last executing test programs: 1m41.704354295s ago: executing program 1 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x38, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m41.681077367s ago: executing program 1 (id=698): keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000100)='\'{,\xbf[\xff') 1m41.657101838s ago: executing program 1 (id=699): futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x48000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400800c) r2 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, 0x0) r4 = syz_open_dev$evdev(0x0, 0x3, 0x42200) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000680)=""/4096) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@bsdgroups}, {@sysvgroups}, {@barrier_val}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="68000000140001"], 0x68}}, 0x4004040) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x4008005) brk(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x8, 0x8040) 1m41.542733075s ago: executing program 1 (id=701): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000066ed01a801e40315ac5a00000000004000"/38], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000000000000000e4ff000000000000000000000000000000000000000000000000ffffffff"]) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0xe9, r2, 0x1, 0x1}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffe0}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x101, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) unshare(0xe000480) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x330300, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.462612249s ago: executing program 1 (id=703): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0xfff1, 0x10}, {0x10, 0x2}}}, 0x24}}, 0x8040) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r0], 0x3c}}, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000020010000300012800b000100697036746e6c0000200002"], 0x50}}, 0x20004010) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000001c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa0f}}]}, 0x1, 0x4c4, &(0x7f0000000500)="$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") setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x8000, {{0xa, 0x4e24, 0x5, @mcast1, 0x72be}}, {{0xa, 0x4e22, 0x825, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc5b6}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7fff, @private2, 0x4}}}, 0x30) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 1m40.620495828s ago: executing program 1 (id=714): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x20, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@bsdgroups}, {@sysvgroups}, {@barrier_val}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="68000000140001"], 0x68}}, 0x4004040) r3 = syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r4, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) 1m40.558001692s ago: executing program 32 (id=714): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x20, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@bsdgroups}, {@sysvgroups}, {@barrier_val}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x10001}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="68000000140001"], 0x68}}, 0x4004040) r3 = syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r4, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) 1m36.856397553s ago: executing program 5 (id=716): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000066ed01a801e40315ac5a00000000004000"/38], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000000000000000e4ff000000000000000000000000000000000000000000000000ffffffff"]) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0xe9, r2, 0x1, 0x1}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffe0}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x101, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) unshare(0xe000480) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.716212031s ago: executing program 5 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) 1m33.663600695s ago: executing program 5 (id=802): pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) umount2(0x0, 0x4) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x5, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x2008, 0x8, 0x9a, 0x0, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x4]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf2500000000", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) 1m33.597147539s ago: executing program 33 (id=802): pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) umount2(0x0, 0x4) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x2400000, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x5, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0x2008, 0x8, 0x9a, 0x0, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x6, 0x7ff, 0x6ce1, 0x98, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x4]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf2500000000", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) 1m33.497185025s ago: executing program 3 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 1m33.349079364s ago: executing program 3 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) 1m33.280839198s ago: executing program 3 (id=807): r0 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x83, 0x1, 0x3, 0x5, 0x7f, 0x57e}, {0xaa, 0x1, 0x8, 0x4, 0xffc0, 0x7}, 0x3, 0x8, 0x1702}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1m33.120842777s ago: executing program 3 (id=814): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000066ed01a801e40315ac5a00000000004000"/38], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000000000000000e4ff000000000000000000000000000000000000000000000000ffffffff"]) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0xe9, r2, 0x1, 0x1}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffe0}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x101, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m33.024571593s ago: executing program 3 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038078000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100"], 0x340}}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 1m31.390411631s ago: executing program 3 (id=823): r0 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x83, 0x1, 0x3, 0x5, 0x7f, 0x57e}, {0xaa, 0x1, 0x8, 0x4, 0xffc0, 0x7}, 0x3, 0x8, 0x1702}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1m31.273811899s ago: executing program 34 (id=823): r0 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x83, 0x1, 0x3, 0x5, 0x7f, 0x57e}, {0xaa, 0x1, 0x8, 0x4, 0xffc0, 0x7}, 0x3, 0x8, 0x1702}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1m9.263301403s ago: executing program 6 (id=1157): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2110414, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRES16], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 1m8.984739999s ago: executing program 6 (id=1167): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x6e1f, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0xf) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001c071}, 0x4008000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r7, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r10}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x9cf96ec9fe6bba1, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r13, r12, 0x25, 0x2, @void}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f00000005c0)={0x498, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x80, 0x81, 0x2, 0xaab}, {0x5, 0x6, 0x8, 0x9}, {0x7d30, 0xee, 0xff, 0x4}, {0x6, 0x2, 0x7, 0x5}, {0x2, 0xab, 0x2, 0x7}, {0x4, 0xff, 0x9, 0x1}, {0x2, 0x9, 0x9, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x388}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r12}, {0x4}}]}, 0x498}, 0x1, 0x0, 0x0, 0x4044052}, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0xff0f000020040080) r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x80, &(0x7f0000000040)=0x2, 0x0, 0x4) 1m8.840561308s ago: executing program 6 (id=1171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 1m8.759706393s ago: executing program 6 (id=1176): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x9, 0x2d2, &(0x7f0000000b00)="$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") r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xcc, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @mcast2, 0x3ff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xa8f9}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xcc}}, 0x20002000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd50, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', 0x0, 0x0, 0x0) r6 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r6, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r7, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r8 = syz_open_dev$vcsa(&(0x7f0000000500), 0xffffffff80000001, 0x8000) statx(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1000, 0x1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() write$P9_RGETATTR(r8, &(0x7f0000000780)={0xa0, 0x19, 0x1, {0x5a1, {0x2, 0x4, 0x3}, 0x20, r9, r10, 0xb7, 0x8000000000000000, 0x4, 0x10000, 0x0, 0x785, 0x1, 0x7fffffff, 0xb, 0x0, 0x800, 0x5, 0x2, 0x7b, 0x1}}, 0xa0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10) close(r0) 1m8.554191965s ago: executing program 6 (id=1181): r0 = socket$kcm(0x10, 0x2, 0x0) connect$vsock_stream(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0x9, 0xd9, 0x3, 0x4}, {0x2, 0x9, 0xe8, 0x6}, {0x7892, 0xce, 0x1e, 0xfffffff6}, {0x6, 0x80, 0x5, 0x4}, {0x2, 0xc, 0x80, 0x4}, {0x3, 0x86, 0x42, 0x4}, {0x5, 0xf9, 0x7, 0x100004}, {0xa6f, 0x6, 0x7, 0x4}, {0x5, 0x1, 0x19, 0x390}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) io_setup(0xffff, &(0x7f0000002e40)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000540)='./file1\x00', 0x0, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="576127bd70000000b5e07e00000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000500190107000000080022011f00000008005700040000000500180125000000050019010a0000000800a10004000000050019010e00000008009f000300000008002700e6d533fc050019010c00000008005700480900000800a100000800000800a1008d00000008002201c90100000800a000a9f8c11b080026008f0900000500180137000000080027000200000008009f00040000000800570001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x3c, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4100) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c044}, 0x82) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f086dd4ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x16) 1m8.053865405s ago: executing program 6 (id=1189): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000c1410022bbd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x60040}, 0x2000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x1c010) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 1m8.053353666s ago: executing program 35 (id=1189): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000c1410022bbd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x60040}, 0x2000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x1c010) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 3.400126606s ago: executing program 4 (id=2241): unshare(0x20060400) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0x9, 0x6}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000045}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="9557255d4323a493", 0x8, 0xa010, &(0x7f00000000c0)={0x23, 0xa, 