT4-fs (loop5): 1 truncate cleaned up [ 1164.766738][ T2436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.030365][ T2454] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1165.037845][ T2454] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1165.045214][ T2454] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1165.054248][ T2454] xt_hashlimit: max too large, truncated to 1048576 [ 1166.042859][ T28] audit: type=1400 audit(2000000045.410:4665): avc: denied { read } for pid=2458 comm="syz.4.6889" name="file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1166.296599][ T2459] loop4: detected capacity change from 0 to 4096 [ 1166.325470][T27384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.363159][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.583440][ T2459] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 1166.593035][ T2459] System zones: 0-5 [ 1166.688904][ T2459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.859663][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.885011][ T2472] loop0: detected capacity change from 0 to 2048 [ 1166.936984][ T2472] Alternate GPT is invalid, using primary GPT. [ 1166.948094][ T2472] loop0: p1 p2 p3 [ 1166.954649][ T2472] loop0: partition table partially beyond EOD, truncated [ 1167.364753][ T2478] FAULT_INJECTION: forcing a failure. [ 1167.364753][ T2478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.403557][ T2478] CPU: 0 UID: 0 PID: 2478 Comm: syz.2.6897 Tainted: G W syzkaller #0 PREEMPT(full) [ 1167.403593][ T2478] Tainted: [W]=WARN [ 1167.403602][ T2478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1167.403618][ T2478] Call Trace: [ 1167.403627][ T2478] [ 1167.403647][ T2478] __dump_stack+0x1d/0x30 [ 1167.403689][ T2478] dump_stack_lvl+0x95/0xd0 [ 1167.403716][ T2478] dump_stack+0x15/0x1b [ 1167.403742][ T2478] should_fail_ex+0x263/0x280 [ 1167.403797][ T2478] should_fail+0xb/0x20 [ 1167.403864][ T2478] should_fail_usercopy+0x1a/0x20 [ 1167.403893][ T2478] _copy_from_iter+0xcf/0xea0 [ 1167.403925][ T2478] ? alloc_pages_mpol+0x217/0x260 [ 1167.403959][ T2478] copy_page_from_iter+0x161/0x1f0 [ 1167.404153][ T2478] tun_get_user+0xbe3/0x27e0 [ 1167.404249][ T2478] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1167.404342][ T2478] tun_chr_write_iter+0x15e/0x210 [ 1167.404381][ T2478] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1167.404421][ T2478] vfs_write+0x5a6/0x9f0 [ 1167.404533][ T2478] ksys_write+0xdc/0x1a0 [ 1167.404624][ T2478] __x64_sys_write+0x40/0x50 [ 1167.404661][ T2478] x64_sys_call+0x27e1/0x3020 [ 1167.404699][ T2478] do_syscall_64+0x12c/0x3b0 [ 1167.404723][ T2478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.404744][ T2478] RIP: 0033:0x7f7d24cdd60e [ 1167.404795][ T2478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.404813][ T2478] RSP: 002b:00007f7d2376efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.404879][ T2478] RAX: ffffffffffffffda RBX: 00007f7d2376f6c0 RCX: 00007f7d24cdd60e [ 1167.404893][ T2478] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1167.404966][ T2478] RBP: 00007f7d2376f090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.404978][ T2478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.404990][ T2478] R13: 00007f7d24f96038 R14: 00007f7d24f95fa0 R15: 00007fff57069278 [ 1167.405021][ T2478] [ 1167.729500][ T2486] 9p: Bad value for 'rfdno' [ 1167.870673][ T28] audit: type=1400 audit(2000000047.240:4666): avc: denied { create } for pid=2501 comm="syz.2.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1167.907297][ T28] audit: type=1400 audit(2000000047.270:4667): avc: denied { ioctl } for pid=2501 comm="syz.2.6904" path="socket:[116648]" dev="sockfs" ino=116648 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1168.074302][ T2510] 9p: Bad value for 'wfdno' [ 1168.266522][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6908'. [ 1168.275928][ T2517] netlink: 'syz.6.6908': attribute type 1 has an invalid length. [ 1168.284026][ T2517] netlink: 568 bytes leftover after parsing attributes in process `syz.6.6908'. [ 1168.296653][ T28] audit: type=1400 audit(2000000047.670:4668): avc: denied { create } for pid=2515 comm="syz.2.6909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1168.601858][ T2525] loop5: detected capacity change from 0 to 128 [ 1168.620720][ T2525] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1168.669491][T21002] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1168.729645][ T2533] netlink: 'syz.5.6914': attribute type 3 has an invalid length. [ 1168.742732][ T2535] loop4: detected capacity change from 0 to 128 [ 1168.744154][ T2533] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6914'. [ 1168.771213][ T2535] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1169.064266][ T2545] loop5: detected capacity change from 0 to 2048 [ 1169.199323][ T2550] loop6: detected capacity change from 0 to 128 [ 1169.206118][ T2550] journal_path: Non-blockdev passed as './file0/../file0' [ 1169.213347][ T2550] EXT4-fs: error: could not find journal device path [ 1169.224397][ T3283] udevd[3283]: incorrect ext4 checksum on /dev/loop6 [ 1169.261284][ T2550] loop6: detected capacity change from 0 to 764 [ 1169.367740][ T28] audit: type=1400 audit(2000000048.730:4669): avc: denied { listen } for pid=2549 comm="syz.6.6919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1169.427633][ T2555] FAULT_INJECTION: forcing a failure. [ 1169.427633][ T2555] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.450985][ T2555] CPU: 0 UID: 0 PID: 2555 Comm: syz.5.6922 Tainted: G W syzkaller #0 PREEMPT(full) [ 1169.451025][ T2555] Tainted: [W]=WARN [ 1169.451034][ T2555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.451050][ T2555] Call Trace: [ 1169.451059][ T2555] [ 1169.451069][ T2555] __dump_stack+0x1d/0x30 [ 1169.451093][ T2555] dump_stack_lvl+0x95/0xd0 [ 1169.451118][ T2555] dump_stack+0x15/0x1b [ 1169.451143][ T2555] should_fail_ex+0x263/0x280 [ 1169.451179][ T2555] should_failslab+0x8c/0xb0 [ 1169.451285][ T2555] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1169.451329][ T2555] ? __alloc_skb+0x2d6/0x690 [ 1169.451367][ T2555] __alloc_skb+0x2d6/0x690 [ 1169.451416][ T2555] ? __alloc_skb+0x200/0x690 [ 1169.451484][ T2555] netlink_alloc_large_skb+0xbf/0xf0 [ 1169.451514][ T2555] netlink_sendmsg+0x40c/0x6f0 [ 1169.451553][ T2555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.451657][ T2555] ____sys_sendmsg+0x563/0x5b0 [ 1169.451684][ T2555] ___sys_sendmsg+0x195/0x1e0 [ 1169.451784][ T2555] __x64_sys_sendmsg+0xd4/0x160 [ 1169.451848][ T2555] x64_sys_call+0x194c/0x3020 [ 1169.451879][ T2555] do_syscall_64+0x12c/0x3b0 [ 1169.451975][ T2555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.452002][ T2555] RIP: 0033:0x7fa9e744cdd9 [ 1169.452022][ T2555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.452106][ T2555] RSP: 002b:00007fa9e5ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.452131][ T2555] RAX: ffffffffffffffda RBX: 00007fa9e76c5fa0 RCX: 00007fa9e744cdd9 [ 1169.452149][ T2555] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 1169.452162][ T2555] RBP: 00007fa9e5ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.452180][ T2555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.452197][ T2555] R13: 00007fa9e76c6038 R14: 00007fa9e76c5fa0 R15: 00007ffd4dc93068 [ 1169.452221][ T2555] [ 1169.681208][ T28] audit: type=1400 audit(2000000048.730:4670): avc: denied { read } for pid=2549 comm="syz.6.6919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1169.874666][ T2558] FAULT_INJECTION: forcing a failure. [ 1169.874666][ T2558] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.960457][ T2558] CPU: 0 UID: 0 PID: 2558 Comm: syz.6.6921 Tainted: G W syzkaller #0 PREEMPT(full) [ 1169.960498][ T2558] Tainted: [W]=WARN [ 1169.960505][ T2558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.960523][ T2558] Call Trace: [ 1169.960532][ T2558] [ 1169.960543][ T2558] __dump_stack+0x1d/0x30 [ 1169.960573][ T2558] dump_stack_lvl+0x95/0xd0 [ 1169.960605][ T2558] dump_stack+0x15/0x1b [ 1169.960628][ T2558] should_fail_ex+0x263/0x280 [ 1169.960739][ T2558] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1169.960832][ T2558] should_failslab+0x8c/0xb0 [ 1169.960869][ T2558] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 1169.960913][ T2558] ? sock_alloc_inode+0x36/0xf0 [ 1169.960946][ T2558] ? selinux_socket_create+0xfd/0x180 [ 1169.961039][ T2558] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1169.961068][ T2558] sock_alloc_inode+0x36/0xf0 [ 1169.961099][ T2558] alloc_inode+0x40/0x170 [ 1169.961200][ T2558] __sock_create+0x120/0x580 [ 1169.961236][ T2558] ? alloc_fd+0x389/0x3c0 [ 1169.961288][ T2558] __sys_socket_file+0xa0/0x120 [ 1169.961321][ T2558] io_socket+0xb0/0x1f0 [ 1169.961424][ T2558] __io_issue_sqe+0xfd/0x2d0 [ 1169.961458][ T2558] io_issue_sqe+0x206/0xba0 [ 1169.961514][ T2558] ? io_submit_sqes+0x292/0x1170 [ 1169.961556][ T2558] io_submit_sqes+0x7e0/0x1170 [ 1169.961658][ T2558] __se_sys_io_uring_enter+0x25c/0xfc0 [ 1169.961703][ T2558] __x64_sys_io_uring_enter+0x78/0x90 [ 1169.961746][ T2558] x64_sys_call+0x1e16/0x3020 [ 1169.961851][ T2558] do_syscall_64+0x12c/0x3b0 [ 1169.961883][ T2558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.961912][ T2558] RIP: 0033:0x7fe850d6cdd9 [ 1169.961949][ T2558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.961968][ T2558] RSP: 002b:00007fe84f7c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1169.961992][ T2558] RAX: ffffffffffffffda RBX: 00007fe850fe5fa0 RCX: 00007fe850d6cdd9 [ 1169.962017][ T2558] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1169.962034][ T2558] RBP: 00007fe84f7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.962048][ T2558] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 1169.962064][ T2558] R13: 00007fe850fe6038 R14: 00007fe850fe5fa0 R15: 00007ffe2fb90038 [ 1169.962104][ T2558] [ 1170.869929][ T2558] socket: no more sockets [ 1171.312899][ T8941] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1171.368752][ T2569] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6926'. [ 1171.389853][ T28] audit: type=1400 audit(2000000050.760:4671): avc: denied { create } for pid=2568 comm="syz.4.6926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1171.426878][ T28] audit: type=1400 audit(2000000050.800:4672): avc: denied { bind } for pid=2568 comm="syz.4.6926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1171.458625][ T2569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6926'. [ 1171.473636][ T2569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6926'. [ 1171.664232][ T2583] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6931'. [ 1171.785435][ T2586] FAULT_INJECTION: forcing a failure. [ 1171.785435][ T2586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.798686][ T2586] CPU: 