last executing test programs: 14m3.874660447s ago: executing program 2 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x900}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}]}}]}, 0x38}}, 0x0) 14m2.720726521s ago: executing program 2 (id=1300): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)="3f7bfa4e15b0bfc33466e4dc119c41a4efad41c56958c3e61025984b3489950dab5f16b26208b1594521f3fe214744b79a9653e0047bcc936555496a7336cec8b29e9fd302f8f6b363", 0x0, 0x4}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[], 0xa) 14m2.720337531s ago: executing program 2 (id=1301): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{0x0}], 0x1}}], 0x1, 0x24004044) 14m2.684426485s ago: executing program 2 (id=1302): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x2, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC], 0xff, 0x2e7, &(0x7f0000000d80)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B+jjP8/V55ofDZwRn7cqDW4WcY+RMV7q7w9ItsiDrIslqS6RS/dTVJRu6JCKNFuTfvncv/xibuHohnckMj6qOpMf/T6nqwJ9Pbt9d+uuZ23d5eWAlKqvJ62tvU69Xf179de3r+M28o3lHiyVXTZ0svXIjk7al03mnYKhe8jzTsTRffD4h4veXXLPan7NLMzMVNYvT/fGZsuU4ahYrWrAqKiGRckXNG2a+qIZhaH9csJ/o4uiomfabsUMXT7VgQfhu53Zc+OVy2uwRkd4dY7OL7VoVAAA4Obbk/5huz/++evyvbvnieV5jvZ//3z8WOVD+X4nskv+DfF/P/7ZVy/+OVXYPlv/dkrrV/B8i/x9CdjP/49Sq5v948Pvru3dtadBvkP8BAAAAAAAAAAAAAAAAAAAAAPgRrHtewvO8RP1r/SMa/Et4/fvjXidag/Pf2cY0aKjGROz7s9nZrIgdrm3cOO+WDEpCPvvXQ6DWHjmfGR5UX1Ke2vNB/fxstscvTOckL7ZYMiQJSTavH6rV69b6sMQb61OSkJ+a16ea1kfkn78b6g1JyIspKYkt0/51vVk/N6R69mJmW32vPw4AAAAAgNPA0A1Nn98NY7f+Wn06J+I/X+//94Ftz9ch+S10vPsOAAAAAECncCp3CqZtW+U2NmIi0vq5qntnh1u9g717j5n7r/2H9+Q0Eg1b6i+RbvsyQo2TRoNVtGiuXx4++nB0P/DM8u+fmnV9bMuhO8DNI9y6+xIAAACAo7cZ+ncf471p54oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOg8rXuLWE8ww15vFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6y7cAAAD//5U2Iiw=") r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r3}, 0x20) close(r3) r5 = add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f00000008c0)="5fc2", 0x2, r2) keyctl$read(0xb, r2, &(0x7f0000000940)=""/55, 0x37) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r1, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0x10000014}) r8 = getpid() r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r7, &(0x7f0000000100)={r6, r7}) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) keyctl$KEYCTL_MOVE(0x1e, r2, r5, r5, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"/361, @ANYRES16=r10, @ANYBLOB="200029bd7000fcdbdf253900000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x590}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xfff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x80) mkdir(&(0x7f0000000340)='./file\x00', 0x0) 14m2.559921415s ago: executing program 2 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 14m2.28451751s ago: executing program 2 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0xdc, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "e5682717a73d8b636e54afac276fa95d53e0c555d18951b9cf8c20dc52225eee0edf662be3e7aa305190d1281d09ad4800caea1b516c0feccec50b9d078079b5b97019e8ee1c90f0b992f5e5a201f56c73a00c24bc05dd7fccab8f825dfb1aa299e0208fcd70f455a07a93d9c7d3074d4a110cb3091868107b17c86a44e9a7d685d857adfc01b4df6d88965a5c3fce62d0b76788086246f382e0c8fbd04eab0fd399cda97ed847790596836b16"}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0xe07, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x184}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@nouid32}, {@nodioread_nolock}, {@barrier_val}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@bsdgroups}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@nouid32}, {@nodioread_nolock}, {@barrier_val}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@bsdgroups}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280840, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280840, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r1}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 14m2.275156609s ago: executing program 32 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0xdc, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb1, 0x6, "e5682717a73d8b636e54afac276fa95d53e0c555d18951b9cf8c20dc52225eee0edf662be3e7aa305190d1281d09ad4800caea1b516c0feccec50b9d078079b5b97019e8ee1c90f0b992f5e5a201f56c73a00c24bc05dd7fccab8f825dfb1aa299e0208fcd70f455a07a93d9c7d3074d4a110cb3091868107b17c86a44e9a7d685d857adfc01b4df6d88965a5c3fce62d0b76788086246f382e0c8fbd04eab0fd399cda97ed847790596836b16"}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0xe07, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x184}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@nouid32}, {@nodioread_nolock}, {@barrier_val}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@bsdgroups}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@nouid32}, {@nodioread_nolock}, {@barrier_val}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@bsdgroups}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, r1}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280840, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x280840, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r1}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 10m18.889738951s ago: executing program 5 (id=2878): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x20400) openat(r1, &(0x7f0000000440)='./file0\x00', 0x80000, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x7}, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x2) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) clock_gettime(0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001f13388dbaf6641ac770089304bd897c29d854b069b5fca5a345db94fbf138cab4f3235f9805deb2a897eb81c432d29975391b3e886a9acb954ab6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001f13388dbaf6641ac770089304bd897c29d854b069b5fca5a345db94fbf138cab4f3235f9805deb2a897eb81c432d29975391b3e886a9acb954ab6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) fchdir(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000250000002000000045000000060000000000000f00000004000000000100000db600000000000000010000000000005f004c9aa422bb"], 0x0, 0x3d}, 0x28) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r8}}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r8}}, 0x20) 10m18.760524701s ago: executing program 5 (id=2879): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m18.731685296s ago: executing program 5 (id=2880): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000100)) 10m18.522643003s ago: executing program 5 (id=2881): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000002000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) 10m18.392651532s ago: executing program 5 (id=2883): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb9", 0xd}], 0x1}, 0x5) 10m18.371256688s ago: executing program 5 (id=2884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) 10m3.195610466s ago: executing program 33 (id=2884): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) (async) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) 9m55.70823831s ago: executing program 0 (id=3069): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x600}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 9m55.611602825s ago: executing program 0 (id=3071): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x80ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 9m55.470702282s ago: executing program 0 (id=3072): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x3}, 0x9092, 0x0, 0x7, 0x2, 0x9, 0x723e, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pivot_root(0x0, &(0x7f00000004c0)='./file1\x00') accept$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) 9m54.515757309s ago: executing program 0 (id=3081): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8a4, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000440)='attr\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r7, 0x105, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x20004020) getdents(r5, &(0x7f0000000000)=""/34, 0x22) getdents(r5, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r4, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m53.586463739s ago: executing program 0 (id=3085): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff90}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 9m52.224700089s ago: executing program 0 (id=3089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) timer_create(0xffacc, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) 9m52.211911567s ago: executing program 34 (id=3089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) timer_create(0xffacc, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) 7m13.999163604s ago: executing program 7 (id=4293): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e58", 0x33}], 0x1}}], 0x3, 0x2090) 7m13.946484824s ago: executing program 7 (id=4295): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000002073116200000000008510000002000000850000007600000095000000000000009500a50500030000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000001140)=0x5d27, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000002c0)}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2141, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) preadv2(r5, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/244, 0xf4}, {0x0}], 0x2, 0x6, 0x88, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 7m13.558512402s ago: executing program 7 (id=4298): r0 = syz_io_uring_setup(0xb99, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x1ba}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x10b5, &(0x7f0000000440)={0x0, 0x1c3, 0x48, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r0, 0x1, &(0x7f0000000340)="ea9d7417949fd3f62881d25d0baa5531bf3c6b4ecadee636c1acc600ec60fc352155e6080450cf618befcd3be28b7154dd7a1c0daedb372fa4463ac932a9f779871d2b65988d012e4ea8e17a0809cc3305e8d5b95646a05c8090ff361906bc4e59ba62656193ee2123a2991999077cf5aabb7e67e79e88c66d90d5b4e2f165719ceb7fd6af88937f21308e7418e55d397723cce6b9af3243f9cb8b04520266c4da17abb107e66bbbebe331f3a511f640e3eda8ad2440b93b0b29b949fd612eaee4", 0xc1, 0x1, 0x0, {0x0, r2}}) (async) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xf06f, 0x3180, 0x1, 0x283}, 0x0, 0x0) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f00000001c0)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a3ca1", 0x23}], 0x2}, 0x20008b88) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)) (async) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x50, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000a, 0x12, r5, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r10 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f00000001c0)) (async) timer_gettime(0x0, &(0x7f0000000300)) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x854}, &(0x7f0000000280)=0x8) 7m13.425895277s ago: executing program 7 (id=4299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xc001, &(0x7f0000000640)={[{@nolazytime}]}, 0x1, 0x525, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") close(r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24049094}, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2d, &(0x7f00000004c0)=0xfffffff8, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x6, 0x2, 0x31, 0x1, 0x3, 0xf5, 0x4, 0x20, 0xc, 0x4b, 0x4, 0xf8, 0x40, 0xb9}, 0xe) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r7, 0x1, &(0x7f0000000340)={0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m13.199853605s ago: executing program 7 (id=4301): openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x80000, 0x22) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = open(&(0x7f0000000240)='./file1\x00', 0x10041, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r1, &(0x7f0000000280)='\x00', 0x20000, &(0x7f00000002c0)={@align=0x5, {0x9, 0x1ff, 0x143db2b0, 0x3}}, 0x9, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x400}) io_setup(0x97e5ad60, &(0x7f0000000200)) setsockopt$inet_buf(r2, 0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0x2, 0x1}, {0x9, 0x1}]}]}}, &(0x7f0000000f40)=""/4073, 0x36, 0xfe9, 0x9}, 0x28) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r3, &(0x7f00000000c0)=""/75, 0x4b, 0x5) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = fcntl$dupfd(r4, 0x0, r4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x8, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r7, 0x4004550d, &(0x7f0000000380)) r10 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r10, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r10, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r11, 0x0, r11, &(0x7f0000000500)=0xffff, 0x0, 0x0) 7m12.791783649s ago: executing program 7 (id=4303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x44bf, &(0x7f0000000000)={0x0, 0x3166, 0x8, 0x0, 0x104}, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r4, &(0x7f0000000000), 0x0, 0x0, 0x1) fsetxattr$security_capability(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xb1b5, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x24, 0x0, @fd_index=0x6, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, 0x0, r3}}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r9, &(0x7f0000000300)='./file0\x00', 0x203) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r11, 0xda90) 7m12.763716214s ago: executing program 35 (id=4303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x44bf, &(0x7f0000000000)={0x0, 0x3166, 0x8, 0x0, 0x104}, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r4, &(0x7f0000000000), 0x0, 0x0, 0x1) fsetxattr$security_capability(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xb1b5, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_TEE={0x21, 0x24, 0x0, @fd_index=0x6, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, 0x0, r3}}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r9, &(0x7f0000000300)='./file0\x00', 0x203) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r11, 0xda90) 6.495611918s ago: executing program 4 (id=7537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0xff000000, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 6.416719854s ago: executing program 4 (id=7569): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1060a2, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000002000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6.248714024s ago: executing program 4 (id=7572): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$key(0xf, 0x3, 0x2) 6.222326749s ago: executing program 4 (id=7573): msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x41, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0xbf}}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@quota}]}, 0xfe, 0x26f, &(0x7f0000000800)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xc6d, &(0x7f00000000c0)={0x0, 0x6442, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 4.996303868s ago: executing program 3 (id=7585): msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x41, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0xbf}}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@quota}]}, 0xfe, 0x26f, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x40000000015, 0x5, 0x0) r5 = syz_io_uring_setup(0xc6d, &(0x7f00000000c0)={0x0, 0x6442, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 3.855865673s ago: executing program 8 (id=7590): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x3}, 0x9092, 0x0, 0x7, 0x2, 0x9, 0x723e, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) timerfd_create(0x0, 0x80000) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) 3.844730361s ago: executing program 3 (id=7591): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x51, 0x4000, @fd, 0x0, 0x20000003, 0xffff, 0x0, 0x1, {0x2}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c00078008000501000000dc08000000000000000800050000000000240007800800050000000000080005000000000008000500000008"], 0x150}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, 0x0, 0x24048090) 3.736890372s ago: executing program 8 (id=7593): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0xb, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) faccessat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f80)=ANY=[@ANYRESHEX=r5, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYBLOB="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", @ANYBLOB="0c000600020000000000000008000b00c20d"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) 3.348554502s ago: executing program 1 (id=7595): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x20000000000000d6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) openat(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x506) 2.697005895s ago: executing program 1 (id=7596): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbe, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x5210, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xdd, 0x2e9, &(0x7f0000000a40)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r6) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$unix(r7, &(0x7f00000006c0)={&(0x7f00000002c0)=@abs={0xa4e359a9e807af91, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000340)="5fdb7a04a7cc1dd5c1366370aa51ed10075afcb86f7ed797f01d902b0da229aef839f3581d920fa14ae6ee9fc075564f4911fb7e56059b28f268b699c0559516f14a7d13cf4365c269614f489518f08715630cf06f766a77b2dd58b5feabb7b3281996f336ba00fc795ebaa2d5d36e04cd05e442b0b82d7d3f741f9bb2c79da12f74ad64552374114c736d8cabde7adb7d65b9277a5d848a51867157d4773dd21b96d7a1b5bb8a373ca90e4ba0761b54bb5888a5ed24821debd840e1e388918638a25b117465547f364f943791cab21b829cb8d2bc3ad9c4dfd822bea0d37582", 