last executing test programs: 1m6.01150874s ago: executing program 1 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) r7 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendfile(r8, r7, 0x0, 0x100000002) (async, rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x50) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=@getchain={0x4c, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x17e8}, {0x8, 0xb, 0x4b9}, {0x8, 0xb, 0x5b4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m5.820749132s ago: executing program 1 (id=11): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m5.478108562s ago: executing program 1 (id=19): ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff08) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 1m5.273957981s ago: executing program 1 (id=20): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@jqfmt_vfsold}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") socket(0x11, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r2, 0x80000000) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r3, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000300)={[{@user_xattr}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@errors_remount}, {@nolazytime}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a3200000000140000001100010000000000000000000200000a28c3422a68caac3ba27ef484b2f4c7cf"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) epoll_create1(0x80000) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) 1m5.12513814s ago: executing program 1 (id=21): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) ppoll(&(0x7f0000000640)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 1m4.606015204s ago: executing program 1 (id=25): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x406, r0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0xfe, 0x0, 0x4000000b, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x2, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x4e, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907e0f0044e3d69339193ff71e00000022ea8f3ef32a4630f2ba89c50dad82c8041d7464b1492496"], 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000009c0)='.log\x00', 0x3, 0x4b) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000010ffff000000000000520000009500000000000000186600000800000000000000ffff0000"], &(0x7f0000000100)='GPL\x00', 0xfffffff0, 0x9a, &(0x7f0000000780)=""/154, 0x41000, 0x26, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xb, 0x2, 0x41f}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[r3, r4, r6, r7], &(0x7f0000000b00)=[{0x0, 0xc, 0x10, 0x2}, {0x2, 0x5, 0x4, 0x5}, {0xffff4415, 0xfffffffe, 0xd, 0x9}], 0x10, 0x7}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000083}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r10, 0x3d, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) geteuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10580, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_config_ext={0x4, 0xcc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 1m4.570936557s ago: executing program 32 (id=25): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x406, r0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0xfe, 0x0, 0x4000000b, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x2, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x4e, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907e0f0044e3d69339193ff71e00000022ea8f3ef32a4630f2ba89c50dad82c8041d7464b1492496"], 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f00000009c0)='.log\x00', 0x3, 0x4b) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000010ffff000000000000520000009500000000000000186600000800000000000000ffff0000"], &(0x7f0000000100)='GPL\x00', 0xfffffff0, 0x9a, &(0x7f0000000780)=""/154, 0x41000, 0x26, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xb, 0x2, 0x41f}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[r3, r4, r6, r7], &(0x7f0000000b00)=[{0x0, 0xc, 0x10, 0x2}, {0x2, 0x5, 0x4, 0x5}, {0xffff4415, 0xfffffffe, 0xd, 0x9}], 0x10, 0x7}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000083}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r10, 0x3d, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) geteuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10580, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_config_ext={0x4, 0xcc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 10.182820755s ago: executing program 5 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x5f02, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRES64=r0, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 10.124485243s ago: executing program 5 (id=532): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) connect$inet(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8", 0x3ab, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 8.427622877s ago: executing program 0 (id=546): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000100)=""/208) socket$inet(0x2, 0x3, 0x1) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x1) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/../file0\x00', 0x15) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'wg0\x00', @remote}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80c00, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000002408000240000000000c00038005000100430000000c00048005db934d850000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 8.237367959s ago: executing program 5 (id=549): socket(0x18, 0x80000, 0x48bf671) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x7, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000018dd5bf294944ecea000000040000000700000000613000"], 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7.792855888s ago: executing program 0 (id=556): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000fc0)={0xc, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) setitimer(0x1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xffffffffffffff10, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)={0x1}) 6.62359911s ago: executing program 2 (id=558): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000a85f2e410b59180000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095000000000000002b807f5646c14acd1208fe1c4fc49f198b52510fcc2a56d616871024f6add414ae34b83299cb8c2f641b14226d0d985b30b47a8ed45f8fb5e4ce93e9cc614d10d72394e648669fd6ef62793465907df99c68c339fa05ccfd6198326d7267d659c6cc594f83e579237b0ac8eb54f7286d508639477a05a25ae1c5045775b2c029fc92f056ea1c5741f82d4f338253bce3648eefcb997880e90d6c36f7da1a630dbe29f43e5547356c507dc0b86e2b0c36608738"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x3, 0x7, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$netlink(0x10, 0x3, 0xb) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast1, @multicast2}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, '\a'}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r6 = accept4$packet(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x4faa, 0x5, 0x79, 0x7}, {0xcdc4, 0x3, 0x7, 0x3}, {0x1, 0x81, 0xf8, 0xffffe343}, {0x1, 0x3, 0x6, 0xffffff49}, {0x9a, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x820a}, {0x7ff, 0xb, 0x81, 0x100}]}, 0x10) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r7, r8) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f00000004c0)={0x40, 0x238f8219, 0x1, 0x8, 0x3, 0x0, [{0x2, 0x3c00, 0x7ff, '\x00', 0x9}, {0x7ff, 0xdb6, 0x1cb, '\x00', 0x2000}, {0x2, 0x2, 0x5, '\x00', 0x100}]}) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) 6.616376088s ago: executing program 5 (id=559): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) connect$inet(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x3ab, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 6.189503241s ago: executing program 3 (id=561): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000380)={0xfffffffd, 0x1, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82577ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x1ff}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) 5.613083294s ago: executing program 5 (id=563): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa8]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x2, 0x1, 0x4000032f, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_gettime(r5, &(0x7f00000000c0)) timer_settime(r5, 0x1, &(0x7f00000010c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000001100)) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, &(0x7f0000000500)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200003401c000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2", 0xa5}], 0x1}, 0x40840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) syz_read_part_table(0x105f, &(0x7f0000000000)="$eJzsz7tNBDEABNC524+9AQnBdgZtQEoE9VAAAdUgQRVIKyMbRAlwwXvByBqNLTn8qyXJNuduv24lbU0eXkZ3eu2Zo7U2dh9XPfceZa1JyWn0n09Lsv0+95i34+c4JzXnc11Sp3FtSst9n96W78V7bp7/9rcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJm+AgAA//+vHRGU") 5.353568831s ago: executing program 0 (id=564): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000002c0)={@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x0, 0x3, 0x2, 0x4}}, {&(0x7f0000000100)=""/66, 0x42}, &(0x7f0000000180)}, 0xa0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000400), 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/140, 0x8c}], 0x1, 0x3533, 0x401) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[]) 5.195776379s ago: executing program 2 (id=565): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r2, r3) tkill(r1, 0x20) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000001c0)={[{@noinit_itable}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f000019b000/0x2000)=nil, 0x2000, 0x1000001, 0x13, 0xffffffffffffffff, 0xec776000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f00000000c0)={0x8a, 0x10006d}, 0x20) 5.195312939s ago: executing program 3 (id=566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000100)=""/208) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x1) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/../file0\x00', 0x15) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'wg0\x00', @remote}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80c00, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000002408000240000000000c00038005000100430000000c00048005db934d850000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 4.773692123s ago: executing program 2 (id=568): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x2110, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) 4.717632771s ago: executing program 2 (id=569): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="19ccd38199d998c0", 0x8}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400018, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x17}]) 4.704023878s ago: executing program 3 (id=570): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x499c3) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) 3.654412355s ago: executing program 0 (id=573): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) connect$inet(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x3b2, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 3.622104928s ago: executing program 3 (id=575): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000a85f2e410b59180000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095000000000000002b807f5646c14acd1208fe1c4fc49f198b52510fcc2a56d616871024f6add414ae34b83299cb8c2f641b14226d0d985b30b47a8ed45f8fb5e4ce93e9cc614d10d72394e648669fd6ef62793465907df99c68c339fa05ccfd6198326d7267d659c6cc594f83e579237b0ac8eb54f7286d508639477a05a25ae1c5045775b2c029fc92f056ea1c5741f82d4f338253bce3648eefcb997880e90d6c36f7da1a630dbe29f43e5547356c507dc0b86e2b0c36608738"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x3, 0x7, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$netlink(0x10, 0x3, 0xb) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast1, @multicast2}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, '\a'}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r6 = accept4$packet(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x4faa, 0x5, 0x79, 0x7}, {0xcdc4, 0x3, 0x7, 0x3}, {0x1, 0x81, 0xf8, 0xffffe343}, {0x1, 0x3, 0x6, 0xffffff49}, {0x9a, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x820a}, {0x7ff, 0xb, 0x81, 0x100}]}, 0x10) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r7, r8) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f00000004c0)={0x40, 0x238f8219, 0x1, 0x8, 0x3, 0x0, [{0x2, 0x3c00, 0x7ff, '\x00', 0x9}, {0x7ff, 0xdb6, 0x1cb, '\x00', 0x2000}, {0x2, 0x2, 0x5, '\x00', 0x100}]}) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) 3.560384855s ago: executing program 2 (id=576): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000380)={0xfffffffd, 0x1, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82577ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x1ff}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) 2.703140931s ago: executing program 2 (id=577): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x8003, &(0x7f0000000040)=0x1, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000d40), 0x5, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000dc0)={r2, &(0x7f0000000d80)="8407e287e06e00c054099ab5102f97abce"}, 0x20) syz_usb_connect(0x6, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x69, 0xad, 0x98, 0xdf, 0x1b3d, 0x16f, 0xacd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x30}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x52000775) creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x30, 0x57}, {0x28, 0x1, 0xf7, 0xfffff010}, {0x6, 0x26, 0x0, 0x5}]}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x400}) recvmmsg$unix(r4, &(0x7f00000009c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000b40)=""/37, 0x25}, {&(0x7f0000000bc0)=""/85, 0x55}, {&(0x7f0000000c40)=""/96, 0xffffffffffffffba}], 0x5, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000a80)=""/138, 0x8a}, {&(0x7f0000000b80)=""/15, 0xf}, {&(0x7f0000000540)=""/160, 0xa1}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000007c0)=""/33, 0x21}], 0x9, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x2, 0x2000, &(0x7f0000000a40)={0x0, 0x989680}) 2.693680909s ago: executing program 3 (id=578): recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/36, 0x24, 0x1, &(0x7f00000002c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x80) pipe2(0x0, 0x80800) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xb9ca) r0 = getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) socket$isdn(0x22, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2002, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0) 2.681922766s ago: executing program 0 (id=579): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 2.572847214s ago: executing program 4 (id=580): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000100)=""/208) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x1) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chmod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0/../file0\x00', 0x15) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'wg0\x00', @remote}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80c00, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000002408000240000000000c00038005000100430000000c00048005db934d850000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.572660604s ago: executing program 0 (id=581): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.105783699s ago: executing program 4 (id=582): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x499c3) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) 1.455434157s ago: executing program 5 (id=583): r0 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r1, 0x0, 0x0) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x5, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="19ccd38199d998c0", 