1 UID: 0 PID: 2586 Comm: syz.6.6932 Tainted: G W syzkaller #0 PREEMPT(full) [ 1171.798726][ T2586] Tainted: [W]=WARN [ 1171.798735][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.798751][ T2586] Call Trace: [ 1171.798760][ T2586] [ 1171.798768][ T2586] __dump_stack+0x1d/0x30 [ 1171.798854][ T2586] dump_stack_lvl+0x95/0xd0 [ 1171.798873][ T2586] dump_stack+0x15/0x1b [ 1171.798899][ T2586] should_fail_ex+0x263/0x280 [ 1171.798924][ T2586] should_fail+0xb/0x20 [ 1171.798945][ T2586] should_fail_usercopy+0x1a/0x20 [ 1171.799026][ T2586] _copy_to_user+0x20/0xa0 [ 1171.799054][ T2586] simple_read_from_buffer+0xb5/0x130 [ 1171.799084][ T2586] proc_fail_nth_read+0x10e/0x150 [ 1171.799180][ T2586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1171.799204][ T2586] vfs_read+0x1ab/0x7f0 [ 1171.799378][ T2586] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1171.799512][ T2586] ? xfd_validate_state+0x45/0xf0 [ 1171.799539][ T2586] ksys_read+0xdc/0x1a0 [ 1171.799627][ T2586] __x64_sys_read+0x40/0x50 [ 1171.799707][ T2586] x64_sys_call+0x2886/0x3020 [ 1171.799771][ T2586] do_syscall_64+0x12c/0x3b0 [ 1171.799793][ T2586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.799820][ T2586] RIP: 0033:0x7fe850d2d60e [ 1171.799835][ T2586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1171.799851][ T2586] RSP: 002b:00007fe84f7c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1171.799907][ T2586] RAX: ffffffffffffffda RBX: 00007fe84f7c76c0 RCX: 00007fe850d2d60e [ 1171.799919][ T2586] RDX: 000000000000000f RSI: 00007fe84f7c70a0 RDI: 0000000000000007 [ 1171.799999][ T2586] RBP: 00007fe84f7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.800010][ T2586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.800021][ T2586] R13: 00007fe850fe6038 R14: 00007fe850fe5fa0 R15: 00007ffe2fb90038 [ 1171.800089][ T2586] [ 1171.821011][ T28] audit: type=1400 audit(2000000051.160:4673): avc: denied { mounton } for pid=2590 comm="syz.6.6933" path="/177/file0" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1171.914390][ T2591] loop6: detected capacity change from 0 to 4096 [ 1172.065533][ T2591] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 1172.074721][ T2591] System zones: 0-5 [ 1172.079784][ T2591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.113908][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.380275][ T2611] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6940'. [ 1172.512108][ T2618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6942'. [ 1172.569559][ T2618] tipc: Started in network mode [ 1172.581966][ T2618] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1172.591384][ T2618] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1172.599550][ T2618] tipc: Enabled bearer , priority 10 [ 1172.607267][ T2629] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6945'. [ 1172.637305][ T2631] loop0: detected capacity change from 0 to 512 [ 1172.644208][ T2631] EXT4-fs: Ignoring removed oldalloc option [ 1172.650350][ T2631] EXT4-fs: Ignoring removed nobh option [ 1172.665564][ T2631] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.6946: iget: bad extra_isize 90 (inode size 256) [ 1172.679363][ T2631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1172.682558][ T2634] nci: nci_send_cmd: no memory for command [ 1172.701755][ T2631] EXT4-fs (loop0): Remounting filesystem read-only [ 1172.711283][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1172.718855][ C1] EXT4-fs (loop0): initial error at time 2000000052: ext4_xattr_inode_iget:441: inode 11 [ 1172.730765][ C1] EXT4-fs (loop0): last error at time 2000000052: ext4_xattr_inode_iget:441: inode 11 [ 1172.731596][ T2631] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1172.731721][ T2631] EXT4-fs (loop0): 1 orphan inode deleted [ 1172.732670][ T2631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.771935][ T28] audit: type=1400 audit(2000000052.120:4674): avc: denied { watch } for pid=2630 comm="syz.0.6946" path="/207/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1172.797981][ T28] audit: type=1400 audit(2000000052.120:4675): avc: denied { bind } for pid=2639 comm="syz.6.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1172.930203][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1172.930221][ T28] audit: type=1400 audit(2000000052.300:4680): avc: denied { ioctl } for pid=2647 comm="syz.4.6950" path="socket:[118005]" dev="sockfs" ino=118005 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1172.983987][ T2648] macvlan2: entered allmulticast mode [ 1172.995548][ T2648] dummy0: entered allmulticast mode [ 1173.007261][ T2648] dummy0: entered promiscuous mode [ 1173.255976][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.295447][ T2665] FAULT_INJECTION: forcing a failure. [ 1173.295447][ T2665] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.315164][ T2665] CPU: 1 UID: 0 PID: 2665 Comm: syz.0.6955 Tainted: G W syzkaller #0 PREEMPT(full) [ 1173.315248][ T2665] Tainted: [W]=WARN [ 1173.315258][ T2665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1173.315288][ T2665] Call Trace: [ 1173.315296][ T2665] [ 1173.315375][ T2665] __dump_stack+0x1d/0x30 [ 1173.315443][ T2665] dump_stack_lvl+0x95/0xd0 [ 1173.315539][ T2665] dump_stack+0x15/0x1b [ 1173.315585][ T2665] should_fail_ex+0x263/0x280 [ 1173.315664][ T2665] should_failslab+0x8c/0xb0 [ 1173.315744][ T2665] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1173.315788][ T2665] ? __alloc_skb+0x2d6/0x690 [ 1173.315822][ T2665] __alloc_skb+0x2d6/0x690 [ 1173.315961][ T2665] ? __alloc_skb+0x200/0x690 [ 1173.316002][ T2665] netlink_alloc_large_skb+0xbf/0xf0 [ 1173.316026][ T2665] netlink_sendmsg+0x40c/0x6f0 [ 1173.316111][ T2665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1173.316225][ T2665] ____sys_sendmsg+0x563/0x5b0 [ 1173.316253][ T2665] ___sys_sendmsg+0x195/0x1e0 [ 1173.316310][ T2665] __x64_sys_sendmsg+0xd4/0x160 [ 1173.316344][ T2665] x64_sys_call+0x194c/0x3020 [ 1173.316373][ T2665] do_syscall_64+0x12c/0x3b0 [ 1173.316399][ T2665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.316472][ T2665] RIP: 0033:0x7fe3b110cdd9 [ 1173.316493][ T2665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.316514][ T2665] RSP: 002b:00007fe3afb5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1173.316534][ T2665] RAX: ffffffffffffffda RBX: 00007fe3b1385fa0 RCX: 00007fe3b110cdd9 [ 1173.316593][ T2665] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000004 [ 1173.316607][ T2665] RBP: 00007fe3afb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.316626][ T2665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.316638][ T2665] R13: 00007fe3b1386038 R14: 00007fe3b1385fa0 R15: 00007ffc5ff4aee8 [ 1173.316658][ T2665] [ 1173.670260][ T2675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2675 comm=syz.6.6959 [ 1173.687290][ T3530] tipc: Node number set to 1 [ 1173.732694][ T2674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2674 comm=syz.6.6959 [ 1173.810510][ T2680] loop0: detected capacity change from 0 to 512 [ 1173.823039][ T2680] EXT4-fs: Ignoring removed oldalloc option [ 1173.828999][ T2680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1173.980935][ T2680] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1174.001505][ T2680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1174.015317][ T2680] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1174.028712][ T2680] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1174.038213][ T2680] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1174.054481][ T2680] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1174.062435][ T2680] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6961: bg 0: block 40: padding at end of block bitmap is not set [ 1174.078591][ T2689] __nla_validate_parse: 3 callbacks suppressed [ 1174.078610][ T2689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6964'. [ 1174.097929][ T2680] loop0: lost filesystem error report for type 5 error -117 [ 1174.098137][ T2680] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1174.167199][ T2680] loop0: lost filesystem error report for type 5 error -117 [ 1174.167444][ T2680] EXT4-fs (loop0): 1 truncate cleaned up [ 1174.192022][ T2680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1174.234557][ T2696] FAULT_INJECTION: forcing a failure. [ 1174.234557][ T2696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.249586][ T2680] EXT4-fs (loop0): shut down requested (2) [ 1174.266560][ T2696] CPU: 1 UID: 0 PID: 2696 Comm: syz.4.6966 Tainted: G W syzkaller #0 PREEMPT(full) [ 1174.266610][ T2696] Tainted: [W]=WARN [ 1174.266619][ T2696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1174.266666][ T2696] Call Trace: [ 1174.266675][ T2696] [ 1174.266685][ T2696] __dump_stack+0x1d/0x30 [ 1174.266715][ T2696] dump_stack_lvl+0x95/0xd0 [ 1174.266741][ T2696] dump_stack+0x15/0x1b [ 1174.266760][ T2696] should_fail_ex+0x263/0x280 [ 1174.266795][ T2696] should_fail+0xb/0x20 [ 1174.266828][ T2696] should_fail_usercopy+0x1a/0x20 [ 1174.266864][ T2696] _copy_from_iter+0xcf/0xea0 [ 1174.266927][ T2696] ? avc_has_perm+0x101/0x190 [ 1174.266957][ T2696] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1174.267037][ T2696] bcm_sendmsg+0xc6/0x4a0 [ 1174.267068][ T2696] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1174.267164][ T2696] ____sys_sendmsg+0x563/0x5b0 [ 1174.267199][ T2696] ___sys_sendmsg+0x195/0x1e0 [ 1174.267240][ T2696] __x64_sys_sendmsg+0xd4/0x160 [ 1174.267266][ T2696] x64_sys_call+0x194c/0x3020 [ 1174.267289][ T2696] do_syscall_64+0x12c/0x3b0 [ 1174.267331][ T2696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.267422][ T2696] RIP: 0033:0x7f5efcaccdd9 [ 1174.267437][ T2696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.267520][ T2696] RSP: 002b:00007f5efb527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.267547][ T2696] RAX: ffffffffffffffda RBX: 00007f5efcd45fa0 RCX: 00007f5efcaccdd9 [ 1174.267595][ T2696] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1174.267608][ T2696] RBP: 00007f5efb527090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.267621][ T2696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.267635][ T2696] R13: 00007f5efcd46038 R14: 00007f5efcd45fa0 R15: 00007ffea18dd7b8 [ 1174.267683][ T2696] [ 1174.310883][ T2702] loop6: detected capacity change from 0 to 512 [ 1174.336837][ T2703] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1174.365534][ T2702] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1174.369849][ T2703] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1174.487878][ T2702] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6969: corrupted in-inode xattr: bad e_name length [ 1174.552978][ T2702] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1174.553337][ T2702] EXT4-fs (loop6): get orphan inode failed [ 1174.562686][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1174.562726][ C0] EXT4-fs (loop6): initial error at time 2000000053: ext4_iget_extra_inode:5128: inode 15 [ 1174.562821][ C0] EXT4-fs (loop6): last error at time 2000000053: ext4_iget_extra_inode:5128: inode 15 [ 1174.624198][ T2702] EXT4-fs (loop6): mount failed [ 1174.783204][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.747771][ T28] audit: type=1400 audit(2000000055.120:4681): avc: denied { append } for pid=2732 comm="syz.6.6978" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1175.948443][ T2733] pim6reg2: entered allmulticast mode [ 1176.136377][ T2742] loop5: detected capacity change from 0 to 128 [ 1176.387902][ T2744] xt_hashlimit: max too large, truncated to 1048576 [ 1176.429583][ T2742] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1176.449128][ T2742] FAULT_INJECTION: forcing a failure. [ 1176.449128][ T2742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.462322][ T2742] CPU: 0 UID: 0 PID: 2742 Comm: syz.5.6979 Tainted: G W syzkaller #0 PREEMPT(full) [ 1176.462360][ T2742] Tainted: [W]=WARN [ 1176.462367][ T2742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1176.462382][ T2742] Call Trace: [ 1176.462391][ T2742] [ 1176.462402][ T2742] __dump_stack+0x1d/0x30 [ 1176.462439][ T2742] dump_stack_lvl+0x95/0xd0 [ 1176.462464][ T2742] dump_stack+0x15/0x1b [ 1176.462520][ T2742] should_fail_ex+0x263/0x280 [ 1176.462586][ T2742] should_fail+0xb/0x20 [ 1176.462616][ T2742] should_fail_usercopy+0x1a/0x20 [ 1176.462742][ T2742] strncpy_from_user+0x27/0x250 [ 1176.462823][ T2742] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 1176.462857][ T2742] do_getname+0x59/0x1c0 [ 1176.462881][ T2742] getname_flags+0x1d/0x30 [ 1176.462945][ T2742] do_sys_openat2+0x60/0x130 [ 1176.462968][ T2742] __x64_sys_openat+0xf2/0x120 [ 1176.462992][ T2742] x64_sys_call+0x1e39/0x3020 [ 1176.463017][ T2742] do_syscall_64+0x12c/0x3b0 [ 1176.463119][ T2742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.463144][ T2742] RIP: 0033:0x7fa9e744cdd9 [ 1176.463169][ T2742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.463193][ T2742] RSP: 002b:00007fa9e5e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1176.463256][ T2742] RAX: ffffffffffffffda RBX: 00007fa9e76c6090 RCX: 00007fa9e744cdd9 [ 1176.463275][ T2742] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1176.463292][ T2742] RBP: 00007fa9e5e86090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.463306][ T2742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.463374][ T2742] R13: 00007fa9e76c6128 R14: 00007fa9e76c6090 R15: 00007ffd4dc93068 [ 1176.463393][ T2742] [ 1176.774347][ T2746] netlink: 'syz.2.6981': attribute type 2 has an invalid length. [ 1176.939415][ T2753] loop6: detected capacity change from 0 to 128 [ 1177.036774][ T2755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2755 comm=syz.2.6984 [ 1177.186768][ T2761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6987'. [ 1177.996693][ T2766] loop4: detected capacity change from 0 to 256 [ 1178.058777][ T2766] FAT-fs (loop4): Directory bread(block 64) failed [ 1178.065483][ T2766] FAT-fs (loop4): Directory bread(block 65) failed [ 1178.072173][ T2766] FAT-fs (loop4): Directory bread(block 66) failed [ 1178.078837][ T2766] FAT-fs (loop4): Directory bread(block 67) failed [ 1178.085576][ T2766] FAT-fs (loop4): Directory bread(block 68) failed [ 1178.092239][ T2766] FAT-fs (loop4): Directory bread(block 69) failed [ 1178.099035][ T2766] FAT-fs (loop4): Directory bread(block 70) failed [ 1178.105678][ T2766] FAT-fs (loop4): Directory bread(block 71) failed [ 1178.112368][ T2766] FAT-fs (loop4): Directory bread(block 72) failed [ 1178.118924][ T2766] FAT-fs (loop4): Directory bread(block 73) failed [ 1178.397454][ T2770] loop6: detected capacity change from 0 to 1024 [ 1178.426124][ T2770] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1178.426124][ T2770] [ 1178.477118][ T2771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2771 comm=syz.0.6989 [ 1178.622770][ T2774] loop5: detected capacity change from 0 to 256 [ 1178.685366][ T2774] FAT-fs (loop5): Directory bread(block 64) failed [ 1178.692004][ T2774] FAT-fs (loop5): Directory bread(block 65) failed [ 1178.698560][ T2774] FAT-fs (loop5): Directory bread(block 66) failed [ 1178.705138][ T2774] FAT-fs (loop5): Directory bread(block 67) failed [ 1178.711692][ T2774] FAT-fs (loop5): Directory bread(block 68) failed [ 1178.718246][ T2774] FAT-fs (loop5): Directory bread(block 69) failed [ 1178.724841][ T2774] FAT-fs (loop5): Directory bread(block 70) failed [ 1178.731423][ T2774] FAT-fs (loop5): Directory bread(block 71) failed [ 1178.738047][ T2774] FAT-fs (loop5): Directory bread(block 72) failed [ 1178.744601][ T2774] FAT-fs (loop5): Directory bread(block 73) failed [ 1179.163827][ T2777] loop5: detected capacity change from 0 to 512 [ 1179.172345][ T2777] EXT4-fs: Ignoring removed oldalloc option [ 1179.178293][ T2777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1179.201759][ T2768] loop0: detected capacity change from 0 to 4096 [ 1179.219221][ T2777] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1179.704823][ T2777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1180.324000][ T2777] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1180.335627][ T2777] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1180.348995][ T2777] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1180.373466][ T2777] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1180.396759][ T2786] netlink: 'syz.2.6994': attribute type 2 has an invalid length. [ 1180.523226][ T2768] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 1180.550184][ T2777] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6992: bg 0: block 40: padding at end of block bitmap is not set [ 1181.192254][ T2768] System zones: 0-5 [ 1181.202758][ T2777] loop5: lost filesystem error report for type 5 error -117 [ 1181.220873][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1181.237465][ C0] EXT4-fs (loop5): initial error at time 2000000060: ext4_validate_block_bitmap:441 [ 1181.248295][ C0] EXT4-fs (loop5): last error at time 2000000060: ext4_validate_block_bitmap:441 [ 1181.559700][ T2777] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1181.576452][ T2768] EXT4-fs: error -4 creating inode table initialization thread [ 1181.596790][ T2768] EXT4-fs (loop0): mount failed [ 1181.641488][ T2793] FAULT_INJECTION: forcing a failure. [ 1181.641488][ T2793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.656301][ T2793] CPU: 0 UID: 0 PID: 2793 Comm: syz.2.6996 Tainted: G W syzkaller #0 PREEMPT(full) [ 1181.656339][ T2793] Tainted: [W]=WARN [ 1181.656349][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1181.656365][ T2793] Call Trace: [ 1181.656374][ T2793] [ 1181.656402][ T2793] __dump_stack+0x1d/0x30 [ 1181.656434][ T2793] dump_stack_lvl+0x95/0xd0 [ 1181.656460][ T2793] dump_stack+0x15/0x1b [ 1181.656478][ T2793] should_fail_ex+0x263/0x280 [ 1181.656510][ T2793] should_fail+0xb/0x20 [ 1181.656683][ T2793] should_fail_usercopy+0x1a/0x20 [ 1181.656721][ T2793] _copy_to_user+0x20/0xa0 [ 1181.656777][ T2793] rng_dev_read+0x375/0x670 [ 1181.656814][ T2793] ? __pfx_rng_dev_read+0x10/0x10 [ 1181.656929][ T2793] vfs_readv+0x432/0x6e0 [ 1181.656958][ T2793] __x64_sys_preadv+0xfd/0x1c0 [ 1181.656999][ T2793] x64_sys_call+0x2915/0x3020 [ 1181.657084][ T2793] do_syscall_64+0x12c/0x3b0 [ 1181.657114][ T2793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.657177][ T2793] RIP: 0033:0x7f7d24d1cdd9 [ 1181.657198][ T2793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.657221][ T2793] RSP: 002b:00007f7d2372d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1181.657245][ T2793] RAX: ffffffffffffffda RBX: 00007f7d24f96180 RCX: 00007f7d24d1cdd9 [ 1181.657343][ T2793] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 1181.657357][ T2793] RBP: 00007f7d2372d090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.657374][ T2793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.657389][ T2793] R13: 00007f7d24f96218 R14: 00007f7d24f96180 R15: 00007fff57069278 [ 1181.657414][ T2793] [ 1181.723457][ T2777] loop5: lost filesystem error report for type 5 error -117 [ 1181.945944][ T2777] EXT4-fs (loop5): 1 truncate cleaned up [ 1181.986029][ T2777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1182.133435][ T2787] loop4: detected capacity change from 0 to 512 [ 1182.159409][ T2787] EXT4-fs: Ignoring removed oldalloc option [ 1182.165387][ T2787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1182.184090][ T2787] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1182.192076][ T2787] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1182.200268][ T2787] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1182.206655][ T2787] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1182.216040][ T2787] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1182.230580][ T2787] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1183.150696][T27384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.176629][ T2787] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6995: bg 0: block 40: padding at end of block bitmap is not set [ 1183.190989][ T2787] loop4: lost filesystem error report for type 5 error -117 [ 1183.195994][ T2787] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1183.212156][ T2787] loop4: lost filesystem error report for type 5 error -117 [ 1183.212494][ T2787] EXT4-fs (loop4): 1 truncate cleaned up [ 1183.227104][ T2787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1183.264687][ T2787] EXT4-fs (loop4): shut down requested (2) [ 1183.483498][ T2787] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 1183.492395][ T2787] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 1183.975759][ T2809] FAULT_INJECTION: forcing a failure. [ 1183.975759][ T2809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.013243][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.203977][ T2809] CPU: 1 UID: 0 PID: 2809 Comm: syz.5.7000 Tainted: G W syzkaller #0 PREEMPT(full) [ 1184.204024][ T2809] Tainted: [W]=WARN [ 1184.204033][ T2809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1184.204050][ T2809] Call Trace: [ 1184.204059][ T2809] [ 1184.204069][ T2809] __dump_stack+0x1d/0x30 [ 1184.204099][ T2809] dump_stack_lvl+0x95/0xd0 [ 1184.204193][ T2809] dump_stack+0x15/0x1b [ 1184.204220][ T2809] should_fail_ex+0x263/0x280 [ 1184.204337][ T2809] should_fail+0xb/0x20 [ 1184.204367][ T2809] should_fail_usercopy+0x1a/0x20 [ 1184.204462][ T2809] _copy_from_user+0x1c/0xb0 [ 1184.204538][ T2809] ___sys_sendmsg+0xc1/0x1e0 [ 1184.204584][ T2809] __x64_sys_sendmsg+0xd4/0x160 [ 1184.204730][ T2809] x64_sys_call+0x194c/0x3020 [ 1184.204770][ T2809] do_syscall_64+0x12c/0x3b0 [ 