0xe0}, {&(0x7f0000000440)="4a69f18db1d6c981e727a3b2775728de24478198598dd83a713d717ad1b68de11713215cacc4aeb55999ca85b957596b62ab3314cc29366bcd012ac690d6cbf4f6da61b30c0ef7158814d7aaf4dd64eb39d9a25d83e6d20bf0cbfa7521eb3c367862479534a25a09241affd6ef3ee32737a83f450963589962d74b17b890da6a5454a81ba49a01aeea36df65131f4ce9c088eab87c89e6b2c69f2b3ddb78daa14500c611257873377893a0390207e2ee988912854732c610554bf4bc16a4295fd362d8c2a11a602a70b14b67cf4614db68968e02913e3caba266181dfd5eabfa64419ecb9c8c873775b233c793ba7a26528c", 0xf2}, {&(0x7f0000000240)="f88a4eeef49d1bf254b1c9", 0xb}, {&(0x7f0000000540)="5dd9d3da907d893ec32eb6452278e587f48076f9ac78263565fda2c27059401e59871c402c2c6efaaad696205d2d3931a043baedde1066aab44fa0314b47fe8bc0398f232758c14062bf66c29cecd5facf40808dad0394587337f2cbbbf1bcecb481ab13b2572c4316cc4e8fe670627254af6299d4714709df36cab9e7cf03c5140740c7c943b3c45b1e138c92d9d22c3f0cc22a2cbc8c5f8d5d4c13a40653988b03627885733cf57b86ec7458f74b9bef038e2f0cf8cd29b72a4d85f6bddcefd5eea9810ea56d3c7cd179b11ace4acc50757e7316281c69ff90e8dd071222978a7cf0f8de8076d41ceb0343edaa1d", 0xef}, {&(0x7f0000002cc0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x48000}, 0x800) write$binfmt_script(r7, &(0x7f0000001d00)={'#! ', './file1', [{}, {0x20, 'msdos\x00'}, {0x20, '\x00'}, {0x20, '!:%%%%$'}, {0x20, '\\](#'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {}, {0x20, 'bond\x00'}]}, 0x31) 2.474799285s ago: executing program 3 (id=7597): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0xb0a8, 0x80, 0x1, 0x11d}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x79}, 0x41}, 0x1c) 1.776666469s ago: executing program 8 (id=7598): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000068b000/0x4000)=nil, 0x4000, 0x2, 0x100010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r4) io_uring_enter(r1, 0x7a91, 0x0, 0x0, 0x0, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x44040001, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = dup(0xffffffffffffffff) recvfrom$rxrpc(r8, &(0x7f0000000000)=""/20, 0x14, 0x41, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 1.67098488s ago: executing program 3 (id=7600): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="001000000003adea138ad8f07fbe2c152ad600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48) 1.486123107s ago: executing program 3 (id=7601): msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x41, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0xbf}}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@quota}]}, 0xfe, 0x26f, &(0x7f0000000800)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x40000000015, 0x5, 0x0) r5 = syz_io_uring_setup(0xc6d, &(0x7f00000000c0)={0x0, 0x6442, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 1.316562727s ago: executing program 1 (id=7602): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x820, 0xc, @private1, 0x9}]}, &(0x7f0000003180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x7fff}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000668dcece25bd7002fcffff0700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000e0000000000060003000100000004001200"], 0x44}, 0x1, 0xba01, 0x0, 0x2000c000}, 0x20000040) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f0000000000)="79299bc190e24dc05deee360239a38e0d3e258aa176523f315a87746ed3dc8dbca4283fcbfb442237d42b2c00081be3ceb5af3cb1d89cd8631fb49c61402bf4c3541c051e219fd431e37939c9a380dda87ac71e676578e1aaa76007a19ad27097f6b8f2ab9b2c22b312a2bf56e1a72c5d64b03fdef96de64cf07f7f337a2209ff00212a40d640a047a418d2d6745cbccba5c1aca043979ca6299e8154c5bc8a8895171afe8", 0xa5}, {&(0x7f00000000c0)="3da343621a023df4d694cfcdce9703476d8c3cf3e226cd994f36ddb7473c9415795a49db326ffb46915d6cb22bf641206f1120cc8107dcaf638fda46bf0076f9e7345ffcd9", 0x45}, {&(0x7f0000000140)="23f77a5023d9fd3b7c3b3c0e442575d3bd5bac9c28ddabf04bb56917efbf0af21084cb0c1d1eab27d47be56c78bee2026a1745efd258f2172b0b6304bdae2bb80b6d77cf6bac2a98ef12201463b9f1c87bd4b0bec71ad16d5dc57f681caa76249442f89c5a8f7a329827defbbc49e927642469eb9d80be8c72eef32d7cf981f646c07100be71afbb", 0x88}, {&(0x7f0000000200)="a5abc62c55075fa0c2b238132909a1a6b4034d7e0c60901db9ec7bf2c8d04ae95bd577776a1aec532c15782f594fa056f12f720bfc0a5204953a3a1a797bca91737229afce0d995a043de4ddd44c0b238251aa4c8e0d796a9eb349d78cc6b574d2206e950a2d00961773ab83c4a7e86f5b3dd7", 0x73}, {&(0x7f00000002c0)="8b6f169ad9ca075067ac352c76426d8232b7eed1a9173408fd4dcd474520a36cd51eb6736b9eb4cbd1b0252f29d2f6ec6fcf371b924405de7f5ddeab871cd8cc0045a01583ca7b39c4bf49db91c85be101ea1b0322e5c2305fefe8672e1f394ace4c0e494c17f640a5e15ad1f750f04e2f04887ea750d8217b870195f42abc0abdce8150c174d334ea35e06a44d44c39cabd31b500952dfd1e5074276a0217", 0x9f}], 0x5, 0x10, 0x5499, 0x10) 1.293731592s ago: executing program 6 (id=7603): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x3ffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@errors_continue}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x47d, &(0x7f0000000200)="$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") 1.020643654s ago: executing program 6 (id=7604): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x3}, 0x9092, 0x0, 0x7, 0x2, 0x9, 0x723e, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) (fail_nth: 2) 651.299797ms ago: executing program 6 (id=7605): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 601.976738ms ago: executing program 6 (id=7606): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x9fff}, 0x40800) 599.732187ms ago: executing program 4 (id=7607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x700}, 0x94) 529.649635ms ago: executing program 4 (id=7608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x41) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000200)=0x80, 0x40800) sendto$inet(r2, &(0x7f0000000240)="a833cb26a2d40224a4ed08291c06adf2bfb6335f52", 0x15, 0x40001, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x340}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r5 = semget(0x0, 0x1, 0x8) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000400)=""/109) r6 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) r7 = shmat(r6, &(0x7f0000ffb000/0x3000)=nil, 0x2000) ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000480)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x110, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6d3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xabc}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc280}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x32}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x582a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x801}, 0x10) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000740)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x5, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)='veth1\x00', 0xfffffffffffffff7, 0xd, 0x1ff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, r9, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="15d135e2b001"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2c7e5499131a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ad787a175fe4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000000940)={@empty, @local, @empty}, 0xc) pipe2$watch_queue(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$qrtrtun(r11, &(0x7f00000009c0)="cd89815700742fcea6332ac2167aa2fd34", 0x11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2006c085}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x5fd42000) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) ppoll(&(0x7f0000000b00)=[{r11, 0x1e0}], 0x1, &(0x7f0000000b80)={r13, r14+10000000}, &(0x7f0000000bc0)={[0xe2]}, 0x8) shmdt(r7) 470.345834ms ago: executing program 8 (id=7609): socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000001640)=[{r3, 0x2025}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 438.182579ms ago: executing program 6 (id=7610): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@data_err_ignore}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) (async) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) 392.08947ms ago: executing program 1 (id=7611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x0, 0x7, 0x4}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fe, &(0x7f0000000680)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000300)={0x10001, 0x44, 0x5, 0x8, 0xba95, 0x7}) syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8b) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0xab, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ad}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 391.54074ms ago: executing program 3 (id=7612): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbe, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x5210, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xdd, 0x2e9, &(0x7f0000000a40)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r6) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$unix(r7, &(0x7f00000006c0)={&(0x7f00000002c0)=@abs={0xa4e359a9e807af91, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000340)="5fdb7a04a7cc1dd5c1366370aa51ed10075afcb86f7ed797f01d902b0da229aef839f3581d920fa14ae6ee9fc075564f4911fb7e56059b28f268b699c0559516f14a7d13cf4365c269614f489518f08715630cf06f766a77b2dd58b5feabb7b3281996f336ba00fc795ebaa2d5d36e04cd05e442b0b82d7d3f741f9bb2c79da12f74ad64552374114c736d8cabde7adb7d65b9277a5d848a51867157d4773dd21b96d7a1b5bb8a373ca90e4ba0761b54bb5888a5ed24821debd840e1e388918638a25b117465547f364f943791cab21b829cb8d2bc3ad9c4dfd822bea0d37582", 0xe0}, {&(0x7f0000000440)="4a69f18db1d6c981e727a3b2775728de24478198598dd83a713d717ad1b68de11713215cacc4aeb55999ca85b957596b62ab3314cc29366bcd012ac690d6cbf4f6da61b30c0ef7158814d7aaf4dd64eb39d9a25d83e6d20bf0cbfa7521eb3c367862479534a25a09241affd6ef3ee32737a83f450963589962d74b17b890da6a5454a81ba49a01aeea36df65131f4ce9c088eab87c89e6b2c69f2b3ddb78daa14500c611257873377893a0390207e2ee988912854732c610554bf4bc16a4295fd362d8c2a11a602a70b14b67cf4614db68968e02913e3caba266181dfd5eabfa64419ecb9c8c873775b233c793ba7a26528c", 0xf2}, {&(0x7f0000000240)="f88a4eeef49d1bf254b1c9", 0xb}, {&(0x7f0000000540)="5dd9d3da907d893ec32eb6452278e587f48076f9ac78263565fda2c27059401e59871c402c2c6efaaad696205d2d3931a043baedde1066aab44fa0314b47fe8bc0398f232758c14062bf66c29cecd5facf40808dad0394587337f2cbbbf1bcecb481ab13b2572c4316cc4e8fe670627254af6299d4714709df36cab9e7cf03c5140740c7c943b3c45b1e138c92d9d22c3f0cc22a2cbc8c5f8d5d4c13a40653988b03627885733cf57b86ec7458f74b9bef038e2f0cf8cd29b72a4d85f6bddcefd5eea9810ea56d3c7cd179b11ace4acc50757e7316281c69ff90e8dd071222978a7cf0f8de8076d41ceb0343edaa1d", 0xef}, {&(0x7f0000002cc0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x48000}, 0x800) write$binfmt_script(r7, &(0x7f0000001d00)={'#! ', './file1', [{}, {0x20, 'msdos\x00'}, {0x20, '\x00'}, {0x20, '!:%%%%$'}, {0x20, '\\](#'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {}, {0x20, 'bond\x00'}]}, 0x31) 205.406527ms ago: executing program 8 (id=7613): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0xfc, 0x800077, 0x8, 0x6, 0x7, 0x20000001000, 0xf64, 0xfffffffd}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) bind(r0, &(0x7f0000000080)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80) unlink(&(0x7f0000000280)='./file1\x00') 150.125326ms ago: executing program 1 (id=7614): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}, 0xa000000}], 0x2, 0x4008040) 91.060556ms ago: executing program 6 (id=7615): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01000002000000000000000000000100000000000000030000"], 0x0, 0x2a, 0x0, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) waitid(0x20, 0x0, 0x0, 0x4, 0x0) 985.23µs ago: executing program 8 (id=7616): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [0x0, 0x0, 0x0, 0xff6a], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) inotify_init() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x3) 0s ago: executing program 1 (id=7617): msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x41, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0xbf}}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@quota}]}, 0xfe, 0x26f, &(0x7f0000000800)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xc6d, &(0x7f00000000c0)={0x0, 0x6442, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) fsopen(&(0x7f0000000040)='devpts\x00', 0x0) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ffff) [ 981.489736][T30059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7062'. [ 981.506244][T30037] rock: directory entry would overflow storage [ 981.506308][T30037] rock: sig=0x4f50, size=4, remaining=3 [ 981.506423][T30037] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 981.507015][T30050] Symlink component flag not implemented [ 981.507050][T30050] Symlink component flag not implemented (129) [ 981.507520][T30050] rock: directory entry would overflow storage [ 981.507580][T30050] rock: sig=0x4f50, size=4, remaining=3 [ 981.507595][T30050] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 981.556420][T30062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7063'. [ 981.588585][T30041] rock: directory entry would overflow storage [ 981.595412][T30041] rock: sig=0x4f50, size=4, remaining=3 [ 981.611787][T30041] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 981.626039][T30060] Symlink component flag not implemented [ 981.633754][T30060] Symlink component flag not implemented (129) [ 981.653058][T30060] rock: directory entry would overflow storage [ 981.671588][T30060] rock: sig=0x4f50, size=4, remaining=3 [ 981.687469][T30060] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 981.705021][T30069] IPVS: stopping master sync thread 29692 ... [ 981.770498][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145d26a00: rx timeout, send abort [ 981.816015][T30070] netlink: 277 bytes leftover after parsing attributes in process `syz.8.7064'. [ 981.848804][T30070] hub 8-0:1.0: USB hub found [ 981.853528][T30070] hub 8-0:1.0: 8 ports detected [ 981.864890][T30070] netlink: 'syz.8.7064': attribute type 10 has an invalid length. [ 982.094869][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7068'. [ 982.107449][T30081] FAULT_INJECTION: forcing a failure. [ 982.107449][T30081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.132707][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7068'. [ 982.143308][T30081] CPU: 0 UID: 0 PID: 30081 Comm: syz.4.7069 Tainted: G W syzkaller #0 PREEMPT(full) [ 982.143397][T30081] Tainted: [W]=WARN [ 982.143406][T30081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.143469][T30081] Call Trace: [ 982.143479][T30081] [ 982.143490][T30081] __dump_stack+0x1d/0x30 [ 982.143524][T30081] dump_stack_lvl+0x95/0xd0 [ 982.143564][T30081] dump_stack+0x15/0x1b [ 982.143589][T30081] should_fail_ex+0x263/0x280 [ 982.143613][T30081] should_fail+0xb/0x20 [ 982.143708][T30081] should_fail_usercopy+0x1a/0x20 [ 982.143742][T30081] _copy_from_iter+0xcf/0xea0 [ 982.143773][T30081] ? __alloc_skb+0x4f6/0x690 [ 982.143817][T30081] ? __alloc_skb+0x200/0x690 [ 982.143850][T30081] netlink_sendmsg+0x4ae/0x6f0 [ 982.143882][T30081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 982.143912][T30081] ____sys_sendmsg+0x563/0x5b0 [ 982.144025][T30081] ___sys_sendmsg+0x195/0x1e0 [ 982.144070][T30081] __x64_sys_sendmsg+0xd4/0x160 [ 982.144113][T30081] x64_sys_call+0x194c/0x3020 [ 982.144147][T30081] do_syscall_64+0x12c/0x370 [ 982.144303][T30081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.144329][T30081] RIP: 0033:0x7f349b22c799 [ 982.144351][T30081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.144375][T30081] RSP: 002b:00007f3499c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.144400][T30081] RAX: ffffffffffffffda RBX: 00007f349b4a5fa0 RCX: 00007f349b22c799 [ 982.144415][T30081] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 982.144537][T30081] RBP: 00007f3499c87090 R08: 0000000000000000 R09: 0000000000000000 [ 982.144555][T30081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.144569][T30081] R13: 00007f349b4a6038 R14: 00007f349b4a5fa0 R15: 00007fffd7ab5968 [ 982.144632][T30081] [ 982.279055][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145d26a00: abort rx timeout. Force session deactivation [ 982.495275][T30092] EXT4-fs: Ignoring removed bh option [ 982.511153][T30092] EXT4-fs: Ignoring removed mblk_io_submit option [ 982.572077][T30092] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 982.606322][T30092] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 982.616206][T30092] EXT4-fs (loop6): orphan cleanup on readonly fs [ 982.636907][T30092] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 982.661268][T30101] SELinux: policydb version 0 does not match my version range 15-35 [ 982.671730][T30092] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 982.672881][T30105] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=30105 comm=syz.4.7079 [ 982.683232][T30092] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7075: Failed to acquire dquot type 1 [ 982.696237][T30101] SELinux: failed to load policy [ 982.706226][T30092] loop6: lost filesystem error report for type 5 error -5 [ 982.710868][T30092] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7075: Invalid block