0x8, 0x9}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x7fffffffffffffff, 0x3, 0xffffffff, 0xa}) 3.200846797s ago: executing program 4 (id=2244): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x50000) 3.148931501s ago: executing program 4 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x7669fb368ed76f21, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0bab6aa7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r3 = syz_pidfd_open(r2, 0x0) wait4(r2, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) 2.98456853s ago: executing program 7 (id=2248): syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x1, @loopback, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x1d, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/5312], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) readv(r3, &(0x7f0000000fc0)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="584a4a20e174751f90f9fa036de71d", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf25130000000c0009000203aaaaaaaaaaaa06000800a3aa00000c000900000000000000000006000800ffff000006000800a2aa000006000800000000000c0009000200aaaaaaaaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x0, 0x56, 0x0, 0x1, 0x0, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000000100000080000", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x5f) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.905562545s ago: executing program 2 (id=2249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x12000, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f00000001c0)=0xe8) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2080000, &(0x7f00000004c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}], [{@euid_eq={'euid', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_role}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f00000000c0)=0x3, 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x101, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) unshare(0xe000480) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.214878757s ago: executing program 7 (id=2254): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.090176524s ago: executing program 7 (id=2256): r0 = socket$kcm(0x10, 0x2, 0x0) connect$vsock_stream(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x8, &(0x7f0000000080)=[{0x9, 0xd9, 0x3, 0x4}, {0x2, 0x9, 0xe8, 0x6}, {0x7892, 0xce, 0x1e, 0xfffffff6}, {0x6, 0x80, 0x5, 0x4}, {0x2, 0xc, 0x80, 0x4}, {0x3, 0x86, 0x42, 0x4}, {0x5, 0xf9, 0x7, 0x100004}, {0x5, 0x1, 0x19, 0x390}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) io_setup(0xffff, &(0x7f0000002e40)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000540)='./file1\x00', 0x0, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040)=0xffffffc8) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="576127bd70000000b5e07e00000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000500190107000000080022011f00000008005700040000000500180125000000050019010a0000000800a10004000000050019010e00000008009f000300000008002700e6d533fc050019010c00000008005700480900000800a100000800000800a1008d00000008002201c90100000800a000a9f8c11b080026008f0900000500180137000000080027000200000008009f00040000000800570001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4100) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c044}, 0x82) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f086dd4ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x16) 2.089510744s ago: executing program 4 (id=2257): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x22020400) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00') pread64(r1, &(0x7f0000000680)=""/252, 0xfc, 0x7ffffffffffffffe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0xffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$rfkill(r2, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00000800040001000000", 0x24) 1.912312075s ago: executing program 0 (id=2258): r0 = socket$kcm(0x10, 0x2, 0x0) connect$vsock_stream(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x8, &(0x7f0000000080)=[{0x9, 0xd9, 0x3, 0x4}, {0x2, 0x9, 0xe8, 0x6}, {0x7892, 0xce, 0x1e, 0xfffffff6}, {0x6, 0x80, 0x5, 0x4}, {0x2, 0xc, 0x80, 0x4}, {0x3, 0x86, 0x42, 0x4}, {0x5, 0xf9, 0x7, 0x100004}, {0xa6f, 0x6, 0x7, 0x4}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) io_setup(0xffff, &(0x7f0000002e40)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000540)='./file1\x00', 0x0, 0x10}, 0x18) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040)=0xffffffc8) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="576127bd70000000b5e07e00000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000500190107000000080022011f00000008005700040000000500180125000000050019010a0000000800a10004000000050019010e00000008009f000300000008002700e6d533fc050019010c00000008005700480900000800a100000800000800a1008d00000008002201c90100000800a000a9f8c11b080026008f0900000500180137000000080027000200000008009f00040000000800570001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4100) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c044}, 0x82) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x3e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f086dd4ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x16) 1.719901027s ago: executing program 4 (id=2260): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008811}, 0x810) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x200000000000, 0x3, 0xfffffffffffffff9, 0x0, 0x80, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7f18, 0x9, 0x1, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) symlinkat(0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa00"/48, @ANYBLOB="ac1414fd0000000000"], 0x170}}, 0x0) 1.601417763s ago: executing program 7 (id=2261): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500"], 0x0, 0x35, 0x0, 0x1}, 0x28) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_usbip_server_init(0x1) r3 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000a, 0x12, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r3, &(0x7f0000000080)=""/221, 0xdd) write$usbip_server(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000030000000100000000000000010000000700000005000000000000008000000000000000030000002f44f95a086c586da39457bbe6a2eff813b34c98552c628032c777cec624ad67488b3db0dfbeb63ff287c5c297c8d2df066aa70ee155c66c3337f32085367ab71aaef9da129214a601d9da2c169cd7da403d8cd09f45787b1e41a83dc607bdc51b946b02909f55411e6ba2715e5daf95e48dca0f5678e907df2bc0a84d0a223ef3"], 0x30) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xd3, &(0x7f0000000180)="20a664230d8ec5b4ce85f3aa23f045f042ff68fe118989af316a9bafa4615788122325604529d7514bfd77f56d70c44676ad7fc6589f9bcaa6a9a5e7fc8ab4e3f4a2f4ddd120e64149b83d95ad9845f8b70285444f78c80ab55aee8baa", 0x5d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x1, 0x9, 0x0, 0x5, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x0, 0xf, 0x6, 0x4, 0x0, 0x9, 0x6, 0x1}}, {0x6, 0x2, [0x199]}}, {{0x1c, 0x1, {0x9, 0x6, 0xf21d, 0x10000, 0x2, 0x8ae, 0x22, 0x6}}, {0x10, 0x2, [0xd, 0x1a2, 0x7, 0x3, 0x5, 0x8]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1, 0x4, 0x1, 0x0, 0x8, 0x3}}, {0xa, 0x2, [0x7, 0x400, 0x7]}}, {{0x1c, 0x1, {0x87, 0x94, 0x3ff, 0x2, 0x2, 0x7fffffff, 0xfffffffe, 0x8}}, {0x14, 0x2, [0x7ff, 0x1, 0x0, 0xdb83, 0x1ff, 0x0, 0x100, 0xc]}}, {{0x1c, 0x1, {0x3, 0x1, 0x5, 0x9, 0x1, 0x0, 0x7, 0x2}}, {0x8, 0x2, [0xfff, 0x2]}}, {{0x1c, 0x1, {0x9, 0x5, 0xc7ff, 0x8001, 0x0, 0x1, 0x7, 0x7}}, {0x12, 0x2, [0x6, 0x4, 0xff7f, 0x300, 0x6, 0x7, 0x158]}}]}]}, 0x148}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000033aefa517daadf7428d34a9e3bed886d6e20043581b4c72335de27ae71fd411541ded6c140986e7ed3c7ce929650a1bf65c8f6fee087021f52d2dd388e162270505c809fad1b0f78d9d1afa1fc4eb444658a6fda989f53e9d2c09fa174764a1d6df7836dac6c9d636f4bb3f258d083e97b6f41256b5f3b390000000000000000d3b8fa2a01592fbd9c2d4b40c44071380ef6509ef8de224398db307c1274671f5e0bee6acd882a5f2ffdd4ca4ce88076886d7a7758748a9c7a2d017dd9d6e5dbdd259d96f3d47709138b1dd08aaedb425f7585c7625b047ba7ec032fd4d3c37dffa7481e0f942f4e507bd77f7009602a50747d550ac6e7825fb543d2cf748a39c5dd540a2d673b282302252b30c525d0fd44ce9303b4628e5b0518fd74e5ff4d0a73a9cc2b876c0499ab3e836a60f2f032b549e351a4ac691f17ddf54919e570"], &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="11"], 0x14) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f00000001c0)=0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x440582, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r11, 0x48, 0x3, 0x8000000000000001) 1.470350382s ago: executing program 0 (id=2262): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) 1.202376188s ago: executing program 2 (id=2263): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e0000003600f7ffffff80698c6390090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) (async, rerun: 64) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) (rerun: 64) close(r1) (async) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='Yt', 0x2}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) (async) r4 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mknod$loop(&(0x7f00000004c0)='./cgroup.cpu/cpuset.cpus\x00', 0x200, 0x1) 1.184078079s ago: executing program 0 (id=2265): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x810) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0xaf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1ff, 0x0, 0x10000000000003}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x200000000000, 0x3, 0xfffffffffffffff9, 0x0, 0x80, 0x2}, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) symlinkat(0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000480002"], 0x170}}, 0x0) 1.136722112s ago: executing program 2 (id=2266): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c001}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffd}, 0xaa1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = inotify_init1(0x800) inotify_rm_watch(r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x80108906, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0xee00, &(0x7f0000000340)) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45) capset(&(0x7f00000001c0)={0x20080522, r3}, &(0x7f0000000200)={0x8, 0xfff, 0xcd4e, 0x10001, 0x2, 0x400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8eb010018000000000000001400000014000000fdfeffff000000000100000d0000000005000000000000000000"], &(0x7f0000000080)=""/166, 0x2e, 0xa6, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x83}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.127438462s ago: executing program 8 (id=2267): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) getresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 948.860283ms ago: executing program 8 (id=2268): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x40000000000000d, 0x0, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r2, 0x0, 0x0, 0x0, 0x0) 868.773418ms ago: executing program 8 (id=2269): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000740)={&(0x7f0000000080)={0xa, 0x4e24, 0x10001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1b5c0}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x40}, 0x8000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)=0xfffc0000) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)=""/48) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x4, 0x20, [0x6, 0x5, 0x5, 0x78fc0231], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) socket$vsock_stream(0x28, 0x1, 0x0) 868.374208ms ago: executing program 8 (id=2270): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000100)={[{@block_validity}, {@grpquota}, {@mblk_io_submit}, {@nodioread_nolock}, {@norecovery}, {@nobh}, {@noinit_itable}]}, 0xfe, 0x79f, &(0x7f00000018c0)="$eJzs3c1rXFUbAPDnTj7ftO+bvCDYumlWWiidtDG2CkLjSgQLBV3bhsk0xEwyJTMpTcjCIoIgghYXgm5c+1F37kR07d/gRkRaqqbFigsZufORTDpJOk3z1eb3g5ucc++Ze+4zZ+45Z+ZeZgLYtwbTP5mIwxHxQRLRX1+fRERXNdUZMVord3dpMZcuSVQqr/2eVMvcWVrMRdNjUgfqmUMR8f07EccyrfWW5hemxgqF/Gw9P1SevjRUml84Pjk9NpGfyM+cOjkyMnz6udOnti7WP39cOHjzw5ef+Wr077efvP7+D0mMxsH6tuY4tspgDNafk670Kaz5dqtr2RuS3T4ANiU9NTtqZ3kcjv7oqKYAgMdZOv5XAIB9JjH+A8A+0/gc4M7SYq6x7O4nEjvr1ksR0VuLv3F9s7als37Nrrd6HbTvTrLqykgSEQNbUP+hiPj0mze+SJfYpuuQAGt562pEXBgYbO3/k5V7FjbpRBtlBu/J6/9g53yXzn+eX2v+l1me/8Qa85+eNc7dzRiM6K7vrqr1/M/cWFVpw5ktqLw+/3uxdm9bGmjT/G/5prWBjnruv2nmSERMFvJp3/a/iDgaXT0XJwv5kxvUcfT2P7fX2zbYNP/749qbn6f1p/9XSmRudPasfsz4WHnsYWJudutqxFOdK/f23W3p/xut3jr/PbfRjo+sJF954d1P1iuWxp/G21ha499elc8ino61429INrw/cSht/hO1v2vX8fXPH/etV39z+6dLWn/jvcBOSNu/b+P4B5Lm+zVLW1v//eNffv0vH1D6+u9OXq+mu+vrroyVy7MnI7qTV1vXD6/sLc33D6+UT+Ov7XixO1bFv9L/JWv0f+l7wgttxth587cvNx//9krjH3+g9n/wxPW7Ux3r1d9e+49UU0fra9rp/9o9wId57gAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOBhJJruczmSy2dpveD8RfZlCsVQ+drE4NzMe1d/KHoiuTOOrLvtr+aTx/acDTfnhe/LPRsT/I+Kjnv9U89lcsTC+28EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN2BdX7/P/Vrz24fHQCwbXpb1lQqlUpz/nZ+w80AwCOndfwHAB53xn8A2H+M/wCw/xj/AWD/Mf4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzc6dPZsulb+WFnNpfvzy/NxU8fLx8XxpKjs9l8vmirOXshPF4kQhn80Vp++3v0KxeGkkZuauDJXzpfJQaX7h/HRxbqZ8fnJ67Eycz3ftSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GBK8wtTY4VCfvaxSLwXEXvgMPZ+4tFq91+O/3RoozLX7hPOaBt19dZPiD0S8u4ndrljAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhE/BsAAP//Zagj8w==") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=ANY=[@ANYBLOB="010000006162636465666768696a6b6c6d6e6f7000000000"], 0x18, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000002c0)='rxrpc\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0xdae, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=r6, @ANYRES8=r2, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x200000, 0x0) fsmount(r9, 0x1, 0x0) 857.455268ms ago: executing program 7 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000200)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) 765.714704ms ago: executing program 7 (id=2272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x501040, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f00000001c0)="f1", 0x1) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x17, 0x8002) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x28943, 0x1) unshare(0x2c020400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x7ffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') io_submit(0x0, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x1f, 0x1, 0x4, r5, &(0x7f0000000280)='a', 0x1, 0x5}]) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x10, 0x6, 0x590, 0x290, 0xd0, 0xd0, 0x1a0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @remote, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'tunl0\x00', 'bridge_slave_1\x00', {}, {}, 0x21, 0x3, 0x3, 0x40}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@ipv6={@private2, @loopback, [0x9d688f0fe472e9a6, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xff, 0xff000000], 'hsr0\x00', 'team_slave_1\x00', {0xff}, {}, 0x1, 0x5, 0x3, 0x15}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1, 0x0, 0x22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"4c1f"}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 752.672794ms ago: executing program 4 (id=2273): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000004c0)={'gretap0\x00', 0x0}) pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x50, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x81) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000180001002abd7000fcdbdf270a800000ff02fe08"], 0x44}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0xc000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_usb_connect$uac1(0x5, 0xb4, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x5, 0xe0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x77, 0xa}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0x3, 0xd4}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x6, "d2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xb, "b6f753d23a8beb"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x8, 0x4, "", "fac0"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0xa, 0x6, "9c97ab30"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x7, 0x0, {0x7, 0x25, 0x1, 0x0, 0x20, 0x7f1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4b, 0x7, 0x1, "22a60038d3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa0, 0x5, 0x83, {0x7, 0x25, 0x1, 0x83, 0x7f, 0x1}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0xf0, 0x16, 0x4, 0x8, 0x6}, 0x49, &(0x7f0000000880)={0x5, 0xf, 0x49, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xd1, 0x5, 0x2, 0xf000, 0xf800, [0x0, 0x30, 0xcf, 0x3f21, 0x30]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x1, 0xf00f, 0x8, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x10, 0x10, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0xfe, 0x6}]}, 0x2, [{0xef, &(0x7f0000000840)=ANY=[@ANYRES8=r4]}, {0x92, &(0x7f00000006c0)=@string={0x92, 0x3, "fb3d18b17751afc21bba13c2254ee59d183f37b99f7a3ef6f797311a45f5db92a980633fbf4a22ea0904433fc4d45288f6d44cf229550f8ef4a185f3e014dbcf912d73c5ebbf025414e63ac541636f0e23f5a7ca748cc73eac8979a505f2a3b151a52140769d5979352ec2086403ed802ad1b25153ce702f55d5d728a5246db3e85c8dc378cff9b28f7bfb1941a10f17"}}]}) syz_usb_disconnect(r5) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000540)={r7, 0x2, 0x200, 0x80000000, 0x6, 0x8}, &(0x7f00000001c0)=0x14) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@rand_addr=0x64010100, 0x4e21, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700"/48], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x2000000) 545.814277ms ago: executing program 8 (id=2274): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004513002400ba662598dc9683ea1414bbac1414aa07004e24043190780278b3cb08fc3ee6"], 0x0) 543.863977ms ago: executing program 8 (id=2275): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x5a, 0x101, 0x100000, 0x0, {0x7}}, 0x14}}, 0x0) 433.810634ms ago: executing program 2 (id=2276): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) 240.708045ms ago: executing program 2 (id=2277): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) 201.152468ms ago: executing program 0 (id=2278): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)) 122.051533ms ago: executing program 2 (id=2279): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x40000000000000d, 0x0, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r2, 0x0, 0x0, 0x0, 0x0) 70.533796ms ago: executing program 0 (id=2280): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 0s ago: executing program 0 (id=2281): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xe, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91103f00000000009500007488fce17f"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0x66b6, 0x4100000000000000, 0x0, 0x7, 0x100000000, 0xfffffffffffffffd, 0x80000000077, 0x0, 0x0, 0xe, 0x83, 0x248a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8000000000, 0x6bf5, 0x5, 0x2000000, 0xf439}) kernel console output (not intermixed with test programs): -tcp packets [ 129.260395][ T8790] EXT4-fs: Ignoring removed orlov option [ 129.283700][ T8787] lo speed is unknown, defaulting to 1000 [ 129.580611][ T8806] netlink: 'syz.7.1633': attribute type 4 has an invalid length. [ 129.589774][ T8806] netlink: 'syz.7.1633': attribute type 4 has an invalid length. [ 129.912674][ T8822] team0 (unregistering): Port device team_slave_0 removed [ 129.947205][ T8822] team0 (unregistering): Port device team_slave_1 removed [ 130.016442][ T8827] loop4: detected capacity change from 0 to 1024 [ 130.043332][ T8827] EXT4-fs: Ignoring removed orlov option [ 130.066050][ T8829] can0: slcan on ptm0. [ 130.071373][ T8827] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 130.123482][ T8827] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.1638: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 130.175818][ T8833] loop7: detected capacity change from 0 to 1024 [ 130.200495][ T8828] can0 (unregistered): slcan off ptm0. [ 130.209924][ T8833] EXT4-fs: Ignoring removed orlov option [ 130.234915][ T8827] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.1638: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 130.430483][ T23] lo speed is unknown, defaulting to 1000 [ 130.436970][ T23] syz2: Port: 1 Link ACTIVE [ 130.482078][ T8861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8861 comm=syz.8.1648 [ 130.586839][ T8870] __nla_validate_parse: 4 callbacks suppressed [ 130.586859][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1648'. [ 130.663928][ T8876] loop7: detected capacity change from 0 to 512 [ 130.725987][ T8876] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.812052][ T8888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1654'. [ 130.908755][ T8895] EXT4-fs: Ignoring removed orlov option [ 131.066835][ T8905] EXT4-fs: inline encryption not supported [ 131.140152][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1657'. [ 131.149271][ T8905] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 131.175759][ T8905] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 131.192823][ T8905] EXT4-fs (loop7): Remounting filesystem read-only [ 131.679416][ T8932] FAT-fs (loop4): bogus sectors per cluster 0 [ 131.685564][ T8932] FAT-fs (loop4): Can't find a valid FAT filesystem [ 131.711285][ T8936] EXT4-fs: Ignoring removed oldalloc option [ 131.717362][ T8936] EXT4-fs: Ignoring removed bh option [ 131.795383][ T8944] FAULT_INJECTION: forcing a failure. [ 131.795383][ T8944] name failslab, interval 1, probability 0, space 0, times 0 [ 131.808118][ T8944] CPU: 0 UID: 0 PID: 8944 Comm: syz.4.1672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.808155][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.808172][ T8944] Call Trace: [ 131.808190][ T8944] [ 131.808201][ T8944] __dump_stack+0x1d/0x30 [ 131.808236][ T8944] dump_stack_lvl+0x95/0xd0 [ 131.808266][ T8944] dump_stack+0x15/0x1b [ 131.808293][ T8944] should_fail_ex+0x263/0x280 [ 131.808333][ T8944] should_failslab+0x8c/0xb0 [ 131.808366][ T8944] kmem_cache_alloc_noprof+0x68/0x490 [ 131.808397][ T8944] ? vm_area_dup+0x33/0x2c0 [ 131.808432][ T8944] vm_area_dup+0x33/0x2c0 [ 131.808468][ T8944] __split_vma+0xe9/0x660 [ 131.808499][ T8944] ? mas_find+0x5d5/0x700 [ 131.808539][ T8944] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 131.808591][ T8944] do_vmi_align_munmap+0x1e1/0x400 [ 131.808641][ T8944] do_vmi_munmap+0x1da/0x220 [ 131.808669][ T8944] __vm_munmap+0x1a8/0x290 [ 131.808704][ T8944] __x64_sys_munmap+0x36/0x50 [ 131.808746][ T8944] x64_sys_call+0xbee/0x3000 [ 131.808778][ T8944] do_syscall_64+0xc0/0x2a0 [ 131.808819][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.808849][ T8944] RIP: 0033:0x7f0d1f12ace7 [ 131.808871][ T8944] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.808896][ T8944] RSP: 002b:00007f0d1db85d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 131.808923][ T8944] RAX: ffffffffffffffda RBX: 00007f0d18000000 RCX: 00007f0d1f12ace7 [ 131.808943][ T8944] RDX: 0000000000000000 RSI: 0000000001b67000 RDI: 00007f0d1c000000 [ 131.808961][ T8944] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 131.808979][ T8944] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 131.808996][ T8944] R13: 0000000000001000 R14: 00007f0d1c000000 R15: 0000000002499000 [ 131.809022][ T8944] [ 132.066495][ T8952] validate_nla: 2 callbacks suppressed [ 132.066516][ T8952] netlink: 'syz.4.1675': attribute type 6 has an invalid length. [ 132.100295][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 132.100314][ T29] audit: type=1400 audit(1769546300.473:3337): avc: denied { write } for pid=8949 comm="syz.4.