1184.204801][ T2809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.204861][ T2809] RIP: 0033:0x7fa9e744cdd9 [ 1184.204880][ T2809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.204953][ T2809] RSP: 002b:00007fa9e5ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.204979][ T2809] RAX: ffffffffffffffda RBX: 00007fa9e76c5fa0 RCX: 00007fa9e744cdd9 [ 1184.204997][ T2809] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1184.205014][ T2809] RBP: 00007fa9e5ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.205031][ T2809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.205047][ T2809] R13: 00007fa9e76c6038 R14: 00007fa9e76c5fa0 R15: 00007ffd4dc93068 [ 1184.205123][ T2809] [ 1184.388849][ T2813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1184.525597][ T2824] loop6: detected capacity change from 0 to 512 [ 1184.583523][ T2818] netlink: 'syz.2.7006': attribute type 2 has an invalid length. [ 1184.726375][ T2836] loop5: detected capacity change from 0 to 256 [ 1184.790713][ T2836] FAT-fs (loop5): Directory bread(block 64) failed [ 1184.797342][ T2836] FAT-fs (loop5): Directory bread(block 65) failed [ 1184.803959][ T2836] FAT-fs (loop5): Directory bread(block 66) failed [ 1184.810562][ T2836] FAT-fs (loop5): Directory bread(block 67) failed [ 1184.817246][ T2836] FAT-fs (loop5): Directory bread(block 68) failed [ 1184.824000][ T2836] FAT-fs (loop5): Directory bread(block 69) failed [ 1184.830671][ T2836] FAT-fs (loop5): Directory bread(block 70) failed [ 1184.837244][ T2836] FAT-fs (loop5): Directory bread(block 71) failed [ 1184.843969][ T2836] FAT-fs (loop5): Directory bread(block 72) failed [ 1184.850562][ T2836] FAT-fs (loop5): Directory bread(block 73) failed [ 1184.906865][ T2824] EXT4-fs (loop6): 1 truncate cleaned up [ 1184.975141][ T2824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.032478][ T2839] loop4: detected capacity change from 0 to 1024 [ 1185.047337][ T2839] EXT4-fs: Mount option(s) incompatible with ext3 [ 1185.086595][ T2824] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7009'. [ 1185.121337][ T2839] loop4: detected capacity change from 0 to 512 [ 1185.164745][ T2839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.177806][ T2839] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.587169][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.647764][ T2847] loop4: detected capacity change from 0 to 512 [ 1185.667864][ T2847] EXT4-fs: Ignoring removed mblk_io_submit option [ 1185.896598][ T2847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1185.911703][ T2852] 9p: Bad value for 'rfdno' [ 1185.916382][ T28] audit: type=1400 audit(2000000065.270:4682): avc: denied { create } for pid=2850 comm="syz.2.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1185.963369][ T2852] syzkaller0: entered promiscuous mode [ 1185.978603][ T2847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.992929][ T2852] syzkaller0: entered allmulticast mode [ 1186.004911][ T28] audit: type=1400 audit(2000000065.270:4683): avc: denied { write } for pid=2850 comm="syz.2.7016" path="socket:[118875]" dev="sockfs" ino=118875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1186.038401][ T2847] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.094615][ T2847] FAULT_INJECTION: forcing a failure. [ 1186.094615][ T2847] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.119504][ T2858] syzkaller0: entered promiscuous mode [ 1186.125070][ T2858] syzkaller0: entered allmulticast mode [ 1186.242831][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.252036][ T28] audit: type=1400 audit(2000000065.500:4684): avc: denied { write } for pid=2857 comm="syz.2.7018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1186.282138][ T2847] CPU: 1 UID: 0 PID: 2847 Comm: syz.4.7012 Tainted: G W syzkaller #0 PREEMPT(full) [ 1186.282261][ T2847] Tainted: [W]=WARN [ 1186.282270][ T2847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1186.282287][ T2847] Call Trace: [ 1186.282295][ T2847] [ 1186.282303][ T2847] __dump_stack+0x1d/0x30 [ 1186.282332][ T2847] dump_stack_lvl+0x95/0xd0 [ 1186.282359][ T2847] dump_stack+0x15/0x1b [ 1186.282438][ T2847] should_fail_ex+0x263/0x280 [ 1186.282466][ T2847] should_failslab+0x8c/0xb0 [ 1186.282497][ T2847] __kmalloc_noprof+0xb8/0x4d0 [ 1186.282602][ T2847] ? ext4_find_extent+0x17a/0x790 [ 1186.282642][ T2847] ext4_find_extent+0x17a/0x790 [ 1186.282725][ T2847] ext4_ext_map_blocks+0x10d/0x2ea0 [ 1186.282823][ T2847] ? selinux_file_open+0x2e6/0x330 [ 1186.282917][ T2847] ? lockref_put_return+0xf7/0x130 [ 1186.282958][ T2847] ? __rcu_read_unlock+0x4e/0x70 [ 1186.283047][ T2847] ? ext4_fc_track_inode+0xb8/0x590 [ 1186.283077][ T2847] ext4_map_create_blocks+0xce/0x3a0 [ 1186.283115][ T2847] ext4_map_blocks+0x594/0x970 [ 1186.283218][ T2847] ext4_alloc_file_blocks+0x2ee/0x9b0 [ 1186.283258][ T2847] ? 0xffffffff81000000 [ 1186.283283][ T2847] ext4_do_fallocate+0x159/0x410 [ 1186.283319][ T2847] ext4_fallocate+0x20d/0x2f0 [ 1186.283386][ T2847] vfs_fallocate+0x3b6/0x400 [ 1186.283440][ T2847] __x64_sys_fallocate+0x7a/0xd0 [ 1186.283482][ T2847] x64_sys_call+0x298e/0x3020 [ 1186.283553][ T2847] do_syscall_64+0x12c/0x3b0 [ 1186.283577][ T2847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.283738][ T2847] RIP: 0033:0x7f5efcaccdd9 [ 1186.283753][ T2847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.283772][ T2847] RSP: 002b:00007f5efb527028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1186.283795][ T2847] RAX: ffffffffffffffda RBX: 00007f5efcd45fa0 RCX: 00007f5efcaccdd9 [ 1186.283813][ T2847] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000004 [ 1186.283829][ T2847] RBP: 00007f5efb527090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.283886][ T2847] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000001 [ 1186.283972][ T2847] R13: 00007f5efcd46038 R14: 00007f5efcd45fa0 R15: 00007ffea18dd7b8 [ 1186.283995][ T2847] [ 1186.574177][ T2862] loop0: detected capacity change from 0 to 512 [ 1186.588965][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.755700][ T2862] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1186.808778][ T2867] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7021'. [ 1186.891123][ T2862] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1186.963004][ T2871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7017'. [ 1186.996384][ T2862] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7019: bad orphan inode 4 [ 1187.040973][ T2862] loop0: lost filesystem error report for type 5 error -117 [ 1187.043106][ T2862] EXT4-fs (loop0): 1 orphan inode deleted [ 1187.050467][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1187.050499][ C0] EXT4-fs (loop0): initial error at time 2000000066: ext4_orphan_get:1423 [ 1187.050530][ C0] EXT4-fs (loop0): last error at time 2000000066: ext4_orphan_get:1423 [ 1187.119023][ T2862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.384167][ T28] audit: type=1400 audit(2000000066.750:4685): avc: denied { create } for pid=2888 comm="syz.5.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1187.443430][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.452820][ T2891] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7024'. [ 1187.480552][ T2891] veth0_to_bond: default FDB implementation only supports local addresses [ 1187.542814][ T28] audit: type=1400 audit(2000000066.890:4686): avc: denied { bind } for pid=2895 comm="syz.0.7027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1187.554877][ T2896] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1187.576007][ T28] audit: type=1400 audit(2000000066.910:4687): avc: denied { setopt } for pid=2895 comm="syz.0.7027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1187.609378][ T2896] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1187.649735][ T2896] bond0 (unregistering): Released all slaves [ 1187.658448][ T2900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7029'. [ 1187.672425][ T2901] loop0: detected capacity change from 0 to 512 [ 1187.921887][ T2910] FAULT_INJECTION: forcing a failure. [ 1187.921887][ T2910] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.934649][ T2910] CPU: 0 UID: 0 PID: 2910 Comm: syz.5.7030 Tainted: G W syzkaller #0 PREEMPT(full) [ 1187.934759][ T2910] Tainted: [W]=WARN [ 1187.934768][ T2910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1187.934786][ T2910] Call Trace: [ 1187.934796][ T2910] [ 1187.934805][ T2910] __dump_stack+0x1d/0x30 [ 1187.934828][ T2910] dump_stack_lvl+0x95/0xd0 [ 1187.934848][ T2910] dump_stack+0x15/0x1b [ 1187.934871][ T2910] should_fail_ex+0x263/0x280 [ 1187.934966][ T2910] should_failslab+0x8c/0xb0 [ 1187.935008][ T2910] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 1187.935092][ T2910] ? sidtab_sid2str_get+0xa0/0x130 [ 1187.935126][ T2910] kmemdup_noprof+0x2b/0x70 [ 1187.935164][ T2910] sidtab_sid2str_get+0xa0/0x130 [ 1187.935197][ T2910] security_sid_to_context_core+0x1eb/0x2e0 [ 1187.935272][ T2910] security_sid_to_context+0x27/0x40 [ 1187.935337][ T2910] avc_audit_post_callback+0x9d/0x510 [ 1187.935368][ T2910] ? audit_log_lsm_data+0x7e7/0xbb0 [ 1187.935427][ T2910] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1187.935462][ T2910] common_lsm_audit+0x1ba/0x230 [ 1187.935489][ T2910] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1187.935558][ T2910] ? avc_update_node+0x224/0x5e0 [ 1187.935676][ T2910] slow_avc_audit+0x14c/0x190 [ 1187.935705][ T2910] audit_inode_permission+0x119/0x160 [ 1187.935749][ T2910] selinux_inode_permission+0x723/0x7d0 [ 1187.935781][ T2910] security_inode_permission+0x69/0xa0 [ 1187.935938][ T2910] inode_permission+0x288/0x3b0 [ 1187.935961][ T2910] may_open+0x255/0x350 [ 1187.935990][ T2910] path_openat+0x1a59/0x2050 [ 1187.936068][ T2910] ? _parse_integer_limit+0x170/0x190 [ 1187.936104][ T2910] ? kstrtouint+0x76/0xc0 [ 1187.936134][ T2910] do_file_open+0x16c/0x290 [ 1187.936180][ T2910] do_sys_openat2+0x94/0x130 [ 1187.936228][ T2910] __x64_sys_openat+0xf2/0x120 [ 1187.936267][ T2910] x64_sys_call+0x1e39/0x3020 [ 1187.936298][ T2910] do_syscall_64+0x12c/0x3b0 [ 1187.936322][ T2910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.936391][ T2910] RIP: 0033:0x7fa9e744cdd9 [ 1187.936484][ T2910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.936508][ T2910] RSP: 002b:00007fa9e5e65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1187.936534][ T2910] RAX: ffffffffffffffda RBX: 00007fa9e76c6180 RCX: 00007fa9e744cdd9 [ 1187.936552][ T2910] RDX: 0000000000000481 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1187.936611][ T2910] RBP: 00007fa9e5e65090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.936628][ T2910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.936645][ T2910] R13: 00007fa9e76c6218 R14: 00007fa9e76c6180 R15: 00007ffd4dc93068 [ 1187.936670][ T2910] [ 