bitmap block 0 in block_group 0 [ 982.718093][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 982.718110][ C0] EXT4-fs (loop6): last error at time 2000000532: ext4_acquire_dquot:7001 [ 982.747384][T30092] loop6: lost filesystem error report for type 5 error -117 [ 982.748182][T30092] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7075: Invalid block bitmap block 0 in block_group 0 [ 983.188500][T30092] loop6: lost filesystem error report for type 5 error -117 [ 983.212991][T30092] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7075: Invalid block bitmap block 0 in block_group 0 [ 983.301716][T30092] loop6: lost filesystem error report for type 5 error -117 [ 983.302037][T30092] Quota error (device loop6): write_blk: dquota write failed [ 983.355688][T30092] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 983.418345][T30112] macvlan0: entered promiscuous mode [ 983.446034][T30092] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7075: Failed to acquire dquot type 1 [ 983.467188][T30112] debugfs: 'hsr1' already exists in 'hsr' [ 983.489497][T30112] Cannot create hsr debugfs directory [ 983.497306][T30092] loop6: lost filesystem error report for type 5 error -28 [ 983.497606][T30092] Quota error (device loop6): write_blk: dquota write failed [ 983.534372][T30112] hsr1: entered promiscuous mode [ 983.558491][T30112] hsr1: entered allmulticast mode [ 983.568331][T30092] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 983.578559][T30112] macvlan0: entered allmulticast mode [ 983.606033][T30112] veth1_vlan: entered allmulticast mode [ 983.614007][T30092] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7075: Failed to acquire dquot type 1 [ 983.625727][T30112] dummy0: entered allmulticast mode [ 983.670550][T30115] set_capacity_and_notify: 2 callbacks suppressed [ 983.670566][T30115] loop3: detected capacity change from 0 to 1024 [ 983.709713][T30092] loop6: lost filesystem error report for type 5 error -28 [ 983.745509][T30115] EXT4-fs: Ignoring removed oldalloc option [ 983.781671][T30117] loop1: detected capacity change from 0 to 1024 [ 983.796123][T30115] EXT4-fs: Ignoring removed bh option [ 983.803850][T30114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=30114 comm=syz.4.7083 [ 983.807011][T30117] EXT4-fs: Ignoring removed oldalloc option [ 983.838069][T30117] EXT4-fs: Ignoring removed bh option [ 983.856065][T30092] EXT4-fs (loop6): 1 orphan inode deleted [ 983.882978][T30092] EXT4-fs mount: 2 callbacks suppressed [ 983.882997][T30092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 983.914012][T30115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.929440][T30117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.943096][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.994683][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.995160][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.070277][T30134] loop3: detected capacity change from 0 to 512 [ 984.132024][T30137] __nla_validate_parse: 2 callbacks suppressed [ 984.132042][T30137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7086'. [ 984.195072][T30137] hub 8-0:1.0: USB hub found [ 984.200028][T30137] hub 8-0:1.0: 8 ports detected [ 984.213442][T30137] netlink: 'syz.6.7086': attribute type 10 has an invalid length. [ 984.312283][T30134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 984.547494][T30134] EXT4-fs (loop3): 1 truncate cleaned up [ 984.622896][T30134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.694743][T30134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30134 comm=syz.3.7088 [ 984.717500][T30146] loop1: detected capacity change from 0 to 512 [ 984.760539][T30146] EXT4-fs (loop1): 1 orphan inode deleted [ 984.766802][T30146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.783986][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.824547][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.908631][T30152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7092'. [ 985.023630][T30166] loop4: detected capacity change from 0 to 1024 [ 985.042674][T30166] EXT4-fs: Ignoring removed oldalloc option [ 985.062319][T30166] EXT4-fs: Ignoring removed bh option [ 985.130362][T30168] loop1: detected capacity change from 0 to 764 [ 985.203335][T30168] rock: directory entry would overflow storage [ 985.232705][T30166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.248158][T30168] rock: sig=0x4f50, size=4, remaining=3 [ 985.254487][T30168] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 985.257432][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7103'. [ 985.287115][T30180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 985.304470][T30180] x_tables: duplicate entry at hook 2 [ 985.310658][T30180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7103'. [ 985.320100][T30180] bond4: entered promiscuous mode [ 985.325313][T30180] bond4: entered allmulticast mode [ 985.349910][T30180] dummy0: entered allmulticast mode [ 985.356421][T30180] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 985.409727][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.504840][T30184] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7105'. [ 985.574765][T30186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7106'. [ 985.584889][T30186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7106'. [ 985.829149][T30192] sctp: [Deprecated]: syz.3.7109 (pid 30192) Use of int in max_burst socket option deprecated. [ 985.829149][T30192] Use struct sctp_assoc_value instead [ 985.906083][T30194] loop3: detected capacity change from 0 to 512 [ 985.918049][T30194] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 986.022102][T30194] EXT4-fs (loop3): inodes count not valid: 31 vs 32 [ 986.326352][T30200] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 986.332984][T30200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 986.379956][T30200] vhci_hcd vhci_hcd.0: Device attached [ 986.386526][T30206] loop8: detected capacity change from 0 to 1024 [ 986.394468][T30203] vhci_hcd: connection closed [ 986.394709][T12512] vhci_hcd vhci_hcd.3: stop threads [ 986.413455][T30206] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 986.426923][T12512] vhci_hcd vhci_hcd.3: release socket [ 986.432369][T12512] vhci_hcd vhci_hcd.3: disconnect device [ 986.438697][T30206] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 986.449501][T30206] JBD2: no valid journal superblock found [ 986.455259][T30206] EXT4-fs (loop8): Could not load journal inode [ 986.478960][T30168] Symlink component flag not implemented [ 986.486269][T30168] Symlink component flag not implemented (129) [ 986.503204][T30168] rock: directory entry would overflow storage [ 986.510911][T30168] rock: sig=0x4f50, size=4, remaining=3 [ 986.518058][T30168] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 986.766420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.122162][ T28] audit: type=1326 audit(2000000536.517:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.4.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349b22c799 code=0x7ffc0000 [ 987.175841][ T28] audit: type=1326 audit(2000000536.517:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.4.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349b22c799 code=0x7ffc0000 [ 987.181528][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7116'. [ 987.199688][ T28] audit: type=1326 audit(2000000536.517:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.4.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f349b22c799 code=0x7ffc0000 [ 987.250641][ T28] audit: type=1326 audit(2000000536.517:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30213 comm="syz.4.7117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349b22c799 code=0x7ffc0000 [ 987.348377][T30227] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7122'. [ 987.359748][T30215] loop8: detected capacity change from 0 to 8192 [ 987.366995][T30223] sit0: entered allmulticast mode [ 987.373141][T30215] msdos: Unknown parameter 'eâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;' [ 987.431858][T30230] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 987.609988][T30274] loop6: detected capacity change from 0 to 1024 [ 987.625620][T30274] EXT4-fs: Ignoring removed oldalloc option [ 987.661104][T30274] EXT4-fs: Ignoring removed bh option [ 987.684266][T30274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.830838][T30281] rock: directory entry would overflow storage [ 987.838968][T30281] rock: sig=0x4f50, size=4, remaining=3 [ 987.845604][T30281] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 987.934159][T30281] Symlink component flag not implemented [ 987.941823][T30281] Symlink component flag not implemented (129) [ 987.957291][T30281] rock: directory entry would overflow storage [ 987.963860][T30281] rock: sig=0x4f50, size=4, remaining=3 [ 987.970289][T30281] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 988.235501][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.330936][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7133'. [ 988.356664][T30297] syzkaller0: entered promiscuous mode [ 988.374086][T30297] syzkaller0: entered allmulticast mode [ 989.246765][T30321] set_capacity_and_notify: 2 callbacks suppressed [ 989.246884][T30321] loop4: detected capacity change from 0 to 764 [ 989.324497][T30321] rock: directory entry would overflow storage [ 989.351474][T30321] rock: sig=0x4f50, size=4, remaining=3 [ 989.358911][T30324] loop3: detected capacity change from 0 to 512 [ 989.376306][T30321] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 989.385228][T30324] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 989.418856][T30324] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 989.432710][T30321] Symlink component flag not implemented [ 989.440123][T30324] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 989.457170][T30324] System zones: 0-2, 18-18, 34-35 [ 989.466353][T30321] Symlink component flag not implemented (129) [ 989.471386][T30324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 989.502003][T30321] rock: directory entry would overflow storage [ 989.507017][T30324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.510112][T30321] rock: sig=0x4f50, size=4, remaining=3 [ 989.523927][T30321] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 989.729126][T30338] loop3: detected capacity change from 0 to 512 [ 989.741384][T30338] EXT4-fs: Ignoring removed bh option [ 989.753678][T30338] EXT4-fs: inline encryption not supported [ 989.768871][T30338] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 989.780368][T30339] __nla_validate_parse: 1 callbacks suppressed [ 989.780387][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7146'. [ 989.805821][T30338] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 989.820724][T30338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7147: bg 0: block 248: padding at end of block bitmap is not set [ 989.835122][T30338] loop3: lost filesystem error report for type 5 error -117 [ 989.835310][T30338] __quota_error: 11 callbacks suppressed [ 989.835328][T30338] Quota error (device loop3): write_blk: dquota write failed [ 989.842735][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 989.842756][ C0] EXT4-fs (loop3): last error at time 2000000539: ext4_validate_block_bitmap:441 [ 989.871473][T30338] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 989.881552][T30338] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.7147: Failed to acquire dquot type 1 [ 989.892843][T30338] loop3: lost filesystem error report for type 5 error -117 [ 989.893463][T30338] EXT4-fs (loop3): 1 truncate cleaned up [ 989.907007][T30338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 989.950815][T30343] loop6: detected capacity change from 0 to 512 [ 989.966641][T30336] vlan2: entered promiscuous mode [ 990.000554][T30343] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.7148: corrupted inode contents [ 990.044408][T30343] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.044602][T30343] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.7148: mark_inode_dirty error [ 990.052732][T30349] loop1: detected capacity change from 0 to 512 [ 990.053806][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 990.077643][ C1] EXT4-fs (loop6): initial error at time 2000000539: ext4_do_update_inode:5569: inode 3 [ 990.087484][ C1] EXT4-fs (loop6): last error at time 2000000539: ext4_do_update_inode:5569: inode 3 [ 990.092290][T30352] loop4: detected capacity change from 0 to 128 [ 990.103951][T30343] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.104390][T30343] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.7148: corrupted inode contents [ 990.126395][T30343] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.126553][T30343] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.7148: mark_inode_dirty error [ 990.149679][T30343] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.153652][T30343] Quota error (device loop6): write_blk: dquota write failed [ 990.170741][T30343] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 990.180817][T30343] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7148: Failed to acquire dquot type 0 [ 990.184673][T30349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.192255][T30343] loop6: lost filesystem error report for type 5 error -117 [ 990.204821][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 990.220327][T30349] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.252693][T30343] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7148: corrupted inode contents [ 990.286661][T30349] random: crng reseeded on system resumption [ 990.297462][ T28] audit: type=1400 audit(2000000539.687:5489): avc: denied { append } for pid=30348 comm="syz.1.7150" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 990.321049][T30343] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 990.323532][T30343] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.7148: mark_inode_dirty error [ 990.408742][T30343] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 990.408952][T30343] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7148: corrupted inode contents [ 990.442106][T30362] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 990.448721][T30362] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 990.457129][T30343] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 990.457312][T30343] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.7148: mark_inode_dirty error [ 990.483889][T30362] vhci_hcd vhci_hcd.0: Device attached [ 990.494230][T30363] vhci_hcd: connection closed [ 990.494363][T12529] vhci_hcd vhci_hcd.4: stop threads [ 990.494559][T30343] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 990.500278][T12529] vhci_hcd vhci_hcd.4: release socket [ 990.505079][T30343] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7148: corrupted inode contents [ 990.514345][T12529] vhci_hcd vhci_hcd.4: disconnect device [ 990.520017][T30343] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 990.538130][T30343] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 990.556584][T30343] loop6: lost filesystem error report for type 5 error -117 [ 990.557220][T30343] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.7148: corrupted inode contents [ 990.576621][T30343] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 990.576956][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.593806][T30343] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.7148: mark_inode_dirty error [ 990.616257][T30343] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 990.625162][T30343] loop6: lost filesystem error report for type 5 error -117 [ 990.634265][T30343] EXT4-fs (loop6): 1 truncate cleaned up [ 990.653794][T30367] loop1: detected capacity change from 0 to 128 [ 990.660673][T30343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.689821][T30343] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.773715][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.806487][T12529] Bluetooth: hci0: Frame reassembly failed (-84) [ 990.859008][T30383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7161'. [ 991.051424][T30386] loop4: detected capacity change from 0 to 2048 [ 991.061964][T30367] loop1: detected capacity change from 0 to 1024 [ 991.133275][T30367] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 991.170624][T30390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7164'. [ 991.207599][T30390] FAULT_INJECTION: forcing a failure. [ 991.207599][T30390] name failslab, interval 1, probability 0, space 0, times 0 [ 991.236578][T30390] CPU: 1 UID: 0 PID: 30390 Comm: syz.4.7164 Tainted: G W syzkaller #0 PREEMPT(full) [ 991.236621][T30390] Tainted: [W]=WARN [ 991.236631][T30390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 991.236664][T30390] Call Trace: [ 991.236671][T30390] [ 991.236680][T30390] __dump_stack+0x1d/0x30 [ 991.236715][T30390] dump_stack_lvl+0x95/0xd0 [ 991.236755][T30390] dump_stack+0x15/0x1b [ 991.236830][T30390] should_fail_ex+0x263/0x280 [ 991.236860][T30390] should_failslab+0x8c/0xb0 [ 991.236890][T30390] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 991.236921][T30390] ? __alloc_skb+0x2d6/0x690 [ 991.237032][T30390] __alloc_skb+0x2d6/0x690 [ 991.237062][T30390] ? __alloc_skb+0x200/0x690 [ 991.237093][T30390] netlink_alloc_large_skb+0xbf/0xf0 [ 991.237128][T30390] netlink_sendmsg+0x40c/0x6f0 [ 991.237245][T30390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 991.237361][T30390] ____sys_sendmsg+0x563/0x5b0 [ 991.237405][T30390] ___sys_sendmsg+0x195/0x1e0 [ 991.237459][T30390] __x64_sys_sendmsg+0xd4/0x160 [ 991.237535][T30390] x64_sys_call+0x194c/0x3020 [ 991.237613][T30390] do_syscall_64+0x12c/0x370 [ 991.237642][T30390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.237672][T30390] RIP: 0033:0x7f349b22c799 [ 991.237693][T30390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.237717][T30390] RSP: 002b:00007f3499c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.237800][T30390] RAX: ffffffffffffffda RBX: 00007f349b4a5fa0 RCX: 00007f349b22c799 [ 991.237818][T30390] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 991.237835][T30390] RBP: 00007f3499c87090 R08: 0000000000000000 R09: 0000000000000000 [ 991.237851][T30390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.237868][T30390] R13: 00007f349b4a6038 R14: 00007f349b4a5fa0 R15: 00007fffd7ab5968 [ 991.237891][T30390] [ 991.288571][T30367] loop1: detected capacity change from 0 to 128 [ 991.794106][T30367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 991.814827][T30367] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.027828][T26312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 992.069868][T30403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.100127][T30403] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.139233][T30403] EXT4-fs (loop4): shut down requested (1) [ 992.176868][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.202604][T30418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 992.274771][T30422] EXT4-fs: Ignoring removed oldalloc option [ 992.293963][T30422] EXT4-fs: Ignoring removed bh option [ 992.314306][T30422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.380993][T30422] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.7173: Allocating blocks 1-17 which overlap fs metadata [ 992.554980][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.604821][T30434] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 992.653470][T30434] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 992.706199][T30434] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.835980][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 993.178878][T30449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 993.222696][T30449] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.247182][T24855] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 993.291771][T30449] EXT4-fs (loop6): shut down requested (1) [ 993.323043][T30460] EXT4-fs: Ignoring removed i_version option [ 993.346391][T30459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7183'. [ 993.379844][T30459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7183'. [ 993.391406][T30460] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 993.531200][T30460] EXT4-fs (loop8): too many log groups per flexible block group [ 993.547865][T30470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 993.552594][T30460] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 993.561030][T30470] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.575555][T30460] EXT4-fs (loop8): mount failed [ 993.579842][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.786376][T30477] iso9660: Unknown parameter 'iocharsturkish' [ 994.064009][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.106353][T30479] SELinux: policydb version 0 does not match my version range 15-35 [ 994.139528][T30479] SELinux: failed to load policy [ 994.340330][T30489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7195'. [ 994.362156][T30485] rock: directory entry would overflow storage [ 994.382179][T30485] rock: sig=0x4f50, size=4, remaining=3 [ 994.393445][T30490] set_capacity_and_notify: 11 callbacks suppressed [ 994.393462][T30490] loop8: detected capacity change from 0 to 1024 [ 994.406820][T30485] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 994.427382][T30490] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 994.441393][T30485] Symlink component flag not implemented [ 994.459778][T30485] Symlink component flag not implemented (129) [ 994.509415][T30485] rock: directory entry would overflow storage [ 994.536095][T30485] rock: sig=0x4f50, size=4, remaining=3 [ 994.542415][T30485] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 994.764186][T30489] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 994.890509][T30504] loop4: detected capacity change from 0 to 512 [ 994.950526][T30504] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 995.130556][T30509] loop3: detected capacity change from 0 to 512 [ 995.163030][T30509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.192347][T30509] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.261807][T30517] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=30517 comm=syz.4.7203 [ 995.324359][T30509] EXT4-fs (loop3): shut down requested (1) [ 995.400453][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.456116][T30526] loop8: detected capacity change from 0 to 256 [ 995.597907][T30541] loop6: detected capacity change from 0 to 128 [ 995.631034][T30541] EXT4-fs: Mount option(s) incompatible with ext2 [ 995.904113][T30552] loop8: detected capacity change from 0 to 2048 [ 995.911849][T30552] EXT4-fs: Ignoring removed oldalloc option [ 995.918015][T30552] EXT4-fs: Ignoring removed oldalloc option [ 997.721109][T30547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7213'. [ 998.527509][T30552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.539696][T30552] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.855626][T30559] loop4: detected capacity change from 0 to 512 [ 998.886184][T30559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.937218][T30559] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.975352][T30559] EXT4-fs (loop4): shut down requested (1) [ 998.982597][T30566] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7218'. [ 999.021335][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.148320][T19885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.220057][T30582] loop1: detected capacity change from 0 to 128 [ 999.283911][T30586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7225'. [ 999.347653][T30586] hub 8-0:1.0: USB hub found [ 999.352585][T30586] hub 8-0:1.0: 8 ports detected [ 999.365618][T30586] netlink: 'syz.6.7225': attribute type 10 has an invalid length. [ 999.386300][T30589] SELinux: policydb version 0 does not match my version range 15-35 [ 999.395118][T30589] SELinux: failed to load policy [ 999.755298][T30582] EXT4-fs: Mount option(s) incompatible with ext2 [ 999.942179][T30594] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 999.948789][T30594] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 999.982066][T30599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7229'. [ 999.991498][T30594] vhci_hcd vhci_hcd.0: Device attached [ 1000.047156][T30595] vhci_hcd: connection closed [ 1000.047310][T12512] vhci_hcd vhci_hcd.4: stop threads [ 1000.067068][T30604] loop6: detected capacity change from 0 to 128 [ 1000.070878][T12512] vhci_hcd vhci_hcd.4: release socket [ 1000.076358][T30599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7229'. [ 1000.079653][T12512] vhci_hcd vhci_hcd.4: disconnect device [ 1000.095511][T30604] EXT4-fs: Mount option(s) incompatible with ext2 [ 1000.108523][T30599] netlink: 'syz.3.7229': attribute type 14 has an invalid length. [ 1000.136582][T30604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7230'. [ 1001.439641][T30618] loop3: detected capacity change from 0 to 512 [ 1001.504535][T30618] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7235: invalid indirect mapped block 256 (level 2) [ 1001.536273][T30618] fserror_report: 1 callbacks suppressed [ 1001.536337][T30618] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1001.551634][T30618] EXT4-fs (loop3): 2 truncates cleaned up [ 1001.561553][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1001.561622][ C1] EXT4-fs (loop3): initial error at time 2000000550: ext4_free_branches:1023: inode 11 [ 1001.561783][ C1] EXT4-fs (loop3): last error at time 2000000550: ext4_free_branches:1023: inode 11 [ 1001.645909][T30618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.730127][T30618] tmpfs: Bad value for 'mpol' [ 1001.889996][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7237'. [ 1002.044559][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.113664][T30632] netlink: 277 bytes leftover after parsing attributes in process `syz.6.7238'. [ 1002.154447][T30632] hub 8-0:1.0: USB hub found [ 1002.159367][T30632] hub 8-0:1.0: 8 ports detected [ 1002.173101][T30632] netlink: 'syz.6.7238': attribute type 10 has an invalid length. [ 1002.301340][T30636] loop8: detected capacity change from 0 to 512 [ 1002.543569][T30633] loop4: detected capacity change from 0 to 764 [ 1002.668120][T30633] rock: directory entry would overflow storage [ 1002.674792][T30633] rock: sig=0x4f50, size=4, remaining=3 [ 1002.689742][T30633] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1002.724474][T30633] Symlink component flag not implemented [ 1002.749410][T30633] Symlink component flag not implemented (129) [ 1002.783836][T30633] rock: directory entry would overflow storage [ 1002.791655][T30633] rock: sig=0x4f50, size=4, remaining=3 [ 1002.798091][T30633] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1002.842459][T30639] syzkaller0: entered promiscuous mode [ 1002.859870][T30639] syzkaller0: entered allmulticast mode [ 1002.893016][T30646] SELinux: policydb version 0 does not match my version range 15-35 [ 1002.922387][T30646] SELinux: failed to load policy [ 1004.308759][T30661] chnl_net:caif_netlink_parms(): no params data found [ 1004.483251][T30661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.545349][T30661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.578254][T30661] bridge_slave_0: entered allmulticast mode [ 1004.655873][T30661] bridge_slave_0: entered promiscuous mode [ 1004.675445][T30661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.715985][T30661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.723312][T30661] bridge_slave_1: entered allmulticast mode [ 1004.758907][T30661] bridge_slave_1: entered promiscuous mode [ 1004.807514][T30661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.829346][T30661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.897257][T30661] team0: Port device team_slave_0 added [ 1004.909008][T30661] team0: Port device team_slave_1 added [ 1004.943205][T12512] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1004.951060][T30684] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1004.976011][T12512] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1005.018466][T30661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.035752][T30661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.056206][T30688] loop4: detected capacity change from 0 to 512 [ 1005.084994][T30686] loop6: detected capacity change from 0 to 764 [ 1005.096505][T30688] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1005.101177][T30661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.174935][T30686] rock: directory entry would overflow storage [ 1005.177812][T12512] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1005.188530][T30686] rock: sig=0x4f50, size=4, remaining=3 [ 1005.197999][T30686] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1005.227222][T12512] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1005.277250][T30661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.289728][T30661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.329173][T30686] Symlink component flag not implemented [ 1005.346727][T30686] Symlink component flag not implemented (129) [ 1005.365457][T30661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.390689][T30686] rock: directory entry would overflow storage [ 1005.416139][T30686] rock: sig=0x4f50, size=4, remaining=3 [ 1005.429174][T12512] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1005.439204][T30686] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1005.456356][T12512] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1005.512784][T30661] hsr_slave_0: entered promiscuous mode [ 1005.526642][T30661] hsr_slave_1: entered promiscuous mode [ 1005.539287][T30661] debugfs: 'hsr0' already exists in 'hsr' [ 1005.551557][T30661] Cannot create hsr debugfs directory [ 1005.568763][T12512] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1005.589017][T12512] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1005.646035][ T28] audit: type=1400 audit(2000000555.037:5490): avc: denied { connect } for pid=30692 comm="syz.6.7255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1005.708926][ T28] audit: type=1326 audit(2000000555.087:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1005.793311][ T28] audit: type=1326 audit(2000000555.087:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1005.847944][T12512] veth0_to_bridge: left allmulticast mode [ 1005.853730][T12512] veth0_to_bridge: left promiscuous mode [ 1005.885961][ T28] audit: type=1326 audit(2000000555.087:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1005.916599][T12512] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1005.977293][T30701] netlink: 'syz.6.7257': attribute type 10 has an invalid length. [ 1005.979713][ T28] audit: type=1326 audit(2000000555.087:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1006.094939][ T28] audit: type=1326 audit(2000000555.087:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1006.170952][ T28] audit: type=1326 audit(2000000555.087:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1006.244420][ T28] audit: type=1326 audit(2000000555.087:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1006.292517][ T28] audit: type=1326 audit(2000000555.087:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1006.346018][ T28] audit: type=1326 audit(2000000555.087:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30692 comm="syz.6.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1006.579017][T12512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.589525][T12512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.601272][T12512] bond0 (unregistering): Released all slaves [ 1006.615043][T12512] bond1 (unregistering): Released all slaves [ 1006.642477][T12512] tipc: Disabling bearer [ 1006.655988][T12512] tipc: Left network mode [ 1006.708106][T12512] macvlan0: left promiscuous mode [ 1006.742533][T12512] hsr_slave_0: left promiscuous mode [ 1006.746829][T30720] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7259'. [ 1006.766213][T12512] hsr_slave_1: left promiscuous mode [ 1006.776782][T12512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.784233][T12512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.787101][T30720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7259'. [ 1006.808596][T12512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.822597][T12512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.855266][T12512] veth1_macvtap: left promiscuous mode [ 1006.872260][T12512] veth0_macvtap: left promiscuous mode [ 1006.890482][T12512] veth1_vlan: left allmulticast mode [ 1006.906983][T12512] veth1_vlan: left promiscuous mode [ 1006.913542][T12512] veth0_vlan: left promiscuous mode [ 1006.991082][T30732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7264'. [ 1007.021268][T30732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7264'. [ 1007.823060][T30742] loop1: detected capacity change from 0 to 128 [ 1007.837043][T30742] EXT4-fs: Mount option(s) incompatible with ext2 [ 1007.867040][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7267'. [ 1008.192742][T12512] IPVS: stop unused estimator thread 0... [ 1008.243859][T30661] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1008.897814][T30661] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1008.918617][T30793] tipc: Failed to remove unknown binding: 66,1,1/0:2303891221/2303891223 [ 1008.930009][T30661] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1008.989313][T30661] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1009.044548][T30804] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1009.081879][T30804] @0Ù: renamed from bond_slave_1 [ 1009.203627][T30804] loop4: detected capacity change from 0 to 1024 [ 1009.206787][T30661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.226615][T30804] EXT4-fs: Ignoring removed oldalloc option [ 1009.264387][T30804] EXT4-fs: Ignoring removed bh option [ 1009.275580][T30661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.297304][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.304448][T12529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.347438][T30804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.360815][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.367945][T12529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.429902][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.437555][T30661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1009.466236][T30661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.605608][T30661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.645697][T30827] loop3: detected capacity change