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.138567][ T8952] set_capacity_and_notify: 4 callbacks suppressed [ 132.138589][ T8952] loop4: detected capacity change from 0 to 2048 [ 132.151870][ T29] audit: type=1400 audit(1769546300.501:3338): avc: denied { read } for pid=8949 comm="syz.4.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.396725][ T29] audit: type=1326 audit(1769546300.735:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.430261][ T29] audit: type=1326 audit(1769546300.781:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.483395][ T29] audit: type=1326 audit(1769546300.828:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.530875][ T29] audit: type=1326 audit(1769546300.838:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.554470][ T29] audit: type=1326 audit(1769546300.866:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.578660][ T29] audit: type=1326 audit(1769546300.875:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.602172][ T29] audit: type=1326 audit(1769546300.875:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.672105][ T29] audit: type=1326 audit(1769546300.931:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.2.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 132.749961][ T8967] FAULT_INJECTION: forcing a failure. [ 132.749961][ T8967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.763310][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.4.1680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.763424][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.763441][ T8967] Call Trace: [ 132.763449][ T8967] [ 132.763459][ T8967] __dump_stack+0x1d/0x30 [ 132.763489][ T8967] dump_stack_lvl+0x95/0xd0 [ 132.763530][ T8967] dump_stack+0x15/0x1b [ 132.763552][ T8967] should_fail_ex+0x263/0x280 [ 132.763590][ T8967] should_fail+0xb/0x20 [ 132.763638][ T8967] should_fail_usercopy+0x1a/0x20 [ 132.763690][ T8967] _copy_to_user+0x20/0xa0 [ 132.763717][ T8967] simple_read_from_buffer+0xb5/0x130 [ 132.763765][ T8967] proc_fail_nth_read+0x10e/0x150 [ 132.763803][ T8967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.763888][ T8967] vfs_read+0x1ab/0x7f0 [ 132.763907][ T8967] ? __rcu_read_unlock+0x4e/0x70 [ 132.763946][ T8967] ? __fget_files+0x184/0x1c0 [ 132.764012][ T8967] ? mutex_lock+0x57/0x90 [ 132.764035][ T8967] ksys_read+0xdc/0x1a0 [ 132.764055][ T8967] __x64_sys_read+0x40/0x50 [ 132.764083][ T8967] x64_sys_call+0x2889/0x3000 [ 132.764112][ T8967] do_syscall_64+0xc0/0x2a0 [ 132.764200][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.764292][ T8967] RIP: 0033:0x7f0d1f0eb78e [ 132.764313][ T8967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.764338][ T8967] RSP: 002b:00007f0d1db86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.764375][ T8967] RAX: ffffffffffffffda RBX: 00007f0d1db876c0 RCX: 00007f0d1f0eb78e [ 132.764389][ T8967] RDX: 000000000000000f RSI: 00007f0d1db870a0 RDI: 0000000000000004 [ 132.764402][ T8967] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 132.764415][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.764431][ T8967] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 132.764457][ T8967] [ 133.091358][ T8978] loop0: detected capacity change from 0 to 1024 [ 133.108479][ T8978] EXT4-fs: Ignoring removed orlov option [ 133.289347][ T8995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 133.296076][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.304250][ T8995] vhci_hcd vhci_hcd.0: Device attached [ 133.345786][ T8996] vhci_hcd: connection closed [ 133.345996][ T1826] vhci_hcd vhci_hcd.0: stop threads [ 133.356028][ T1826] vhci_hcd vhci_hcd.0: release socket [ 133.361429][ T1826] vhci_hcd vhci_hcd.0: disconnect device [ 133.459226][ T9004] 9p: Bad value for 'rfdno' [ 133.467766][ T8992] loop7: detected capacity change from 0 to 512 [ 133.488143][ T8992] EXT4-fs (loop7): 1 truncate cleaned up [ 133.770474][ T9019] loop7: detected capacity change from 0 to 1024 [ 133.777835][ T9019] EXT4-fs: Ignoring removed oldalloc option [ 133.783879][ T9019] EXT4-fs: Ignoring removed bh option [ 133.918467][ T9024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1699'. [ 133.927954][ T9024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.935217][ T9024] IPv6: NLM_F_CREATE should be set when creating new route [ 133.942468][ T9024] IPv6: NLM_F_CREATE should be set when creating new route [ 134.190310][ T9031] loop0: detected capacity change from 0 to 8192 [ 134.283294][ T9037] IPVS: stopping backup sync thread 9038 ... [ 134.284759][ T9038] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 134.422478][ T9044] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.1708'. [ 134.599914][ T9059] loop8: detected capacity change from 0 to 512 [ 134.617180][ T9059] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.646195][ T9059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 134.671676][ T9064] loop0: detected capacity change from 0 to 1024 [ 134.680660][ T9059] System zones: 1-12 [ 134.684906][ T9059] EXT4-fs (loop8): orphan cleanup on readonly fs [ 134.700877][ T9059] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.1712: attempt to clear invalid blocks 1024 len 1 [ 134.718354][ T9059] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1712: bg 0: block 361: padding at end of block bitmap is not set [ 134.734762][ T9059] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 134.747201][ T9059] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1712: invalid indirect mapped block 1811939328 (level 0) [ 134.762803][ T9059] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1712: invalid indirect mapped block 2 (level 2) [ 134.780430][ T9059] EXT4-fs (loop8): 1 truncate cleaned up [ 134.787536][ T9067] lo speed is unknown, defaulting to 1000 [ 134.805377][ T9064] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.1717: inode #1080879382: comm syz.0.1717: iget: illegal inode # [ 134.859039][ T9064] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1717: error while reading EA inode 1080879382 err=-117 [ 134.989266][ T9079] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1722'. [ 135.024934][ T9082] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1723'. [ 135.063152][ T9067] loop4: detected capacity change from 0 to 2048 [ 135.075824][ T9084] loop7: detected capacity change from 0 to 1024 [ 135.089452][ T9084] EXT4-fs: Ignoring removed orlov option [ 135.108054][ T3304] loop4: p1 p3 p4 [ 135.113678][ T3304] loop4: p4 size 589824 extends beyond EOD, truncated [ 135.133778][ T9067] loop4: p1 p3 p4 [ 135.139641][ T9067] loop4: p4 size 589824 extends beyond EOD, truncated [ 135.173375][ T9094] loop0: detected capacity change from 0 to 2048 [ 135.286332][ T9098] EXT4-fs: Ignoring removed oldalloc option [ 135.292469][ T9098] EXT4-fs: Ignoring removed bh option [ 135.364673][ T9106] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 135.392805][ T9104] EXT4-fs: Ignoring removed oldalloc option [ 135.406175][ T9106] tipc: Enabled bearer , priority 0 [ 135.442755][ T9106] syzkaller0: entered promiscuous mode [ 135.448385][ T9106] syzkaller0: entered allmulticast mode [ 135.454555][ T9106] tipc: Resetting bearer [ 135.468685][ T9106] bond6: entered promiscuous mode [ 135.473999][ T9106] bond6: entered allmulticast mode [ 135.479827][ T9106] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.530043][ T9114] EXT4-fs: Ignoring removed oldalloc option [ 135.539994][ T9114] EXT4-fs (loop8): 1 truncate cleaned up [ 135.546978][ T9104] EXT4-fs (loop0): 1 truncate cleaned up [ 135.615784][ T9114] FAULT_INJECTION: forcing a failure. [ 135.615784][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.628987][ T9114] CPU: 0 UID: 0 PID: 9114 Comm: syz.8.1734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.629024][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.629120][ T9114] Call Trace: [ 135.629129][ T9114] [ 135.629177][ T9114] __dump_stack+0x1d/0x30 [ 135.629260][ T9114] dump_stack_lvl+0x95/0xd0 [ 135.629282][ T9114] dump_stack+0x15/0x1b [ 135.629304][ T9114] should_fail_ex+0x263/0x280 [ 135.629363][ T9114] should_fail+0xb/0x20 [ 135.629400][ T9114] should_fail_usercopy+0x1a/0x20 [ 135.629445][ T9114] _copy_from_iter+0xcf/0xea0 [ 135.629479][ T9114] ? __alloc_skb+0x397/0x4b0 [ 135.629515][ T9114] ? __alloc_skb+0x219/0x4b0 [ 135.629600][ T9114] netlink_sendmsg+0x4ae/0x6f0 [ 135.629627][ T9114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.629652][ T9114] ____sys_sendmsg+0x5af/0x600 [ 135.629684][ T9114] ___sys_sendmsg+0x195/0x1e0 [ 135.629750][ T9114] __x64_sys_sendmsg+0xd4/0x160 [ 135.629861][ T9114] x64_sys_call+0x17ba/0x3000 [ 135.629895][ T9114] do_syscall_64+0xc0/0x2a0 [ 135.629943][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.630048][ T9114] RIP: 0033:0x7fd78d88aeb9 [ 135.630070][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.630097][ T9114] RSP: 002b:00007fd78c2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.630160][ T9114] RAX: ffffffffffffffda RBX: 00007fd78db05fa0 RCX: 00007fd78d88aeb9 [ 135.630180][ T9114] RDX: 0000000004004040 RSI: 00002000000003c0 RDI: 0000000000000007 [ 135.630198][ T9114] RBP: 00007fd78c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.630216][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.630234][ T9114] R13: 00007fd78db06038 R14: 00007fd78db05fa0 R15: 00007ffce7b1bbe8 [ 135.630260][ T9114] [ 135.835271][ T9110] tipc: Resetting bearer [ 135.842737][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 135.862409][ T9110] tipc: Disabling bearer [ 135.921682][ T9123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 135.942550][ T9123] team0: Failed to send port change of device bond7 via netlink (err -105) [ 135.952983][ T9123] team0: Failed to send options change via netlink (err -105) [ 135.960533][ T9123] team0: Port device bond7 added [ 136.126376][ T9148] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 136.140098][ T9148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 136.149925][ T9148] System zones: 1-12 [ 136.154031][ T9148] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.163697][ T9148] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1744: attempt to clear invalid blocks 1024 len 1 [ 136.188046][ T9148] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1744: bg 0: block 361: padding at end of block bitmap is not set [ 136.200874][ T9151] FAULT_INJECTION: forcing a failure. [ 136.200874][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 136.215065][ T9151] CPU: 0 UID: 0 PID: 9151 Comm: syz.8.1741 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.215103][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.215121][ T9151] Call Trace: [ 136.215132][ T9151] [ 136.215141][ T9151] __dump_stack+0x1d/0x30 [ 136.215173][ T9151] dump_stack_lvl+0x95/0xd0 [ 136.215268][ T9151] dump_stack+0x15/0x1b [ 136.215296][ T9151] should_fail_ex+0x263/0x280 [ 136.215338][ T9151] should_failslab+0x8c/0xb0 [ 136.215380][ T9151] __kvmalloc_node_noprof+0x148/0x680 [ 136.215419][ T9151] ? traverse+0xa2/0x3a0 [ 136.215477][ T9151] traverse+0xa2/0x3a0 [ 136.215520][ T9151] seq_lseek+0xb5/0x170 [ 136.215560][ T9151] __x64_sys_lseek+0xe8/0x160 [ 136.215660][ T9151] x64_sys_call+0x285d/0x3000 [ 136.215754][ T9151] do_syscall_64+0xc0/0x2a0 [ 136.215795][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.215825][ T9151] RIP: 0033:0x7fd78d88aeb9 [ 136.215897][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.215978][ T9151] RSP: 002b:00007fd78c2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 136.216006][ T9151] RAX: ffffffffffffffda RBX: 00007fd78db06180 RCX: 00007fd78d88aeb9 [ 136.216025][ T9151] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000004 [ 136.216043][ T9151] RBP: 00007fd78c2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 136.216145][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.216162][ T9151] R13: 00007fd78db06218 R14: 00007fd78db06180 R15: 00007ffce7b1bbe8 [ 136.216209][ T9151] [ 136.383854][ T9148] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 136.394187][ T9148] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1744: invalid indirect mapped block 1811939328 (level 0) [ 136.408734][ T9148] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1744: invalid indirect mapped block 2 (level 2) [ 136.423283][ T9148] EXT4-fs (loop4): 1 truncate cleaned up [ 136.450938][ T10] lo speed is unknown, defaulting to 1000 [ 136.456796][ T10] syz2: Port: 1 Link DOWN [ 136.510996][ T9154] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.525990][ T9160] netlink: 212892 bytes leftover after parsing attributes in process `syz.7.1748'. [ 136.535953][ T9154] FAULT_INJECTION: forcing a failure. [ 136.535953][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 136.548689][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.0.1747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.548720][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.548737][ T9154] Call Trace: [ 136.548746][ T9154] [ 136.548831][ T9154] __dump_stack+0x1d/0x30 [ 136.548858][ T9154] dump_stack_lvl+0x95/0xd0 [ 136.548884][ T9154] dump_stack+0x15/0x1b [ 136.548910][ T9154] should_fail_ex+0x263/0x280 [ 136.548967][ T9154] should_failslab+0x8c/0xb0 [ 136.548989][ T9154] __kmalloc_noprof+0xb8/0x580 [ 136.549070][ T9154] ? __d_alloc+0x95/0x340 [ 136.549110][ T9154] __d_alloc+0x95/0x340 [ 136.549210][ T9154] d_alloc+0x2e/0x100 [ 136.549241][ T9154] lookup_one_qstr_excl+0x99/0x250 [ 136.549289][ T9154] filename_create+0x155/0x220 [ 136.549333][ T9154] do_mkdirat+0x82/0x3b0 [ 136.549356][ T9154] __x64_sys_mkdir+0x42/0x50 [ 136.549423][ T9154] x64_sys_call+0x2f32/0x3000 [ 136.549456][ T9154] do_syscall_64+0xc0/0x2a0 [ 136.549538][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.549566][ T9154] RIP: 0033:0x7f8e7518aeb9 [ 136.549584][ T9154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.549602][ T9154] RSP: 002b:00007f8e73be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 136.549633][ T9154] RAX: ffffffffffffffda RBX: 00007f8e75405fa0 RCX: 00007f8e7518aeb9 [ 136.549647][ T9154] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 00002000000004c0 [ 136.549663][ T9154] RBP: 00007f8e73be7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.549680][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.549695][ T9154] R13: 00007f8e75406038 R14: 00007f8e75405fa0 R15: 00007ffd68273148 [ 136.549715][ T9154] [ 136.973578][ T9187] netlink: 212892 bytes leftover after parsing attributes in process `syz.8.1761'. [ 137.384453][ T9217] FAULT_INJECTION: forcing a failure. [ 137.384453][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 137.397794][ T9217] CPU: 1 UID: 0 PID: 9217 Comm: syz.7.1772 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.397863][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.397878][ T9217] Call Trace: [ 137.397885][ T9217] [ 137.397893][ T9217] __dump_stack+0x1d/0x30 [ 137.397924][ T9217] dump_stack_lvl+0x95/0xd0 [ 137.397954][ T9217] dump_stack+0x15/0x1b [ 137.398039][ T9217] should_fail_ex+0x263/0x280 [ 137.398108][ T9217] should_failslab+0x8c/0xb0 [ 137.398133][ T9217] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 137.398196][ T9217] ? sidtab_sid2str_get+0xa0/0x130 [ 137.398234][ T9217] kmemdup_noprof+0x2b/0x70 [ 137.398268][ T9217] sidtab_sid2str_get+0xa0/0x130 [ 137.398295][ T9217] security_sid_to_context_core+0x1eb/0x2e0 [ 137.398363][ T9217] security_sid_to_context_force+0x2a/0x40 [ 137.398398][ T9217] selinux_inode_init_security+0x407/0x570 [ 137.398433][ T9217] security_inode_init_security+0x13a/0x320 [ 137.398479][ T9217] ? __pfx_ext4_initxattrs+0x10/0x10 [ 137.398506][ T9217] ext4_init_security+0x34/0x50 [ 137.398537][ T9217] __ext4_new_inode+0x2149/0x2330 [ 137.398622][ T9217] ext4_create+0x16e/0x2f0 [ 137.398669][ T9217] ? __pfx_ext4_create+0x10/0x10 [ 137.398698][ T9217] path_openat+0x1121/0x23c0 [ 137.398904][ T9217] do_filp_open+0x15d/0x280 [ 137.398948][ T9217] do_sys_openat2+0xa6/0x150 [ 137.398996][ T9217] __x64_sys_openat+0xf2/0x120 [ 137.399035][ T9217] x64_sys_call+0x2b07/0x3000 [ 137.399104][ T9217] do_syscall_64+0xc0/0x2a0 [ 137.399134][ T9217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.399157][ T9217] RIP: 0033:0x7f0c9da2aeb9 [ 137.399182][ T9217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.399206][ T9217] RSP: 002b:00007f0c9c487028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.399302][ T9217] RAX: ffffffffffffffda RBX: 00007f0c9dca5fa0 RCX: 00007f0c9da2aeb9 [ 137.399321][ T9217] RDX: 000000000000275a RSI: 0000200000000400 RDI: ffffffffffffff9c [ 137.399340][ T9217] RBP: 00007f0c9c487090 R08: 0000000000000000 R09: 0000000000000000 [ 137.399357][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.399369][ T9217] R13: 00007f0c9dca6038 R14: 00007f0c9dca5fa0 R15: 00007ffe54b22388 [ 137.399409][ T9217] [ 137.659081][ T9225] netlink: 212892 bytes leftover after parsing attributes in process `syz.8.1775'. [ 137.713932][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 137.713949][ T29] audit: type=1400 audit(1769546305.720:3399): avc: denied { connect } for pid=9228 comm="syz.8.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.763766][ T9232] set_capacity_and_notify: 6 callbacks suppressed [ 137.763782][ T9232] loop4: detected capacity change from 0 to 512 [ 137.785982][ T9229] loop8: detected capacity change from 0 to 1024 [ 137.795118][ T9229] netlink: 'syz.8.1778': attribute type 4 has an invalid length. [ 137.803508][ T9232] /dev/loop4: Can't open blockdev [ 137.828927][ T6022] EXT4-fs unmount: 54 callbacks suppressed [ 137.828948][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.898451][ T29] audit: type=1326 audit(1769546305.870:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9237 comm="syz.4.1782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d1f12aeb9 code=0x0 [ 138.072864][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1786'. [ 138.134633][ T9256] netlink: 'syz.8.1788': attribute type 10 has an invalid length. [ 138.142526][ T9256] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1788'. [ 138.177749][ T9256] team0: Port device geneve1 added [ 138.183133][ T1614] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.200694][ T1614] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.224984][ T9262] loop0: detected capacity change from 0 to 1024 [ 138.232706][ T1614] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.252868][ T9262] EXT4-fs: Ignoring removed orlov option [ 138.262614][ T1826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.313009][ T29] audit: type=1326 audit(1769546306.272:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.316761][ T9262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.338148][ T29] audit: type=1326 audit(1769546306.272:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.372169][ T29] audit: type=1326 audit(1769546306.282:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.396159][ T29] audit: type=1326 audit(1769546306.282:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.409905][ T9268] pim6reg: tun_chr_ioctl cmd 2148553947 [ 138.419619][ T29] audit: type=1326 audit(1769546306.282:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.419649][ T29] audit: type=1326 audit(1769546306.282:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.419749][ T29] audit: type=1326 audit(1769546306.282:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.497456][ T29] audit: type=1326 audit(1769546306.282:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22d69daeb9 code=0x7ffc0000 [ 138.521669][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1791'. [ 138.575717][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1793'. [ 138.587862][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9274 comm=syz.7.1791 [ 138.648806][ T9280] loop8: detected capacity change from 0 to 1024 [ 138.655694][ T9280] EXT4-fs: Ignoring removed oldalloc option [ 138.662414][ T9280] EXT4-fs: Ignoring removed bh option [ 138.669362][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.691869][ T9280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.000824][ T9297] loop4: detected capacity change from 0 to 512 [ 139.020734][ T9297] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1800: inode has both inline data and extents flags [ 139.044615][ T9300] loop7: detected capacity change from 0 to 512 [ 139.058130][ T9300] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 139.096562][ T9297] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1800: couldn't read orphan inode 15 (err -117) [ 139.144037][ T9297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.176969][ T10] hid-generic 0006:0004:000B.0002: unknown main item tag 0x4 [ 139.184480][ T10] hid-generic 0006:0004:000B.0002: item fetching failed at offset 20/38 [ 139.215805][ T9300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 139.225402][ T10] hid-generic 0006:0004:000B.0002: probe with driver hid-generic failed with error -22 [ 139.236921][ T9307] x_tables: unsorted underflow at hook 3 [ 139.298037][ T9300] System zones: 1-12 [ 139.302096][ T9300] EXT4-fs (loop7): orphan cleanup on readonly fs [ 139.338888][ T9300] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.1799: attempt to clear invalid blocks 1024 len 1 [ 139.357788][ T9312] loop0: detected capacity change from 0 to 1024 [ 139.372381][ T9312] EXT4-fs: Ignoring removed orlov option [ 139.387229][ T9300] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1799: bg 0: block 361: padding at end of block bitmap is not set [ 139.443834][ T9312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.494886][ T9300] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 139.507435][ T9300] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1799: invalid indirect mapped block 1811939328 (level 0) [ 139.537439][ T9300] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1799: invalid indirect mapped block 2 (level 2) [ 139.562115][ T9300] EXT4-fs (loop7): 1 truncate cleaned up [ 139.576551][ T9300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 139.583098][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.603497][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.617743][ T9310] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9310 comm=syz.2.1805 [ 139.681484][ T9318] lo speed is unknown, defaulting to 1000 [ 139.864143][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 139.974113][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.988848][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1817'. [ 140.001569][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1817'. [ 140.010926][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1817'. [ 140.162555][ T9362] loop7: detected capacity change from 0 to 512 [ 140.174931][ T9366] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 140.186643][ T9362] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.217873][ T9362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 140.230652][ T9362] System zones: 1-12 [ 140.234905][ T9362] EXT4-fs (loop7): orphan cleanup on readonly fs [ 140.241789][ T9362] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.1822: attempt to clear invalid blocks 1024 len 1 [ 140.255275][ T9362] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1822: bg 0: block 361: padding at end of block bitmap is not set [ 140.292689][ T9362] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 140.323540][ T9362] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1822: invalid indirect mapped block 1811939328 (level 0) [ 140.376776][ T9362] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1822: invalid indirect mapped block 2 (level 2) [ 140.420829][ T9362] EXT4-fs (loop7): 1 truncate cleaned up [ 140.429382][ T9362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 140.856281][ T9384] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 140.877598][ T9384] SELinux: failed to load policy [ 140.995681][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 141.051074][ T9391] lo speed is unknown, defaulting to 1000 [ 141.080556][ T9393] FAULT_INJECTION: forcing a failure. [ 141.080556][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.093707][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.7.1834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.093742][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.093758][ T9393] Call Trace: [ 141.093767][ T9393] [ 141.093777][ T9393] __dump_stack+0x1d/0x30 [ 141.093855][ T9393] dump_stack_lvl+0x95/0xd0 [ 141.093879][ T9393] dump_stack+0x15/0x1b [ 141.093907][ T9393] should_fail_ex+0x263/0x280 [ 141.093959][ T9393] should_fail+0xb/0x20 [ 141.094004][ T9393] should_fail_usercopy+0x1a/0x20 [ 141.094072][ T9393] _copy_to_user+0x20/0xa0 [ 141.094107][ T9393] simple_read_from_buffer+0xb5/0x130 [ 141.094155][ T9393] proc_fail_nth_read+0x10e/0x150 [ 141.094270][ T9393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.094306][ T9393] vfs_read+0x1ab/0x7f0 [ 141.094331][ T9393] ? __rcu_read_unlock+0x4e/0x70 [ 141.094485][ T9393] ? __fget_files+0x184/0x1c0 [ 141.094516][ T9393] ? mutex_lock+0x57/0x90 [ 141.094596][ T9393] ksys_read+0xdc/0x1a0 [ 141.094697][ T9393] __x64_sys_read+0x40/0x50 [ 141.094798][ T9393] x64_sys_call+0x2889/0x3000 [ 141.094833][ T9393] do_syscall_64+0xc0/0x2a0 [ 141.094870][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.094924][ T9393] RIP: 0033:0x7f0c9d9eb78e [ 141.094945][ T9393] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.094972][ T9393] RSP: 002b:00007f0c9c486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.094999][ T9393] RAX: ffffffffffffffda RBX: 00007f0c9c4876c0 RCX: 00007f0c9d9eb78e [ 141.095017][ T9393] RDX: 000000000000000f RSI: 00007f0c9c4870a0 RDI: 0000000000000004 [ 141.095044][ T9393] RBP: 00007f0c9c487090 R08: 0000000000000000 R09: 0000000000000000 [ 141.095061][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.095078][ T9393] R13: 00007f0c9dca6038 R14: 00007f0c9dca5fa0 R15: 00007ffe54b22388 [ 141.095105][ T9393] [ 141.488543][ T9408] FAULT_INJECTION: forcing a failure. [ 141.488543][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 141.501894][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.0.1841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.501922][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.501955][ T9408] Call Trace: [ 141.501963][ T9408] [ 141.501972][ T9408] __dump_stack+0x1d/0x30 [ 141.502001][ T9408] dump_stack_lvl+0x95/0xd0 [ 141.502024][ T9408] dump_stack+0x15/0x1b [ 141.502049][ T9408] should_fail_ex+0x263/0x280 [ 141.502145][ T9408] should_failslab+0x8c/0xb0 [ 141.502174][ T9408] ? __pfx_free_ioctx_users+0x10/0x10 [ 141.502209][ T9408] __kmalloc_cache_noprof+0x64/0x4a0 [ 141.502270][ T9408] ? percpu_ref_init+0x9c/0x250 [ 141.502311][ T9408] ? __pfx_free_ioctx_users+0x10/0x10 [ 141.502374][ T9408] percpu_ref_init+0x9c/0x250 [ 141.502495][ T9408] ioctx_alloc+0x1a1/0x4c0 [ 141.502524][ T9408] __se_sys_io_setup+0x6b/0x1b0 [ 141.502598][ T9408] __x64_sys_io_setup+0x31/0x40 [ 141.502620][ T9408] x64_sys_call+0x2a8e/0x3000 [ 141.502696][ T9408] do_syscall_64+0xc0/0x2a0 [ 141.502728][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.502754][ T9408] RIP: 0033:0x7f8e7518aeb9 [ 141.502775][ T9408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.502871][ T9408] RSP: 002b:00007f8e73be7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 141.502912][ T9408] RAX: ffffffffffffffda RBX: 00007f8e75405fa0 RCX: 00007f8e7518aeb9 [ 141.502931][ T9408] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000001 [ 141.502966][ T9408] RBP: 00007f8e73be7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.502996][ T9408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.503012][ T9408] R13: 00007f8e75406038 R14: 00007f8e75405fa0 R15: 00007ffd68273148 [ 141.503095][ T9408] [ 141.505489][ T9407] siw: device registration error -23 [ 141.721238][ T9413] FAULT_INJECTION: forcing a failure. [ 141.721238][ T9413] name failslab, interval 1, probability 0, space 0, times 0 [ 141.734038][ T9413] CPU: 1 UID: 0 PID: 9413 Comm: syz.2.1837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.734089][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.734106][ T9413] Call Trace: [ 141.734115][ T9413] [ 141.734125][ T9413] __dump_stack+0x1d/0x30 [ 141.734158][ T9413] dump_stack_lvl+0x95/0xd0 [ 141.734186][ T9413] dump_stack+0x15/0x1b [ 141.734213][ T9413] should_fail_ex+0x263/0x280 [ 141.734268][ T9413] should_failslab+0x8c/0xb0 [ 141.734299][ T9413] __kmalloc_cache_noprof+0x64/0x4a0 [ 141.734334][ T9413] ? __scm_send+0x3dc/0xb30 [ 141.734363][ T9413] __scm_send+0x3dc/0xb30 [ 141.734431][ T9413] ? __rcu_read_unlock+0x4e/0x70 [ 141.734469][ T9413] ? selinux_socket_getpeersec_dgram+0x205/0x280 [ 141.734504][ T9413] unix_stream_sendmsg+0xdd/0xbb0 [ 141.734572][ T9413] ? selinux_socket_sendmsg+0x192/0x1c0 [ 141.734601][ T9413] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 141.734635][ T9413] ____sys_sendmsg+0x5af/0x600 [ 141.734737][ T9413] ___sys_sendmsg+0x195/0x1e0 [ 141.734780][ T9413] __x64_sys_sendmsg+0xd4/0x160 [ 141.734811][ T9413] x64_sys_call+0x17ba/0x3000 [ 141.734894][ T9413] do_syscall_64+0xc0/0x2a0 [ 141.735016][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.735046][ T9413] RIP: 0033:0x7f22d69daeb9 [ 141.735065][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.735090][ T9413] RSP: 002b:00007f22d5437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.735117][ T9413] RAX: ffffffffffffffda RBX: 00007f22d6c55fa0 RCX: 00007f22d69daeb9 [ 141.735133][ T9413] RDX: 0000000000000080 RSI: 0000200000000780 RDI: 0000000000000004 [ 141.735254][ T9413] RBP: 00007f22d5437090 R08: 0000000000000000 R09: 0000000000000000 [ 141.735272][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.735288][ T9413] R13: 00007f22d6c56038 R14: 00007f22d6c55fa0 R15: 00007ffe6e6d2768 [ 141.735311][ T9413] [ 142.063277][ T9417] team0 (unregistering): Port device team_slave_0 removed [ 142.089381][ T9417] team0 (unregistering): Port device team_slave_1 removed [ 142.125453][ T9410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9410 comm=syz.7.1842 [ 142.193076][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1838'. [ 142.272550][ T9437] loop0: detected capacity change from 0 to 512 [ 142.291877][ T9437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.348313][ T9437] EXT4-fs (loop0): 1 truncate cleaned up [ 142.367274][ T9437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.488510][ T9448] FAULT_INJECTION: forcing a failure. [ 142.488510][ T9448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.502377][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.4.1852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.502414][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.502426][ T9448] Call Trace: [ 142.502434][ T9448] [ 142.502441][ T9448] __dump_stack+0x1d/0x30 [ 142.502564][ T9448] dump_stack_lvl+0x95/0xd0 [ 142.502588][ T9448] dump_stack+0x15/0x1b [ 142.502615][ T9448] should_fail_ex+0x263/0x280 [ 142.502651][ T9448] should_fail+0xb/0x20 [ 142.502704][ T9448] should_fail_usercopy+0x1a/0x20 [ 142.502744][ T9448] _copy_to_iter+0x251/0xea0 [ 142.502787][ T9448] ? __rcu_read_unlock+0x4e/0x70 [ 142.502922][ T9448] ? ptype_seq_stop+0xe/0x20 [ 142.502945][ T9448] ? traverse+0x379/0x3a0 [ 142.503011][ T9448] seq_read_iter+0x1d5/0x940 [ 142.503048][ T9448] ? _parse_integer_limit+0x170/0x190 [ 142.503089][ T9448] seq_read+0x279/0x2c0 [ 142.503123][ T9448] ? __pfx_seq_read+0x10/0x10 [ 142.503241][ T9448] proc_reg_read+0x128/0x1c0 [ 142.503315][ T9448] ? __pfx_proc_reg_read+0x10/0x10 [ 142.503347][ T9448] vfs_readv+0x432/0x6e0 [ 142.503390][ T9448] __x64_sys_preadv+0xfd/0x1c0 [ 142.503426][ T9448] x64_sys_call+0x2805/0x3000 [ 142.503471][ T9448] do_syscall_64+0xc0/0x2a0 [ 142.503512][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.503603][ T9448] RIP: 0033:0x7f0d1f12aeb9 [ 142.503623][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.503646][ T9448] RSP: 002b:00007f0d1db87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 142.503671][ T9448] RAX: ffffffffffffffda RBX: 00007f0d1f3a5fa0 RCX: 00007f0d1f12aeb9 [ 142.503758][ T9448] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 142.503774][ T9448] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 142.503836][ T9448] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 142.503853][ T9448] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 142.503926][ T9448] [ 142.729366][ T9455] loop4: detected capacity change from 0 to 512 [ 142.763943][ T9455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.784615][ T9455] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.825282][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.005932][ T9477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9731 sclass=netlink_route_socket pid=9477 comm=syz.4.1859 [ 143.086974][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 143.087055][ T29] audit: type=1326 audit(1769546310.753:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78d88aeb9 code=0x7ffc0000 [ 143.134966][ T29] audit: type=1326 audit(1769546310.781:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd78d88aeb9 code=0x7ffc0000 [ 143.158974][ T29] audit: type=1326 audit(1769546310.781:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78d88aeb9 code=0x7ffc0000 [ 143.182751][ T29] audit: type=1326 audit(1769546310.790:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78d88aeb9 code=0x7ffc0000 [ 143.206889][ T29] audit: type=1326 audit(1769546310.818:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd78d84b78e code=0x7ffc0000 [ 143.230349][ T29] audit: type=1326 audit(1769546310.818:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd78d88c1d7 code=0x7ffc0000 [ 143.254907][ T29] audit: type=1326 audit(1769546310.846:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd78d88aeb9 code=0x7ffc0000 [ 143.278307][ T29] audit: type=1326 audit(1769546310.846:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd78d88c1d7 code=0x7ffc0000 [ 143.302544][ T29] audit: type=1326 audit(1769546310.846:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd78d84b78e code=0x7ffc0000 [ 143.325938][ T29] audit: type=1326 audit(1769546310.846:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.8.