0x8}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="05", 0x17}]) 1.435670883s ago: executing program 3 (id=584): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'pim6reg1\x00', @local}) dup2(r0, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (fail_nth: 2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa9630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket(0x1e, 0x4, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r8 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000500)=""/13, 0xd}], 0x4}}], 0x1, 0x40, &(0x7f00000005c0)={0x0, 0x989680}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRES32=r3, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.111387597s ago: executing program 4 (id=585): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 105.109381ms ago: executing program 4 (id=586): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x40000) 90.189739ms ago: executing program 4 (id=587): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000380)={0xfffffffd, 0x1, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82577ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x1ff}) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) 0s ago: executing program 4 (id=588): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000a85f2e410b59180000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095000000000000002b807f5646c14acd1208fe1c4fc49f198b52510fcc2a56d616871024f6add414ae34b83299cb8c2f641b14226d0d985b30b47a8ed45f8fb5e4ce93e9cc614d10d72394e648669fd6ef62793465907df99c68c339fa05ccfd6198326d7267d659c6cc594f83e579237b0ac8eb54f7286d508639477a05a25ae1c5045775b2c029fc92f056ea1c5741f82d4f338253bce3648eefcb997880e90d6c36f7da1a630dbe29f43e5547356c507dc0b86e2b0c36608738"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x7, 0x0, 0x3, 0x7, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$netlink(0x10, 0x3, 0xb) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast1, @multicast2}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, '\a'}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r6 = accept4$packet(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x4faa, 0x5, 0x79, 0x7}, {0xcdc4, 0x3, 0x7, 0x3}, {0x1, 0x81, 0xf8, 0xffffe343}, {0x1, 0x3, 0x6, 0xffffff49}, {0x9a, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x820a}, {0x7ff, 0xb, 0x81, 0x100}]}, 0x10) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r7, r8) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f00000004c0)={0x40, 0x238f8219, 0x1, 0x8, 0x3, 0x0, [{0x2, 0x3c00, 0x7ff, '\x00', 0x9}, {0x7ff, 0xdb6, 0x1cb, '\x00', 0x2000}, {0x2, 0x2, 0x5, '\x00', 0x100}]}) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): of block bitmap is not set [ 65.383331][ T4469] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 65.383530][ T4475] loop4: lost filesystem error report for type 5 error -117 [ 65.392421][ T4475] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.244: Failed to acquire dquot type 1 [ 65.400120][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 65.400143][ C1] EXT4-fs (loop4): last error at time 1772519864: ext4_validate_block_bitmap:441 [ 65.428344][ T4475] loop4: lost filesystem error report for type 5 error -117 [ 65.429623][ T4475] EXT4-fs (loop4): 1 truncate cleaned up [ 65.444049][ T4475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 65.468267][ T4475] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 65.477153][ T4469] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.238: bg 0: block 465: padding at end of block bitmap is not set [ 65.496805][ T4469] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.238: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 65.517902][ T4489] loop3: detected capacity change from 0 to 4096 [ 65.558828][ T4489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.584836][ T4469] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 65.616079][ T4489] bridge1: entered promiscuous mode [ 65.667793][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.710434][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.758007][ T4475] syz.4.244 (4475) used greatest stack depth: 8568 bytes left [ 65.792959][ T4522] loop4: detected capacity change from 0 to 128 [ 65.824355][ T4522] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.869573][ T4522] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.931306][ T4539] loop3: detected capacity change from 0 to 164 [ 65.983771][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.993770][ T4542] mmap: syz.3.263 (4542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.139312][ T4550] syzkaller0: entered promiscuous mode [ 66.139334][ T4550] syzkaller0: entered allmulticast mode [ 66.141004][ T4550] tipc: Started in network mode [ 66.141079][ T4550] tipc: Node identity 42ce6b5388bc, cluster identity 4711 [ 66.141113][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.141132][ T4550] tipc: Enabled bearer , priority 0 [ 66.141600][ T4549] tipc: Resetting bearer [ 66.143703][ T4549] tipc: Disabling bearer [ 66.218589][ T4553] loop4: detected capacity change from 0 to 256 [ 66.231929][ T4553] vfat: Unknown parameter '184467440737095516150x0000000000000003êU•Å?då4Õ¦œŽÇ¥öúì²qD@©÷ß…Û×l`ÿ_ƒ ÅöHéß<W…ÁÀTý‹"Ï' [ 66.272231][ T4548] loop2: detected capacity change from 0 to 512 [ 66.278075][ T4548] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #11: block 530: comm syz.2.265: lblock 4 mapped to illegal pblock 530 (length 1) [ 66.278183][ T4548] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.278413][ T4548] ------------[ cut here ]------------ [ 66.278421][ T4548] EA inode 11 i_nlink=2 [ 66.278431][ T4548] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.265/4548 [ 66.278484][ T4548] Modules linked in: [ 66.278498][ T4548] CPU: 1 UID: 0 PID: 4548 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT(full) [ 66.278526][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.278539][ T4548] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 66.278563][ T4548] Code: 54 5a 99 ff 4c 8d 2d 3d ea 5d 05 49 8d 7e 40 e8 c4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 f8 eb b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 44 dd 03 66 66 66 66 66 66 2e [ 66.278646][ T4548] RSP: 0018:ffffc900011ff778 EFLAGS: 00010246 [ 66.278710][ T4548] RAX: ffff888101cfac38 RBX: ffff88811a413628 RCX: ffffffff81bffae8 [ 66.278726][ T4548] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de510 [ 66.278740][ T4548] RBP: 000000000000000b R08: 000188811a4135db R09: 0000000000000000 [ 66.278782][ T4548] R10: ffffc900011ff6a8 R11: 0001c900011ff6a8 R12: ffff88811a4135d8 [ 66.278797][ T4548] R13: ffffffff871de510 R14: ffff88811a413590 R15: 0000000000000001 [ 66.278838][ T4548] FS: 00007f7d2b2c76c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 66.278867][ T4548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.278881][ T4548] CR2: 0000000100000001 CR3: 0000000119ad4000 CR4: 00000000003506f0 [ 66.278899][ T4548] Call Trace: [ 66.278905][ T4548] [ 66.278941][ T4548] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 66.278977][ T4548] ? errseq_check+0x2c/0x50 [ 66.279077][ T4548] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 66.279109][ T4548] ? ext4_truncate+0x92b/0xb00 [ 66.279227][ T4548] ext4_evict_inode+0xa1f/0xd60 [ 66.279262][ T4548] ? __pfx_ext4_evict_inode+0x10/0x10 [ 66.279289][ T4548] evict+0x2af/0x510 [ 66.279334][ T4548] ? __dquot_initialize+0x146/0x7c0 [ 66.279365][ T4548] iput+0x41a/0x580 [ 66.279468][ T4548] ext4_process_orphan+0x1a9/0x1c0 [ 66.279494][ T4548] ext4_orphan_cleanup+0x6a8/0xa00 [ 66.279549][ T4548] ext4_fill_super+0x3408/0x37c0 [ 66.279573][ T4548] ? set_blocksize+0x14c/0x270 [ 66.279595][ T4548] ? setup_bdev_super+0x30e/0x370 [ 66.279626][ T4548] ? __pfx_ext4_fill_super+0x10/0x10 [ 66.279705][ T4548] get_tree_bdev_flags+0x291/0x300 [ 66.279807][ T4548] ? __pfx_ext4_fill_super+0x10/0x10 [ 66.279899][ T4548] get_tree_bdev+0x1f/0x30 [ 66.279930][ T4548] ext4_get_tree+0x1c/0x30 [ 66.280074][ T4548] vfs_get_tree+0x57/0x1d0 [ 66.280186][ T4548] do_new_mount+0x288/0x8d0 [ 66.280207][ T4548] path_mount+0x4d0/0xbc0 [ 66.280278][ T4548] __se_sys_mount+0x28c/0x2e0 [ 66.280303][ T4548] __x64_sys_mount+0x67/0x80 [ 66.280325][ T4548] x64_sys_call+0x2d61/0x3020 [ 66.280352][ T4548] do_syscall_64+0x12c/0x370 [ 66.280418][ T4548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.280441][ T4548] RIP: 0033:0x7f7d2c86da0a [ 66.280458][ T4548] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.280550][ T4548] RSP: 002b:00007f7d2b2c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.280571][ T4548] RAX: ffffffffffffffda RBX: 00007f7d2b2c6ee0 RCX: 00007f7d2c86da0a [ 66.280626][ T4548] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7d2b2c6ea0 [ 66.280640][ T4548] RBP: 0000200000000180 R08: 00007f7d2b2c6ee0 R09: 0000000000800718 [ 66.280654][ T4548] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 66.280668][ T4548] R13: 00007f7d2b2c6ea0 R14: 0000000000000482 R15: 0000200000000200 [ 66.280687][ T4548] [ 66.280694][ T4548] ---[ end trace 0000000000000000 ]--- [ 66.280860][ T4548] EXT4-fs (loop2): 1 orphan inode deleted [ 66.281416][ T4548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.835348][ T4567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.917950][ T4571] FAULT_INJECTION: forcing a failure. [ 66.917950][ T4571] name failslab, interval 1, probability 0, space 0, times 0 [ 66.917982][ T4571] CPU: 1 UID: 0 PID: 4571 Comm: syz.5.271 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.918008][ T4571] Tainted: [W]=WARN [ 66.918016][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.918029][ T4571] Call Trace: [ 66.918036][ T4571] [ 66.918046][ T4571] __dump_stack+0x1d/0x30 [ 66.918074][ T4571] dump_stack_lvl+0x95/0xd0 [ 66.918100][ T4571] dump_stack+0x15/0x1b [ 66.918123][ T4571] should_fail_ex+0x263/0x280 [ 66.918143][ T4571] should_failslab+0x8c/0xb0 [ 66.918162][ T4571] kmem_cache_alloc_noprof+0x66/0x400 [ 66.918182][ T4571] ? mas_alloc_nodes+0x1a2/0x210 [ 66.918211][ T4571] mas_alloc_nodes+0x1a2/0x210 [ 66.918243][ T4571] mas_preallocate+0x2ca/0x510 [ 66.918281][ T4571] __split_vma+0x240/0x640 [ 66.918302][ T4571] ? mas_find+0x5d5/0x700 [ 66.918318][ T4571] vms_gather_munmap_vmas+0x2bc/0x850 [ 66.918356][ T4571] mmap_region+0x718/0x2050 [ 66.918378][ T4571] ? __perf_event_task_sched_out+0x192/0x710 [ 66.918400][ T4571] ? _raw_spin_unlock+0x9/0x30 [ 66.918421][ T4571] ? finish_task_switch+0x7d/0x280 [ 66.918469][ T4571] do_mmap+0x9b2/0xbd0 [ 66.918499][ T4571] vm_mmap_pgoff+0x183/0x2d0 [ 66.918521][ T4571] ksys_mmap_pgoff+0xc1/0x310 [ 66.918550][ T4571] ? __x64_sys_mmap+0x49/0x70 [ 66.918585][ T4571] x64_sys_call+0x14df/0x3020 [ 66.918614][ T4571] do_syscall_64+0x12c/0x370 [ 66.918635][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.918655][ T4571] RIP: 0033:0x7f8f480cc799 [ 66.918671][ T4571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.918690][ T4571] RSP: 002b:00007f8f46b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 66.918713][ T4571] RAX: ffffffffffffffda RBX: 00007f8f48346090 RCX: 00007f8f480cc799 [ 66.918726][ T4571] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 66.918737][ T4571] RBP: 00007f8f46b06090 R08: ffffffffffffffff R09: 0000000000000000 [ 66.918749][ T4571] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 66.918761][ T4571] R13: 00007f8f48346128 R14: 00007f8f48346090 R15: 00007ffce175ab28 [ 66.918780][ T4571] [ 68.308736][ T4578] syz.3.274 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 68.308812][ T4578] CPU: 1 UID: 0 PID: 4578 Comm: syz.3.274 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.308840][ T4578] Tainted: [W]=WARN [ 68.308846][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.308857][ T4578] Call Trace: [ 68.308864][ T4578] [ 68.308872][ T4578] __dump_stack+0x1d/0x30 [ 68.308947][ T4578] dump_stack_lvl+0x95/0xd0 [ 68.308973][ T4578] dump_stack+0x15/0x1b [ 68.308995][ T4578] dump_header+0x80/0x240 [ 68.309082][ T4578] oom_kill_process+0x295/0x350 [ 68.309103][ T4578] out_of_memory+0x97d/0xb80 [ 68.309123][ T4578] try_charge_memcg+0x62e/0xa10 [ 68.309168][ T4578] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 68.309200][ T4578] __swap_cache_prepare_and_add+0x386/0x530 [ 68.309239][ T4578] swap_cache_alloc_folio+0xa2/0x120 [ 68.309294][ T4578] swap_cluster_readahead+0x26e/0x3d0 [ 68.309339][ T4578] swapin_readahead+0xde/0x840 [ 68.309404][ T4578] ? _raw_spin_unlock+0x9/0x30 [ 68.309424][ T4578] ? swap_put_entries_cluster+0x385/0x3a0 [ 68.309457][ T4578] ? swap_put_entries_cluster+0x131/0x3a0 [ 68.309591][ T4578] ? __rcu_read_unlock+0x4e/0x70 [ 68.309612][ T4578] ? swap_cache_get_folio+0x26f/0x280 [ 68.309641][ T4578] do_swap_page+0x309/0x2210 [ 68.309675][ T4578] ? css_rstat_updated+0xbb/0x280 [ 68.309713][ T4578] ? __rcu_read_lock+0x36/0x50 [ 68.309732][ T4578] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 68.309757][ T4578] handle_mm_fault+0xb40/0x3020 [ 68.309785][ T4578] ? vma_start_read+0x1c7/0x2c0 [ 68.309893][ T4578] do_user_addr_fault+0x62f/0x1050 [ 68.309963][ T4578] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 68.309995][ T4578] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 68.310023][ T4578] ? trace_page_fault_user+0x1f/0xe0 [ 68.310052][ T4578] exc_page_fault+0x62/0xa0 [ 68.310134][ T4578] asm_exc_page_fault+0x26/0x30 [ 68.310156][ T4578] RIP: 0033:0x7f80c968a14c [ 68.310173][ T4578] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 68.310258][ T4578] RSP: 002b:00007ffe5578f470 EFLAGS: 00010202 [ 68.310278][ T4578] RAX: 0000000000000000 RBX: 00007f80c9a35fa0 RCX: 0000555586f08808 [ 68.310294][ T4578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.310316][ T4578] RBP: 00007f80c9a37da0 R08: 0000000000000000 R09: 0000000000000000 [ 68.310331][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000010c57 [ 68.310346][ T4578] R13: 00007f80c9a3609c R14: 0000000000010984 R15: 00007ffe5578f570 [ 68.310414][ T4578] [ 68.322337][ T4585] netlink: 'syz.5.276': attribute type 1 has an invalid length. [ 68.325204][ T4578] memory: usage 297012kB, limit 307200kB, failcnt 111 [ 68.325224][ T4578] memory+swap: usage 297196kB, limit 9007199254740988kB, failcnt 0 [ 68.325309][ T4578] kmem: usage 296604kB, limit 9007199254740988kB, failcnt 0 [ 68.325321][ T4578] Memory cgroup stats for /syz3: [ 68.325691][ T4578] cache 4096 [ 68.325701][ T4578] rss 0 [ 68.325709][ T4578] shmem 0 [ 68.325717][ T4578] mapped_file 4096 [ 68.325725][ T4578] dirty 0 [ 68.325733][ T4578] writeback 0 [ 68.325752][ T4578] workingset_refault_anon 4 [ 68.325760][ T4578] workingset_refault_file 641 [ 68.325767][ T4578] swap 188416 [ 68.325773][ T4578] swapcached 200704 [ 68.325780][ T4578] pgpgin 25276 [ 68.325789][ T4578] pgpgout 25272 [ 68.325796][ T4578] pgfault 21097 [ 68.325803][ T4578] pgmajfault 11 [ 68.325810][ T4578] inactive_anon 12288 [ 68.325817][ T4578] active_anon 0 [ 68.325823][ T4578] inactive_file 4096 [ 68.325873][ T4578] active_file 0 [ 68.325881][ T4578] unevictable 0 [ 68.325890][ T4578] hierarchical_memory_limit 314572800 [ 68.325900][ T4578] hierarchical_memsw_limit 9223372036854771712 [ 68.325911][ T4578] total_cache 4096 [ 68.325918][ T4578] total_rss 0 [ 68.325927][ T4578] total_shmem 0 [ 68.325935][ T4578] total_mapped_file 4096 [ 68.325944][ T4578] total_dirty 0 [ 68.325952][ T4578] total_writeback 0 [ 68.325989][ T4578] total_workingset_refault_anon 4 [ 68.325998][ T4578] total_workingset_refault_file 641 [ 68.326008][ T4578] total_swap 188416 [ 68.326016][ T4578] total_swapcached 200704 [ 68.326025][ T4578] total_pgpgin 25276 [ 68.326034][ T4578] total_pgpgout 25272 [ 68.326043][ T4578] total_pgfault 21097 [ 68.326056][ T4578] total_pgmajfault 11 [ 68.326065][ T4578] total_inactive_anon 12288 [ 68.326074][ T4578] total_active_anon 0 [ 68.326082][ T4578] total_inactive_file 4096 [ 68.326092][ T4578] total_active_file 0 [ 68.326166][ T4578] total_unevictable 0 [ 68.326175][ T4578] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.274,pid=4578,uid=0 [ 68.326243][ T4578] Memory cgroup out of memory: Killed process 4578 (syz.3.274) total-vm:94160kB, anon-rss:1220kB, file-rss:22084kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 68.349083][ T4584] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 68.349109][ T4584] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 68.356097][ T4584] bond2: (slave vxcan3): making interface the new active one [ 68.356439][ T4584] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 68.419370][ T4588] FAULT_INJECTION: forcing a failure. [ 68.419370][ T4588] name failslab, interval 1, probability 0, space 0, times 0 [ 68.419408][ T4588] CPU: 1 UID: 0 PID: 4588 Comm: syz.5.277 Tainted: G W syzkaller #0 PREEMPT(full) [ 68.419499][ T4588] Tainted: [W]=WARN [ 68.419507][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.419521][ T4588] Call Trace: [ 68.419529][ T4588] [ 68.419539][ T4588] __dump_stack+0x1d/0x30 [ 68.419570][ T4588] dump_stack_lvl+0x95/0xd0 [ 68.419591][ T4588] dump_stack+0x15/0x1b [ 68.419653][ T4588] should_fail_ex+0x263/0x280 [ 68.419680][ T4588] should_failslab+0x8c/0xb0 [ 68.419758][ T4588] __kmalloc_noprof+0xb8/0x4e0 [ 68.419779][ T4588] ? io_cache_alloc_new+0x2a/0xb0 [ 68.419809][ T4588] io_cache_alloc_new+0x2a/0xb0 [ 68.419837][ T4588] io_arm_apoll+0x20e/0x430 [ 68.419909][ T4588] io_arm_poll_handler+0x12f/0x160 [ 68.419947][ T4588] io_queue_async+0x25d/0x320 [ 68.419969][ T4588] io_submit_sqes+0xc1d/0x1270 [ 68.420154][ T4588] __se_sys_io_uring_enter+0x1c9/0xf50 [ 68.420196][ T4588] ? __fget_files+0x184/0x1c0 [ 68.420286][ T4588] ? mutex_unlock+0x4e/0x90 [ 68.420317][ T4588] ? fput+0x8f/0xc0 [ 68.420393][ T4588] __x64_sys_io_uring_enter+0x78/0x90 [ 68.420424][ T4588] x64_sys_call+0x1e16/0x3020 [ 68.420448][ T4588] do_syscall_64+0x12c/0x370 [ 68.420468][ T4588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.420531][ T4588] RIP: 0033:0x7f8f480cc799 [ 68.420550][ T4588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.420610][ T4588] RSP: 002b:00007f8f46b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 68.420687][ T4588] RAX: ffffffffffffffda RBX: 00007f8f48345fa0 RCX: 00007f8f480cc799 [ 68.420703][ T4588] RDX: 0000000000000002 RSI: 0000000000002dee RDI: 0000000000000005 [ 68.420735][ T4588] RBP: 00007f8f46b27090 R08: 0000000000000000 R09: 0000000000000000 [ 68.420747][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.420791][ T4588] R13: 00007f8f48346038 R14: 00007f8f48345fa0 R15: 00007ffce175ab28 [ 68.420813][ T4588] [ 68.642821][ T4591] loop5: detected capacity change from 0 to 4096 [ 69.635655][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 69.635670][ T28] audit: type=1400 audit(1772519869.057:391): avc: denied { kexec_image_load } for pid=4595 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 69.677027][ T4598] loop4: detected capacity change from 0 to 512 [ 69.685741][ T4596] loop5: detected capacity change from 0 to 128 [ 69.694292][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.713940][ T4598] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.769759][ T4598] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.282: Invalid inode bitmap blk 4 in block_group 0 [ 69.783041][ T4598] loop4: lost filesystem error report for type 5 error -117 [ 69.798039][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.846225][ T4608] loop5: detected capacity change from 0 to 512 [ 69.855609][ T28] audit: type=1400 audit(1772519869.257:392): avc: denied { create } for pid=4607 comm="syz.5.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.888243][ T4605] loop0: detected capacity change from 0 to 512 [ 69.905970][ T28] audit: type=1326 audit(1772519869.277:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.906003][ T28] audit: type=1326 audit(1772519869.277:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.906035][ T28] audit: type=1326 audit(1772519869.297:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.906062][ T28] audit: type=1326 audit(1772519869.297:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.908805][ T28] audit: type=1326 audit(1772519869.297:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.908912][ T28] audit: type=1326 audit(1772519869.297:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.908937][ T28] audit: type=1326 audit(1772519869.297:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 69.908963][ T28] audit: type=1326 audit(1772519869.297:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4609 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c97bc799 code=0x7ffc0000 [ 70.126705][ T4598] FAULT_INJECTION: forcing a failure. [ 70.126705][ T4598] name failslab, interval 1, probability 0, space 0, times 0 [ 70.152049][ T4598] CPU: 0 UID: 0 PID: 4598 Comm: syz.4.282 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.152126][ T4598] Tainted: [W]=WARN [ 70.152133][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.152146][ T4598] Call Trace: [ 70.152153][ T4598] [ 70.152162][ T4598] __dump_stack+0x1d/0x30 [ 70.152189][ T4598] dump_stack_lvl+0x95/0xd0 [ 70.152213][ T4598] dump_stack+0x15/0x1b [ 70.152301][ T4598] should_fail_ex+0x263/0x280 [ 70.152324][ T4598] should_failslab+0x8c/0xb0 [ 70.152390][ T4598] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 70.152414][ T4598] ? __d_alloc+0x37/0x340 [ 70.152442][ T4598] __d_alloc+0x37/0x340 [ 70.152536][ T4598] d_alloc_parallel+0x54/0xce0 [ 70.152563][ T4598] ? __rcu_read_unlock+0x4e/0x70 [ 70.152585][ T4598] ? __d_lookup+0x316/0x340 [ 70.152658][ T4598] path_openat+0x8b9/0x2050 [ 70.152759][ T4598] do_file_open+0x16c/0x290 [ 70.152800][ T4598] do_sys_openat2+0x94/0x130 [ 70.152828][ T4598] __x64_sys_openat+0xf2/0x120 [ 70.152855][ T4598] x64_sys_call+0x1e39/0x3020 [ 70.152907][ T4598] do_syscall_64+0x12c/0x370 [ 70.152928][ T4598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.152950][ T4598] RIP: 0033:0x7f5ac0cfc799 [ 70.152966][ T4598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.152982][ T4598] RSP: 002b:00007f5abf74f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.153005][ T4598] RAX: ffffffffffffffda RBX: 00007f5ac0f75fa0 RCX: 00007f5ac0cfc799 [ 70.153019][ T4598] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 70.153032][ T4598] RBP: 00007f5abf74f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.153046][ T4598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.153058][ T4598] R13: 00007f5ac0f76038 R14: 00007f5ac0f75fa0 R15: 00007ffdd7cf4008 [ 70.153075][ T4598] [ 70.386292][ T4616] loop2: detected capacity change from 0 to 128 [ 70.448496][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.590567][ T4628] netlink: 'syz.4.290': attribute type 10 has an invalid length. [ 70.621259][ T4628] __nla_validate_parse: 4 callbacks suppressed [ 70.621280][ T4628] netlink: 2 bytes leftover after parsing attributes in process `syz.4.290'. [ 70.671433][ T4628] bond0: entered promiscuous mode [ 70.703069][ T4628] bond_slave_0: entered promiscuous mode [ 70.703189][ T4628] bond_slave_1: entered promiscuous mode [ 70.703340][ T4628] bridge0: port 3(bond0) entered blocking state [ 70.703485][ T4628] bridge0: port 3(bond0) entered disabled state [ 70.703578][ T4628] bond0: entered allmulticast mode [ 70.703591][ T4628] bond_slave_0: entered allmulticast mode [ 70.703604][ T4628] bond_slave_1: entered allmulticast mode [ 70.709571][ T4634] FAULT_INJECTION: forcing a failure. [ 70.709571][ T4634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.709604][ T4634] CPU: 1 UID: 0 PID: 4634 Comm: syz.5.292 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.709634][ T4634] Tainted: [W]=WARN [ 70.709640][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.709663][ T4634] Call Trace: [ 70.709669][ T4634] [ 70.709676][ T4634] __dump_stack+0x1d/0x30 [ 70.709701][ T4634] dump_stack_lvl+0x95/0xd0 [ 70.709723][ T4634] dump_stack+0x15/0x1b [ 70.709763][ T4634] should_fail_ex+0x263/0x280 [ 70.709788][ T4634] should_fail+0xb/0x20 [ 70.709809][ T4634] should_fail_usercopy+0x1a/0x20 [ 70.709835][ T4634] _copy_from_user+0x1c/0xb0 [ 70.709902][ T4634] btf_new_fd+0x223/0x7d0 [ 70.709921][ T4634] ? ns_capable+0x7c/0xb0 [ 70.709940][ T4634] bpf_btf_load+0x112/0x130 [ 70.709964][ T4634] __sys_bpf+0x3d8/0x7e0 [ 70.710070][ T4634] __x64_sys_bpf+0x41/0x50 [ 70.710101][ T4634] x64_sys_call+0x10cb/0x3020 [ 70.710150][ T4634] do_syscall_64+0x12c/0x370 [ 70.710233][ T4634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.710254][ T4634] RIP: 0033:0x7f8f480cc799 [ 70.710269][ T4634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.710289][ T4634] RSP: 002b:00007f8f46b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.710312][ T4634] RAX: ffffffffffffffda RBX: 00007f8f48345fa0 RCX: 00007f8f480cc799 [ 70.710327][ T4634] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 70.710355][ T4634] RBP: 00007f8f46b27090 R08: 0000000000000000 R09: 0000000000000000 [ 70.710369][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.710383][ T4634] R13: 00007f8f48346038 R14: 00007f8f48345fa0 R15: 00007ffce175ab28 [ 70.710404][ T4634] [ 70.713347][ T4628] bridge0: port 3(bond0) entered blocking state [ 70.713389][ T4628] bridge0: port 3(bond0) entered forwarding state [ 70.734832][ T4636] loop2: detected capacity change from 0 to 512 [ 70.738161][ T4636] EXT4-fs: Ignoring removed orlov option [ 70.740311][ T4638] loop5: detected capacity change from 0 to 512 [ 70.740605][ T4638] EXT4-fs: Ignoring removed orlov option [ 70.741338][ T4636] EXT4-fs (loop2): 1 truncate cleaned up [ 70.741754][ T4636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.755395][ T4636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.293: bg 0: block 465: padding at end of block bitmap is not set [ 70.773462][ T4605] EXT4-fs (loop0): 1 orphan inode deleted [ 70.781881][ T4638] EXT4-fs (loop5): 1 truncate cleaned up [ 70.782254][ T4638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.797729][ T4638] netlink: 'syz.5.294': attribute type 1 has an invalid length. [ 70.817958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.864927][ T4605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.954451][ T4638] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.294: bg 0: block 465: padding at end of block bitmap is not set [ 70.962129][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.142855][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.144249][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.272181][ T4656] netlink: 'syz.4.299': attribute type 12 has an invalid length. [ 71.293903][ T4656] netlink: 'syz.4.299': attribute type 29 has an invalid length. [ 71.315698][ T4656] netlink: 148 bytes leftover after parsing attributes in process `syz.4.299'. [ 71.376311][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 71.404864][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 71.422450][ T4673] loop5: detected capacity change from 0 to 512 [ 71.456756][ T4671] FAULT_INJECTION: forcing a failure. [ 71.456756][ T4671] name failslab, interval 1, probability 0, space 0, times 0 [ 71.471538][ T4673] EXT4-fs: Ignoring removed orlov option [ 71.507914][ T4677] lo speed is unknown, defaulting to 1000 [ 71.515708][ T4671] CPU: 1 UID: 0 PID: 4671 Comm: syz.3.304 Tainted: G W syzkaller #0 PREEMPT(full) [ 71.515823][ T4671] Tainted: [W]=WARN [ 71.515832][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.515845][ T4671] Call Trace: [ 71.515851][ T4671] [ 71.515859][ T4671] __dump_stack+0x1d/0x30 [ 71.515887][ T4671] dump_stack_lvl+0x95/0xd0 [ 71.515951][ T4671] dump_stack+0x15/0x1b [ 71.515976][ T4671] should_fail_ex+0x263/0x280 [ 71.516082][ T4671] ? kernfs_get_tree+0x56/0x4a0 [ 71.516104][ T4671] should_failslab+0x8c/0xb0 [ 71.516126][ T4671] __kmalloc_cache_noprof+0x5f/0x410 [ 71.516153][ T4671] kernfs_get_tree+0x56/0x4a0 [ 71.516224][ T4671] ? cgroup_do_get_tree+0x41/0x350 [ 71.516310][ T4671] cgroup_do_get_tree+0x86/0x350 [ 71.516404][ T4671] cgroup_get_tree+0xd2/0x1f0 [ 71.516436][ T4671] vfs_get_tree+0x57/0x1d0 [ 71.516539][ T4671] vfs_cmd_create+0x8a/0x140 [ 71.516567][ T4671] vfs_fsconfig_locked+0x6f/0x210 [ 71.516649][ T4671] __se_sys_fsconfig+0x684/0x7d0 [ 71.516688][ T4671] __x64_sys_fsconfig+0x67/0x80 [ 71.516785][ T4671] x64_sys_call+0xd6e/0x3020 [ 71.516810][ T4671] do_syscall_64+0x12c/0x370 [ 71.516830][ T4671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.516851][ T4671] RIP: 0033:0x7f80c97bc799 [ 71.516906][ T4671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.516972][ T4671] RSP: 002b:00007f80c820f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 71.516994][ T4671] RAX: ffffffffffffffda RBX: 00007f80c9a35fa0 RCX: 00007f80c97bc799 [ 71.517008][ T4671] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000b [ 71.517022][ T4671] RBP: 00007f80c820f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.517035][ T4671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.517048][ T4671] R13: 00007f80c9a36038 R14: 00007f80c9a35fa0 R15: 00007ffe5578f308 [ 71.517067][ T4671] [ 71.524435][ T4673] EXT4-fs (loop5): 1 truncate cleaned up [ 71.524705][ T4677] lo speed is unknown, defaulting to 1000 [ 71.549646][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 71.735527][ T4673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.769079][ T4680] bridge_slave_1: left allmulticast mode [ 71.775923][ T4680] bridge_slave_1: left promiscuous mode [ 71.794678][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.822793][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.823677][ T4688] 9p: Bad value for 'wfdno' [ 72.013172][ T4696] loop3: detected capacity change from 0 to 8192 [ 72.026490][ T4704] loop0: detected capacity change from 0 to 512 [ 72.053468][ T3512] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.134853][ T4708] ext4: Unknown parameter 'nouser_xattr' [ 72.232810][ T4713] syzkaller0: entered promiscuous mode [ 72.238794][ T4713] syzkaller0: entered allmulticast mode [ 72.250340][ T4713] netlink: 44 bytes leftover after parsing attributes in process `syz.5.318'. [ 72.317216][ T4715] EXT4-fs: Ignoring removed orlov option [ 72.324817][ T4715] EXT4-fs (loop5): 1 truncate cleaned up [ 72.331885][ T4715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.356125][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.426109][ T4719] FAULT_INJECTION: forcing a failure. [ 72.426109][ T4719] name failslab, interval 1, probability 0, space 0, times 0 [ 72.440132][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: syz.5.320 Tainted: G W syzkaller #0 PREEMPT(full) [ 72.440171][ T4719] Tainted: [W]=WARN [ 72.440187][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.440198][ T4719] Call Trace: [ 72.440206][ T4719] [ 72.440215][ T4719] __dump_stack+0x1d/0x30 [ 72.440326][ T4719] dump_stack_lvl+0x95/0xd0 [ 72.440417][ T4719] dump_stack+0x15/0x1b [ 72.440437][ T4719] should_fail_ex+0x263/0x280 [ 72.440459][ T4719] should_failslab+0x8c/0xb0 [ 72.440481][ T4719] __kmalloc_noprof+0xb8/0x4e0 [ 72.440568][ T4719] ? copy_splice_read+0xc2/0x6c0 [ 72.440592][ T4719] copy_splice_read+0xc2/0x6c0 [ 72.440610][ T4719] ? _parse_integer_limit+0x170/0x190 [ 72.440672][ T4719] ? __pfx_copy_splice_read+0x10/0x10 [ 72.440698][ T4719] splice_file_to_pipe+0x237/0x390 [ 72.440836][ T4719] do_splice+0xc46/0x10b0 [ 72.440862][ T4719] ? proc_fail_nth_write+0x13b/0x160 [ 72.440917][ T4719] ? __rcu_read_unlock+0x4e/0x70 [ 72.440939][ T4719] ? __fget_files+0x184/0x1c0 [ 72.440963][ T4719] __se_sys_splice+0x26c/0x3a0 [ 72.440989][ T4719] __x64_sys_splice+0x78/0x90 [ 72.441067][ T4719] x64_sys_call+0x16ef/0x3020 [ 72.441092][ T4719] do_syscall_64+0x12c/0x370 [ 72.441142][ T4719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.441168][ T4719] RIP: 0033:0x7f8f480cc799 [ 72.441189][ T4719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.441255][ T4719] RSP: 002b:00007f8f46b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 72.441281][ T4719] RAX: ffffffffffffffda RBX: 00007f8f48346090 RCX: 00007f8f480cc799 [ 72.441334][ T4719] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007 [ 72.441346][ T4719] RBP: 00007f8f46b06090 R08: 000000007ffff000 R09: 0000000000000000 [ 72.441484][ T4719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.441496][ T4719] R13: 00007f8f48346128 R14: 00007f8f48346090 R15: 00007ffce175ab28 [ 72.441587][ T4719] [ 72.917549][ T4728] EXT4-fs (loop2): inodes count not valid: 27 vs 32 [ 72.956580][ T4734] netlink: 7 bytes leftover after parsing attributes in process `syz.2.325'. [ 72.965601][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.325'. [ 72.974453][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.325'. [ 73.239431][ T4743] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 73.247979][ T4743] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 73.257102][ T4743] EXT4-fs (loop2): 1 truncate cleaned up [ 73.263456][ T4743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.318326][ T4743] tipc: Started in network mode [ 73.324802][ T4743] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 73.334761][ T4743] tipc: Enabled bearer , priority 10 [ 73.402162][ T4747] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 73.417855][ T4747] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=4747 comm=syz.2.328 [ 73.477285][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.500415][ T4749] EXT4-fs: Ignoring removed orlov option [ 73.508192][ T4749] EXT4-fs (loop2): 1 truncate cleaned up [ 73.514287][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.539171][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.851557][ T4760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 74.056601][ T4767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.066934][ T4767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 74.095171][ T3677] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.095185][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 74.128778][ T4767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.139813][ T4767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 74.192973][ T4767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.203778][ T4767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 74.278175][ T4767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.288675][ T4767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 74.341658][ T3514] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 74.350106][ T3514] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 74.362596][ T3514] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 74.371058][ T3514] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 74.382895][ T3514] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 74.391707][ T3514] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 74.404106][ T3514] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 74.412630][ T3514] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 74.445172][ T9] tipc: Node number set to 10070698 [ 74.541295][ T4780] EXT4-fs: Ignoring removed orlov option [ 74.568827][ T4780] EXT4-fs (loop3): 1 truncate cleaned up [ 74.579787][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.605041][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.692017][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 74.692100][ T28] audit: type=1326 audit(1772519874.107:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efdafc799 code=0x7ffc0000 [ 74.722089][ T28] audit: type=1326 audit(1772519874.127:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efdafc799 code=0x7ffc0000 [ 74.746394][ T28] audit: type=1326 audit(1772519874.127:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1efdafc502 code=0x7ffc0000 [ 74.779272][ T28] audit: type=1326 audit(1772519874.127:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1efdafc597 code=0x7ffc0000 [ 74.807615][ T28] audit: type=1326 audit(1772519874.127:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1efdab9491 code=0x7ffc0000 [ 74.833836][ T28] audit: type=1326 audit(1772519874.127:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1efdafd589 code=0x7ffc0000 [ 74.857862][ T28] audit: type=1326 audit(1772519874.127:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1efdab94fb code=0x7ffc0000 [ 74.882055][ T28] audit: type=1326 audit(1772519874.127:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efdafc799 code=0x7ffc0000 [ 74.907577][ T28] audit: type=1326 audit(1772519874.127:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efdafc799 code=0x7ffc0000 [ 74.931614][ T28] audit: type=1326 audit(1772519874.127:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1efdab8bec code=0x7ffc0000 [ 75.001044][ T4795] set_capacity_and_notify: 8 callbacks suppressed [ 75.001257][ T4795] loop2: detected capacity change from 0 to 512 [ 75.024496][ T4805] loop3: detected capacity change from 0 to 4096 [ 75.066389][ T4805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.106696][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.143125][ T4795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.158875][ T4795] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.316507][ T4819] bond1: option lacp_active: invalid value (5) [ 75.437147][ T4822] loop4: detected capacity change from 0 to 4096 [ 75.507342][ T4824] sctp: [Deprecated]: syz.5.354 (pid 4824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.507342][ T4824] Use struct sctp_sack_info instead [ 75.575317][ T4819] bond1 (unregistering): Released all slaves [ 75.594157][ T4833] FAULT_INJECTION: forcing a failure. [ 75.594157][ T4833] name failslab, interval 1, probability 0, space 0, times 0 [ 75.625036][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.634466][ T4833] CPU: 0 UID: 0 PID: 4833 Comm: syz.4.355 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.634503][ T4833] Tainted: [W]=WARN [ 75.634510][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.634523][ T4833] Call Trace: [ 75.634530][ T4833] [ 75.634538][ T4833] __dump_stack+0x1d/0x30 [ 75.634562][ T4833] dump_stack_lvl+0x95/0xd0 [ 75.634591][ T4833] dump_stack+0x15/0x1b [ 75.634614][ T4833] should_fail_ex+0x263/0x280 [ 75.634641][ T4833] should_failslab+0x8c/0xb0 [ 75.634662][ T4833] kmem_cache_alloc_noprof+0x66/0x400 [ 75.634681][ T4833] ? vm_area_dup+0x33/0x2c0 [ 75.634703][ T4833] vm_area_dup+0x33/0x2c0 [ 75.634723][ T4833] __split_vma+0xe9/0x640 [ 75.634744][ T4833] ? mas_find+0x5d5/0x700 [ 75.634762][ T4833] vms_gather_munmap_vmas+0x2bc/0x850 [ 75.634801][ T4833] do_vmi_align_munmap+0x1e1/0x400 [ 75.634837][ T4833] do_vmi_munmap+0x1da/0x220 [ 75.634864][ T4833] __vm_munmap+0x1a8/0x290 [ 75.634885][ T4833] __x64_sys_munmap+0x36/0x50 [ 75.634913][ T4833] x64_sys_call+0x9c0/0x3020 [ 75.634943][ T4833] do_syscall_64+0x12c/0x370 [ 75.634967][ T4833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.634986][ T4833] RIP: 0033:0x7f5ac0cfc5c7 [ 75.635002][ T4833] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.635018][ T4833] RSP: 002b:00007f5abf74dd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 75.635040][ T4833] RAX: ffffffffffffffda RBX: 00007f5ab8000000 RCX: 00007f5ac0cfc5c7 [ 75.635056][ T4833] RDX: 0000000000000000 RSI: 000000000372f000 RDI: 00007f5abc000000 [ 75.635071][ T4833] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 75.635089][ T4833] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 75.635103][ T4833] R13: 0000000000001000 R14: 00007f5abc000000 R15: 00000000008d1000 [ 75.635124][ T4833] [ 75.850081][ T4824] loop5: detected capacity change from 0 to 512 [ 75.942174][ T4846] xt_socket: unknown flags 0x48 [ 75.984759][ T4824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.024651][ T4849] __nla_validate_parse: 4 callbacks suppressed [ 76.024669][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 76.139536][ T4824] EXT4-fs (loop5): 1 truncate cleaned up [ 76.224020][ T4824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.392420][ T4859] loop0: detected capacity change from 0 to 512 [ 76.476158][ T4859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.527978][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.564015][ T4859] EXT4-fs (loop0): 1 truncate cleaned up [ 76.731629][ T4859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.899662][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.027338][ T4892] FAULT_INJECTION: forcing a failure. [ 77.027338][ T4892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.051561][ T4892] CPU: 0 UID: 0 PID: 4892 Comm: syz.2.371 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.051651][ T4892] Tainted: [W]=WARN [ 77.051660][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.051672][ T4892] Call Trace: [ 77.051679][ T4892] [ 77.051687][ T4892] __dump_stack+0x1d/0x30 [ 77.051719][ T4892] dump_stack_lvl+0x95/0xd0 [ 77.051796][ T4892] dump_stack+0x15/0x1b [ 77.051819][ T4892] should_fail_ex+0x263/0x280 [ 77.051850][ T4892] should_fail+0xb/0x20 [ 77.051874][ T4892] should_fail_usercopy+0x1a/0x20 [ 77.051949][ T4892] _copy_to_user+0x20/0xa0 [ 77.051978][ T4892] simple_read_from_buffer+0xb5/0x130 [ 77.052001][ T4892] proc_fail_nth_read+0x10e/0x150 [ 77.052033][ T4892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.052138][ T4892] vfs_read+0x1ab/0x7f0 [ 77.052170][ T4892] ? __rcu_read_unlock+0x4e/0x70 [ 77.052193][ T4892] ? __fget_files+0x184/0x1c0 [ 77.052302][ T4892] ? mutex_lock+0x57/0x90 [ 77.052332][ T4892] ksys_read+0xdc/0x1a0 [ 77.052389][ T4892] __x64_sys_read+0x40/0x50 [ 77.052417][ T4892] x64_sys_call+0x2886/0x3020 [ 77.052513][ T4892] do_syscall_64+0x12c/0x370 [ 77.052533][ T4892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.052556][ T4892] RIP: 0033:0x7f7d2c82cfce [ 77.052630][ T4892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.052650][ T4892] RSP: 002b:00007f7d2b2c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.052675][ T4892] RAX: ffffffffffffffda RBX: 00007f7d2b2c76c0 RCX: 00007f7d2c82cfce [ 77.052754][ T4892] RDX: 000000000000000f RSI: 00007f7d2b2c70a0 RDI: 0000000000000003 [ 77.052781][ T4892] RBP: 00007f7d2b2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.052794][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.052808][ T4892] R13: 00007f7d2cae6038 R14: 00007f7d2cae5fa0 R15: 00007ffc164ea348 [ 77.052828][ T4892] [ 77.120593][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 77.129700][ T4899] FAULT_INJECTION: forcing a failure. [ 77.129700][ T4899] name failslab, interval 1, probability 0, space 0, times 0 [ 77.129730][ T4899] CPU: 1 UID: 0 PID: 4899 Comm: syz.4.373 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.129770][ T4899] Tainted: [W]=WARN [ 77.129778][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.129792][ T4899] Call Trace: [ 77.129800][ T4899] [ 77.129865][ T4899] __dump_stack+0x1d/0x30 [ 77.129892][ T4899] dump_stack_lvl+0x95/0xd0 [ 77.129989][ T4899] dump_stack+0x15/0x1b [ 77.130014][ T4899] should_fail_ex+0x263/0x280 [ 77.130042][ T4899] ? __pfx_sock_alloc_inode+0x10/0x10 [ 77.130065][ T4899] should_failslab+0x8c/0xb0 [ 77.130122][ T4899] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 77.130149][ T4899] ? sock_alloc_inode+0x34/0xa0 [ 77.130168][ T4899] ? __pfx_sock_alloc_inode+0x10/0x10 [ 77.130187][ T4899] sock_alloc_inode+0x34/0xa0 [ 77.130290][ T4899] alloc_inode+0x40/0x170 [ 77.130317][ T4899] do_accept+0xa0/0x390 [ 77.130343][ T4899] ? _raw_spin_lock+0x52/0xa0 [ 77.130420][ T4899] __sys_accept4+0xbe/0x170 [ 77.130449][ T4899] __x64_sys_accept+0x42/0x50 [ 77.130548][ T4899] x64_sys_call+0x2344/0x3020 [ 77.130633][ T4899] do_syscall_64+0x12c/0x370 [ 77.130655][ T4899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.130680][ T4899] RIP: 0033:0x7f5ac0cfc799 [ 77.130697][ T4899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.130774][ T4899] RSP: 002b:00007f5abf72e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 77.130796][ T4899] RAX: ffffffffffffffda RBX: 00007f5ac0f76090 RCX: 00007f5ac0cfc799 [ 77.130812][ T4899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 77.130826][ T4899] RBP: 00007f5abf72e090 R08: 0000000000000000 R09: 0000000000000000 [ 77.130840][ T4899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.130859][ T4899] R13: 00007f5ac0f76128 R14: 00007f5ac0f76090 R15: 00007ffdd7cf4008 [ 77.130881][ T4899] [ 77.183766][ T4898] loop0: detected capacity change from 0 to 4096 [ 77.190966][ T4898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.815937][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.959419][ T4910] loop5: detected capacity change from 0 to 512 [ 77.965906][ T4910] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.071133][ T4910] EXT4-fs error (device loop5): ext4_quota_enable:7188: comm syz.5.376: Bad quota inum: 2, type: 1 [ 78.071342][ T4910] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 78.202850][ T4919] loop4: detected capacity change from 0 to 512 [ 78.210846][ T4919] EXT4-fs: Ignoring removed nobh option [ 78.210995][ T4919] ext4: Unknown parameter 'nouser_xattr' [ 78.262434][ T4920] loop0: detected capacity change from 0 to 256 [ 78.310651][ T4920] FAT-fs (loop0): Directory bread(block 64) failed [ 78.310677][ T4920] FAT-fs (loop0): Directory bread(block 65) failed [ 78.310733][ T4920] FAT-fs (loop0): Directory bread(block 66) failed [ 78.310749][ T4920] FAT-fs (loop0): Directory bread(block 67) failed [ 78.310824][ T4920] FAT-fs (loop0): Directory bread(block 68) failed [ 78.310840][ T4920] FAT-fs (loop0): Directory bread(block 69) failed [ 78.310943][ T4920] FAT-fs (loop0): Directory bread(block 70) failed [ 78.310959][ T4920] FAT-fs (loop0): Directory bread(block 71) failed [ 78.311138][ T4920] FAT-fs (loop0): Directory bread(block 72) failed [ 78.311154][ T4920] FAT-fs (loop0): Directory bread(block 73) failed [ 78.667482][ T4920] bridge_slave_0: left allmulticast mode [ 78.667745][ T4920] bridge_slave_0: left promiscuous mode [ 78.670472][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.747244][ T4920] bridge_slave_1: left allmulticast mode [ 78.747694][ T4920] bridge_slave_1: left promiscuous mode [ 78.753038][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.826008][ T4920] bond0: (slave bond_slave_0): Releasing backup interface [ 78.879443][ T4920] bond0: (slave bond_slave_1): Releasing backup interface [ 78.971975][ T4920] team0: Port device team_slave_0 removed [ 79.036444][ T4920] team0: Port device team_slave_1 removed [ 79.057836][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.057975][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.087409][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.087636][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.133607][ T4920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.237857][ T3367] lo speed is unknown, defaulting to 1000 [ 79.316716][ T3583] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 79.354458][ T4923] loop2: detected capacity change from 0 to 512 [ 79.384878][ T4923] FAT-fs (loop2): Directory bread(block 199916) failed [ 79.384922][ T4923] FAT-fs (loop2): Directory bread(block 199917) failed [ 79.384960][ T4923] FAT-fs (loop2): Directory bread(block 199918) failed [ 79.385041][ T4923] FAT-fs (loop2): Directory bread(block 199919) failed [ 79.385059][ T4923] FAT-fs (loop2): Directory bread(block 199920) failed [ 79.385179][ T4923] FAT-fs (loop2): Directory bread(block 199921) failed [ 79.385198][ T4923] FAT-fs (loop2): Directory bread(block 199922) failed [ 79.385242][ T4923] FAT-fs (loop2): Directory bread(block 199923) failed [ 79.395781][ T4923] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 79.709374][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 79.709399][ T28] audit: type=1326 audit(1772519879.127:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.710093][ T28] audit: type=1326 audit(1772519879.127:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.711196][ T28] audit: type=1326 audit(1772519879.127:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.711429][ T28] audit: type=1326 audit(1772519879.127:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.711652][ T28] audit: type=1326 audit(1772519879.127:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.711978][ T28] audit: type=1326 audit(1772519879.127:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.712191][ T28] audit: type=1326 audit(1772519879.127:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.712548][ T28] audit: type=1326 audit(1772519879.127:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.712804][ T28] audit: type=1326 audit(1772519879.127:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 79.713158][ T28] audit: type=1326 audit(1772519879.127:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2c86c799 code=0x7ffc0000 [ 81.154989][ T4966] loop4: detected capacity change from 0 to 1024 [ 81.161930][ T4966] EXT4-fs: Ignoring removed orlov option [ 81.167898][ T4966] EXT4-fs: Ignoring removed nobh option [ 81.181569][ T4966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.220847][ T4970] loop3: detected capacity change from 0 to 1024 [ 81.269097][ T4970] EXT4-fs: inline encryption not supported [ 81.290106][ T4975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 81.298119][ T4970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.306680][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 81.308240][ T4976] No such timeout policy "syz0" [ 81.319809][ T4970] ext4: Unknown parameter 'mask' [ 81.403103][ T3579] IPVS: starting estimator thread 0... [ 81.418918][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.495245][ T4980] IPVS: using max 2592 ests per chain, 129600 per kthread [ 81.617056][ T4996] netlink: 27 bytes leftover after parsing attributes in process `syz.4.404'. [ 81.733612][ T5002] FAULT_INJECTION: forcing a failure. [ 81.733612][ T5002] name failslab, interval 1, probability 0, space 0, times 0 [ 81.746756][ T5002] CPU: 1 UID: 0 PID: 5002 Comm: syz.4.407 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.746861][ T5002] Tainted: [W]=WARN [ 81.746869][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.746940][ T5002] Call Trace: [ 81.746947][ T5002] [ 81.746955][ T5002] __dump_stack+0x1d/0x30 [ 81.747169][ T5002] dump_stack_lvl+0x95/0xd0 [ 81.747195][ T5002] dump_stack+0x15/0x1b [ 81.747237][ T5002] should_fail_ex+0x263/0x280 [ 81.747262][ T5002] should_failslab+0x8c/0xb0 [ 81.747286][ T5002] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 81.747312][ T5002] ? __alloc_skb+0x2d6/0x690 [ 81.747364][ T5002] __alloc_skb+0x2d6/0x690 [ 81.747385][ T5002] ? tcp_write_queue_purge+0x73e/0x760 [ 81.747495][ T5002] tcp_stream_alloc_skb+0x30/0x320 [ 81.747517][ T5002] tcp_connect+0xd0d/0x25e0 [ 81.747641][ T5002] ? tcp_fastopen_defer_connect+0x69/0x1e0 [ 81.747665][ T5002] ? secure_tcpv6_ts_off+0x8e/0x120 [ 81.747746][ T5002] tcp_v6_connect+0xc04/0xcf0 [ 81.747780][ T5002] ? avc_has_perm_noaudit+0xab/0x130 [ 81.747838][ T5002] __inet_stream_connect+0x169/0x7f0 [ 81.747872][ T5002] ? tcp_sendmsg_fastopen+0x172/0x520 [ 81.747896][ T5002] ? should_failslab+0x8c/0xb0 [ 81.747974][ T5002] ? __kmalloc_cache_noprof+0x18a/0x410 [ 81.748005][ T5002] tcp_sendmsg_fastopen+0x43a/0x520 [ 81.748073][ T5002] tcp_sendmsg_locked+0x2939/0x2de0 [ 81.748095][ T5002] ? __rcu_read_unlock+0x4e/0x70 [ 81.748166][ T5002] ? terminate_walk+0x1e6/0x210 [ 81.748276][ T5002] ? path_openat+0x1ab2/0x2050 [ 81.748317][ T5002] ? path_openat+0x1b01/0x2050 [ 81.748347][ T5002] ? __rcu_read_unlock+0x4e/0x70 [ 81.748414][ T5002] ? avc_has_perm_noaudit+0xab/0x130 [ 81.748440][ T5002] ? avc_has_perm+0x101/0x190 [ 81.748466][ T5002] ? _raw_spin_lock_bh+0x56/0xb0 [ 81.748495][ T5002] ? __pfx_tcp_sendmsg+0x10/0x10 [ 81.748518][ T5002] tcp_sendmsg+0x2f/0x50 [ 81.748589][ T5002] inet6_sendmsg+0x76/0xd0 [ 81.748625][ T5002] __sys_sendto+0x325/0x4d0 [ 81.748685][ T5002] __x64_sys_sendto+0x76/0x90 [ 81.748793][ T5002] x64_sys_call+0x2d35/0x3020 [ 81.748823][ T5002] do_syscall_64+0x12c/0x370 [ 81.748846][ T5002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.748939][ T5002] RIP: 0033:0x7f5ac0cfc799 [ 81.748959][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.748978][ T5002] RSP: 002b:00007f5abf74f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 81.749010][ T5002] RAX: ffffffffffffffda RBX: 00007f5ac0f75fa0 RCX: 00007f5ac0cfc799 [ 81.749110][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 81.749124][ T5002] RBP: 00007f5abf74f090 R08: 0000200000b63fe4 R09: 000000000000001c [ 81.749139][ T5002] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 81.749153][ T5002] R13: 00007f5ac0f76038 R14: 00007f5ac0f75fa0 R15: 00007ffdd7cf4008 [ 81.749185][ T5002] [ 82.075707][ T5004] team_slave_0: entered promiscuous mode [ 82.081723][ T5004] team_slave_1: entered promiscuous mode [ 82.347620][ T5018] loop3: detected capacity change from 0 to 512 [ 82.366436][ T5018] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.412: inode has both inline data and extents flags [ 82.380004][ T5018] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.380182][ T5018] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.412: couldn't read orphan inode 15 (err -117) [ 82.389530][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 82.389549][ C1] EXT4-fs (loop3): initial error at time 1772519881: ext4_orphan_get:1391: inode 15 [ 82.389591][ C1] EXT4-fs (loop3): last error at time 1772519881: ext4_orphan_get:1391: inode 15 [ 82.428101][ T5018] loop3: lost filesystem error report for type 5 error -117 [ 82.428857][ T5018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.547764][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.950751][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.960375][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.202636][ T5048] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.213044][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 83.909650][ T5070] lo speed is unknown, defaulting to 1000 [ 83.916779][ T5070] lo speed is unknown, defaulting to 1000 [ 84.008915][ T5071] loop4: detected capacity change from 0 to 512 [ 84.679573][ T5071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.694299][ T5071] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.759638][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 84.759653][ T28] audit: type=1400 audit(1772519884.177:708): avc: denied { create } for pid=5063 comm="syz.4.427" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.809490][ T5068] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.427: invalid size [ 84.840086][ T5068] EXT4-fs (loop4): Remounting filesystem read-only [ 84.945172][ T28] audit: type=1400 audit(1772519884.227:709): avc: denied { rename } for pid=5063 comm="syz.4.427" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.998433][ T28] audit: type=1400 audit(1772519884.227:710): avc: denied { rmdir } for pid=5063 comm="syz.4.427" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.046245][ T5087] loop3: detected capacity change from 0 to 128 [ 85.068144][ T3515] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.075358][ T28] audit: type=1400 audit(1772519884.267:711): avc: denied { mounton } for pid=5063 comm="syz.4.427" path="/82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.095538][ T3515] Quota error (device loop4): write_blk: dquota write failed [ 85.145336][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.147820][ T3515] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 85.163089][ T28] audit: type=1400 audit(1772519884.457:712): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.267683][ T5096] loop3: detected capacity change from 0 to 512 [ 85.309771][ T5096] EXT4-fs: Ignoring removed nobh option [ 85.325876][ T5096] EXT4-fs (loop3): 1 orphan inode deleted [ 85.332925][ T5096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.802100][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.921047][ T5115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.442'. [ 85.933537][ T5119] FAULT_INJECTION: forcing a failure. [ 85.933537][ T5119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.970610][ T5119] CPU: 1 UID: 0 PID: 5119 Comm: syz.3.443 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.970646][ T5119] Tainted: [W]=WARN [ 85.970655][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.970669][ T5119] Call Trace: [ 85.970677][ T5119] [ 85.970685][ T5119] __dump_stack+0x1d/0x30 [ 85.970711][ T5119] dump_stack_lvl+0x95/0xd0 [ 85.970804][ T5119] dump_stack+0x15/0x1b [ 85.970848][ T5119] should_fail_ex+0x263/0x280 [ 85.970874][ T5119] should_fail+0xb/0x20 [ 85.970895][ T5119] should_fail_usercopy+0x1a/0x20 [ 85.970930][ T5119] _copy_to_user+0x20/0xa0 [ 85.970960][ T5119] simple_read_from_buffer+0xb5/0x130 [ 85.970985][ T5119] proc_fail_nth_read+0x10e/0x150 [ 85.971017][ T5119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.971060][ T5119] vfs_read+0x1ab/0x7f0 [ 85.971092][ T5119] ? __rcu_read_unlock+0x4e/0x70 [ 85.971169][ T5119] ? __fget_files+0x184/0x1c0 [ 85.971194][ T5119] ? mutex_lock+0x57/0x90 [ 85.971277][ T5119] ksys_read+0xdc/0x1a0 [ 85.971309][ T5119] __x64_sys_read+0x40/0x50 [ 85.971426][ T5119] x64_sys_call+0x2886/0x3020 [ 85.971504][ T5119] do_syscall_64+0x12c/0x370 [ 85.971531][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.971553][ T5119] RIP: 0033:0x7f80c977cfce [ 85.971580][ T5119] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.971598][ T5119] RSP: 002b:00007f80c820efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.971620][ T5119] RAX: ffffffffffffffda RBX: 00007f80c820f6c0 RCX: 00007f80c977cfce [ 85.971635][ T5119] RDX: 000000000000000f RSI: 00007f80c820f0a0 RDI: 0000000000000005 [ 85.971653][ T5119] RBP: 00007f80c820f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.971666][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.971726][ T5119] R13: 00007f80c9a36038 R14: 00007f80c9a35fa0 R15: 00007ffe5578f308 [ 85.971745][ T5119] [ 86.767307][ T5151] loop5: detected capacity change from 0 to 512 [ 86.789086][ T5151] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 86.816987][ T5157] loop0: detected capacity change from 0 to 512 [ 86.871179][ T5157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.894699][ T5163] FAULT_INJECTION: forcing a failure. [ 86.894699][ T5163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.915209][ T5157] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.922063][ T5163] CPU: 1 UID: 0 PID: 5163 Comm: syz.4.456 Tainted: G W syzkaller #0 PREEMPT(full) [ 86.922099][ T5163] Tainted: [W]=WARN [ 86.922107][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.922118][ T5163] Call Trace: [ 86.922127][ T5163] [ 86.922136][ T5163] __dump_stack+0x1d/0x30 [ 86.922163][ T5163] dump_stack_lvl+0x95/0xd0 [ 86.922232][ T5163] dump_stack+0x15/0x1b [ 86.922253][ T5163] should_fail_ex+0x263/0x280 [ 86.922275][ T5163] should_fail+0xb/0x20 [ 86.922293][ T5163] should_fail_usercopy+0x1a/0x20 [ 86.922316][ T5163] _copy_to_user+0x20/0xa0 [ 86.922362][ T5163] simple_read_from_buffer+0xb5/0x130 [ 86.922385][ T5163] proc_fail_nth_read+0x10e/0x150 [ 86.922414][ T5163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.922442][ T5163] vfs_read+0x1ab/0x7f0 [ 86.922481][ T5163] ? io_poll_wake+0xf6/0x400 [ 86.922499][ T5163] ? __rcu_read_unlock+0x4e/0x70 [ 86.922552][ T5163] ? __fget_files+0x184/0x1c0 [ 86.922584][ T5163] ? __wake_up+0x88/0xb0 [ 86.922613][ T5163] ? mutex_lock+0x57/0x90 [ 86.922640][ T5163] ksys_read+0xdc/0x1a0 [ 86.922714][ T5163] __x64_sys_read+0x40/0x50 [ 86.922745][ T5163] x64_sys_call+0x2886/0x3020 [ 86.922794][ T5163] do_syscall_64+0x12c/0x370 [ 86.922815][ T5163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.922838][ T5163] RIP: 0033:0x7f5ac0cbcfce [ 86.922856][ T5163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.922873][ T5163] RSP: 002b:00007f5abf72dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.922934][ T5163] RAX: ffffffffffffffda RBX: 00007f5abf72e6c0 RCX: 00007f5ac0cbcfce [ 86.922949][ T5163] RDX: 000000000000000f RSI: 00007f5abf72e0a0 RDI: 0000000000000005 [ 86.922976][ T5163] RBP: 00007f5abf72e090 R08: 0000000000000000 R09: 0000000000000000 [ 86.922989][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.923002][ T5163] R13: 00007f5ac0f76128 R14: 00007f5ac0f76090 R15: 00007ffdd7cf4008 [ 86.923021][ T5163] [ 86.937614][ T5151] loop5: detected capacity change from 0 to 8192 [ 87.040206][ T28] audit: type=1400 audit(1772519886.447:713): avc: denied { nlmsg_read } for pid=5164 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.169127][ T28] audit: type=1400 audit(1772519886.547:714): avc: denied { mounton } for pid=5166 comm="syz.4.463" path="/proc/251/task" dev="proc" ino=10084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.169609][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.258511][ T5172] loop2: detected capacity change from 0 to 512 [ 87.295142][ T5172] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 87.456892][ T5184] FAULT_INJECTION: forcing a failure. [ 87.456892][ T5184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.487619][ T5184] CPU: 1 UID: 0 PID: 5184 Comm: syz.5.469 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.487651][ T5184] Tainted: [W]=WARN [ 87.487658][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.487724][ T5184] Call Trace: [ 87.487730][ T5184] [ 87.487737][ T5184] __dump_stack+0x1d/0x30 [ 87.487767][ T5184] dump_stack_lvl+0x95/0xd0 [ 87.487834][ T5184] dump_stack+0x15/0x1b [ 87.487867][ T5184] should_fail_ex+0x263/0x280 [ 87.487893][ T5184] should_fail+0xb/0x20 [ 87.487978][ T5184] should_fail_usercopy+0x1a/0x20 [ 87.488005][ T5184] _copy_from_user+0x1c/0xb0 [ 87.488033][ T5184] __sys_sendto+0x1ca/0x4d0 [ 87.488140][ T5184] __x64_sys_sendto+0x76/0x90 [ 87.488193][ T5184] x64_sys_call+0x2d35/0x3020 [ 87.488216][ T5184] do_syscall_64+0x12c/0x370 [ 87.488246][ T5184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.488270][ T5184] RIP: 0033:0x7f8f4808cfce [ 87.488323][ T5184] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.488349][ T5184] RSP: 002b:00007f8f46b25e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.488369][ T5184] RAX: ffffffffffffffda RBX: 00007f8f46b276c0 RCX: 00007f8f4808cfce [ 87.488383][ T5184] RDX: 0000000000000020 RSI: 00007f8f46b26000 RDI: 0000000000000005 [ 87.488455][ T5184] RBP: 0000000000000000 R08: 00007f8f46b25f04 R09: 000000000000000c [ 87.488469][ T5184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 87.488482][ T5184] R13: 00007f8f46b25f58 R14: 00007f8f46b26000 R15: 0000000000000000 [ 87.488502][ T5184] [ 87.530383][ T5190] FAULT_INJECTION: forcing a failure. [ 87.530383][ T5190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.675005][ T5190] CPU: 0 UID: 0 PID: 5190 Comm: syz.4.472 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.675108][ T5190] Tainted: [W]=WARN [ 87.675117][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.675130][ T5190] Call Trace: [ 87.675138][ T5190] [ 87.675146][ T5190] __dump_stack+0x1d/0x30 [ 87.675177][ T5190] dump_stack_lvl+0x95/0xd0 [ 87.675244][ T5190] dump_stack+0x15/0x1b [ 87.675269][ T5190] should_fail_ex+0x263/0x280 [ 87.675295][ T5190] should_fail+0xb/0x20 [ 87.675343][ T5190] should_fail_usercopy+0x1a/0x20 [ 87.675401][ T5190] _copy_from_user+0x1c/0xb0 [ 87.675427][ T5190] ___sys_sendmsg+0xc1/0x1e0 [ 87.675482][ T5190] __x64_sys_sendmsg+0xd4/0x160 [ 87.675526][ T5190] x64_sys_call+0x194c/0x3020 [ 87.675554][ T5190] do_syscall_64+0x12c/0x370 [ 87.675575][ T5190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.675601][ T5190] RIP: 0033:0x7f5ac0cfc799 [ 87.675667][ T5190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.675686][ T5190] RSP: 