from 0 to 512 [ 1009.873963][T30661] veth0_vlan: entered promiscuous mode [ 1009.896807][T30661] veth1_vlan: entered promiscuous mode [ 1009.928329][T30661] veth0_macvtap: entered promiscuous mode [ 1009.945762][T30661] veth1_macvtap: entered promiscuous mode [ 1009.970131][T30661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.993435][T30661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.024615][T12512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.334864][T12512] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.356972][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1010.366186][T30842] FAULT_INJECTION: forcing a failure. [ 1010.366186][T30842] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.379265][T12512] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.379258][T30842] CPU: 1 UID: 0 PID: 30842 Comm: syz.3.7278 Tainted: G W syzkaller #0 PREEMPT(full) [ 1010.379456][T30842] Tainted: [W]=WARN [ 1010.379478][T30842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1010.379527][T30842] Call Trace: [ 1010.379554][T30842] [ 1010.379577][T30842] __dump_stack+0x1d/0x30 [ 1010.379688][T30842] dump_stack_lvl+0x95/0xd0 [ 1010.379761][T30842] dump_stack+0x15/0x1b [ 1010.379832][T30842] should_fail_ex+0x263/0x280 [ 1010.379943][T30842] should_failslab+0x8c/0xb0 [ 1010.380092][T30842] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1010.380167][T30842] ? __alloc_skb+0x2d6/0x690 [ 1010.380251][T30842] __alloc_skb+0x2d6/0x690 [ 1010.380325][T30842] ? __alloc_skb+0x200/0x690 [ 1010.380418][T30842] netlink_ack+0xfd/0x500 [ 1010.380511][T30842] netlink_rcv_skb+0x192/0x220 [ 1010.380636][T30842] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1010.380800][T30842] xfrm_netlink_rcv+0x48/0x60 [ 1010.380919][T30842] netlink_unicast+0x5c0/0x690 [ 1010.381011][T30842] netlink_sendmsg+0x5c8/0x6f0 [ 1010.381260][T30842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.381365][T30842] ____sys_sendmsg+0x563/0x5b0 [ 1010.381468][T30842] ___sys_sendmsg+0x195/0x1e0 [ 1010.381667][T30842] __x64_sys_sendmsg+0xd4/0x160 [ 1010.381768][T30842] x64_sys_call+0x194c/0x3020 [ 1010.381853][T30842] do_syscall_64+0x12c/0x370 [ 1010.382001][T30842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.382073][T30842] RIP: 0033:0x7fad7cc7c799 [ 1010.382119][T30842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.382147][T30842] RSP: 002b:00007fad7b6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.382179][T30842] RAX: ffffffffffffffda RBX: 00007fad7cef5fa0 RCX: 00007fad7cc7c799 [ 1010.382270][T30842] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 1010.382325][T30842] RBP: 00007fad7b6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.382375][T30842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.382416][T30842] R13: 00007fad7cef6038 R14: 00007fad7cef5fa0 R15: 00007ffe4ecffe08 [ 1010.382479][T30842] [ 1010.655975][T12512] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.666231][T30852] loop3: detected capacity change from 0 to 512 [ 1010.677767][T30854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=30854 comm=syz.4.7283 [ 1010.691132][T30852] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1010.692451][T11938] udevd[11938]: incorrect ext4 checksum on /dev/loop3 [ 1010.711679][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1010.711723][ T28] audit: type=1400 audit(2000000560.107:5521): avc: denied { getopt } for pid=30851 comm="syz.6.7282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1010.715096][T30852] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1010.751008][T11938] udevd[11938]: incorrect ext4 checksum on /dev/loop3 [ 1010.767202][T30856] loop6: detected capacity change from 0 to 512 [ 1010.800373][T30859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1010.820509][T30856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.834302][ T28] audit: type=1326 audit(2000000560.227:5522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1010.860089][T30856] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.871903][ T28] audit: type=1326 audit(2000000560.227:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1010.895554][ T28] audit: type=1326 audit(2000000560.227:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1010.922026][ T28] audit: type=1326 audit(2000000560.227:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1010.947016][ T28] audit: type=1326 audit(2000000560.227:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1010.971004][ T28] audit: type=1326 audit(2000000560.227:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1011.033415][ T28] audit: type=1326 audit(2000000560.227:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1011.090949][ T28] audit: type=1326 audit(2000000560.227:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1011.156220][ T28] audit: type=1326 audit(2000000560.227:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30861 comm="syz.8.7248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1011.365724][T30876] hub 8-0:1.0: USB hub found [ 1011.370566][T30876] hub 8-0:1.0: 8 ports detected [ 1012.890610][T30887] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1012.932580][T30889] loop3: detected capacity change from 0 to 512 [ 1012.975874][T30889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1012.989357][T30891] geneve2: entered promiscuous mode [ 1013.020860][T30889] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.7292: corrupted inode contents [ 1013.040785][T30891] geneve2: entered allmulticast mode [ 1013.050175][T12512] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1013.067040][T30889] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1013.075974][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1013.091644][ C0] EXT4-fs (loop3): initial error at time 2000000562: ext4_do_update_inode:5569: inode 15 [ 1013.101556][ C0] EXT4-fs (loop3): last error at time 2000000562: ext4_do_update_inode:5569: inode 15 [ 1013.112443][T30889] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1013.124700][T30897] loop1: detected capacity change from 0 to 128 [ 1013.124830][T12512] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1013.133330][T30897] EXT4-fs: Mount option(s) incompatible with ext2 [ 1013.156429][T30889] loop3: lost filesystem error report for type 5 error -117 [ 1013.166709][T12512] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1013.217662][T30889] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.7292: corrupted inode contents [ 1013.229724][T12512] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1013.242024][T30889] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1013.275127][T30889] EXT4-fs error (device loop3): ext4_evict_inode:303: inode #15: comm syz.3.7292: mark_inode_dirty error [ 1013.326464][T30902] FAULT_INJECTION: forcing a failure. [ 1013.326464][T30902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.336549][T30889] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1013.339877][T30889] EXT4-fs (loop3): 1 orphan inode deleted [ 1013.365695][T30889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.375190][T30902] CPU: 1 UID: 0 PID: 30902 Comm: syz.4.7296 Tainted: G W syzkaller #0 PREEMPT(full) [ 1013.375388][T30902] Tainted: [W]=WARN [ 1013.375415][T30902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1013.375458][T30902] Call Trace: [ 1013.375479][T30902] [ 1013.375503][T30902] __dump_stack+0x1d/0x30 [ 1013.375587][T30902] dump_stack_lvl+0x95/0xd0 [ 1013.375693][T30902] dump_stack+0x15/0x1b [ 1013.375780][T30902] should_fail_ex+0x263/0x280 [ 1013.375918][T30902] should_fail+0xb/0x20 [ 1013.375992][T30902] should_fail_usercopy+0x1a/0x20 [ 1013.376073][T30902] _copy_from_user+0x1c/0xb0 [ 1013.376165][T30902] tiocswinsz+0x44/0xe0 [ 1013.376307][T30902] tty_ioctl+0x1b1/0xb80 [ 1013.376374][T30902] ? __pfx_tty_ioctl+0x10/0x10 [ 1013.376446][T30902] __se_sys_ioctl+0xce/0x140 [ 1013.376588][T30902] __x64_sys_ioctl+0x43/0x50 [ 1013.376662][T30902] x64_sys_call+0x1563/0x3020 [ 1013.376703][T30902] do_syscall_64+0x12c/0x370 [ 1013.376767][T30902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.376851][T30902] RIP: 0033:0x7f349b22c799 [ 1013.376904][T30902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.377039][T30902] RSP: 002b:00007f3499c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.377118][T30902] RAX: ffffffffffffffda RBX: 00007f349b4a6090 RCX: 00007f349b22c799 [ 1013.377168][T30902] RDX: 0000200000000240 RSI: 0000000000005414 RDI: 0000000000000003 [ 1013.377204][T30902] RBP: 00007f3499c66090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.377239][T30902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.377280][T30902] R13: 00007f349b4a6128 R14: 00007f349b4a6090 R15: 00007fffd7ab5968 [ 1013.377344][T30902] [ 1014.104746][T30914] loop4: detected capacity change from 0 to 512 [ 1014.125578][T30914] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1014.161805][T30914] EXT4-fs (loop4): inodes count not valid: 63 vs 32 [ 1014.172521][T30918] netlink: 'syz.8.7303': attribute type 39 has an invalid length. [ 1014.238917][T30920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7304'. [ 1014.273739][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.294598][T30923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7304'. [ 1014.523031][T30932] loop4: detected capacity change from 0 to 512 [ 1014.569890][T30932] msdos: Unknown parameter 'smackfsfloor' [ 1014.681559][T30933] loop3: detected capacity change from 0 to 764 [ 1014.695392][T30933] iso9660: Unknown parameter 'iocharsturkish' [ 1015.617936][T30960] loop3: detected capacity change from 0 to 2048 [ 1015.626172][T30960] EXT4-fs: Ignoring removed oldalloc option [ 1015.632142][T30960] EXT4-fs: Ignoring removed oldalloc option [ 1015.649544][T30960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.661944][T30960] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.316659][T30969] loop8: detected capacity change from 0 to 764 [ 1016.472094][T30969] rock: directory entry would overflow storage [ 1016.512566][T30969] rock: sig=0x4f50, size=4, remaining=3 [ 1016.690958][T30969] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1016.758391][T30975] Symlink component flag not implemented [ 1016.782509][T30975] Symlink component flag not implemented (129) [ 1016.815940][T30969] rock: directory entry would overflow storage [ 1016.858859][T30969] rock: sig=0x4f50, size=4, remaining=3 [ 1016.864979][T30969] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1017.310637][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7324'. [ 1017.354961][T30989] hub 8-0:1.0: USB hub found [ 1017.360487][T30989] hub 8-0:1.0: 8 ports detected [ 1017.366291][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.383903][T30989] netlink: 'syz.4.7324': attribute type 10 has an invalid length. [ 1017.401130][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.419755][T30992] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1017.834730][T31003] loop6: detected capacity change from 0 to 512 [ 1017.865058][T31003] EXT4-fs (loop6): 1 orphan inode deleted [ 1018.116722][T31003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.378613][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.443667][T31021] loop8: detected capacity change from 0 to 128 [ 1018.501796][T31023] loop4: detected capacity change from 0 to 764 [ 1018.524621][T31023] /dev/loop4: Can't open blockdev [ 1018.690724][T31036] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1018.708956][T31036] loop6: detected capacity change from 0 to 512 [ 1018.738254][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7343'. [ 1018.743006][T31023] loop4: detected capacity change from 0 to 512 [ 1018.782412][T31023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1018.815129][T31023] EXT4-fs (loop4): 1 truncate cleaned up [ 1018.844313][T31023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.884470][T31046] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1018.924425][T31046] hub 8-0:1.0: USB hub found [ 1018.929416][T31046] hub 8-0:1.0: 8 ports detected [ 1018.943059][T31046] netlink: 'syz.1.7345': attribute type 10 has an invalid length. [ 1019.127041][T31052] netem: change failed [ 1019.468638][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.707927][T31021] loop8: detected capacity change from 0 to 1024 [ 1019.789677][T31021] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 1019.815118][T31073] loop4: detected capacity change from 0 to 1024 [ 1019.853369][T31073] EXT4-fs: Ignoring removed oldalloc option [ 1019.905284][T31073] EXT4-fs: Ignoring removed bh option [ 1019.925209][T31075] loop1: detected capacity change from 0 to 1024 [ 1019.942914][T31073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1019.966455][T31075] EXT4-fs: Ignoring removed oldalloc option [ 1020.007450][T31075] EXT4-fs: Ignoring removed bh option [ 1020.067804][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.080651][T31075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1020.125398][T31021] loop8: detected capacity change from 0 to 128 [ 1020.148904][T31085] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7358'. [ 1020.338464][T31021] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1020.376609][T25137] kernel read not supported for file 679/task/680/cgroup (pid: 25137 comm: kworker/0:7) [ 1020.425677][T31021] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.469368][T31099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1020.476031][T31099] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1020.509664][T31099] vhci_hcd vhci_hcd.0: Device attached [ 1020.533731][T31100] vhci_hcd: connection closed [ 1020.533935][T12532] vhci_hcd vhci_hcd.4: stop threads [ 1020.564405][T12532] vhci_hcd vhci_hcd.4: release socket [ 1020.571546][T12532] vhci_hcd vhci_hcd.4: disconnect device [ 1020.600276][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.662369][T31109] SELinux: failed to load policy [ 1020.791361][T30661] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1020.849395][T31130] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1020.872535][T31131] EXT4-fs: Mount option(s) incompatible with ext2 [ 1020.906771][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7374'. [ 1020.971166][T31138] netlink: 'syz.1.7376': attribute type 10 has an invalid length. [ 1021.002695][T31138] team0 (unregistering): Port device team_slave_0 removed [ 1021.013353][T31138] team0 (unregistering): Port device team_slave_1 removed [ 1021.028956][T31138] team0 (unregistering): Port device macvlan1 removed [ 1021.053653][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1021.081816][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7378'. [ 1021.654455][T31161] set_capacity_and_notify: 3 callbacks suppressed [ 1021.654475][T31161] loop1: detected capacity change from 0 to 1024 [ 1021.707181][T31158] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7382'. [ 1021.720009][T31161] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1021.741060][T31158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7382'. [ 1021.751369][T31161] JBD2: no valid journal superblock found [ 1021.764398][T31161] EXT4-fs (loop1): Could not load journal inode [ 1021.906116][T31173] netlink: 276 bytes leftover after parsing attributes in process `syz.8.7386'. [ 1022.047401][T31179] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7389'. [ 1022.085045][T31179] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7389'. [ 1022.350924][T31187] loop8: detected capacity change from 0 to 128 [ 1022.376745][T31187] EXT4-fs: Mount option(s) incompatible with ext2 [ 1022.564982][T31188] loop1: detected capacity change from 0 to 764 [ 1022.579198][T31188] iso9660: Unknown parameter 'iocharsturkish' [ 1023.377158][T31200] loop1: detected capacity change from 0 to 512 [ 1023.427032][T31200] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1023.445097][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1023.445116][ T28] audit: type=1400 audit(2000000572.837:5536): avc: denied { execheap } for pid=31196 comm="syz.6.7395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1023.477247][T31206] loop4: detected capacity change from 0 to 1024 [ 1023.504293][T31200] EXT4-fs (loop1): too many log groups per flexible block group [ 1023.513589][T31206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.531361][T31200] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1023.540112][T31200] EXT4-fs (loop1): mount failed [ 1023.599243][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7398'. [ 1023.643763][T31214] FAULT_INJECTION: forcing a failure. [ 1023.643763][T31214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.706058][T31214] CPU: 0 UID: 0 PID: 31214 Comm: syz.1.7398 Tainted: G W syzkaller #0 PREEMPT(full) [ 1023.706100][T31214] Tainted: [W]=WARN [ 1023.706109][T31214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1023.706126][T31214] Call Trace: [ 1023.706135][T31214] [ 1023.706145][T31214] __dump_stack+0x1d/0x30 [ 1023.706178][T31214] dump_stack_lvl+0x95/0xd0 [ 1023.706278][T31214] dump_stack+0x15/0x1b [ 1023.706301][T31214] should_fail_ex+0x263/0x280 [ 1023.706325][T31214] should_fail+0xb/0x20 [ 1023.706344][T31214] should_fail_usercopy+0x1a/0x20 [ 1023.706397][T31214] _copy_to_user+0x20/0xa0 [ 1023.706434][T31214] simple_read_from_buffer+0xb5/0x130 [ 