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78d88aeb9 code=0x7ffc0000 [ 143.367325][ T1614] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.376350][ T1614] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.386198][ T1614] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.403434][ T1614] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.415986][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.463690][ T9479] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9479 comm=syz.2.1860 [ 143.476371][ T9486] loop0: detected capacity change from 0 to 1024 [ 143.487426][ T9486] EXT4-fs: Ignoring removed orlov option [ 143.512233][ T9486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.818038][ T9508] lo speed is unknown, defaulting to 1000 [ 143.832347][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.036829][ T9503] loop8: detected capacity change from 0 to 512 [ 144.055280][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 144.090307][ T9536] FAULT_INJECTION: forcing a failure. [ 144.090307][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.103565][ T9536] CPU: 1 UID: 0 PID: 9536 Comm: syz.4.1880 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.103649][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.103665][ T9536] Call Trace: [ 144.103673][ T9536] [ 144.103683][ T9536] __dump_stack+0x1d/0x30 [ 144.103780][ T9536] dump_stack_lvl+0x95/0xd0 [ 144.103808][ T9536] dump_stack+0x15/0x1b [ 144.103833][ T9536] should_fail_ex+0x263/0x280 [ 144.103928][ T9536] should_fail+0xb/0x20 [ 144.103955][ T9536] should_fail_usercopy+0x1a/0x20 [ 144.104037][ T9536] _copy_to_user+0x20/0xa0 [ 144.104057][ T9536] simple_read_from_buffer+0xb5/0x130 [ 144.104141][ T9536] proc_fail_nth_read+0x10e/0x150 [ 144.104178][ T9536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.104210][ T9536] vfs_read+0x1ab/0x7f0 [ 144.104343][ T9536] ? __rcu_read_unlock+0x4e/0x70 [ 144.104452][ T9536] ? __fget_files+0x184/0x1c0 [ 144.104478][ T9536] ? mutex_lock+0x57/0x90 [ 144.104502][ T9536] ksys_read+0xdc/0x1a0 [ 144.104594][ T9536] __x64_sys_read+0x40/0x50 [ 144.104614][ T9536] x64_sys_call+0x2889/0x3000 [ 144.104639][ T9536] do_syscall_64+0xc0/0x2a0 [ 144.104671][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.104702][ T9536] RIP: 0033:0x7f0d1f0eb78e [ 144.104720][ T9536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.104739][ T9536] RSP: 002b:00007f0d1db86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.104759][ T9536] RAX: ffffffffffffffda RBX: 00007f0d1db876c0 RCX: 00007f0d1f0eb78e [ 144.104775][ T9536] RDX: 000000000000000f RSI: 00007f0d1db870a0 RDI: 0000000000000005 [ 144.104840][ T9536] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 144.104930][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.104946][ T9536] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 144.104972][ T9536] [ 144.427908][ T9542] loop4: detected capacity change from 0 to 1024 [ 144.440117][ T9503] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.476130][ T9542] EXT4-fs: Ignoring removed orlov option [ 144.537476][ T9503] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.661465][ T9542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.794896][ T9557] FAULT_INJECTION: forcing a failure. [ 144.794896][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 144.807652][ T9557] CPU: 1 UID: 0 PID: 9557 Comm: syz.0.1887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.807741][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.807755][ T9557] Call Trace: [ 144.807761][ T9557] [ 144.807769][ T9557] __dump_stack+0x1d/0x30 [ 144.807796][ T9557] dump_stack_lvl+0x95/0xd0 [ 144.807825][ T9557] dump_stack+0x15/0x1b [ 144.807885][ T9557] should_fail_ex+0x263/0x280 [ 144.807921][ T9557] should_failslab+0x8c/0xb0 [ 144.807992][ T9557] __kmalloc_cache_noprof+0x64/0x4a0 [ 144.808018][ T9557] ? v9fs_init_fs_context+0x34/0x220 [ 144.808103][ T9557] v9fs_init_fs_context+0x34/0x220 [ 144.808149][ T9557] alloc_fs_context+0x4a3/0x590 [ 144.808172][ T9557] fs_context_for_mount+0x22/0x30 [ 144.808258][ T9557] do_new_mount+0xea/0x700 [ 144.808284][ T9557] ? security_capable+0x7b/0x90 [ 144.808390][ T9557] path_mount+0x4d0/0xbc0 [ 144.808541][ T9557] ? user_path_at+0xbf/0x130 [ 144.808578][ T9557] __se_sys_mount+0x28c/0x2e0 [ 144.808598][ T9557] ? fput+0x8f/0xc0 [ 144.808630][ T9557] __x64_sys_mount+0x67/0x80 [ 144.808736][ T9557] x64_sys_call+0x2cca/0x3000 [ 144.808762][ T9557] do_syscall_64+0xc0/0x2a0 [ 144.808800][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.808831][ T9557] RIP: 0033:0x7f8e7518aeb9 [ 144.808863][ T9557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.808882][ T9557] RSP: 002b:00007f8e73be7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.808908][ T9557] RAX: ffffffffffffffda RBX: 00007f8e75405fa0 RCX: 00007f8e7518aeb9 [ 144.808928][ T9557] RDX: 00002000000002c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 144.808946][ T9557] RBP: 00007f8e73be7090 R08: 00002000000000c0 R09: 0000000000000000 [ 144.809020][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.809033][ T9557] R13: 00007f8e75406038 R14: 00007f8e75405fa0 R15: 00007ffd68273148 [ 144.809111][ T9557] [ 145.111430][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.224900][ T9570] loop4: detected capacity change from 0 to 512 [ 145.242869][ T9570] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 145.253105][ T9570] EXT4-fs (loop4): group descriptors corrupted! [ 145.270692][ T9571] loop7: detected capacity change from 0 to 1024 [ 145.315454][ T9571] EXT4-fs: Ignoring removed oldalloc option [ 145.321546][ T9571] EXT4-fs: Ignoring removed bh option [ 145.390567][ T9571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.434141][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.481809][ T9576] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1888'. [ 145.980263][ T9594] lo speed is unknown, defaulting to 1000 [ 146.233932][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.243237][ T9606] loop4: detected capacity change from 0 to 136 [ 146.258660][ T9609] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 146.267551][ T9609] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 146.461397][ T9617] loop7: detected capacity change from 0 to 512 [ 146.494512][ T9617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.533702][ T9617] ext4: Unknown parameter 'fowner>00000000000000000000' [ 146.822946][ T9627] netlink: 'syz.8.1913': attribute type 1 has an invalid length. [ 146.867629][ T9627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.882001][ T9627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.918175][ T9627] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 146.929211][ T9627] bond1: (slave gre1): Error -95 calling set_mac_address [ 146.972593][ T9625] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1910'. [ 147.053203][ T9640] loop8: detected capacity change from 0 to 512 [ 147.062785][ T9638] loop0: detected capacity change from 0 to 1024 [ 147.070470][ T9638] EXT4-fs: Ignoring removed orlov option [ 147.070661][ T9629] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1912'. [ 147.101635][ T9640] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 147.121809][ T9638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.136361][ T9640] EXT4-fs (loop8): 1 truncate cleaned up [ 147.142887][ T9640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.220321][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.242880][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.280865][ T9650] tap0: tun_chr_ioctl cmd 1074025677 [ 147.289848][ T9650] tap0: linktype set to 774 [ 147.347820][ T9656] macvtap1: entered allmulticast mode [ 147.353385][ T9656] team0: entered allmulticast mode [ 147.358554][ T9656] team_slave_0: entered allmulticast mode [ 147.364394][ T9656] team_slave_1: entered allmulticast mode [ 147.370270][ T9656] geneve1: entered allmulticast mode [ 147.378167][ T9656] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 147.387838][ T9656] team0: left allmulticast mode [ 147.392789][ T9656] team_slave_0: left allmulticast mode [ 147.398287][ T9656] team_slave_1: left allmulticast mode [ 147.403843][ T9656] geneve1: left allmulticast mode [ 147.702076][ T9681] netlink: 'syz.4.1932': attribute type 4 has an invalid length. [ 147.711277][ T9681] netlink: 'syz.4.1932': attribute type 4 has an invalid length. [ 147.804971][ T9679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9679 comm=syz.0.1929 [ 147.977558][ T9695] loop4: detected capacity change from 0 to 512 [ 148.022060][ T9695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.059591][ T9695] netem: incorrect ge model size [ 148.064625][ T9695] netem: change failed [ 148.147281][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.215650][ T9705] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 148.225846][ T9703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.231659][ T9705] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 148.247482][ T10] lo speed is unknown, defaulting to 1000 [ 148.253277][ T10] syz2: Port: 1 Link ACTIVE [ 148.408314][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.435347][ T9726] EXT4-fs: Ignoring removed bh option [ 148.440992][ T9726] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.448988][ T9722] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1944'. [ 148.458228][ T9726] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 148.469332][ T9726] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 148.477656][ T9726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 148.484658][ T9726] __quota_error: 70 callbacks suppressed [ 148.484676][ T9726] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 148.500115][ T9726] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 148.510041][ T9726] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1950: Failed to acquire dquot type 1 [ 148.521924][ T9726] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1950: Invalid block bitmap block 0 in block_group 0 [ 148.537044][ T9726] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1950: Invalid block bitmap block 0 in block_group 0 [ 148.561991][ T9726] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1950: Invalid block bitmap block 0 in block_group 0 [ 148.577801][ T9726] Quota error (device loop4): write_blk: dquota write failed [ 148.585340][ T9726] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 148.595269][ T9726] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1950: Failed to acquire dquot type 1 [ 148.607766][ T9726] Quota error (device loop4): write_blk: dquota write failed [ 148.615299][ T9726] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 148.625237][ T9726] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1950: Failed to acquire dquot type 1 [ 148.638841][ T9730] EXT4-fs: Ignoring removed oldalloc option [ 148.645005][ T9730] EXT4-fs: Ignoring removed bh option [ 148.650620][ T9726] EXT4-fs (loop4): 1 orphan inode deleted [ 148.659647][ T9726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.686310][ T9730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.715404][ T9738] netlink: 'syz.7.1954': attribute type 4 has an invalid length. [ 148.724625][ T9738] netlink: 'syz.7.1954': attribute type 4 has an invalid length. [ 148.768000][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.843271][ T9745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.866616][ T9745] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.061310][ T9754] FAULT_INJECTION: forcing a failure. [ 149.061310][ T9754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.074477][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.4.1958 