1187.937196][ T2910] 9p: Bad value for 'rfdno' [ 1188.530229][ T2914] loop6: detected capacity change from 0 to 256 [ 1188.563148][ T2914] FAT-fs (loop6): Directory bread(block 64) failed [ 1188.569803][ T2914] FAT-fs (loop6): Directory bread(block 65) failed [ 1188.576438][ T2914] FAT-fs (loop6): Directory bread(block 66) failed [ 1188.583028][ T2914] FAT-fs (loop6): Directory bread(block 67) failed [ 1188.589661][ T2914] FAT-fs (loop6): Directory bread(block 68) failed [ 1188.596266][ T2914] FAT-fs (loop6): Directory bread(block 69) failed [ 1188.602980][ T2914] FAT-fs (loop6): Directory bread(block 70) failed [ 1188.609609][ T2914] FAT-fs (loop6): Directory bread(block 71) failed [ 1188.616267][ T2914] FAT-fs (loop6): Directory bread(block 72) failed [ 1188.622866][ T2914] FAT-fs (loop6): Directory bread(block 73) failed [ 1188.647940][ T28] audit: type=1400 audit(2000000067.290:4688): avc: denied { append } for pid=2903 comm="syz.5.7030" name="ptp0" dev="devtmpfs" ino=247 ssid=137 tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1188.877243][ T28] audit: type=1400 audit(2000000068.220:4689): avc: denied { write } for pid=2915 comm="syz.5.7033" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1188.904031][ T2918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7032'. [ 1188.945598][ T2916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2916 comm=syz.5.7033 [ 1188.990588][ T28] audit: type=1400 audit(2000000068.230:4690): avc: denied { ioctl } for pid=2915 comm="syz.5.7033" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1189.092762][ T2924] loop0: detected capacity change from 0 to 512 [ 1189.113395][ T2924] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1189.119873][ T2916] loop5: detected capacity change from 0 to 1024 [ 1189.140604][ T2916] EXT4-fs: Ignoring removed bh option [ 1189.192052][ T2936] loop4: detected capacity change from 0 to 128 [ 1189.244735][ T2924] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1189.261395][ T2916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.298067][ T2924] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7036: bad orphan inode 4 [ 1189.325749][ T2946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7040'. [ 1189.347355][ T2924] loop0: lost filesystem error report for type 5 error -117 [ 1189.347536][ T2924] EXT4-fs (loop0): 1 orphan inode deleted [ 1189.354933][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1189.354960][ C0] EXT4-fs (loop0): initial error at time 2000000068: ext4_orphan_get:1423 [ 1189.355002][ C0] EXT4-fs (loop0): last error at time 2000000068: ext4_orphan_get:1423 [ 1189.482974][ T2924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.512712][ T2951] loop4: detected capacity change from 0 to 1024 [ 1189.669321][ T2951] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1189.742693][ T2951] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1189.758449][T27384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.768298][ T2951] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1189.789985][ T2951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1189.803883][ T2951] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.7042: Inode bitmap for bg 0 marked uninitialized [ 1189.833020][ T2951] loop4: lost filesystem error report for type 5 error -117 [ 1189.833636][ T2951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1189.856989][ T2951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.965476][ T28] audit: type=1400 audit(2000000069.330:4691): avc: denied { write } for pid=2954 comm="syz.2.7043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1189.992083][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.036592][ T2956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7043'. [ 1190.203014][ T2966] sctp: [Deprecated]: syz.5.7041 (pid 2966) Use of int in maxseg socket option. [ 1190.203014][ T2966] Use struct sctp_assoc_value instead [ 1190.395014][ T2989] FAULT_INJECTION: forcing a failure. [ 1190.395014][ T2989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.409235][ T2989] CPU: 1 UID: 0 PID: 2989 Comm: syz.6.7051 Tainted: G W syzkaller #0 PREEMPT(full) [ 1190.409278][ T2989] Tainted: [W]=WARN [ 1190.409287][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1190.409304][ T2989] Call Trace: [ 1190.409371][ T2989] [ 1190.409383][ T2989] __dump_stack+0x1d/0x30 [ 1190.409409][ T2989] dump_stack_lvl+0x95/0xd0 [ 1190.409436][ T2989] dump_stack+0x15/0x1b [ 1190.409462][ T2989] should_fail_ex+0x263/0x280 [ 1190.409508][ T2989] should_fail+0xb/0x20 [ 1190.409554][ T2989] should_fail_usercopy+0x1a/0x20 [ 1190.409587][ T2989] _copy_from_iter+0xcf/0xea0 [ 1190.409616][ T2989] ? __alloc_skb+0x4f6/0x690 [ 1190.409658][ T2989] ? __alloc_skb+0x200/0x690 [ 1190.409771][ T2989] netlink_sendmsg+0x4ae/0x6f0 [ 1190.409802][ T2989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.409876][ T2989] ____sys_sendmsg+0x563/0x5b0 [ 1190.409976][ T2989] ___sys_sendmsg+0x195/0x1e0 [ 1190.410010][ T2989] __x64_sys_sendmsg+0xd4/0x160 [ 1190.410114][ T2989] x64_sys_call+0x194c/0x3020 [ 1190.410143][ T2989] do_syscall_64+0x12c/0x3b0 [ 1190.410173][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.410202][ T2989] RIP: 0033:0x7fe850d6cdd9 [ 1190.410223][ T2989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.410253][ T2989] RSP: 002b:00007fe84f7c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.410321][ T2989] RAX: ffffffffffffffda RBX: 00007fe850fe5fa0 RCX: 00007fe850d6cdd9 [ 1190.410341][ T2989] RDX: 0000000020000054 RSI: 0000200000000200 RDI: 0000000000000003 [ 1190.410354][ T2989] RBP: 00007fe84f7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.410367][ T2989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.410417][ T2989] R13: 00007fe850fe6038 R14: 00007fe850fe5fa0 R15: 00007ffe2fb90038 [ 1190.410443][ T2989] [ 1190.618622][ T2991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1190.672096][ T2996] loop4: detected capacity change from 0 to 512 [ 1190.687282][ T2996] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1190.700543][ T2996] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1190.702373][ T2998] loop0: detected capacity change from 0 to 512 [ 1190.715162][ T2998] EXT4-fs: Ignoring removed oldalloc option [ 1190.721968][ T2998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1190.729312][ T2996] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.7054: bad orphan inode 4 [ 1190.739309][ T2996] loop4: lost filesystem error report for type 5 error -117 [ 1190.739631][ T2996] EXT4-fs (loop4): 1 orphan inode deleted [ 1190.747243][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1190.747279][ C1] EXT4-fs (loop4): initial error at time 2000000070: ext4_orphan_get:1423 [ 1190.747308][ C1] EXT4-fs (loop4): last error at time 2000000070: ext4_orphan_get:1423 [ 1190.764018][ T2998] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1190.771911][ T2996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.776996][ T2998] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1190.806072][ T2998] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1190.812600][ T2998] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1190.827224][ T2998] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1190.834444][ T2998] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7055: bg 0: block 40: padding at end of block bitmap is not set [ 1190.848650][ T2998] loop0: lost filesystem error report for type 5 error -117 [ 1190.848805][ T2998] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1190.867406][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1190.867703][ C0] EXT4-fs (loop0): initial error at time 2000000070: ext4_validate_block_bitmap:441 [ 1190.868342][ C0] EXT4-fs (loop0): last error at time 2000000070: ext4_validate_block_bitmap:441 [ 1190.907728][ T2998] loop0: lost filesystem error report for type 5 error -117 [ 1190.907920][ T2998] EXT4-fs (loop0): 1 truncate cleaned up [ 1190.921577][ T2998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1190.945400][ T2998] EXT4-fs (loop0): shut down requested (2) [ 1190.975268][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 1190.975348][ T28] audit: type=1326 audit(2000000070.340:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.006705][ T3003] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1191.076634][ T3003] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1191.087709][ T28] audit: type=1326 audit(2000000070.340:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.141664][ T28] audit: type=1326 audit(2000000070.340:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.165813][ T28] audit: type=1326 audit(2000000070.340:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.189590][ T28] audit: type=1326 audit(2000000070.340:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.213437][ T28] audit: type=1326 audit(2000000070.340:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.237095][ T28] audit: type=1326 audit(2000000070.360:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.260748][ T28] audit: type=1326 audit(2000000070.360:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.284372][ T28] audit: type=1326 audit(2000000070.360:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1191.307901][ T28] audit: type=1326 audit(2000000070.360:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.6.7053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe850d2d60e code=0x7ffc0000 [ 1192.130489][ T2944] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1192.297819][ T3013] FAULT_INJECTION: forcing a failure. [ 1192.297819][ T3013] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.315855][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.344882][ T3013] CPU: 1 UID: 0 PID: 3013 Comm: syz.6.7057 Tainted: G W syzkaller #0 PREEMPT(full) [ 1192.344968][ T3013] Tainted: [W]=WARN [ 1192.344974][ T3013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.344991][ T3013] Call Trace: [ 1192.344999][ T3013] [ 1192.345009][ T3013] __dump_stack+0x1d/0x30 [ 1192.345040][ T3013] dump_stack_lvl+0x95/0xd0 [ 1192.345063][ T3013] dump_stack+0x15/0x1b [ 1192.345153][ T3013] should_fail_ex+0x263/0x280 [ 1192.345191][ T3013] should_failslab+0x8c/0xb0 [ 1192.345223][ T3013] __kvmalloc_node_noprof+0x155/0x640 [ 1192.345250][ T3013] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 1192.345296][ T3013] bpf_test_run_xdp_live+0x17e/0x1360 [ 1192.345330][ T3013] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1192.345422][ T3013] ? mutex_unlock+0x4e/0x90 [ 1192.345454][ T3013] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1192.345476][ T3013] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1192.345510][ T3013] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1192.345598][ T3013] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1192.345682][ T3013] ? bpf_prog_test_run_xdp+0x391/0xa10 [ 1192.345717][ T3013] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1192.345876][ T3013] ? __rcu_read_unlock+0x4e/0x70 [ 1192.345958][ T3013] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1192.345998][ T3013] bpf_prog_test_run+0x204/0x340 [ 1192.346028][ T3013] __sys_bpf+0x52e/0x7e0 [ 1192.346075][ T3013] __x64_sys_bpf+0x41/0x50 [ 1192.346100][ T3013] x64_sys_call+0x10cb/0x3020 [ 1192.346148][ T3013] do_syscall_64+0x12c/0x3b0 [ 1192.346242][ T3013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.346269][ T3013] RIP: 0033:0x7fe850d6cdd9 [ 1192.346286][ T3013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.346377][ T3013] RSP: 002b:00007fe84f7a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.346462][ T3013] RAX: ffffffffffffffda RBX: 00007fe850fe6090 RCX: 00007fe850d6cdd9 [ 1192.346476][ T3013] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1192.346556][ T3013] RBP: 00007fe84f7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.346572][ T3013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.346584][ T3013] R13: 00007fe850fe6128 R14: 00007fe850fe6090 R15: 00007ffe2fb90038 [ 1192.346604][ T3013] [ 1192.595407][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7058'. [ 1192.617228][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.706692][ T3027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1192.862281][ T3035] loop6: detected capacity change from 0 to 1024 [ 1192.880201][ T3035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1192.888353][ T3035] System zones: 0-1, 3-36 [ 1192.893439][ T3035] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.7063: bad orphan inode 134217728 [ 1192.904166][ T3035] loop6: lost filesystem error report for type 5 error -117 [ 1192.904764][ T3035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.928847][ T3035] FAULT_INJECTION: forcing a failure. [ 1192.928847][ T3035] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.941712][ T3035] CPU: 1 UID: 0 PID: 3035 Comm: syz.6.7063 Tainted: G W syzkaller #0 PREEMPT(full) [ 1192.941752][ T3035] Tainted: [W]=WARN [ 1192.941761][ T3035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.941781][ T3035] Call Trace: [ 1192.941789][ T3035] [ 1192.941798][ T3035] __dump_stack+0x1d/0x30 [ 1192.941829][ T3035] dump_stack_lvl+0x95/0xd0 [ 1192.941855][ T3035] dump_stack+0x15/0x1b [ 1192.941880][ T3035] should_fail_ex+0x263/0x280 [ 1192.941966][ T3035] ? alloc_pipe_info+0xad/0x340 [ 1192.941999][ T3035] should_failslab+0x8c/0xb0 [ 1192.942028][ T3035] __kmalloc_cache_noprof+0x5f/0x400 [ 1192.942136][ T3035] alloc_pipe_info+0xad/0x340 [ 1192.942284][ T3035] splice_direct_to_actor+0x591/0x670 [ 1192.942339][ T3035] ? kstrtouint_from_user+0xa8/0xf0 [ 1192.942372][ T3035] ? __pfx_direct_splice_actor+0x10/0x10 [ 1192.942409][ T3035] ? __rcu_read_unlock+0x4e/0x70 [ 1192.942435][ T3035] ? get_pid_task+0x96/0xd0 [ 1192.942532][ T3035] ? avc_policy_seqno+0x15/0x30 [ 1192.942559][ T3035] ? selinux_file_permission+0x1e1/0x320 [ 1192.942584][ T3035] do_splice_direct+0x119/0x1a0 [ 1192.942679][ T3035] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1192.942723][ T3035] do_sendfile+0x382/0x650 [ 1192.942753][ T3035] __x64_sys_sendfile64+0x105/0x150 [ 1192.942789][ T3035] x64_sys_call+0x2dc4/0x3020 [ 1192.942814][ T3035] do_syscall_64+0x12c/0x3b0 [ 1192.942848][ T3035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.942874][ T3035] RIP: 0033:0x7fe850d6cdd9 [ 1192.942895][ T3035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.942928][ T3035] RSP: 002b:00007fe84f7c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1192.942948][ T3035] RAX: ffffffffffffffda RBX: 00007fe850fe5fa0 RCX: 00007fe850d6cdd9 [ 1192.943000][ T3035] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1192.943023][ T3035] RBP: 00007fe84f7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.943036][ T3035] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 1192.943128][ T3035] R13: 00007fe850fe6038 R14: 00007fe850fe5fa0 R15: 00007ffe2fb90038 [ 1192.943152][ T3035] [ 1193.207062][ T3041] netlink: 'syz.2.7066': attribute type 2 has an invalid length. [ 1193.214941][ T3041] netlink: 'syz.2.7066': attribute type 8 has an invalid length. [ 1193.222712][ T3041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7066'. [ 1193.239862][ T3042] xt_hashlimit: max too large, truncated to 1048576 [ 1193.251681][ T3042] loop0: detected capacity change from 0 to 1024 [ 1193.602535][ T3047] loop4: detected capacity change from 0 to 512 [ 1193.738827][ T3047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1193.862968][ T3047] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.7067: bad orphan inode 131083 [ 1193.886599][ T3047] loop4: lost filesystem error report for type 5 error -117 [ 1193.914652][ T3047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.033326][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.059964][ T3047] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.4.7067: path /175/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 1194.122055][ T3055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7065'. [ 1194.157560][ T3053] loop5: detected capacity change from 0 to 736 [ 1194.218921][ T3061] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1194.242424][ T3061] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7069'. [ 1194.295075][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.325663][ T3061] bond0 (unregistering): Released all slaves [ 1194.574931][ T3067] loop4: detected capacity change from 0 to 512 [ 1194.581822][ T3067] EXT4-fs: Ignoring removed oldalloc option [ 1194.587834][ T3067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1194.605718][ T3069] loop0: detected capacity change from 0 to 512 [ 1194.612471][ T3069] EXT4-fs: Ignoring removed oldalloc option [ 1194.618431][ T3069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1194.629116][ T3067] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1194.637083][ T3067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1194.666621][ T3067] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1194.682598][ T3067] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1194.703392][ T3067] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1194.711756][ T3069] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1194.719718][ T3069] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1194.727874][ T3069] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1194.734280][ T3069] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1194.748889][ T3069] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1194.761498][ T3067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7072: bg 0: block 40: padding at end of block bitmap is not set [ 1194.775794][ T3067] loop4: lost filesystem error report for type 5 error -117 [ 1194.776232][ T3067] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1194.783767][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1194.784386][ C1] EXT4-fs (loop4): initial error at time 2000000074: ext4_validate_block_bitmap:441 [ 1194.784826][ C1] EXT4-fs (loop4): last error at time 2000000074: ext4_validate_block_bitmap:441 [ 1194.841614][ T3067] loop4: lost filesystem error report for type 5 error -117 [ 1194.843771][ T3069] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7071: bg 0: block 40: padding at end of block bitmap is not set [ 1194.865557][ T3067] EXT4-fs (loop4): 1 truncate cleaned up [ 1194.871289][ T3069] loop0: lost filesystem error report for type 5 error -117 [ 1194.871434][ T3069] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1194.872060][ T3067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1194.878749][ T3069] loop0: lost filesystem error report for type 5 error -117 [ 1194.900011][ T3069] EXT4-fs (loop0): 1 truncate cleaned up [ 1194.908240][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 1194.908269][ C0] EXT4-fs (loop0): initial error at time 2000000074: ext4_validate_block_bitmap:441 [ 1194.908296][ C0] EXT4-fs (loop0): last error at time 2000000074: ext4_mb_clear_bb:6679 [ 1194.939858][ T3069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1194.959698][ T3067] EXT4-fs (loop4): shut down requested (2) [ 1194.960946][ T3069] EXT4-fs (loop0): shut down requested (2) [ 1195.065226][ T3074] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 1195.082092][ T3074] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 1195.095017][ T3075] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1195.109953][ T3075] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1195.445270][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.614674][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.327785][ T3097] loop0: detected capacity change from 0 to 512 [ 1196.335073][ T3096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7081'. [ 1196.359902][ T3097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1196.407150][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1196.407164][ T28] audit: type=1400 audit(2000000075.741:4798): avc: denied { kexec_image_load } for pid=3102 comm="syz.2.7084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1196.442886][ T3097] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7082: corrupted in-inode xattr: bad e_name length [ 1196.442947][ T3097] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1196.443242][ T3097] EXT4-fs (loop0): get orphan inode failed [ 1196.443503][ T3097] EXT4-fs (loop0): mount failed [ 1197.439862][ T3119] 9p: Bad value for 'rfdno' [ 1197.829176][ T3127] FAULT_INJECTION: forcing a failure. [ 1197.829176][ T3127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.844357][ T3127] CPU: 0 UID: 0 PID: 3127 Comm: syz.0.7091 Tainted: G W syzkaller #0 PREEMPT(full) [ 1197.844458][ T3127] Tainted: [W]=WARN [ 1197.844468][ T3127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1197.844485][ T3127] Call Trace: [ 1197.844503][ T3127] [ 1197.844560][ T3127] __dump_stack+0x1d/0x30 [ 1197.844593][ T3127] dump_stack_lvl+0x95/0xd0 [ 1197.844619][ T3127] dump_stack+0x15/0x1b [ 1197.844644][ T3127] should_fail_ex+0x263/0x280 [ 1197.844680][ T3127] should_fail+0xb/0x20 [ 1197.844748][ T3127] should_fail_usercopy+0x1a/0x20 [ 1197.844786][ T3127] _copy_from_iter+0xcf/0xea0 [ 1197.844863][ T3127] ? avc_has_perm+0x101/0x190 [ 1197.844893][ T3127] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1197.844927][ T3127] bcm_sendmsg+0xc6/0x4a0 [ 1197.844954][ T3127] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1197.845027][ T3127] ____sys_sendmsg+0x563/0x5b0 [ 1197.845052][ T3127] ___sys_sendmsg+0x195/0x1e0 [ 1197.845147][ T3127] __x64_sys_sendmsg+0xd4/0x160 [ 1197.845180][ T3127] x64_sys_call+0x194c/0x3020 [ 1197.845211][ T3127] do_syscall_64+0x12c/0x3b0 [ 1197.845312][ T3127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.845333][ T3127] RIP: 0033:0x7fe3b110cdd9 [ 1197.845352][ T3127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.845375][ T3127] RSP: 002b:00007fe3afb5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.845400][ T3127] RAX: ffffffffffffffda RBX: 00007fe3b1385fa0 RCX: 00007fe3b110cdd9 [ 1197.845454][ T3127] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1197.845472][ T3127] RBP: 00007fe3afb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.845488][ T3127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.845509][ T3127] R13: 00007fe3b1386038 R14: 00007fe3b1385fa0 R15: 00007ffc5ff4aee8 [ 1197.845554][ T3127] [ 1197.872452][ T3133] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1198.069904][ T3139] loop0: detected capacity change from 0 to 512 [ 1198.076456][ T3140] FAULT_INJECTION: forcing a failure. [ 1198.076456][ T3140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1198.090150][ T3139] EXT4-fs: Ignoring removed oldalloc option [ 1198.096108][ T3139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1198.109909][ T3140] CPU: 1 UID: 0 PID: 3140 Comm: syz.5.7095 Tainted: G W syzkaller #0 PREEMPT(full) [ 1198.109994][ T3140] Tainted: [W]=WARN [ 1198.110001][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1198.110013][ T3140] Call Trace: [ 1198.110021][ T3140] [ 1198.110029][ T3140] __dump_stack+0x1d/0x30 [ 1198.110098][ T3140] dump_stack_lvl+0x95/0xd0 [ 1198.110126][ T3140] dump_stack+0x15/0x1b [ 1198.110152][ T3140] should_fail_ex+0x263/0x280 [ 1198.110202][ T3140] should_fail_alloc_page+0xf2/0x100 [ 1198.110247][ T3140] __alloc_frozen_pages_noprof+0x108/0x350 [ 1198.110356][ T3140] alloc_pages_mpol+0xb3/0x260 [ 1198.110389][ T3140] alloc_pages_noprof+0x8f/0x140 [ 1198.110421][ T3140] pte_alloc_one+0x1c/0xc0 [ 1198.110576][ T3140] __pte_alloc+0x32/0x2a0 [ 1198.110601][ T3140] handle_mm_fault+0x239e/0x2e70 [ 1198.110636][ T3140] ? vma_start_read+0x1c7/0x2c0 [ 1198.110710][ T3140] do_user_addr_fault+0x62f/0x1050 [ 1198.110832][ T3140] ? ksys_mmap_pgoff+0xc1/0x310 [ 1198.110857][ T3140] ? __x64_sys_mmap+0x49/0x70 [ 1198.110888][ T3140] ? trace_page_fault_user+0x1f/0xa0 [ 1198.110923][ T3140] exc_page_fault+0x62/0xa0 [ 1198.110959][ T3140] asm_exc_page_fault+0x26/0x30 [ 1198.111006][ T3140] RIP: 0033:0x7fa9e7303f0e [ 1198.111028][ T3140] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1198.111049][ T3140] RSP: 002b:00007fa9e5ea6470 EFLAGS: 00010246 [ 1198.111093][ T3140] RAX: 0000000000000001 RBX: 00007fa9e5ea6530 RCX: 0000000000000101 [ 1198.111186][ T3140] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007fa9e5ea65d0 [ 1198.111199][ T3140] RBP: 0000000000000102 R08: 00007fa9dda87000 R09: 0000000000000000 [ 1198.111212][ T3140] R10: 0000000000000000 R11: 00007fa9e5ea6540 R12: 0000000000000001 [ 1198.111229][ T3140] R13: 00007fa9e7502900 R14: 0000000000000000 R15: 00007fa9e5ea65d0 [ 1198.111316][ T3140] [ 1198.111378][ T3140] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1198.238236][ T3139] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1198.313350][ T3140] loop5: detected capacity change from 0 to 1024 [ 1198.327574][ T3140] EXT4-fs: Ignoring removed bh option [ 1198.337517][ T3139] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1198.368855][ T3139] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1198.385061][ T3140] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1198.397675][ T3140] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1198.399482][ T3139] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1198.404966][ T3140] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.7095: Bad quota inum: 4294934528, type: 0 [ 1198.425489][ T3140] loop5: lost filesystem error report for type 5 error -117 [ 1198.428506][ T3139] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1198.433054][ T3140] EXT4-fs (loop5): Remounting filesystem read-only [ 1198.442340][ T3139] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1198.450553][ T3140] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 1198.478993][ T3140] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1198.486243][ T3140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1198.499374][ T3139] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7096: bg 0: block 40: padding at end of block bitmap is not set [ 1198.513619][ T3139] loop0: lost filesystem error report for type 5 error -117 [ 1198.513893][ T3139] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1198.530273][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1198.530315][ C0] EXT4-fs (loop0): initial error at time 2000000077: ext4_validate_block_bitmap:441 [ 1198.530714][ C0] EXT4-fs (loop0): last error at time 2000000077: ext4_validate_block_bitmap:441 [ 1198.537233][ T3144] loop6: detected capacity change from 0 to 4096 [ 1198.582839][ T3144] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 1198.590996][ T3144] System zones: 0-5 [ 1198.626749][ T3139] loop0: lost filesystem error report for type 5 error -117 [ 1198.631522][ T3139] EXT4-fs (loop0): 1 truncate cleaned up [ 1198.657098][ T3139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1198.657238][ T3144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.698531][T32138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.744935][ T3139] EXT4-fs (loop0): shut down requested (2) [ 1198.862645][ T8941] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.876686][ T8941] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.895324][ T3160] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1198.904310][ T3160] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 1198.911419][ T3152] netlink: 'syz.2.7099': attribute type 1 has an invalid length. [ 1198.922165][ T8941] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.934574][T27384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.945512][ T8941] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.962010][ T8941] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.973956][ T8941] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.982707][ T8941] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.002832][ T8941] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.053194][ T3164] vti0: entered allmulticast mode [ 1199.057653][ T3167] loop4: detected capacity change from 0 to 512 [ 1199.073509][ T3167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1199.346212][ T3167] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.7102: corrupted in-inode xattr: bad e_name length [ 1199.360909][ T3167] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1199.362016][ T3167] EXT4-fs (loop4): get orphan inode failed [ 1199.371356][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1199.371396][ C0] EXT4-fs (loop4): initial error at time 2000000078: ext4_iget_extra_inode:5128: inode 15 [ 1199.371473][ C0] EXT4-fs (loop4): last error at time 2000000078: ext4_iget_extra_inode:5128: inode 15 [ 1199.405697][ T3167] EXT4-fs (loop4): mount failed [ 1200.066557][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.087835][ T28] audit: type=1400 audit(2000000080.451:4799): avc: denied { mount } for pid=3198 comm="syz.4.7108" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1201.136952][ T28] audit: type=1400 audit(2000000080.481:4800): avc: denied { search } for pid=3198 comm="syz.4.7108" name="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.318149][ T3201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1201.337067][ T3199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.348036][ T3199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.360088][ T3203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1201.380074][ T3199] vhci_hcd vhci_hcd.4: default hub control req: 8017 v0001 i0003 l57 [ 1201.429041][ T3206] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7109'. [ 1201.454647][ T3206] loop6: detected capacity change from 0 to 256 [ 1201.561390][ T28] audit: type=1400 audit(2000000080.731:4801): avc: denied { accept } for pid=3196 comm="syz.2.7107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1201.587457][ T28] audit: type=1400 audit(2000000080.741:4802): avc: denied { read open } for pid=3198 comm="syz.4.7108" path="/" dev="configfs" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1201.619081][ T28] audit: type=1400 audit(2000000080.771:4803): avc: denied { checkpoint_restore } for pid=3204 comm="syz.2.7110" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1201.643739][ T28] audit: type=1400 audit(2000000080.891:4804): avc: denied { wake_alarm } for pid=3204 comm="syz.2.7110" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1201.678696][ T28] audit: type=1400 audit(2000000080.951:4805): avc: denied { ioctl } for pid=3204 comm="syz.2.7110" path="socket:[119392]" dev="sockfs" ino=119392 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1201.730729][ T3211] FAULT_INJECTION: forcing a failure. [ 1201.730729][ T3211] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.743428][ T3211] CPU: 0 UID: 0 PID: 3211 Comm: syz.5.7111 Tainted: G W syzkaller #0 PREEMPT(full) [ 1201.743524][ T3211] Tainted: [W]=WARN [ 1201.743531][ T3211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1201.743544][ T3211] Call Trace: [ 1201.743551][ T3211] [ 1201.743559][ T3211] __dump_stack+0x1d/0x30 [ 1201.743590][ T3211] dump_stack_lvl+0x95/0xd0 [ 1201.743616][ T3211] dump_stack+0x15/0x1b [ 1201.743699][ T3211] should_fail_ex+0x263/0x280 [ 1201.743736][ T3211] should_failslab+0x8c/0xb0 [ 1201.743776][ T3211] kmem_cache_alloc_bulk_noprof+0x64/0x4c0 [ 1201.743856][ T3211] bpf_test_run_xdp_live+0xf16/0x1360 [ 1201.743887][ T3211] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1201.743980][ T3211] ? 