1023.706470][T31214] proc_fail_nth_read+0x10e/0x150 [ 1023.706502][T31214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1023.706539][T31214] vfs_read+0x1ab/0x7f0 [ 1023.706590][T31214] ? __rcu_read_unlock+0x4e/0x70 [ 1023.706618][T31214] ? __fget_files+0x184/0x1c0 [ 1023.706650][T31214] ? mutex_lock+0x57/0x90 [ 1023.706690][T31214] ksys_read+0xdc/0x1a0 [ 1023.706751][T31214] __x64_sys_read+0x40/0x50 [ 1023.706834][T31214] x64_sys_call+0x2886/0x3020 [ 1023.706870][T31214] do_syscall_64+0x12c/0x370 [ 1023.706936][T31214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.707033][T31214] RIP: 0033:0x7f5f93a9cfce [ 1023.707051][T31214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1023.707071][T31214] RSP: 002b:00007f5f9252efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1023.707152][T31214] RAX: ffffffffffffffda RBX: 00007f5f9252f6c0 RCX: 00007f5f93a9cfce [ 1023.707174][T31214] RDX: 000000000000000f RSI: 00007f5f9252f0a0 RDI: 0000000000000004 [ 1023.707191][T31214] RBP: 00007f5f9252f090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.707208][T31214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.707278][T31214] R13: 00007f5f93d56038 R14: 00007f5f93d55fa0 R15: 00007fff35a830b8 [ 1023.707303][T31214] [ 1024.181984][T31228] loop8: detected capacity change from 0 to 512 [ 1024.223547][T31228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.259635][T31230] loop6: detected capacity change from 0 to 512 [ 1024.266987][T31228] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.297664][T31230] EXT4-fs: Ignoring removed bh option [ 1024.303262][T31230] EXT4-fs: Ignoring removed mblk_io_submit option [ 1024.376480][T31230] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1024.404507][T30661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.418427][T31230] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1024.434998][T31236] loop1: detected capacity change from 0 to 128 [ 1024.443281][T31230] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1024.467321][T31236] EXT4-fs: Mount option(s) incompatible with ext2 [ 1024.484606][T31230] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 1024.618143][ T28] audit: type=1400 audit(2000000574.017:5537): avc: denied { map } for pid=31238 comm="syz.8.7408" path="socket:[104222]" dev="sockfs" ino=104222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1024.629332][T31230] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 1024.651510][T31230] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7405: Failed to acquire dquot type 1 [ 1024.662944][T31230] loop6: lost filesystem error report for type 5 error -5 [ 1024.665981][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1024.679793][ C1] EXT4-fs (loop6): last error at time 2000000574: ext4_acquire_dquot:7001 [ 1024.688669][T31230] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7405: Invalid block bitmap block 0 in block_group 0 [ 1024.703574][T31230] loop6: lost filesystem error report for type 5 error -117 [ 1024.703787][T31230] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7405: Invalid block bitmap block 0 in block_group 0 [ 1024.726449][T31230] loop6: lost filesystem error report for type 5 error -117 [ 1024.726679][T31230] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7405: Invalid block bitmap block 0 in block_group 0 [ 1024.749090][T31230] loop6: lost filesystem error report for type 5 error -117 [ 1024.754840][T31230] Quota error (device loop6): write_blk: dquota write failed [ 1024.769795][T31230] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1024.780221][T31230] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7405: Failed to acquire dquot type 1 [ 1024.791676][T31230] loop6: lost filesystem error report for type 5 error -28 [ 1024.792014][T31230] Quota error (device loop6): write_blk: dquota write failed [ 1024.808263][T31230] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1024.818572][T31230] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.7405: Failed to acquire dquot type 1 [ 1024.830056][T31230] loop6: lost filesystem error report for type 5 error -28 [ 1024.830352][T31230] EXT4-fs (loop6): 1 orphan inode deleted [ 1024.878191][T31230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1025.015469][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.766407][T31248] loop8: detected capacity change from 0 to 2048 [ 1025.868320][ T3000] loop8: p1 p2 p3 [ 1025.894389][ T3000] loop8: p2 size 458752 extends beyond EOD, truncated [ 1025.924875][ T3000] loop8: p3 start 3036741376 is beyond EOD, truncated [ 1025.955619][T31248] loop8: p1 p2 p3 [ 1025.963845][T31248] loop8: p2 size 458752 extends beyond EOD, truncated [ 1025.999860][T31248] loop8: p3 start 3036741376 is beyond EOD, truncated [ 1026.114550][T11938] udevd[11938]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1026.125331][ T9858] udevd[9858]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1026.186681][ T9858] udevd[9858]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1026.198768][T11938] udevd[11938]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1026.212041][T31257] loop6: detected capacity change from 0 to 764 [ 1026.234910][ T9858] udevd[9858]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1026.245995][T11938] udevd[11938]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1026.336481][T31257] rock: directory entry would overflow storage [ 1026.350456][T31270] __nla_validate_parse: 1 callbacks suppressed [ 1026.350476][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7418'. [ 1026.375888][T31257] rock: sig=0x4f50, size=4, remaining=3 [ 1026.382290][T31257] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1026.387129][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7418'. [ 1026.448739][T31273] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1026.455327][T31273] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1026.496031][T31273] vhci_hcd vhci_hcd.0: Device attached [ 1026.508953][T31274] vhci_hcd: connection closed [ 1026.509239][T12965] vhci_hcd vhci_hcd.8: stop threads [ 1026.527168][T12965] vhci_hcd vhci_hcd.8: release socket [ 1026.535063][T31257] Symlink component flag not implemented [ 1026.542619][T31257] Symlink component flag not implemented (129) [ 1026.543635][T12965] vhci_hcd vhci_hcd.8: disconnect device [ 1026.563786][T31257] rock: directory entry would overflow storage [ 1026.571366][T31257] rock: sig=0x4f50, size=4, remaining=3 [ 1026.577907][T31257] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1026.948168][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.989350][T31289] loop4: detected capacity change from 0 to 128 [ 1027.003445][T31287] loop1: detected capacity change from 0 to 512 [ 1027.010419][T31289] EXT4-fs: Mount option(s) incompatible with ext2 [ 1027.025860][T31287] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1027.703292][T31305] loop6: detected capacity change from 0 to 128 [ 1027.706431][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7430'. [ 1027.715567][T31305] EXT4-fs: Mount option(s) incompatible with ext2 [ 1027.722809][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7430'. [ 1027.736769][T31305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1028.480473][T31343] loop4: detected capacity change from 0 to 512 [ 1028.490236][T31343] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1028.499957][T31343] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 35)! [ 1028.510231][T31343] EXT4-fs (loop4): group descriptors corrupted! [ 1028.943658][ T28] audit: type=1400 audit(2000000578.337:5538): avc: denied { lock } for pid=31344 comm="syz.4.7444" path="socket:[105494]" dev="sockfs" ino=105494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1029.067853][T31352] loop3: detected capacity change from 0 to 128 [ 1029.105205][T31352] EXT4-fs: Mount option(s) incompatible with ext2 [ 1029.250997][T31358] loop4: detected capacity change from 0 to 512 [ 1029.278736][T31358] EXT4-fs (loop4): 1 orphan inode deleted [ 1029.284989][T31358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.367017][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.642698][T31376] loop8: detected capacity change from 0 to 512 [ 1029.659653][T31376] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7455: invalid indirect mapped block 256 (level 2) [ 1029.855987][T31376] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1029.857946][T31376] EXT4-fs (loop8): 2 truncates cleaned up [ 1029.867186][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1029.867204][ C1] EXT4-fs (loop8): initial error at time 2000000579: ext4_free_branches:1023: inode 11 [ 1029.867247][ C1] EXT4-fs (loop8): last error at time 2000000579: ext4_free_branches:1023: inode 11 [ 1029.906872][T31381] loop1: detected capacity change from 0 to 512 [ 1030.059102][T31381] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 1030.135521][T31381] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1030.170677][T31376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.196969][T31381] EXT4-fs (loop1): mount failed [ 1030.204740][T31376] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.7455: bg 0: block 5: invalid block bitmap [ 1030.248147][T31376] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 1030.270398][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7455'. [ 1030.279910][T31376] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1030.279910][T31376] [ 1030.297073][T31392] bond0: Unable to set down delay as MII monitoring is disabled [ 1030.312076][T31376] EXT4-fs (loop8): Total free blocks count 0 [ 1030.322331][T31376] EXT4-fs (loop8): Free/Dirty block details [ 1030.334559][T31376] EXT4-fs (loop8): free_blocks=0 [ 1030.346256][T31397] loop3: detected capacity change from 0 to 128 [ 1030.366011][T31376] EXT4-fs (loop8): dirty_blocks=5 [ 1030.371103][T31376] EXT4-fs (loop8): Block reservation details [ 1030.384873][T31376] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 1030.408156][T31397] EXT4-fs: Mount option(s) incompatible with ext2 [ 1030.419576][T31376] vlan2: entered allmulticast mode [ 1030.424952][T31376] veth0_to_bond: entered allmulticast mode [ 1030.438701][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7463'. [ 1030.507454][T31404] loop4: detected capacity change from 0 to 1764 [ 1030.555723][T30661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.678974][T31418] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1030.688641][T31418] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1030.700436][T31418] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1030.759631][T31422] netlink: 277 bytes leftover after parsing attributes in process `syz.8.7466'. [ 1030.803285][T31422] hub 8-0:1.0: USB hub found [ 1030.808315][T31422] hub 8-0:1.0: 8 ports detected [ 1030.821954][T31422] netlink: 'syz.8.7466': attribute type 10 has an invalid length. [ 1030.838946][T31418] System zones: 0-2, 18-18, 34-35 [ 1030.867859][T31418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1030.915720][T31418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.164785][T31422] macvlan1: entered allmulticast mode [ 1031.175590][T31422] veth1_vlan: entered allmulticast mode [ 1031.187132][T31422] team0: Port device macvlan1 added [ 1031.225546][T31424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.273841][T31424] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.757789][T31439] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7471'. [ 1031.779697][T31438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7472'. [ 1032.481412][T21681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.732843][T31457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7478'. [ 1032.781322][T31457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7478'. [ 1032.819716][T31465] set_capacity_and_notify: 3 callbacks suppressed [ 1032.819743][T31465] loop1: detected capacity change from 0 to 512 [ 1032.881263][T31465] EXT4-fs: Ignoring removed bh option [ 1032.891581][T31465] EXT4-fs: inline encryption not supported [ 1032.910246][T31471] loop8: detected capacity change from 0 to 1024 [ 1032.917374][T31465] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1032.935074][T31475] loop4: detected capacity change from 0 to 1024 [ 1032.957281][T31471] EXT4-fs: inline encryption not supported [ 1032.969049][T31477] 9p: Bad value for 'rfdno' [ 1032.977033][T31475] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (4318!=35945) [ 1033.000175][T31465] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1033.015694][T31471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1033.032407][T31475] EXT4-fs (loop4): group descriptors corrupted! [ 1033.040410][T31465] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7481: bg 0: block 248: padding at end of block bitmap is not set [ 1033.055231][T31465] loop1: lost filesystem error report for type 5 error -117 [ 1033.056294][T31471] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 1033.065990][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1033.078712][ C0] EXT4-fs (loop1): last error at time 2000000582: ext4_validate_block_bitmap:441 [ 1033.082759][T31465] Quota error (device loop1): write_blk: dquota write failed [ 1033.105602][T31465] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1033.118477][T31465] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.7481: Failed to acquire dquot type 1 [ 1033.130092][T31465] loop1: lost filesystem error report for type 5 error -117 [ 1033.130898][T31465] EXT4-fs (loop1): 1 truncate cleaned up [ 1033.144694][T31465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1033.207796][T31461] vlan2: entered promiscuous mode [ 1033.227813][T31492] loop8: detected capacity change from 0 to 128 [ 1033.256955][T31492] EXT4-fs: Mount option(s) incompatible with ext2 [ 1033.294968][T31494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7487'. [ 1033.353688][T31490] FAULT_INJECTION: forcing a failure. [ 1033.353688][T31490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.397102][T31494] hub 8-0:1.0: USB hub found [ 1033.402042][T31494] hub 8-0:1.0: 8 ports detected [ 1033.421334][T31494] netlink: 'syz.4.7487': attribute type 10 has an invalid length. [ 1033.473002][T31490] CPU: 1 UID: 0 PID: 31490 Comm: syz.6.7489 Tainted: G W syzkaller #0 PREEMPT(full) [ 1033.473045][T31490] Tainted: [W]=WARN [ 1033.473052][T31490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1033.473065][T31490] Call Trace: [ 1033.473072][T31490] [ 1033.473081][T31490] __dump_stack+0x1d/0x30 [ 1033.473109][T31490] dump_stack_lvl+0x95/0xd0 [ 1033.473241][T31490] dump_stack+0x15/0x1b [ 1033.473270][T31490] should_fail_ex+0x263/0x280 [ 1033.473302][T31490] should_fail+0xb/0x20 [ 1033.473329][T31490] should_fail_usercopy+0x1a/0x20 [ 1033.473388][T31490] _copy_from_user+0x1c/0xb0 [ 1033.473421][T31490] ___sys_sendmsg+0xc1/0x1e0 [ 1033.473515][T31490] __sys_sendmmsg+0x185/0x320 [ 1033.473561][T31490] __x64_sys_sendmmsg+0x57/0x70 [ 1033.473599][T31490] x64_sys_call+0x27aa/0x3020 [ 1033.473637][T31490] do_syscall_64+0x12c/0x370 [ 1033.473716][T31490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.473814][T31490] RIP: 0033:0x7fe03899c799 [ 1033.473881][T31490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.473902][T31490] RSP: 002b:00007fe0373ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1033.473926][T31490] RAX: ffffffffffffffda RBX: 00007fe038c15fa0 RCX: 00007fe03899c799 [ 1033.473940][T31490] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000004 [ 1033.474003][T31490] RBP: 00007fe0373ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.474049][T31490] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001 [ 1033.474061][T31490] R13: 00007fe038c16038 R14: 00007fe038c15fa0 R15: 00007ffdcd044f68 [ 1033.474080][T31490] [ 1033.689702][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1035.161756][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1035.211465][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1035.232992][T31514] loop6: detected capacity change from 0 to 764 [ 1035.304202][T31514] rock: directory entry would overflow storage [ 1035.327358][T31514] rock: sig=0x4f50, size=4, remaining=3 [ 1035.333618][T31514] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1035.374043][T31519] Symlink component flag not implemented [ 1035.503483][T31519] Symlink component flag not implemented (129) [ 1035.518958][T31519] rock: directory entry would overflow storage [ 1035.533524][T31519] rock: sig=0x4f50, size=4, remaining=3 [ 1035.539380][T31519] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1035.643568][T31525] loop8: detected capacity change from 0 to 1024 [ 1035.673866][T31525] EXT4-fs: Ignoring removed oldalloc option [ 1035.686651][T31525] EXT4-fs: Ignoring removed bh option [ 1035.706445][T31529] FAULT_INJECTION: forcing a failure. [ 1035.706445][T31529] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.722093][T31526] loop4: detected capacity change from 0 to 1024 [ 1035.743340][T31526] EXT4-fs: Ignoring removed bh option [ 1035.754347][T31525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.759068][T31529] CPU: 0 UID: 0 PID: 31529 Comm: syz.6.7501 Tainted: G W syzkaller #0 PREEMPT(full) [ 1035.759173][T31529] Tainted: [W]=WARN [ 1035.759195][T31529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1035.759236][T31529] Call Trace: [ 1035.759258][T31529] [ 