002b:00007f5abf74f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.675710][ T5190] RAX: ffffffffffffffda RBX: 00007f5ac0f75fa0 RCX: 00007f5ac0cfc799 [ 87.675727][ T5190] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 87.675743][ T5190] RBP: 00007f5abf74f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.675758][ T5190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.675824][ T5190] R13: 00007f5ac0f76038 R14: 00007f5ac0f75fa0 R15: 00007ffdd7cf4008 [ 87.675844][ T5190] [ 87.872716][ T5196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.474'. [ 87.988343][ T5198] loop4: detected capacity change from 0 to 736 [ 88.250260][ T5204] FAULT_INJECTION: forcing a failure. [ 88.250260][ T5204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.263944][ T5204] CPU: 0 UID: 0 PID: 5204 Comm: syz.3.477 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.263995][ T5204] Tainted: [W]=WARN [ 88.263999][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.264007][ T5204] Call Trace: [ 88.264012][ T5204] [ 88.264018][ T5204] __dump_stack+0x1d/0x30 [ 88.264036][ T5204] dump_stack_lvl+0x95/0xd0 [ 88.264124][ T5204] dump_stack+0x15/0x1b [ 88.264138][ T5204] should_fail_ex+0x263/0x280 [ 88.264160][ T5204] should_fail+0xb/0x20 [ 88.264172][ T5204] should_fail_usercopy+0x1a/0x20 [ 88.264187][ T5204] _copy_from_user+0x1c/0xb0 [ 88.264214][ T5204] ___sys_sendmsg+0xc1/0x1e0 [ 88.264283][ T5204] __x64_sys_sendmsg+0xd4/0x160 [ 88.264303][ T5204] x64_sys_call+0x194c/0x3020 [ 88.264320][ T5204] do_syscall_64+0x12c/0x370 [ 88.264376][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.264506][ T5204] RIP: 0033:0x7f80c97bc799 [ 88.264522][ T5204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.264534][ T5204] RSP: 002b:00007f80c820f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.264566][ T5204] RAX: ffffffffffffffda RBX: 00007f80c9a35fa0 RCX: 00007f80c97bc799 [ 88.264575][ T5204] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 88.264584][ T5204] RBP: 00007f80c820f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.264592][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.264612][ T5204] R13: 00007f80c9a36038 R14: 00007f80c9a35fa0 R15: 00007ffe5578f308 [ 88.264665][ T5204] [ 88.744578][ T5211] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 88.752546][ T5211] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.948186][ T5218] FAULT_INJECTION: forcing a failure. [ 88.948186][ T5218] name failslab, interval 1, probability 0, space 0, times 0 [ 88.961572][ T5218] CPU: 0 UID: 0 PID: 5218 Comm: syz.5.483 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.961658][ T5218] Tainted: [W]=WARN [ 88.961665][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.961676][ T5218] Call Trace: [ 88.961682][ T5218] [ 88.961697][ T5218] __dump_stack+0x1d/0x30 [ 88.961729][ T5218] dump_stack_lvl+0x95/0xd0 [ 88.961762][ T5218] dump_stack+0x15/0x1b [ 88.961786][ T5218] should_fail_ex+0x263/0x280 [ 88.961814][ T5218] should_failslab+0x8c/0xb0 [ 88.961837][ T5218] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 88.961858][ T5218] ? __alloc_skb+0x2d6/0x690 [ 88.961933][ T5218] __alloc_skb+0x2d6/0x690 [ 88.961959][ T5218] ? __alloc_skb+0x200/0x690 [ 88.961985][ T5218] alloc_skb_with_frags+0x7d/0x470 [ 88.962018][ T5218] sock_alloc_send_pskb+0x44d/0x500 [ 88.962102][ T5218] ? __rcu_read_unlock+0x4e/0x70 [ 88.962128][ T5218] packet_sendmsg+0x23c7/0x3370 [ 88.962201][ T5218] ? avc_has_perm+0x101/0x190 [ 88.962252][ T5218] ? selinux_socket_sendmsg+0x192/0x1c0 [ 88.962289][ T5218] ? __pfx_packet_sendmsg+0x10/0x10 [ 88.962314][ T5218] __sys_sendto+0x470/0x4d0 [ 88.962361][ T5218] __x64_sys_sendto+0x76/0x90 [ 88.962448][ T5218] x64_sys_call+0x2d35/0x3020 [ 88.962476][ T5218] do_syscall_64+0x12c/0x370 [ 88.962552][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.962572][ T5218] RIP: 0033:0x7f8f480cc799 [ 88.962658][ T5218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.962674][ T5218] RSP: 002b:00007f8f46b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.962697][ T5218] RAX: ffffffffffffffda RBX: 00007f8f48345fa0 RCX: 00007f8f480cc799 [ 88.962713][ T5218] RDX: 000000000000000e RSI: 0000200000000040 RDI: 0000000000000003 [ 88.962728][ T5218] RBP: 00007f8f46b27090 R08: 0000200000000080 R09: 0000000000000014 [ 88.962764][ T5218] R10: 000000002004c8a1 R11: 0000000000000246 R12: 0000000000000001 [ 88.962778][ T5218] R13: 00007f8f48346038 R14: 00007f8f48345fa0 R15: 00007ffce175ab28 [ 88.962796][ T5218] [ 89.183625][ T5220] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.190069][ T5220] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.353600][ T5238] FAULT_INJECTION: forcing a failure. [ 89.353600][ T5238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.374039][ T5222] lo speed is unknown, defaulting to 1000 [ 89.380000][ T5238] CPU: 1 UID: 0 PID: 5238 Comm: syz.3.491 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.380035][ T5238] Tainted: [W]=WARN [ 89.380092][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.380104][ T5238] Call Trace: [ 89.380112][ T5238] [ 89.380120][ T5238] __dump_stack+0x1d/0x30 [ 89.380188][ T5238] dump_stack_lvl+0x95/0xd0 [ 89.380214][ T5238] dump_stack+0x15/0x1b [ 89.380234][ T5238] should_fail_ex+0x263/0x280 [ 89.380257][ T5238] should_fail+0xb/0x20 [ 89.380344][ T5238] should_fail_usercopy+0x1a/0x20 [ 89.380436][ T5238] _copy_from_iter+0xcf/0xea0 [ 89.380504][ T5238] ? alloc_pages_mpol+0x217/0x260 [ 89.380541][ T5238] copy_page_from_iter+0x178/0x2a0 [ 89.380637][ T5238] tun_get_user+0xbbd/0x27c0 [ 89.380729][ T5238] ? ref_tracker_alloc+0x1eb/0x2f0 [ 89.380766][ T5238] tun_chr_write_iter+0x15e/0x210 [ 89.380835][ T5238] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 89.380925][ T5238] vfs_write+0x5a6/0x9f0 [ 89.380959][ T5238] ksys_write+0xdc/0x1a0 [ 89.381046][ T5238] __x64_sys_write+0x40/0x50 [ 89.381101][ T5238] x64_sys_call+0x27e1/0x3020 [ 89.381131][ T5238] do_syscall_64+0x12c/0x370 [ 89.381155][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.381181][ T5238] RIP: 0033:0x7f80c977cfce [ 89.381255][ T5238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.381278][ T5238] RSP: 002b:00007f80c820efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.381378][ T5238] RAX: ffffffffffffffda RBX: 00007f80c820f6c0 RCX: 00007f80c977cfce [ 89.381392][ T5238] RDX: 0000000000000033 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 89.381404][ T5238] RBP: 00007f80c820f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.381420][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.381435][ T5238] R13: 00007f80c9a36038 R14: 00007f80c9a35fa0 R15: 00007ffe5578f308 [ 89.381571][ T5238] [ 89.382025][ T5222] lo speed is unknown, defaulting to 1000 [ 89.597865][ T5240] bond1: entered allmulticast mode [ 89.615891][ T5243] bridge2: entered promiscuous mode [ 89.621346][ T5243] bridge2: entered allmulticast mode [ 89.669537][ T5247] loop3: detected capacity change from 0 to 1024 [ 89.682238][ T5247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 89.691334][ T5247] System zones: 0-1, 3-36 [ 89.697987][ T5247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.726274][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.775537][ T5256] loop3: detected capacity change from 0 to 1024 [ 89.782904][ T5256] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 89.817518][ T5256] tipc: Enabling of bearer rejected, failed to enable media [ 89.817550][ T28] audit: type=1400 audit(1772519889.227:715): avc: denied { map } for pid=5255 comm="syz.3.494" path="/dev/vcsa1" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 89.921664][ T28] audit: type=1400 audit(1772519889.277:716): avc: denied { execute } for pid=5255 comm="syz.3.494" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.038569][ T28] audit: type=1400 audit(1772519889.457:717): avc: denied { ioctl } for pid=5283 comm="syz.3.497" path="socket:[10989]" dev="sockfs" ino=10989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.229234][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.229339][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.630493][ T5305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.503'. [ 90.640470][ T28] audit: type=1326 audit(1772519890.057:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5304 comm="syz.0.503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1efdafc799 code=0x0 [ 90.678597][ T5307] loop5: detected capacity change from 0 to 256 [ 90.690425][ T5307] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.703357][ T28] audit: type=1400 audit(1772519890.117:719): avc: denied { create } for pid=5306 comm="syz.5.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.803129][ T5320] sctp: [Deprecated]: syz.2.507 (pid 5320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.803129][ T5320] Use struct sctp_sack_info instead [ 90.958045][ T5327] loop4: detected capacity change from 0 to 512 [ 90.980598][ T5327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.017405][ T5312] loop5: detected capacity change from 0 to 512 [ 91.031696][ T5327] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.043635][ T5332] FAULT_INJECTION: forcing a failure. [ 91.043635][ T5332] name failslab, interval 1, probability 0, space 0, times 0 [ 91.060574][ T5332] CPU: 1 UID: 0 PID: 5332 Comm: syz.3.511 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.060613][ T5332] Tainted: [W]=WARN [ 91.060619][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.060632][ T5332] Call Trace: [ 91.060641][ T5332] [ 91.060651][ T5332] __dump_stack+0x1d/0x30 [ 91.060681][ T5332] dump_stack_lvl+0x95/0xd0 [ 91.060720][ T5332] dump_stack+0x15/0x1b [ 91.060746][ T5332] should_fail_ex+0x263/0x280 [ 91.060769][ T5332] should_failslab+0x8c/0xb0 [ 91.060790][ T5332] kmem_cache_alloc_noprof+0x66/0x400 [ 91.060810][ T5332] ? skb_clone+0x151/0x1f0 [ 91.060907][ T5332] skb_clone+0x151/0x1f0 [ 91.060936][ T5332] __netlink_deliver_tap+0x2c9/0x500 [ 91.061026][ T5332] netlink_unicast+0x66b/0x690 [ 91.061050][ T5332] netlink_sendmsg+0x5c8/0x6f0 [ 91.061083][ T5332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.061151][ T5332] ____sys_sendmsg+0x5af/0x600 [ 91.061186][ T5332] ___sys_sendmsg+0x195/0x1e0 [ 91.061289][ T5332] __x64_sys_sendmsg+0xd4/0x160 [ 91.061395][ T5332] x64_sys_call+0x194c/0x3020 [ 91.061430][ T5332] do_syscall_64+0x12c/0x370 [ 91.061453][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.061486][ T5332] RIP: 0033:0x7f80c97bc799 [ 91.061506][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.061527][ T5332] RSP: 002b:00007f80c820f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.061644][ T5332] RAX: ffffffffffffffda RBX: 00007f80c9a35fa0 RCX: 00007f80c97bc799 [ 91.061662][ T5332] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 91.061677][ T5332] RBP: 00007f80c820f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.061689][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.061701][ T5332] R13: 00007f80c9a36038 R14: 00007f80c9a35fa0 R15: 00007ffe5578f308 [ 91.061795][ T5332] [ 91.061853][ T5332] netlink: 292 bytes leftover after parsing attributes in process `syz.3.511'. [ 91.275941][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.315499][ T28] audit: type=1400 audit(1772519890.737:720): avc: denied { bind } for pid=5311 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.381088][ T5339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.441562][ T28] audit: type=1400 audit(1772519890.857:721): avc: denied { remount } for pid=5338 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.442739][ T5339] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.489876][ T5339] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.495424][ T28] audit: type=1400 audit(1772519890.907:722): avc: denied { listen } for pid=5338 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.542331][ T28] audit: type=1400 audit(1772519890.957:723): avc: denied { accept } for pid=5338 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.557384][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 91.594481][ T5339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 91.615205][ T28] audit: type=1400 audit(1772519891.027:724): avc: denied { lock } for pid=5338 comm="syz.4.512" path="/102/file0/cpuset.effective_cpus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.670802][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.688525][ T5353] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 91.716876][ T5353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.738686][ T5353] bond2: entered allmulticast mode [ 91.849896][ T5364] set_capacity_and_notify: 1 callbacks suppressed [ 91.849917][ T5364] loop2: detected capacity change from 0 to 1024 [ 91.850305][ T5364] EXT4-fs: Ignoring removed bh option [ 91.882799][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.122218][ T5377] loop0: detected capacity change from 0 to 2048 [ 92.138224][ T5377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.202903][ T5377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.526: bg 0: block 234: padding at end of block bitmap is not set [ 92.225025][ T5388] loop3: detected capacity change from 0 to 512 [ 92.242369][ T5382] netlink: 44 bytes leftover after parsing attributes in process `syz.5.527'. [ 92.242457][ T5377] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 412 with error 28 [ 92.254456][ T5388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.271870][ T5377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.271870][ T5377] [ 92.287580][ T5377] EXT4-fs (loop0): Total free blocks count 0 [ 92.293744][ T5377] EXT4-fs (loop0): Free/Dirty block details [ 92.299994][ T5377] EXT4-fs (loop0): free_blocks=0 [ 92.305153][ T5377] EXT4-fs (loop0): dirty_blocks=416 [ 92.310726][ T5377] EXT4-fs (loop0): Block reservation details [ 92.317086][ T5377] EXT4-fs (loop0): i_reserved_data_blocks=26 [ 92.333456][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.527'. [ 92.346332][ T5388] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.368596][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.375522][ T5388] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 92.466230][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 92.486629][ T5388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 92.525787][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.539703][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.714577][ T5419] loop0: detected capacity change from 0 to 512 [ 92.756479][ T5419] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.538: inode has both inline data and extents flags [ 92.780207][ T5419] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.780503][ T5419] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.538: couldn't read orphan inode 15 (err -117) [ 92.790117][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 92.790149][ C0] EXT4-fs (loop0): initial error at time 1772519892: ext4_orphan_get:1391: inode 15 [ 92.790210][ C0] EXT4-fs (loop0): last error at time 1772519892: ext4_orphan_get:1391: inode 15 [ 92.850615][ T5419] loop0: lost filesystem error report for type 5 error -117 [ 92.906269][ T5419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.038892][ T5419] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.538: Directory hole found for htree leaf block 0 [ 93.106083][ T5433] loop2: detected capacity change from 0 to 128 [ 93.164658][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.379800][ T5438] loop2: detected capacity change from 0 to 128 [ 93.423530][ T5438] FAT-fs (loop2): bogus sectors per cluster 0 [ 93.423878][ T5438] FAT-fs (loop2): Can't find a valid FAT filesystem [ 93.701963][ T5443] FAULT_INJECTION: forcing a failure. [ 93.701963][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.725298][ T5443] CPU: 0 UID: 0 PID: 5443 Comm: syz.2.543 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.725358][ T5443] Tainted: [W]=WARN [ 