0xffffffffa0205240 [ 1201.743995][ T3211] ? bpf_test_run_xdp_live+0x434/0x1360 [ 1201.744041][ T3211] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1201.744107][ T3211] ? __rcu_read_unlock+0x4e/0x70 [ 1201.744133][ T3211] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1201.744217][ T3211] bpf_prog_test_run+0x204/0x340 [ 1201.744249][ T3211] __sys_bpf+0x52e/0x7e0 [ 1201.744288][ T3211] __x64_sys_bpf+0x41/0x50 [ 1201.744357][ T3211] x64_sys_call+0x10cb/0x3020 [ 1201.744381][ T3211] do_syscall_64+0x12c/0x3b0 [ 1201.744434][ T3211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.744463][ T3211] RIP: 0033:0x7fa9e744cdd9 [ 1201.744490][ T3211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.744514][ T3211] RSP: 002b:00007fa9e5ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1201.744540][ T3211] RAX: ffffffffffffffda RBX: 00007fa9e76c5fa0 RCX: 00007fa9e744cdd9 [ 1201.744604][ T3211] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1201.744618][ T3211] RBP: 00007fa9e5ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.744630][ T3211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1201.744644][ T3211] R13: 00007fa9e76c6038 R14: 00007fa9e76c5fa0 R15: 00007ffd4dc93068 [ 1201.744747][ T3211] [ 1202.028995][ T3219] FAULT_INJECTION: forcing a failure. [ 1202.028995][ T3219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.042092][ T3219] CPU: 0 UID: 0 PID: 3219 Comm: syz.4.7115 Tainted: G W syzkaller #0 PREEMPT(full) [ 1202.042185][ T3219] Tainted: [W]=WARN [ 1202.042194][ T3219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1202.042210][ T3219] Call Trace: [ 1202.042324][ T3219] [ 1202.042336][ T3219] __dump_stack+0x1d/0x30 [ 1202.042373][ T3219] dump_stack_lvl+0x95/0xd0 [ 1202.042400][ T3219] dump_stack+0x15/0x1b [ 1202.042425][ T3219] should_fail_ex+0x263/0x280 [ 1202.042459][ T3219] should_fail+0xb/0x20 [ 1202.042486][ T3219] should_fail_usercopy+0x1a/0x20 [ 1202.042561][ T3219] _copy_to_user+0x20/0xa0 [ 1202.042597][ T3219] environ_read+0x206/0x320 [ 1202.042694][ T3219] ? __pfx_environ_read+0x10/0x10 [ 1202.042790][ T3219] vfs_readv+0x432/0x6e0 [ 1202.042822][ T3219] __x64_sys_preadv+0xfd/0x1c0 [ 1202.042858][ T3219] x64_sys_call+0x2915/0x3020 [ 1202.042890][ T3219] do_syscall_64+0x12c/0x3b0 [ 1202.042962][ T3219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.042984][ T3219] RIP: 0033:0x7f5efcaccdd9 [ 1202.043001][ T3219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.043043][ T3219] RSP: 002b:00007f5efb527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1202.043068][ T3219] RAX: ffffffffffffffda RBX: 00007f5efcd45fa0 RCX: 00007f5efcaccdd9 [ 1202.043086][ T3219] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000004 [ 1202.043103][ T3219] RBP: 00007f5efb527090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.043119][ T3219] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 1202.043190][ T3219] R13: 00007f5efcd46038 R14: 00007f5efcd45fa0 R15: 00007ffea18dd7b8 [ 1202.043253][ T3219] [ 1202.049594][ T3213] loop0: detected capacity change from 0 to 4096 [ 1202.074202][ T3219] loop4: detected capacity change from 0 to 4096 [ 1202.248484][ T3213] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 1202.257222][ T3213] System zones: 0-5 [ 1202.262701][ T3219] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 1202.271321][ T3213] [ 1202.274726][ T3219] System zones: 0-5 [ 1202.282014][ T3219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.295921][ T3213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.312743][T31973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.344688][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.395330][ T3225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2152 sclass=netlink_route_socket pid=3225 comm=syz.0.7117 [ 1202.434590][ T3225] random: crng reseeded on system resumption [ 1202.543804][ T3231] FAULT_INJECTION: forcing a failure. [ 1202.543804][ T3231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.583247][ T3231] CPU: 0 UID: 0 PID: 3231 Comm: syz.4.7119 Tainted: G W syzkaller #0 PREEMPT(full) [ 1202.583368][ T3231] Tainted: [W]=WARN [ 1202.583377][ T3231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1202.583395][ T3231] Call Trace: [ 1202.583404][ T3231] [ 1202.583416][ T3231] __dump_stack+0x1d/0x30 [ 1202.583469][ T3231] dump_stack_lvl+0x95/0xd0 [ 1202.583491][ T3231] dump_stack+0x15/0x1b [ 1202.583513][ T3231] should_fail_ex+0x263/0x280 [ 1202.583541][ T3231] should_fail+0xb/0x20 [ 1202.583599][ T3231] should_fail_usercopy+0x1a/0x20 [ 1202.583637][ T3231] _copy_to_iter+0x387/0xea0 [ 1202.583677][ T3231] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1202.583702][ T3231] __skb_datagram_iter+0xc6/0x680 [ 1202.583783][ T3231] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1202.583815][ T3231] skb_copy_datagram_iter+0x3f/0xf0 [ 1202.583840][ T3231] netlink_recvmsg+0x1a8/0x550 [ 1202.583963][ T3231] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1202.583991][ T3231] sock_recvmsg+0xf5/0x120 [ 1202.584023][ T3231] ____sys_recvmsg+0xf5/0x280 [ 1202.584059][ T3231] ___sys_recvmsg+0x11f/0x3b0 [ 1202.584147][ T3231] do_recvmmsg+0x1ef/0x560 [ 1202.584175][ T3231] ? get_timespec64+0xd2/0x100 [ 1202.584198][ T3231] __x64_sys_recvmmsg+0xfb/0x170 [ 1202.584262][ T3231] x64_sys_call+0x80f/0x3020 [ 1202.584347][ T3231] do_syscall_64+0x12c/0x3b0 [ 1202.584378][ T3231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.584408][ T3231] RIP: 0033:0x7f5efcaccdd9 [ 1202.584428][ T3231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.584453][ T3231] RSP: 002b:00007f5efb527028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1202.584641][ T3231] RAX: ffffffffffffffda RBX: 00007f5efcd45fa0 RCX: 00007f5efcaccdd9 [ 1202.584660][ T3231] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1202.584677][ T3231] RBP: 00007f5efb527090 R08: 0000200000003700 R09: 0000000000000000 [ 1202.584695][ T3231] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.584711][ T3231] R13: 00007f5efcd46038 R14: 00007f5efcd45fa0 R15: 00007ffea18dd7b8 [ 1202.584735][ T3231] [ 1202.856092][ T3239] loop5: detected capacity change from 0 to 512 [ 1202.857705][ T28] audit: type=1326 audit(2000000082.221:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3224 comm="syz.0.7117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b110cdd9 code=0x0 [ 1202.865402][ T3239] EXT4-fs: Ignoring removed oldalloc option [ 1202.897730][ T3239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1202.914171][ T3239] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1203.026946][ T3239] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1203.055054][ T3239] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1203.061603][ T3239] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1203.070934][ T3239] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1203.085579][ T3239] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1203.092456][ T3239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7121: bg 0: block 40: padding at end of block bitmap is not set [ 1203.106783][ T3239] loop5: lost filesystem error report for type 5 error -117 [ 1203.106922][ T3239] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1203.123688][ T3239] loop5: lost filesystem error report for type 5 error -117 [ 1203.123908][ T3239] EXT4-fs (loop5): 1 truncate cleaned up [ 1203.137381][ T3239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1203.185158][ T3239] EXT4-fs (loop5): shut down requested (2) [ 1203.284109][ T3246] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 1203.303035][ T3246] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=16 [ 1203.449387][ T3248] netlink: 'syz.0.7123': attribute type 1 has an invalid length. [ 1203.505938][ T3248] bond0: (slave geneve3): making interface the new active one [ 1203.533933][ T3248] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1203.566338][ T412] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1203.586965][ T3248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7123'. [ 1203.605230][ T412] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1203.635640][ T412] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1203.687176][ T412] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1203.716706][T27384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.786842][ T3257] gtp1: entered promiscuous mode [ 1203.818419][ T3257] gtp1: entered allmulticast mode [ 1203.837861][ T3259] loop0: detected capacity change from 0 to 512 [ 1203.857595][ T3259] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1203.882581][ T3259] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1203.900195][ T3259] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7126: bad orphan inode 4 [ 1203.949531][ T3259] loop0: lost filesystem error report for type 5 error -117 [ 1203.959420][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1203.973259][ C0] EXT4-fs (loop0): initial error at time 2000000083: ext4_orphan_get:1423 [ 1203.981841][ C0] EXT4-fs (loop0): last error at time 2000000083: ext4_orphan_get:1423 [ 1204.045349][ T3264] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1204.054745][ T3259] EXT4-fs (loop0): 1 orphan inode deleted [ 1204.055456][ T3259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.414560][ T3275] xt_hashlimit: size too large, truncated to 1048576 [ 1204.579205][ T3290] SELinux: policydb string does not match my string SE Linux [ 1204.579495][ T28] ================================================================== [ 1204.587518][ T3290] SELinux: failed to load policy [ 1204.594930][ T28] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 1204.606500][ T28] [ 1204.608849][ T28] write to 0xffffffff86c94340 of 8 bytes by task 3290 on cpu 0: [ 1204.616497][ T28] data_alloc+0x31c/0x390 [ 1204.620860][ T28] prb_reserve+0x8d6/0xad0 [ 1204.625395][ T28] vprintk_store+0x54a/0x910 [ 1204.630005][ T28] vprintk_emit+0x1a4/0x600 [ 1204.634543][ T28] vprintk_default+0x26/0x30 [ 1204.639163][ T28] vprintk+0x1d/0x30 [ 1204.643091][ T28] _printk+0x79/0xa0 [ 1204.647006][ T28] policydb_read+0x88e/0x13e0 [ 1204.651711][ T28] security_load_policy+0xc4/0x8a0 [ 1204.656854][ T28] sel_write_load+0x1d2/0x380 [ 1204.661557][ T28] vfs_write+0x269/0x9f0 [ 1204.665828][ T28] ksys_write+0xdc/0x1a0 [ 1204.670108][ T28] __x64_sys_write+0x40/0x50 [ 1204.674733][ T28] x64_sys_call+0x27e1/0x3020 [ 1204.679458][ T28] do_syscall_64+0x12c/0x3b0 [ 1204.684074][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.689990][ T28] [ 1204.692331][ T28] read to 0xffffffff86c94340 of 8 bytes by task 28 on cpu 1: [ 1204.699713][ T28] prb_reserve+0x216/0xad0 [ 1204.704160][ T28] vprintk_store+0x54a/0x910 [ 1204.708773][ T28] vprintk_emit+0x1a4/0x600 [ 1204.713297][ T28] vprintk_default+0x26/0x30 [ 1204.717912][ T28] vprintk+0x1d/0x30 [ 1204.721832][ T28] _printk+0x79/0xa0 [ 1204.725747][ T28] kauditd_hold_skb+0x1b1/0x1c0 [ 1204.730631][ T28] kauditd_send_queue+0x273/0x2c0 [ 1204.735726][ T28] kauditd_thread+0x444/0x670 [ 1204.740431][ T28] kthread+0x22a/0x280 [ 1204.744516][ T28] ret_from_fork+0x146/0x330 [ 1204.749157][ T28] ret_from_fork_asm+0x1a/0x30 [ 1204.753947][ T28] [ 1204.756287][ T28] value changed: 0x00000000001056c8 -> 0x00000000001a1880 [ 1204.763411][ T28] [ 1204.765746][ T28] Reported by Kernel Concurrency Sanitizer on: [ 1204.771921][ T28] CPU: 1 UID: 0 PID: 28 Comm: kauditd Tainted: G W syzkaller #0 PREEMPT(full) [ 1204.783150][ T28] Tainted: [W]=WARN [ 1204.786971][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1204.797126][ T28] ================================================================== [ 1204.579179][ T28] audit: type=1400 audit(2000000083.941:4807): avc: denied { load_policy } for pid=3289 comm="syz.6.7132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1204.881211][T31407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.