1035.759280][T31529] __dump_stack+0x1d/0x30 [ 1035.759387][T31529] dump_stack_lvl+0x95/0xd0 [ 1035.759461][T31529] dump_stack+0x15/0x1b [ 1035.759536][T31529] should_fail_ex+0x263/0x280 [ 1035.759682][T31529] should_failslab+0x8c/0xb0 [ 1035.759808][T31529] kmem_cache_alloc_noprof+0x66/0x400 [ 1035.759900][T31529] ? security_inode_alloc+0x37/0x100 [ 1035.759985][T31529] security_inode_alloc+0x37/0x100 [ 1035.760077][T31529] inode_init_always_gfp+0x4b7/0x500 [ 1035.760252][T31529] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1035.760400][T31529] alloc_inode+0x58/0x170 [ 1035.760526][T31529] new_inode+0x1d/0xe0 [ 1035.760699][T31529] __debugfs_create_file+0x97/0x2b0 [ 1035.760785][T31529] debugfs_create_file_full+0x3f/0x60 [ 1035.760871][T31529] ? __pfx_hsr_dev_setup+0x10/0x10 [ 1035.760999][T31529] ref_tracker_dir_debugfs+0x10e/0x220 [ 1035.761112][T31529] alloc_netdev_mqs+0x1a7/0xa40 [ 1035.761211][T31529] rtnl_create_link+0x239/0x720 [ 1035.761334][T31529] rtnl_newlink_create+0x174/0x650 [ 1035.761451][T31529] ? security_capable+0x7b/0x90 [ 1035.761558][T31529] ? netlink_ns_capable+0x86/0xa0 [ 1035.761656][T31529] rtnl_newlink+0x10a0/0x1330 [ 1035.761871][T31529] ? __rcu_read_unlock+0x4e/0x70 [ 1035.761935][T31529] ? xa_load+0xb1/0xe0 [ 1035.761997][T31529] ? __rcu_read_unlock+0x4e/0x70 [ 1035.762125][T31529] ? avc_has_perm_noaudit+0xab/0x130 [ 1035.762218][T31529] ? cred_has_capability+0x224/0x2a0 [ 1035.762295][T31529] ? selinux_capable+0x31/0x40 [ 1035.762382][T31529] ? security_capable+0x7b/0x90 [ 1035.762520][T31529] ? ns_capable+0x7c/0xb0 [ 1035.762575][T31529] ? __pfx_rtnl_newlink+0x10/0x10 [ 1035.762719][T31529] rtnetlink_rcv_msg+0x64b/0x720 [ 1035.762815][T31529] ? avc_has_perm_noaudit+0xab/0x130 [ 1035.762965][T31529] netlink_rcv_skb+0x123/0x220 [ 1035.763154][T31529] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1035.763285][T31529] rtnetlink_rcv+0x1c/0x30 [ 1035.763424][T31529] netlink_unicast+0x5c0/0x690 [ 1035.763503][T31529] netlink_sendmsg+0x5c8/0x6f0 [ 1035.763611][T31529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.763762][T31529] ____sys_sendmsg+0x563/0x5b0 [ 1035.763897][T31529] ___sys_sendmsg+0x195/0x1e0 [ 1035.764030][T31529] __x64_sys_sendmsg+0xd4/0x160 [ 1035.764128][T31529] x64_sys_call+0x194c/0x3020 [ 1035.764290][T31529] do_syscall_64+0x12c/0x370 [ 1035.764400][T31529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.764461][T31529] RIP: 0033:0x7fe03899c799 [ 1035.764534][T31529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.764664][T31529] RSP: 002b:00007fe0373ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.764721][T31529] RAX: ffffffffffffffda RBX: 00007fe038c15fa0 RCX: 00007fe03899c799 [ 1035.764770][T31529] RDX: 00000000000080c0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1035.764812][T31529] RBP: 00007fe0373ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.764866][T31529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.764907][T31529] R13: 00007fe038c16038 R14: 00007fe038c15fa0 R15: 00007ffdcd044f68 [ 1035.764969][T31529] [ 1035.765002][T31529] debugfs: out of free dentries, can not create file 'netdev@ffff88815b04b560' [ 1035.793540][T31526] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 1035.841262][T31529] macvlan0: entered promiscuous mode [ 1035.927501][T31525] FAULT_INJECTION: forcing a failure. [ 1035.927501][T31525] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.114657][T31529] hsr2: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 1036.170738][T31529] hsr2: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 1036.215505][T31529] hsr2: entered promiscuous mode [ 1036.228690][T31529] hsr2: entered allmulticast mode [ 1036.240092][T31529] macvlan0: entered allmulticast mode [ 1036.247083][T31525] CPU: 1 UID: 0 PID: 31525 Comm: syz.8.7499 Tainted: G W syzkaller #0 PREEMPT(full) [ 1036.247122][T31525] Tainted: [W]=WARN [ 1036.247130][T31525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1036.247148][T31525] Call Trace: [ 1036.247157][T31525] [ 1036.247166][T31525] __dump_stack+0x1d/0x30 [ 1036.247273][T31525] dump_stack_lvl+0x95/0xd0 [ 1036.247297][T31525] dump_stack+0x15/0x1b [ 1036.247369][T31525] should_fail_ex+0x263/0x280 [ 1036.247476][T31525] should_failslab+0x8c/0xb0 [ 1036.247503][T31525] kmem_cache_alloc_noprof+0x66/0x400 [ 1036.247533][T31525] ? ext4_mb_new_blocks+0x2f0/0x1f50 [ 1036.247639][T31525] ext4_mb_new_blocks+0x2f0/0x1f50 [ 1036.247737][T31525] ? count_rsvd+0x74/0x360 [ 1036.247781][T31525] ext4_new_meta_blocks+0x102/0x1f0 [ 1036.247813][T31525] ext4_ext_insert_extent+0x9ee/0x29b0 [ 1036.247854][T31525] ? ext4_ext_search_right+0x286/0x4f0 [ 1036.247890][T31525] ? get_implied_cluster_alloc+0x366/0x520 [ 1036.247977][T31525] ext4_ext_map_blocks+0xf22/0x2fb0 [ 1036.248008][T31525] ? folio_mark_accessed+0x240/0x3a0 [ 1036.248047][T31525] ? percpu_counter_add_batch+0xb6/0x130 [ 1036.248119][T31525] ? ext4_fc_track_inode+0x9f/0x5f0 [ 1036.248209][T31525] ext4_map_create_blocks+0xce/0x3a0 [ 1036.248300][T31525] ext4_map_blocks+0x594/0x970 [ 1036.248416][T31525] _ext4_get_block+0x117/0x370 [ 1036.248516][T31525] ext4_get_block_unwritten+0x2a/0xb0 [ 1036.248598][T31525] ext4_block_write_begin+0x650/0xcf0 [ 1036.248756][T31525] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 1036.248788][T31525] ? folio_mapping+0xb9/0xe0 [ 1036.248817][T31525] ext4_write_begin+0x636/0xea0 [ 1036.248871][T31525] ext4_da_write_begin+0x1f0/0x6c0 [ 1036.248906][T31525] ? inode_to_bdi+0x47/0xa0 [ 1036.248930][T31525] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 1036.248988][T31525] generic_perform_write+0x183/0x490 [ 1036.249022][T31525] ? __mark_inode_dirty+0x200/0x7d0 [ 1036.249065][T31525] ext4_buffered_write_iter+0x1ee/0x3c0 [ 1036.249171][T31525] ? ext4_file_write_iter+0x100/0xfa0 [ 1036.249196][T31525] ext4_file_write_iter+0x380/0xfa0 [ 1036.249218][T31525] ? kstrtouint+0x76/0xc0 [ 1036.249256][T31525] ? selinux_file_permission+0x1f2/0x690 [ 1036.249284][T31525] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1036.249308][T31525] vfs_write+0x5a6/0x9f0 [ 1036.249353][T31525] ksys_write+0xdc/0x1a0 [ 1036.249449][T31525] __x64_sys_write+0x40/0x50 [ 1036.249480][T31525] x64_sys_call+0x27e1/0x3020 [ 1036.249513][T31525] do_syscall_64+0x12c/0x370 [ 1036.249599][T31525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.249633][T31525] RIP: 0033:0x7f3ddaa1c799 [ 1036.249648][T31525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.249695][T31525] RSP: 002b:00007f3dd946f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1036.249721][T31525] RAX: ffffffffffffffda RBX: 00007f3ddac95fa0 RCX: 00007f3ddaa1c799 [ 1036.249738][T31525] RDX: 0000000000000506 RSI: 0000200000000580 RDI: 0000000000000005 [ 1036.249752][T31525] RBP: 00007f3dd946f090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.249764][T31525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.249831][T31525] R13: 00007f3ddac96038 R14: 00007f3ddac95fa0 R15: 00007ffe8294f268 [ 1036.249903][T31525] [ 1036.677327][T31542] loop6: detected capacity change from 0 to 128 [ 1036.700235][T31542] EXT4-fs: Mount option(s) incompatible with ext2 [ 1036.740764][T30661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.883772][T31556] loop1: detected capacity change from 0 to 512 [ 1036.944537][T31558] netlink: 277 bytes leftover after parsing attributes in process `syz.8.7506'. [ 1036.985880][T31558] hub 8-0:1.0: USB hub found [ 1036.990835][T31558] hub 8-0:1.0: 8 ports detected [ 1037.003659][T31558] netlink: 'syz.8.7506': attribute type 10 has an invalid length. [ 1037.012555][T31558] veth1_vlan: left allmulticast mode [ 1037.449429][T31556] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1037.462550][T31556] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 34)! [ 1037.483907][T31556] EXT4-fs (loop1): group descriptors corrupted! [ 1037.637644][T31566] veth1: entered promiscuous mode [ 1037.676583][T31567] loop4: detected capacity change from 0 to 128 [ 1037.683454][T31567] vfat: Unknown parameter '01777777777777777777777ÿ0xffffffffffffffff00000000000000000000000' [ 1039.724430][T31602] loop6: detected capacity change from 0 to 128 [ 1039.744398][T31602] EXT4-fs: Mount option(s) incompatible with ext2 [ 1040.079641][T31604] 9p: Bad value for 'rfdno' [ 1040.174785][T31609] loop4: detected capacity change from 0 to 764 [ 1040.395262][T31624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7532'. [ 1040.406196][T31609] rock: directory entry would overflow storage [ 1040.429241][T31609] rock: sig=0x4f50, size=4, remaining=3 [ 1040.450349][T31609] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1040.965572][T31635] loop1: detected capacity change from 0 to 512 [ 1040.977862][T31625] Symlink component flag not implemented [ 1041.000392][T31625] Symlink component flag not implemented (129) [ 1041.033830][T31628] rock: directory entry would overflow storage [ 1041.067552][T31628] rock: sig=0x4f50, size=4, remaining=3 [ 1041.136287][T31635] EXT4-fs (loop1): 1 orphan inode deleted [ 1041.183586][T31628] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1041.195560][T31635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.234608][T31641] syzkaller0: entered promiscuous mode [ 1041.266316][T31641] syzkaller0: entered allmulticast mode [ 1041.322196][T31642] loop3: detected capacity change from 0 to 2048 [ 1041.367177][T31642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.381698][T31642] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.395274][T31640] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.7535: path /371/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 1041.437071][T31640] EXT4-fs (loop3): Remounting filesystem read-only [ 1041.491848][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.599828][T31659] loop6: detected capacity change from 0 to 512 [ 1041.636351][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.683797][T31659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.724815][T31670] batadv_slave_1: entered promiscuous mode [ 1041.731303][T31659] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.790799][T12520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1041.828812][T31663] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7542'. [ 1041.852027][T31651] chnl_net:caif_netlink_parms(): no params data found [ 1041.866826][T31659] EXT4-fs (loop6): shut down requested (1) [ 1041.875470][T12520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1041.889521][T31659] FAULT_INJECTION: forcing a failure. [ 1041.889521][T31659] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.906834][T31659] CPU: 1 UID: 0 PID: 31659 Comm: syz.6.7541 Tainted: G W syzkaller #0 PREEMPT(full) [ 1041.906900][T31659] Tainted: [W]=WARN [ 1041.906909][T31659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1041.906925][T31659] Call Trace: [ 1041.906933][T31659] [ 1041.906943][T31659] __dump_stack+0x1d/0x30 [ 1041.906974][T31659] dump_stack_lvl+0x95/0xd0 [ 1041.907034][T31659] dump_stack+0x15/0x1b [ 1041.907064][T31659] should_fail_ex+0x263/0x280 [ 1041.907094][T31659] should_failslab+0x8c/0xb0 [ 1041.907122][T31659] __kmalloc_noprof+0xb8/0x4e0 [ 1041.907146][T31659] ? alloc_pipe_info+0x1c8/0x340 [ 1041.907211][T31659] alloc_pipe_info+0x1c8/0x340 [ 1041.907245][T31659] splice_direct_to_actor+0x591/0x670 [ 1041.907343][T31659] ? kstrtouint_from_user+0xa8/0xf0 [ 1041.907373][T31659] ? __pfx_direct_splice_actor+0x10/0x10 [ 1041.907403][T31659] ? avc_policy_seqno+0x15/0x30 [ 1041.907436][T31659] ? selinux_file_permission+0x1f2/0x690 [ 1041.907537][T31659] do_splice_direct+0x119/0x1a0 [ 1041.907563][T31659] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1041.907678][T31659] do_sendfile+0x382/0x650 [ 1041.907727][T31659] __x64_sys_sendfile64+0x105/0x150 [ 1041.907761][T31659] x64_sys_call+0x2dc4/0x3020 [ 1041.907797][T31659] do_syscall_64+0x12c/0x370 [ 1041.907884][T31659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.907908][T31659] RIP: 0033:0x7fe03899c799 [ 1041.907928][T31659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.907978][T31659] RSP: 002b:00007fe0373ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1041.908003][T31659] RAX: ffffffffffffffda RBX: 00007fe038c15fa0 RCX: 00007fe03899c799 [ 1041.908093][T31659] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1041.908109][T31659] RBP: 00007fe0373ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.908178][T31659] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 1041.908196][T31659] R13: 00007fe038c16038 R14: 00007fe038c15fa0 R15: 00007ffdcd044f68 [ 1041.908223][T31659] [ 1041.912511][T31678] loop3: detected capacity change from 0 to 512 [ 1042.155423][T31678] EXT4-fs: Ignoring removed bh option [ 1042.161862][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.170982][T31678] EXT4-fs: inline encryption not supported [ 1042.180469][T31653] batadv_slave_1: left promiscuous mode [ 1042.194628][T12520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1042.211866][T31678] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1042.232541][T31678] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1042.253772][T31651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.261458][T31651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.269394][T31651] bridge_slave_0: entered allmulticast mode [ 1042.277288][T31678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7544: bg 0: block 248: padding at end of block bitmap is not set [ 1042.292277][T31678] loop3: lost filesystem error report for type 5 error -117 [ 1042.292598][T31678] Quota error (device loop3): write_blk: dquota write failed [ 1042.297033][T31651] bridge_slave_0: entered promiscuous mode [ 1042.299994][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1042.319596][ C1] EXT4-fs (loop3): last error at time 2000000591: ext4_validate_block_bitmap:441 [ 1042.329523][T31678] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1042.337508][T12520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1042.350428][T31678] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.7544: Failed to acquire dquot type 1 [ 1042.362032][T31678] loop3: lost filesystem error report for type 5 error -117 [ 1042.363511][T31678] EXT4-fs (loop3): 1 truncate cleaned up [ 1042.377260][T31678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1042.400810][T31651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.408126][T31651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.415907][T31651] bridge_slave_1: entered allmulticast mode [ 1042.423057][T31651] bridge_slave_1: entered promiscuous mode [ 1042.443688][T31677] vlan2: entered promiscuous mode [ 1042.468313][T31651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.489981][T31651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.540779][T31690] loop8: detected capacity change from 0 to 128 [ 1042.567538][T31690] EXT4-fs: Mount option(s) incompatible with ext2 [ 1042.576828][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1042.597296][T31651] team0: Port device team_slave_0 added [ 1042.634573][T31651] team0: Port device team_slave_1 added [ 1042.654215][T12520] bridge_slave_1: left allmulticast mode [ 1042.663667][T12520] bridge_slave_1: left promiscuous mode [ 1042.686986][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.714528][T12520] bridge_slave_0: left promiscuous mode [ 1042.734683][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.017817][T31717] loop3: detected capacity change from 0 to 2048 [ 1043.025466][T31717] EXT4-fs: Ignoring removed oldalloc option [ 1043.031556][T31717] EXT4-fs: Ignoring removed oldalloc option [ 1043.072336][T31717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.085179][T31717] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.250903][T12520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.262725][T12520] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1043.272666][T12520] bond0 (unregistering): Released all slaves [ 1043.282683][T12520] bond1 (unregistering): Released all slaves [ 1043.296777][T12520] bond2 (unregistering): Released all slaves [ 1043.308870][T12520] bond3 (unregistering): Released all slaves [ 1043.343626][T31651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.351263][T31651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.379462][T31651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.391777][T31651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.398863][T31651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.425018][T31651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.467691][T31651] hsr_slave_0: entered promiscuous mode [ 1043.474297][T31651] hsr_slave_1: entered promiscuous mode [ 1043.486627][T31651] debugfs: 'hsr0' already exists in 'hsr' [ 1043.492576][T31651] Cannot create hsr debugfs directory [ 1043.906846][T31723] loop1: detected capacity change from 0 to 764 [ 1044.718057][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.730288][T31723] rock: directory entry would overflow storage [ 1044.752225][T31723] rock: sig=0x4f50, size=4, remaining=3 [ 1044.770641][T12520] hsr_slave_0: left promiscuous mode [ 1044.805794][T31723] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1044.834248][T12520] hsr_slave_1: left promiscuous mode [ 1044.841908][T31747] Symlink component flag not implemented [ 1044.848859][T12520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.856235][T31747] Symlink