93.725367][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.725381][ T5443] Call Trace: [ 93.725388][ T5443] [ 93.725397][ T5443] __dump_stack+0x1d/0x30 [ 93.725424][ T5443] dump_stack_lvl+0x95/0xd0 [ 93.725485][ T5443] dump_stack+0x15/0x1b [ 93.725561][ T5443] should_fail_ex+0x263/0x280 [ 93.725584][ T5443] should_fail+0xb/0x20 [ 93.725602][ T5443] should_fail_usercopy+0x1a/0x20 [ 93.725677][ T5443] strncpy_from_user+0x27/0x250 [ 93.725730][ T5443] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 93.725781][ T5443] do_getname+0x59/0x1c0 [ 93.725803][ T5443] getname_flags+0x1d/0x30 [ 93.725826][ T5443] do_readlinkat+0x5e/0x2f0 [ 93.725859][ T5443] __x64_sys_readlinkat+0x51/0x60 [ 93.725946][ T5443] x64_sys_call+0x2a54/0x3020 [ 93.725970][ T5443] do_syscall_64+0x12c/0x370 [ 93.725991][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.726088][ T5443] RIP: 0033:0x7f7d2c86c799 [ 93.726106][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.726125][ T5443] RSP: 002b:00007f7d2b2c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 93.726150][ T5443] RAX: ffffffffffffffda RBX: 00007f7d2cae5fa0 RCX: 00007f7d2c86c799 [ 93.726189][ T5443] RDX: 00002000000021c0 RSI: 0000200000000040 RDI: 0000000000000003 [ 93.726201][ T5443] RBP: 00007f7d2b2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.726214][ T5443] R10: 0000000000019000 R11: 0000000000000246 R12: 0000000000000001 [ 93.726226][ T5443] R13: 00007f7d2cae6038 R14: 00007f7d2cae5fa0 R15: 00007ffc164ea348 [ 93.726268][ T5443] [ 94.171521][ T5450] netlink: 92 bytes leftover after parsing attributes in process `syz.2.545'. [ 94.249435][ T5451] wireguard: wg2: Could not create IPv4 socket [ 94.371837][ T5462] loop5: detected capacity change from 0 to 512 [ 94.400969][ T5462] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 94.443256][ T5462] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 94.478925][ T5462] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.549: bad orphan inode 4 [ 94.518465][ T5462] loop5: lost filesystem error report for type 5 error -117 [ 94.518878][ T5462] EXT4-fs (loop5): 1 orphan inode deleted [ 94.526564][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 94.526593][ C1] EXT4-fs (loop5): initial error at time 1772519893: ext4_orphan_get:1417 [ 94.526619][ C1] EXT4-fs (loop5): last error at time 1772519893: ext4_orphan_get:1417 [ 94.563406][ T5474] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 94.582302][ T5474] netlink: 191880 bytes leftover after parsing attributes in process `syz.4.553'. [ 94.594509][ T5475] lo speed is unknown, defaulting to 1000 [ 94.602160][ T5475] lo speed is unknown, defaulting to 1000 [ 94.613814][ T5462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.802789][ T5481] lo speed is unknown, defaulting to 1000 [ 94.809327][ T5481] lo speed is unknown, defaulting to 1000 [ 94.958988][ T5485] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.549: lblock 0 mapped to illegal pblock 4 (length 1) [ 94.986568][ T28] kauditd_printk_skb: 404 callbacks suppressed [ 94.986585][ T28] audit: type=1400 audit(1772519894.397:1129): avc: denied { write } for pid=5461 comm="syz.5.549" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.976781][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.349082][ T28] audit: type=1107 audit(1772519895.757:1130): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 96.440184][ T5505] loop4: detected capacity change from 0 to 512 [ 96.486210][ T5505] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.520544][ T5505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.545532][ T5505] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.562: corrupted inode contents [ 96.575334][ T5505] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.576494][ T5505] EXT4-fs (loop4): Remounting filesystem read-only [ 96.585799][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 96.585833][ C1] EXT4-fs (loop4): initial error at time 1772519895: ext4_do_update_inode:5569: inode 16 [ 96.585861][ C1] EXT4-fs (loop4): last error at time 1772519895: ext4_do_update_inode:5569: inode 16 [ 96.645430][ T5505] EXT4-fs (loop4): 1 truncate cleaned up [ 96.807215][ T3512] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.825549][ T3512] Quota error (device loop4): write_blk: dquota write failed [ 96.833336][ T3512] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 96.843996][ T3512] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.856575][ T3512] Quota error (device loop4): write_blk: dquota write failed [ 96.864097][ T3512] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 96.885346][ T3512] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.905186][ T3512] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 96.924646][ T3512] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.945550][ T5505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.070406][ T5511] loop5: detected capacity change from 0 to 8192 [ 97.255054][ T5511] loop5: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 97.268568][ T5511] loop5: p2 size 134217732 extends beyond EOD, truncated [ 97.417224][ T5511] loop5: p4 size 14876672 extends beyond EOD, truncated [ 97.436398][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.446740][ T5511] loop5: p5 size 134217732 extends beyond EOD, truncated [ 97.471818][ T5516] loop2: detected capacity change from 0 to 512 [ 97.498476][ T5511] loop5: p6 size 14876672 extends beyond EOD, truncated [ 97.532948][ T5511] loop5: p7 size 134217732 extends beyond EOD, truncated [ 97.542714][ T5516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.556919][ T28] audit: type=1400 audit(1772519896.957:1131): avc: denied { bind } for pid=5521 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.585254][ T5516] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.587240][ T5511] loop5: p8 size 14876672 extends beyond EOD, [ 97.599705][ T28] audit: type=1400 audit(1772519896.957:1132): avc: denied { getopt } for pid=5521 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.625145][ T5511] truncated [ 97.642007][ T5511] loop5: p9 size 134217732 extends beyond EOD, truncated [ 97.654292][ T5516] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 97.664300][ T5511] loop5: p10 size 14876672 extends beyond EOD, truncated [ 97.672302][ T5516] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 97.697467][ T5511] loop5: p11 size 134217732 extends beyond EOD, truncated [ 97.706238][ T5511] loop5: p12 size 14876672 extends beyond EOD, truncated [ 97.714185][ T5511] loop5: p13 size 134217732 extends beyond EOD, truncated [ 97.722034][ T5511] loop5: p14 size 14876672 extends beyond EOD, truncated [ 97.729893][ T5511] loop5: p15 size 134217732 extends beyond EOD, truncated [ 97.738146][ T5511] loop5: p16 size 14876672 extends beyond EOD, truncated [ 97.758339][ T5511] loop5: p17 size 134217732 extends beyond EOD, truncated [ 97.776192][ T5511] loop5: p18 size 14876672 extends beyond EOD, truncated [ 97.792487][ T5511] loop5: p19 size 134217732 extends beyond EOD, truncated [ 97.809807][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.819950][ T5511] loop5: p20 size 14876672 extends beyond EOD, truncated [ 97.838639][ T5511] loop5: p21 size 134217732 extends beyond EOD, truncated [ 97.871208][ T5511] loop5: p22 size 14876672 extends beyond EOD, truncated [ 97.896394][ T5511] loop5: p23 size 134217732 extends beyond EOD, truncated [ 97.976380][ T5511] loop5: p24 size 14876672 extends beyond EOD, truncated [ 97.985669][ T5511] loop5: p25 size 134217732 extends beyond EOD, truncated [ 97.993928][ T5511] loop5: p26 size 14876672 extends beyond EOD, truncated [ 98.043142][ T5511] loop5: p27 size 134217732 extends beyond EOD, truncated [ 98.052704][ T5511] loop5: p28 size 14876672 extends beyond EOD, truncated [ 98.064595][ T5511] loop5: p29 size 134217732 extends beyond EOD, truncated [ 98.074787][ T5511] loop5: p30 size 14876672 extends beyond EOD, truncated [ 98.084291][ T5511] loop5: p31 size 134217732 extends beyond EOD, truncated [ 98.093772][ T5511] loop5: p32 size 14876672 extends beyond EOD, truncated [ 98.104105][ T5511] loop5: p33 size 134217732 extends beyond EOD, truncated [ 98.114558][ T5511] loop5: p34 size 14876672 extends beyond EOD, truncated [ 98.124549][ T5511] loop5: p35 size 134217732 extends beyond EOD, truncated [ 98.133759][ T5511] loop5: p36 size 14876672 extends beyond EOD, truncated [ 98.145706][ T5511] loop5: p37 size 134217732 extends beyond EOD, truncated [ 98.154581][ T5511] loop5: p38 size 14876672 extends beyond EOD, truncated [ 98.164479][ T5511] loop5: p39 size 134217732 extends beyond EOD, truncated [ 98.173785][ T5511] loop5: p40 size 14876672 extends beyond EOD, truncated [ 98.183874][ T5511] loop5: p41 size 134217732 extends beyond EOD, truncated [ 98.193647][ T5511] loop5: p42 size 14876672 extends beyond EOD, truncated [ 98.202879][ T5511] loop5: p43 size 134217732 extends beyond EOD, truncated [ 98.211727][ T5511] loop5: p44 size 14876672 extends beyond EOD, truncated [ 98.221203][ T5511] loop5: p45 size 134217732 extends beyond EOD, truncated [ 98.230088][ T5511] loop5: p46 size 14876672 extends beyond EOD, truncated [ 98.240061][ T5511] loop5: p47 size 134217732 extends beyond EOD, truncated [ 98.252640][ T5511] loop5: p48 size 14876672 extends beyond EOD, truncated [ 98.263097][ T5511] loop5: p49 size 134217732 extends beyond EOD, truncated [ 98.272551][ T5511] loop5: p50 size 14876672 extends beyond EOD, truncated [ 98.282024][ T5511] loop5: p51 size 134217732 extends beyond EOD, truncated [ 98.291877][ T5511] loop5: p52 size 14876672 extends beyond EOD, truncated [ 98.302209][ T5511] loop5: p53 size 134217732 extends beyond EOD, truncated [ 98.310756][ T5511] loop5: p54 size 14876672 extends beyond EOD, truncated [ 98.318776][ T5511] loop5: p55 size 134217732 extends beyond EOD, truncated [ 98.334209][ T5511] loop5: p56 size 14876672 extends beyond EOD, truncated [ 98.342826][ T5511] loop5: p57 size 134217732 extends beyond EOD, truncated [ 98.362428][ T5511] loop5: p58 size 14876672 extends beyond EOD, truncated [ 98.373705][ T5511] loop5: p59 size 134217732 extends beyond EOD, truncated [ 98.414375][ T5511] loop5: p60 size 14876672 extends beyond EOD, truncated [ 98.470537][ T5511] loop5: p61 size 134217732 extends beyond EOD, truncated [ 98.480257][ T5511] loop5: p62 size 14876672 extends beyond EOD, truncated [ 98.489674][ T5511] loop5: p63 size 134217732 extends beyond EOD, truncated [ 98.498433][ T5511] loop5: p64 size 14876672 extends beyond EOD, truncated [ 98.508197][ T5511] loop5: p65 size 134217732 extends beyond EOD, truncated [ 98.518312][ T5511] loop5: p66 size 14876672 extends beyond EOD, truncated [ 98.527745][ T5511] loop5: p67 size 134217732 extends beyond EOD, truncated [ 98.558777][ T5547] xt_socket: unknown flags 0x48 [ 98.564931][ T5511] loop5: p68 size 14876672 extends beyond EOD, truncated [ 98.585522][ T5511] loop5: p69 size 134217732 extends beyond EOD, truncated [ 98.609210][ T5511] loop5: p70 size 14876672 extends beyond EOD, truncated [ 98.638335][ T5511] loop5: p71 size 134217732 extends beyond EOD, truncated [ 98.918929][ T5511] loop5: p72 size 14876672 extends beyond EOD, truncated [ 98.937529][ T5511] loop5: p73 size 134217732 extends beyond EOD, truncated [ 98.945914][ T5511] loop5: p74 size 14876672 extends beyond EOD, truncated [ 99.003843][ T5511] loop5: p75 size 134217732 extends beyond EOD, truncated [ 99.035940][ T5511] loop5: p76 size 14876672 extends beyond EOD, truncated [ 99.047779][ T5511] loop5: p77 size 134217732 extends beyond EOD, truncated [ 99.073718][ T5511] loop5: p78 size 14876672 extends beyond EOD, truncated [ 99.095608][ T5511] loop5: p79 size 134217732 extends beyond EOD, truncated [ 99.118446][ T5511] loop5: p80 size 14876672 extends beyond EOD, truncated [ 99.126994][ T5511] loop5: p81 size 134217732 extends beyond EOD, truncated [ 99.135225][ T5511] loop5: p82 size 14876672 extends beyond EOD, truncated [ 99.143609][ T5511] loop5: p83 size 134217732 extends beyond EOD, truncated [ 99.163415][ T5511] loop5: p84 size 14876672 extends beyond EOD, truncated [ 99.176126][ T5511] loop5: p85 size 134217732 extends beyond EOD, truncated [ 99.194222][ T5511] loop5: p86 size 14876672 extends beyond EOD, truncated [ 99.201957][ T5511] loop5: p87 size 134217732 extends beyond EOD, truncated [ 99.210068][ T5511] loop5: p88 size 14876672 extends beyond EOD, truncated [ 99.218001][ T5511] loop5: p89 size 134217732 extends beyond EOD, truncated [ 99.228752][ T5511] loop5: p90 size 14876672 extends beyond EOD, truncated [ 99.237554][ T5511] loop5: p91 size 134217732 extends beyond EOD, truncated [ 99.253036][ T5511] loop5: p92 size 14876672 extends beyond EOD, truncated [ 99.268420][ T5511] loop5: p93 size 134217732 extends beyond EOD, truncated [ 99.277841][ T5511] loop5: p94 size 14876672 extends beyond EOD, truncated [ 99.286201][ T5511] loop5: p95 size 134217732 extends beyond EOD, truncated [ 99.295690][ T5511] loop5: p96 size 14876672 extends beyond EOD, truncated [ 99.303728][ T5511] loop5: p97 size 134217732 extends beyond EOD, truncated [ 99.312576][ T5511] loop5: p98 size 14876672 extends beyond EOD, truncated [ 99.324892][ T5511] loop5: p99 size 134217732 extends beyond EOD, truncated [ 99.332875][ T5511] loop5: p100 size 14876672 extends beyond EOD, truncated [ 99.341172][ T5511] loop5: p101 size 134217732 extends beyond EOD, truncated [ 99.349437][ T5511] loop5: p102 size 14876672 extends beyond EOD, truncated [ 99.357440][ T5511] loop5: p103 size 134217732 extends beyond EOD, truncated [ 99.365401][ T5511] loop5: p104 size 14876672 extends beyond EOD, truncated [ 99.373288][ T5511] loop5: p105 size 134217732 extends beyond EOD, truncated [ 99.381543][ T5511] loop5: p106 size 14876672 extends beyond EOD, truncated [ 99.389355][ T5511] loop5: p107 size 134217732 extends beyond EOD, truncated [ 99.397209][ T5511] loop5: p108 size 14876672 extends beyond EOD, truncated [ 99.405055][ T5511] loop5: p109 size 134217732 extends beyond EOD, truncated [ 99.412825][ T5511] loop5: p110 size 14876672 extends beyond EOD, truncated [ 99.420998][ T5511] loop5: p111 size 134217732 extends beyond EOD, truncated [ 99.429206][ T5511] loop5: p112 size 14876672 extends beyond EOD, truncated [ 99.437034][ T5511] loop5: p113 size 134217732 extends beyond EOD, truncated [ 99.445032][ T5511] loop5: p114 size 14876672 extends beyond EOD, truncated [ 99.453064][ T5511] loop5: p115 size 134217732 extends beyond EOD, truncated [ 99.461914][ T5511] loop5: p116 size 14876672 extends beyond EOD, truncated [ 99.470024][ T5511] loop5: p117 size 134217732 extends beyond EOD, truncated [ 99.478007][ T5511] loop5: p118 size 14876672 extends beyond EOD, truncated [ 99.486077][ T5511] loop5: p119 size 134217732 extends beyond EOD, truncated [ 99.494256][ T5511] loop5: p120 size 14876672 extends beyond EOD, truncated [ 99.502310][ T5511] loop5: p121 size 134217732 extends beyond EOD, truncated [ 99.510368][ T5511] loop5: p122 size 14876672 extends beyond EOD, truncated [ 99.518242][ T5511] loop5: p123 size 134217732 extends beyond EOD, truncated [ 99.526264][ T5511] loop5: p124 size 14876672 extends beyond EOD, truncated [ 99.534184][ T5511] loop5: p125 size 134217732 extends beyond EOD, truncated [ 99.542452][ T5511] loop5: p126 size 14876672 extends beyond EOD, truncated [ 99.550698][ T5511] loop5: p127 size 134217732 extends beyond EOD, truncated [ 99.559028][ T5511] loop5: p128 size 14876672 extends beyond EOD, truncated [ 99.567353][ T5511] loop5: p129 size 134217732 extends beyond EOD, truncated [ 99.575307][ T5511] loop5: p130 size 14876672 extends beyond EOD, truncated [ 99.582902][ T5511] loop5: p131 size 134217732 extends beyond EOD, truncated [ 99.591284][ T5511] loop5: p132 size 14876672 extends beyond EOD, truncated [ 99.599370][ T5511] loop5: p133 size 134217732 extends beyond