component flag not implemented (129) [ 1044.863155][T31747] rock: directory entry would overflow storage [ 1044.871060][T31747] rock: sig=0x4f50, size=4, remaining=3 [ 1044.877119][T12520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.889314][T31747] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1044.912329][T12520] team0 (unregistering): Port device macvlan1 removed [ 1044.943069][T12520] team0 (unregistering): Port device team_slave_1 removed [ 1044.973637][T12520] team0 (unregistering): Port device team_slave_0 removed [ 1044.981282][T31756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7557'. [ 1045.120432][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7557'. [ 1045.200400][T31736] loop6: detected capacity change from 0 to 8192 [ 1045.290389][T31736] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 1045.290420][T31736] FAT-fs (loop6): Filesystem has been set read-only [ 1045.355767][T31781] loop1: detected capacity change from 0 to 128 [ 1045.525608][T31651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1045.554093][T31651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1045.587108][T31651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1045.614662][T31651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1045.680751][T12520] IPVS: stop unused estimator thread 0... [ 1045.817636][T31651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.860731][T31651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.891872][T31807] loop1: detected capacity change from 0 to 1024 [ 1045.937369][T12965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.944548][T12965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.956804][T31807] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1045.973472][T31814] netlink: 'syz.3.7565': attribute type 21 has an invalid length. [ 1046.049038][T12965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.056255][T12965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.137501][T31823] loop3: detected capacity change from 0 to 512 [ 1046.166032][T31814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7565'. [ 1046.181158][T31781] loop1: detected capacity change from 0 to 128 [ 1046.214421][T31814] netlink: 'syz.3.7565': attribute type 1 has an invalid length. [ 1046.230248][T31823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.272993][T31651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1046.305460][T31823] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.325518][T31781] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1046.346925][T31651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1046.397263][T31781] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.539102][T31651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.571893][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.621269][T26312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.741488][T31651] veth0_vlan: entered promiscuous mode [ 1046.751157][T31651] veth1_vlan: entered promiscuous mode [ 1046.769552][T31651] veth0_macvtap: entered promiscuous mode [ 1046.778654][T31651] veth1_macvtap: entered promiscuous mode [ 1046.790640][T31651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.804481][T31651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.816434][T12530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.832762][T12530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.867072][T12530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.882623][T12530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.955383][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7569'. [ 1046.967708][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7569'. [ 1047.124644][T31852] loop6: detected capacity change from 0 to 1024 [ 1047.136350][T31852] ext4: Unknown parameter 'nouser_xattr' [ 1047.198629][T31860] loop4: detected capacity change from 0 to 128 [ 1047.232200][T31860] EXT4-fs: Mount option(s) incompatible with ext2 [ 1047.266522][ T28] audit: type=1326 audit(2000000596.667:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31861 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1047.291379][T31850] loop8: detected capacity change from 0 to 512 [ 1047.309146][T31858] loop1: detected capacity change from 0 to 764 [ 1047.338389][T31850] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1047.353342][ T28] audit: type=1326 audit(2000000596.667:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31861 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1047.410176][T31850] EXT4-fs (loop8): 1 truncate cleaned up [ 1047.422083][ T28] audit: type=1326 audit(2000000596.707:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31861 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1047.422120][ T28] audit: type=1326 audit(2000000596.717:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31861 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1047.422186][ T28] audit: type=1326 audit(2000000596.717:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31861 comm="syz.6.7574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03899c799 code=0x7ffc0000 [ 1047.522390][T31850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.551054][T31858] rock: directory entry would overflow storage [ 1047.575160][T31858] rock: sig=0x4f50, size=4, remaining=3 [ 1047.592367][T31858] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1047.626716][T31867] Symlink component flag not implemented [ 1047.632490][T31867] Symlink component flag not implemented (129) [ 1047.639452][T31867] rock: directory entry would overflow storage [ 1047.652321][T31867] rock: sig=0x4f50, size=4, remaining=3 [ 1047.658183][ T28] audit: type=1326 audit(2000000597.047:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31849 comm="syz.8.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1047.692179][T31867] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1047.721082][ T28] audit: type=1326 audit(2000000597.047:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31849 comm="syz.8.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1047.762981][T31876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7577'. [ 1047.802719][ T28] audit: type=1326 audit(2000000597.057:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31849 comm="syz.8.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1047.838383][T31876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7577'. [ 1047.857584][T31879] loop6: detected capacity change from 0 to 128 [ 1047.908765][ T28] audit: type=1326 audit(2000000597.057:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31849 comm="syz.8.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1047.973415][T31885] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=31885 comm=syz.3.7579 [ 1048.036963][ T28] audit: type=1326 audit(2000000597.077:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31849 comm="syz.8.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1048.118796][ T28] audit: type=1326 audit(2000000597.107:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31849 comm="syz.8.7570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ddaa1c799 code=0x7ffc0000 [ 1048.148388][T31889] EXT4-fs (loop3): 1 truncate cleaned up [ 1048.158236][T31889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1048.264258][T31893] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 1048.284267][T24855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.307275][T30661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.425458][T31904] EXT4-fs: Mount option(s) incompatible with ext2 [ 1048.623421][T31902] rock: directory entry would overflow storage [ 1048.647067][T31902] rock: sig=0x4f50, size=4, remaining=3 [ 1048.666544][T31902] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1048.709604][T31902] Symlink component flag not implemented [ 1048.736702][T31902] Symlink component flag not implemented (129) [ 1048.764897][T31913] rock: directory entry would overflow storage [ 1048.784575][T31913] rock: sig=0x4f50, size=4, remaining=3 [ 1048.804222][T31913] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 1049.239388][T31919] iso9660: Unknown parameter 'iocharsturkish' [ 1049.611037][T31928] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7591'. [ 1049.622838][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7591'. [ 1049.918327][T31934] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7592'. [ 1050.182928][T31941] EXT4-fs: Ignoring removed oldalloc option [ 1050.299495][T31941] EXT4-fs: Ignoring removed bh option [ 1050.445793][T31941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.702589][T26312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.839053][T31947] set_capacity_and_notify: 6 callbacks suppressed [ 1050.839071][T31947] loop1: detected capacity change from 0 to 128 [ 1051.367718][T31947] loop1: detected capacity change from 0 to 1024 [ 1051.409919][T31947] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1051.690830][T31957] loop6: detected capacity change from 0 to 512 [ 1051.706791][T31957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1051.757938][T31962] loop1: detected capacity change from 0 to 128 [ 1051.786634][T31962] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1051.787007][T31957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.819988][T31962] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.891790][T31970] loop3: detected capacity change from 0 to 128 [ 1051.900058][T31957] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.917845][T31970] EXT4-fs: Mount option(s) incompatible with ext2 [ 1051.957171][T31957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7599'. [ 1051.985219][T31957] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.7599: iget: bad i_size value: 2533274857506816 [ 1052.022677][T31957] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.7599: iget: bad i_size value: 2533274857506816 [ 1052.088959][T26312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1052.104561][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.183393][T31976] loop6: detected capacity change from 0 to 512 [ 1052.193545][T31977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36198 sclass=netlink_route_socket pid=31977 comm=syz.1.7602 [ 1052.220221][T31976] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7603: bad orphan inode 3 [ 1052.236419][T31976] loop6: lost filesystem error report for type 5 error -117 [ 1052.237144][T31976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.336220][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.385714][T31980] FAULT_INJECTION: forcing a failure. [ 1052.385714][T31980] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.416211][T31980] CPU: 1 UID: 0 PID: 31980 Comm: syz.6.7604 Tainted: G W syzkaller #0 PREEMPT(full) [ 1052.416285][T31980] Tainted: [W]=WARN [ 1052.416294][T31980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1052.416335][T31980] Call Trace: [ 1052.416344][T31980] [ 1052.416354][T31980] __dump_stack+0x1d/0x30 [ 1052.416391][T31980] dump_stack_lvl+0x95/0xd0 [ 1052.416423][T31980] dump_stack+0x15/0x1b [ 1052.416452][T31980] should_fail_ex+0x263/0x280 [ 1052.416562][T31980] should_failslab+0x8c/0xb0 [ 1052.416590][T31980] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 1052.416622][T31980] ? __alloc_skb+0x2d6/0x690 [ 1052.416721][T31980] __alloc_skb+0x2d6/0x690 [ 1052.416751][T31980] ? __alloc_skb+0x200/0x690 [ 1052.416781][T31980] netlink_alloc_large_skb+0xbf/0xf0 [ 1052.416817][T31980] netlink_sendmsg+0x40c/0x6f0 [ 1052.416939][T31980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.416978][T31980] ____sys_sendmsg+0x563/0x5b0 [ 1052.417020][T31980] ___sys_sendmsg+0x195/0x1e0 [ 1052.417075][T31980] __x64_sys_sendmsg+0xd4/0x160 [ 1052.417111][T31980] x64_sys_call+0x194c/0x3020 [ 1052.417141][T31980] do_syscall_64+0x12c/0x370 [ 1052.417211][T31980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.417237][T31980] RIP: 0033:0x7fe03899c799 [ 1052.417256][T31980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.417310][T31980] RSP: 002b:00007fe0373ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.417333][T31980] RAX: ffffffffffffffda RBX: 00007fe038c15fa0 RCX: 00007fe03899c799 [ 1052.417350][T31980] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 1052.417406][T31980] RBP: 00007fe0373ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.417419][T31980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.417430][T31980] R13: 00007fe038c16038 R14: 00007fe038c15fa0 R15: 00007ffdcd044f68 [ 1052.417454][T31980] [ 1052.824355][T31986] geneve3: entered promiscuous mode [ 1052.838164][T31986] geneve3: entered allmulticast mode [ 1052.850076][T12530] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1052.858931][T12530] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1052.868570][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 1052.868588][ T28] audit: type=1400 audit(2000000602.267:5633): avc: denied { map } for pid=31987 comm="syz.4.7608" path="socket:[107464]" dev="sockfs" ino=107464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1052.916228][T12530] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1052.947793][T12530] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1053.017395][T31997] loop3: detected capacity change from 0 to 128 [ 1053.027253][T31992] loop6: detected capacity change from 0 to 4096 [ 1053.059452][T31992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.100156][ T28] audit: type=1400 audit(2000000602.497:5634): avc: denied { add_name } for pid=31991 comm="syz.6.7610" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1053.120845][T32002] EXT4-fs error (device loop6): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.6.7610: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1053.146132][ T28] audit: type=1400 audit(2000000602.497:5635): avc: denied { reparent } for pid=31991 comm="syz.6.7610" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1053.169042][ T28] audit: type=1400 audit(2000000602.497:5636): avc: denied { remove_name } for pid=31991 comm="syz.6.7610" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1053.207564][T32002] EXT4-fs error (device loop6): ext4_get_first_dir_block:3550: inode #12: comm syz.6.7610: directory missing '..' [ 1053.223445][T32006] loop8: detected capacity change from 0 to 512 [ 1053.248525][T32006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.261262][T32006] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.284042][T32003] loop3: detected capacity change from 0 to 1024 [ 1053.291685][T32003] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1053.324456][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.357104][T30661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.410560][T32012] EXT4-fs: Mount option(s) incompatible with ext2 [ 1053.566258][T10113] ================================================================== [ 1053.574396][T10113] BUG: KCSAN: data-race in __d_drop / fast_dput [ 1053.580757][T10113] [ 1053.583156][T10113] write to 0xffff88811b543cd0 of 8 bytes by task 3000 on cpu 1: [ 1053.590812][T10113] __d_drop+0x14d/0x240 [ 1053.595011][T10113] __dentry_kill+0x122/0x460 [ 1053.599627][T10113] finish_dput+0x2b/0x200 [ 1053.604013][T10113] dput+0x52/0x60 [ 1053.607692][T10113] step_into_slowpath+0x38c/0x4c0 [ 1053.612764][T10113] path_lookupat+0x330/0x500 [ 1053.617396][T10113] filename_lookup+0x32a/0x390 [ 1053.622200][T10113] do_readlinkat+0x74/0x2f0 [ 1053.626737][T10113] __x64_sys_readlink+0x47/0x60 [ 1053.631633][T10113] x64_sys_call+0x2b51/0x3020 [ 1053.636350][T10113] do_syscall_64+0x12c/0x370 [ 1053.640979][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.646898][T10113] [ 1053.649244][T10113] read to 0xffff88811b543cd0 of 8 bytes by task 10113 on cpu 0: [ 1053.656898][T10113] fast_dput+0x5f/0x2c0 [ 1053.661086][T10113] dput+0x24/0x60 [ 1053.664746][T10113] filename_unlinkat+0x217/0x410 [ 1053.669718][T10113] __se_sys_unlink+0x2b/0xe0 [ 1053.674331][T10113] __x64_sys_unlink+0x1f/0x30 [ 1053.679034][T10113] x64_sys_call+0x2eb6/0x3020 [ 1053.683754][T10113] do_syscall_64+0x12c/0x370 [ 1053.688465][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.694380][T10113] [ 1053.696723][T10113] value changed: 0xffff8882378c10a8 -> 0x0000000000000000 [ 1053.703850][T10113] [ 1053.706197][T10113] Reported by Kernel Concurrency Sanitizer on: [ 1053.712371][T10113] CPU: 0 UID: 0 PID: 10113 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 1053.722897][T10113] Tainted: [W]=WARN [ 1053.726727][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.736806][T10113] ================================================================== [ 1053.893177][T31997] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1053.994279][T32016] EXT4-fs: Ignoring removed bh option [ 1054.013905][T31997] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.058006][T32016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.199471][T32016] EXT4-fs error (device loop6): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.6.7615: path /285/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1054.261435][T32016] EXT4-fs (loop6): Remounting filesystem read-only [ 1054.340861][T26953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.366365][T24855] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.