EOD, truncated [ 99.607399][ T5511] loop5: p134 size 14876672 extends beyond EOD, truncated [ 99.615928][ T5511] loop5: p135 size 134217732 extends beyond EOD, truncated [ 99.623853][ T5511] loop5: p136 size 14876672 extends beyond EOD, truncated [ 99.631818][ T5511] loop5: p137 size 134217732 extends beyond EOD, truncated [ 99.639819][ T5511] loop5: p138 size 14876672 extends beyond EOD, truncated [ 99.647871][ T5511] loop5: p139 size 134217732 extends beyond EOD, truncated [ 99.656025][ T5511] loop5: p140 size 14876672 extends beyond EOD, truncated [ 99.663727][ T5511] loop5: p141 size 134217732 extends beyond EOD, truncated [ 99.671811][ T5511] loop5: p142 size 14876672 extends beyond EOD, truncated [ 99.679786][ T5511] loop5: p143 size 134217732 extends beyond EOD, truncated [ 99.687666][ T5511] loop5: p144 size 14876672 extends beyond EOD, truncated [ 99.695733][ T5511] loop5: p145 size 134217732 extends beyond EOD, truncated [ 99.703553][ T5511] loop5: p146 size 14876672 extends beyond EOD, truncated [ 99.711419][ T5511] loop5: p147 size 134217732 extends beyond EOD, truncated [ 99.719580][ T5511] loop5: p148 size 14876672 extends beyond EOD, truncated [ 99.727388][ T5511] loop5: p149 size 134217732 extends beyond EOD, truncated [ 99.735443][ T5511] loop5: p150 size 14876672 extends beyond EOD, truncated [ 99.743221][ T5511] loop5: p151 size 134217732 extends beyond EOD, truncated [ 99.751170][ T5511] loop5: p152 size 14876672 extends beyond EOD, truncated [ 99.758868][ T5511] loop5: p153 size 134217732 extends beyond EOD, truncated [ 99.766861][ T5511] loop5: p154 size 14876672 extends beyond EOD, truncated [ 99.774805][ T5511] loop5: p155 size 134217732 extends beyond EOD, truncated [ 99.782946][ T5511] loop5: p156 size 14876672 extends beyond EOD, truncated [ 99.790994][ T5511] loop5: p157 size 134217732 extends beyond EOD, truncated [ 99.798822][ T5511] loop5: p158 size 14876672 extends beyond EOD, truncated [ 99.806798][ T5511] loop5: p159 size 134217732 extends beyond EOD, truncated [ 99.814674][ T5511] loop5: p160 size 14876672 extends beyond EOD, truncated [ 99.823635][ T5511] loop5: p161 size 134217732 extends beyond EOD, truncated [ 99.831925][ T5511] loop5: p162 size 14876672 extends beyond EOD, truncated [ 99.839940][ T5511] loop5: p163 size 134217732 extends beyond EOD, truncated [ 99.856751][ T5511] loop5: p164 size 14876672 extends beyond EOD, truncated [ 99.864492][ T5511] loop5: p165 size 134217732 extends beyond EOD, truncated [ 99.872729][ T5511] loop5: p166 size 14876672 extends beyond EOD, truncated [ 99.893203][ T5511] loop5: p167 size 134217732 extends beyond EOD, truncated [ 99.912314][ T5511] loop5: p168 size 14876672 extends beyond EOD, truncated [ 99.920604][ T5511] loop5: p169 size 134217732 extends beyond EOD, truncated [ 99.923722][ T5566] xt_hashlimit: size too large, truncated to 1048576 [ 99.929747][ T5511] loop5: p170 size 14876672 extends beyond EOD, truncated [ 99.944485][ T5511] loop5: p171 size 134217732 extends beyond EOD, truncated [ 99.945288][ T5569] blktrace: Concurrent blktraces are not allowed on loop0 [ 99.952904][ T5511] loop5: p172 size 14876672 extends beyond EOD, truncated [ 99.979365][ T5511] loop5: p173 size 134217732 extends beyond EOD, truncated [ 99.988052][ T5511] loop5: p174 size 14876672 extends beyond EOD, truncated [ 99.996762][ T5511] loop5: p175 size 134217732 extends beyond EOD, truncated [ 100.018038][ T5511] loop5: p176 size 14876672 extends beyond EOD, truncated [ 100.030325][ T5511] loop5: p177 size 134217732 extends beyond EOD, truncated [ 100.038818][ T5511] loop5: p178 size 14876672 extends beyond EOD, truncated [ 100.047070][ T5511] loop5: p179 size 134217732 extends beyond EOD, truncated [ 100.053872][ T5581] netlink: 'syz.3.578': attribute type 13 has an invalid length. [ 100.055160][ T5511] loop5: p180 size 14876672 extends beyond EOD, truncated [ 100.070561][ T5511] loop5: p181 size 134217732 extends beyond EOD, truncated [ 100.078879][ T5511] loop5: p182 size 14876672 extends beyond EOD, truncated [ 100.087337][ T5511] loop5: p183 size 134217732 extends beyond EOD, truncated [ 100.095604][ T5511] loop5: p184 size 14876672 extends beyond EOD, truncated [ 100.106506][ T5511] loop5: p185 size 134217732 extends beyond EOD, truncated [ 100.115707][ T5511] loop5: p186 size 14876672 extends beyond EOD, truncated [ 100.125450][ T5511] loop5: p187 size 134217732 extends beyond EOD, truncated [ 100.133510][ T5511] loop5: p188 size 14876672 extends beyond EOD, truncated [ 100.150245][ T5511] loop5: p189 size 134217732 extends beyond EOD, truncated [ 100.158692][ T5511] loop5: p190 size 14876672 extends beyond EOD, truncated [ 100.167158][ T5511] loop5: p191 size 134217732 extends beyond EOD, truncated [ 100.183768][ T5511] loop5: p192 size 14876672 extends beyond EOD, truncated [ 100.192160][ T5511] loop5: p193 size 134217732 extends beyond EOD, truncated [ 100.200639][ T5511] loop5: p194 size 14876672 extends beyond EOD, truncated [ 100.203134][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.209062][ T5511] loop5: p195 size 134217732 extends beyond EOD, [ 100.215368][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.215872][ T5511] truncated [ 100.234621][ T5511] loop5: p196 size 14876672 extends beyond EOD, truncated [ 100.243392][ T5511] loop5: p197 size 134217732 extends beyond EOD, truncated [ 100.252193][ T5511] loop5: p198 size 14876672 extends beyond EOD, truncated [ 100.264270][ T5511] loop5: p199 size 134217732 extends beyond EOD, truncated [ 100.273369][ T5511] loop5: p200 size 14876672 extends beyond EOD, truncated [ 100.281435][ T5511] loop5: p201 size 134217732 extends beyond EOD, truncated [ 100.289937][ T5511] loop5: p202 size 14876672 extends beyond EOD, truncated [ 100.298326][ T5511] loop5: p203 size 134217732 extends beyond EOD, truncated [ 100.306478][ T5511] loop5: p204 size 14876672 extends beyond EOD, truncated [ 100.314563][ T5511] loop5: p205 size 134217732 extends beyond EOD, truncated [ 100.322951][ T5511] loop5: p206 size 14876672 extends beyond EOD, truncated [ 100.331073][ T5511] loop5: p207 size 134217732 extends beyond EOD, truncated [ 100.339281][ T5511] loop5: p208 size 14876672 extends beyond EOD, truncated [ 100.347498][ T5511] loop5: p209 size 134217732 extends beyond EOD, truncated [ 100.355730][ T5511] loop5: p210 size 14876672 extends beyond EOD, truncated [ 100.363960][ T5511] loop5: p211 size 134217732 extends beyond EOD, truncated [ 100.372985][ T5511] loop5: p212 size 14876672 extends beyond EOD, truncated [ 100.381456][ T5511] loop5: p213 size 134217732 extends beyond EOD, truncated [ 100.390067][ T5511] loop5: p214 size 14876672 extends beyond EOD, truncated [ 100.398137][ T5511] loop5: p215 size 134217732 extends beyond EOD, truncated [ 100.406598][ T5511] loop5: p216 size 14876672 extends beyond EOD, truncated [ 100.415990][ T5511] loop5: p217 size 134217732 extends beyond EOD, truncated [ 100.425524][ T5588] geneve2: entered promiscuous mode [ 100.431651][ T5511] loop5: p218 size 14876672 extends beyond EOD, truncated [ 100.441035][ T5511] loop5: p219 size 134217732 extends beyond EOD, truncated [ 100.449394][ T5511] loop5: p220 size 14876672 extends beyond EOD, truncated [ 100.458293][ T5511] loop5: p221 size 134217732 extends beyond EOD, truncated [ 100.468780][ T5511] loop5: p222 size 14876672 extends beyond EOD, truncated [ 100.483432][ T5511] loop5: p223 size 134217732 extends beyond EOD, truncated [ 100.493765][ T5511] loop5: p224 size 14876672 extends beyond EOD, truncated [ 100.502751][ T5511] loop5: p225 size 134217732 extends beyond EOD, truncated [ 100.510686][ T5511] loop5: p226 size 14876672 extends beyond EOD, truncated [ 100.518423][ T5511] loop5: p227 size 134217732 extends beyond EOD, truncated [ 100.526459][ T5511] loop5: p228 size 14876672 extends beyond EOD, truncated [ 100.534423][ T5511] loop5: p229 size 134217732 extends beyond EOD, truncated [ 100.542659][ T5511] loop5: p230 size 14876672 extends beyond EOD, truncated [ 100.550711][ T5511] loop5: p231 size 134217732 extends beyond EOD, truncated [ 100.560298][ T5511] loop5: p232 size 14876672 extends beyond EOD, truncated [ 100.571222][ T5511] loop5: p233 size 134217732 extends beyond EOD, truncated [ 100.581943][ T5511] loop5: p234 size 14876672 extends beyond EOD, truncated [ 100.592767][ T5511] loop5: p235 size 134217732 extends beyond EOD, truncated [ 100.602944][ T5511] loop5: p236 size 14876672 extends beyond EOD, truncated [ 100.626299][ T5511] loop5: p237 size 134217732 extends beyond EOD, truncated [ 100.636387][ T5511] loop5: p238 size 14876672 extends beyond EOD, truncated [ 100.647656][ T5511] loop5: p239 size 134217732 extends beyond EOD, truncated [ 100.657670][ T5511] loop5: p240 size 14876672 extends beyond EOD, truncated [ 100.668480][ T5511] loop5: p241 size 134217732 extends beyond EOD, truncated [ 100.679217][ T5511] loop5: p242 size 14876672 extends beyond EOD, truncated [ 100.689237][ T5511] loop5: p243 size 134217732 extends beyond EOD, truncated [ 100.698904][ T5511] loop5: p244 size 14876672 extends beyond EOD, truncated [ 100.709173][ T5511] loop5: p245 size 134217732 extends beyond EOD, truncated [ 100.719487][ T5511] loop5: p246 size 14876672 extends beyond EOD, truncated [ 100.730825][ T5511] loop5: p247 size 134217732 extends beyond EOD, truncated [ 100.740218][ T5511] loop5: p248 size 14876672 extends beyond EOD, truncated [ 100.750773][ T5511] loop5: p249 size 134217732 extends beyond EOD, truncated [ 100.762076][ T5511] loop5: p250 size 14876672 extends beyond EOD, truncated [ 100.772513][ T5511] loop5: p251 size 134217732 extends beyond EOD, truncated [ 100.782351][ T5511] loop5: p252 size 14876672 extends beyond EOD, truncated [ 100.792725][ T5511] loop5: p253 size 134217732 extends beyond EOD, truncated [ 100.801911][ T5511] loop5: p254 size 14876672 extends beyond EOD, truncated [ 100.811542][ T5511] loop5: p255 size 134217732 extends beyond EOD, truncated [ 101.181578][ T5606] loop3: detected capacity change from 0 to 512 [ 101.215059][ T5606] EXT4-fs: Ignoring removed i_version option [ 101.221515][ T5606] EXT4-fs: Ignoring removed bh option [ 101.275500][ T5606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.302832][ T5606] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.472279][ T5611] FAULT_INJECTION: forcing a failure. [ 101.472279][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 101.485525][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz.3.584 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.485640][ T5611] Tainted: [W]=WARN [ 101.485649][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.485663][ T5611] Call Trace: [ 101.485671][ T5611] [ 101.485697][ T5611] __dump_stack+0x1d/0x30 [ 101.485726][ T5611] dump_stack_lvl+0x95/0xd0 [ 101.485769][ T5611] dump_stack+0x15/0x1b [ 101.485794][ T5611] should_fail_ex+0x263/0x280 [ 101.485818][ T5611] should_failslab+0x8c/0xb0 [ 101.485838][ T5611] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 101.485864][ T5611] ? __alloc_skb+0x2d6/0x690 [ 101.485912][ T5611] __alloc_skb+0x2d6/0x690 [ 101.485934][ T5611] ? __alloc_skb+0x200/0x690 [ 101.485955][ T5611] alloc_skb_with_frags+0x7d/0x470 [ 101.486032][ T5611] ? __account_obj_stock+0x211/0x350 [ 101.486055][ T5611] sock_alloc_send_pskb+0x44d/0x500 [ 101.486093][ T5611] unix_dgram_sendmsg+0x391/0x1060 [ 101.486117][ T5611] ? selinux_socket_sendmsg+0x192/0x1c0 [ 101.486158][ T5611] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 101.486230][ T5611] ____sys_sendmsg+0x5af/0x600 [ 101.486259][ T5611] ___sys_sendmsg+0x195/0x1e0 [ 101.486308][ T5611] ? path_openat+0x1b01/0x2050 [ 101.486392][ T5611] __sys_sendmmsg+0x185/0x320 [ 101.486443][ T5611] __x64_sys_sendmmsg+0x57/0x70 [ 101.486470][ T5611] x64_sys_call+0x27aa/0x3020 [ 101.486635][ T5611] do_syscall_64+0x12c/0x370 [ 101.486656][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.486682][ T5611] RIP: 0033:0x7f80c97bc799 [ 101.486778][ T5611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.486796][ T5611] RSP: 002b:00007f80c81ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.486820][ T5611] RAX: ffffffffffffffda RBX: 00007f80c9a36090 RCX: 00007f80c97bc799 [ 101.486837][ T5611] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 000000000000000a [ 101.486871][ T5611] RBP: 00007f80c81ee090 R08: 0000000000000000 R09: 0000000000000000 [ 101.486886][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.486899][ T5611] R13: 00007f80c9a36128 R14: 00007f80c9a36090 R15: 00007ffe5578f308 [ 101.486919][ T5611] [ 101.536415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.729537][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p18, 10) failed: No such file or directory [ 101.740039][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop5p17, 10) failed: No such file or directory [ 101.751966][ T5596] udevd[5596]: inotify_add_watch(7, /dev/loop5p27, 10) failed: No such file or directory [ 101.767630][ T5595] udevd[5595]: inotify_add_watch(7, /dev/loop5p20, 10) failed: No such file or directory [ 101.787776][ T5600] udevd[5600]: inotify_add_watch(7, /dev/loop5p21, 10) failed: No such file or directory [ 101.789186][ T5598] udevd[5598]: inotify_add_watch(7, /dev/loop5p24, 10) failed: No such file or directory [ 101.811036][ T5602] udevd[5602]: inotify_add_watch(7, /dev/loop5p25, 10) failed: No such file or directory [ 101.816363][ T5597] udevd[5597]: inotify_add_watch(7, /dev/loop5p23, 10) failed: No such file or directory [ 101.822715][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory [ 101.836566][ T5601] udevd[5601]: inotify_add_watch(7, /dev/loop5p22, 10) failed: No such file or directory [ 102.658341][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 102.658359][ T28] audit: type=1107 audit(1772519902.077:1170): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 102.914432][ T3298] ================================================================== [ 102.923253][ T3298] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 102.930316][ T3298] [ 102.932640][ T3298] write to 0xffff888103c4b25c of 4 bytes by task 3305 on cpu 1: [ 102.940358][ T3298] shmem_mknod+0x143/0x170 [ 102.944884][ T3298] shmem_create+0x34/0x50 [ 102.949334][ T3298] path_openat+0xd75/0x2050 [ 102.954017][ T3298] do_file_open+0x16c/0x290 [ 102.959240][ T3298] do_sys_openat2+0x94/0x130 [ 102.964291][ T3298] __x64_sys_openat+0xf2/0x120 [ 102.969098][ T3298] x64_sys_call+0x1e39/0x3020 [ 102.974074][ T3298] do_syscall_64+0x12c/0x370 [ 102.978687][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.984960][ T3298] [ 102.987486][ T3298] read to 0xffff888103c4b25c of 4 bytes by task 3298 on cpu 0: [ 102.995303][ T3298] fill_mg_cmtime+0x5b/0x270 [ 103.000196][ T3298] generic_fillattr+0x24a/0x340 [ 103.005428][ T3298] shmem_getattr+0x181/0x200 [ 103.010307][ T3298] vfs_getattr_nosec+0x146/0x1e0 [ 103.015385][ T3298] vfs_getattr+0x48/0x60 [ 103.019848][ T3298] vfs_statx_path+0x28/0x140 [ 103.024574][ T3298] vfs_statx+0xc4/0x170 [ 103.028856][ T3298] vfs_fstatat+0x118/0x170 [ 103.033937][ T3298] __se_sys_newfstatat+0x55/0x3e0 [ 103.039339][ T3298] __x64_sys_newfstatat+0x55/0x70 [ 103.044568][ T3298] x64_sys_call+0x2c64/0x3020 [ 103.049634][ T3298] do_syscall_64+0x12c/0x370 [ 103.054507][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.060511][ T3298] [ 103.062870][ T3298] value changed: 0x144a53d0 -> 0x145389e6 [ 103.068960][ T3298] [ 103.071477][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 103.077915][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 103.083157][ T5576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.088684][ T3298] Tainted: [W]=WARN [ 103.088697][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.088711][ T3298] ================================================================== [ 103.179500][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.