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.074511][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.074584][ T9754] Call Trace: [ 149.074593][ T9754] [ 149.074604][ T9754] __dump_stack+0x1d/0x30 [ 149.074637][ T9754] dump_stack_lvl+0x95/0xd0 [ 149.074722][ T9754] dump_stack+0x15/0x1b [ 149.074788][ T9754] should_fail_ex+0x263/0x280 [ 149.074830][ T9754] should_fail+0xb/0x20 [ 149.074868][ T9754] should_fail_usercopy+0x1a/0x20 [ 149.074930][ T9754] _copy_to_user+0x20/0xa0 [ 149.074958][ T9754] simple_read_from_buffer+0xb5/0x130 [ 149.075008][ T9754] proc_fail_nth_read+0x10e/0x150 [ 149.075059][ T9754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.075092][ T9754] vfs_read+0x1ab/0x7f0 [ 149.075118][ T9754] ? __rcu_read_unlock+0x4e/0x70 [ 149.075158][ T9754] ? __fget_files+0x184/0x1c0 [ 149.075221][ T9754] ? mutex_lock+0x57/0x90 [ 149.075254][ T9754] ksys_read+0xdc/0x1a0 [ 149.075279][ T9754] __x64_sys_read+0x40/0x50 [ 149.075314][ T9754] x64_sys_call+0x2889/0x3000 [ 149.075340][ T9754] do_syscall_64+0xc0/0x2a0 [ 149.075377][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.075399][ T9754] RIP: 0033:0x7f0d1f0eb78e [ 149.075440][ T9754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.075465][ T9754] RSP: 002b:00007f0d1db86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.075534][ T9754] RAX: ffffffffffffffda RBX: 00007f0d1db876c0 RCX: 00007f0d1f0eb78e [ 149.075551][ T9754] RDX: 000000000000000f RSI: 00007f0d1db870a0 RDI: 0000000000000004 [ 149.075568][ T9754] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 149.075586][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.075602][ T9754] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 149.075691][ T9754] [ 149.320287][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.451106][ T29] audit: type=1326 audit(1769546316.683:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.4.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 149.512011][ T29] audit: type=1326 audit(1769546316.730:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.4.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 149.535435][ T29] audit: type=1326 audit(1769546316.730:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.4.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 149.561501][ T29] audit: type=1326 audit(1769546316.758:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.4.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 149.593383][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.640646][ T9767] set_capacity_and_notify: 4 callbacks suppressed [ 149.640740][ T9767] loop0: detected capacity change from 0 to 128 [ 149.643376][ T9765] loop7: detected capacity change from 0 to 1024 [ 149.698639][ T9765] EXT4-fs: Ignoring removed orlov option [ 149.722620][ T9767] vfat: Unknown parameter '.' [ 149.742259][ T9780] netlink: 'syz.8.1966': attribute type 4 has an invalid length. [ 149.782022][ T9765] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.804948][ T9784] loop4: detected capacity change from 0 to 2048 [ 149.876318][ T9784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.948048][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.950597][ T9791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1971'. [ 149.970199][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.040268][ T9801] loop4: detected capacity change from 0 to 1024 [ 150.049219][ T9801] EXT4-fs: Ignoring removed oldalloc option [ 150.055289][ T9801] EXT4-fs: Ignoring removed bh option [ 150.087291][ T9801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.514256][ T9812] loop8: detected capacity change from 0 to 1024 [ 150.524736][ T9812] EXT4-fs: Ignoring removed oldalloc option [ 150.530824][ T9812] EXT4-fs: Ignoring removed bh option [ 150.567272][ T9812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.808321][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 150.817382][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1981'. [ 150.908299][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.932670][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.951239][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.984153][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.985555][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.041306][ T36] lo speed is unknown, defaulting to 1000 [ 151.047926][ T36] syz2: Port: 1 Link DOWN [ 151.064329][ T9825] loop7: detected capacity change from 0 to 1024 [ 151.068648][ T36] lo speed is unknown, defaulting to 1000 [ 151.076497][ T36] syz2: Port: 1 Link ACTIVE [ 151.099147][ T9825] EXT4-fs: Ignoring removed orlov option [ 151.151127][ T9825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.198419][ T9839] loop4: detected capacity change from 0 to 512 [ 151.233939][ T9839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.250597][ T9839] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.274071][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.285743][ T9842] loop0: detected capacity change from 0 to 512 [ 151.329506][ T9844] loop7: detected capacity change from 0 to 512 [ 151.386405][ T9844] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 151.408123][ T9842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.442884][ T9844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 151.443653][ T9842] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.482964][ T9844] System zones: 1-12 [ 151.493236][ T9844] EXT4-fs (loop7): orphan cleanup on readonly fs [ 151.511377][ T9844] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.1990: attempt to clear invalid blocks 1024 len 1 [ 151.529957][ T9844] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1990: bg 0: block 361: padding at end of block bitmap is not set [ 151.547004][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.558515][ T9844] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 151.593789][ T9844] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1990: invalid indirect mapped block 1811939328 (level 0) [ 151.621336][ T9853] loop8: detected capacity change from 0 to 512 [ 151.630549][ T9844] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1990: invalid indirect mapped block 2 (level 2) [ 151.647197][ T9844] EXT4-fs (loop7): 1 truncate cleaned up [ 151.653217][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.657343][ T9844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 151.667347][ T9853] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 151.683956][ T9853] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 151.694987][ T9851] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1991'. [ 151.722257][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 151.732516][ T9856] tipc: Failed to remove unknown binding: 66,0,0/0:80666180/80666181 [ 151.742076][ T9856] tipc: Failed to remove unknown binding: 66,0,0/0:80666180/80666181 [ 151.801111][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.832240][ T9860] EXT4-fs: Ignoring removed oldalloc option [ 151.839087][ T9860] EXT4-fs: Ignoring removed bh option [ 151.870961][ T9866] validate_nla: 3 callbacks suppressed [ 151.870981][ T9866] netlink: 'syz.0.1998': attribute type 4 has an invalid length. [ 151.905961][ T4368] lo speed is unknown, defaulting to 1000 [ 151.911905][ T4368] syz2: Port: 1 Link DOWN [ 151.916308][ T9860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.948280][ T9869] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 151.948280][ T9869] [ 151.959111][ T9869] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 152.044997][ T9880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.062659][ T9880] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.085116][ T9884] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 152.107030][ T9884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 152.115118][ T9884] System zones: 1-12 [ 152.119572][ T9884] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.126365][ T9884] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.2004: attempt to clear invalid blocks 1024 len 1 [ 152.141086][ T9884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2004: bg 0: block 361: padding at end of block bitmap is not set [ 152.158184][ T9884] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 152.177702][ T9884] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2004: invalid indirect mapped block 1811939328 (level 0) [ 152.194029][ T9884] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2004: invalid indirect mapped block 2 (level 2) [ 152.216110][ T9884] EXT4-fs (loop0): 1 truncate cleaned up [ 152.222577][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 152.251666][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 152.331181][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.405968][ T9894] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 152.473325][ T9894] EXT4-fs (loop7): 1 truncate cleaned up [ 152.521066][ T9900] ext4: Unknown parameter 'uid<00000000000000049663' [ 152.526400][ T9894] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.549120][ T9902] netlink: 'syz.2.2011': attribute type 4 has an invalid length. [ 152.568695][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.606212][ T9900] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2009: inode has both inline data and extents flags [ 152.649176][ T9904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.663230][ T9900] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2009: couldn't read orphan inode 15 (err -117) [ 152.675754][ T9904] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.689810][ T9900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.836320][ T9919] FAULT_INJECTION: forcing a failure. [ 152.836320][ T9919] name failslab, interval 1, probability 0, space 0, times 0 [ 152.849081][ T9919] CPU: 0 UID: 0 PID: 9919 Comm: syz.8.2017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.849117][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.849133][ T9919] Call Trace: [ 152.849210][ T9919] [ 152.849221][ T9919] __dump_stack+0x1d/0x30 [ 152.849327][ T9919] dump_stack_lvl+0x95/0xd0 [ 152.849350][ T9919] dump_stack+0x15/0x1b [ 152.849372][ T9919] should_fail_ex+0x263/0x280 [ 152.849414][ T9919] should_failslab+0x8c/0xb0 [ 152.849491][ T9919] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 152.849547][ T9919] ? __alloc_skb+0x2f0/0x4b0 [ 152.849687][ T9919] __alloc_skb+0x2f0/0x4b0 [ 152.849718][ T9919] ? __alloc_skb+0x219/0x4b0 [ 152.849814][ T9919] netlink_ack+0xfd/0x500 [ 152.849903][ T9919] ? __pfx_ethnl_default_doit+0x10/0x10 [ 152.849997][ T9919] netlink_rcv_skb+0x192/0x220 [ 152.850033][ T9919] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.850064][ T9919] genl_rcv+0x28/0x40 [ 152.850088][ T9919] netlink_unicast+0x5c0/0x690 [ 152.850202][ T9919] netlink_sendmsg+0x5c8/0x6f0 [ 152.850226][ T9919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.850252][ T9919] ____sys_sendmsg+0x5af/0x600 [ 152.850278][ T9919] ___sys_sendmsg+0x195/0x1e0 [ 152.850351][ T9919] __x64_sys_sendmsg+0xd4/0x160 [ 152.850382][ T9919] x64_sys_call+0x17ba/0x3000 [ 152.850415][ T9919] do_syscall_64+0xc0/0x2a0 [ 152.850458][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.850502][ T9919] RIP: 0033:0x7fd78d88aeb9 [ 152.850520][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.850568][ T9919] RSP: 002b:00007fd78c2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.850596][ T9919] RAX: ffffffffffffffda RBX: 00007fd78db05fa0 RCX: 00007fd78d88aeb9 [ 152.850616][ T9919] RDX: 0000000004000800 RSI: 0000200000000100 RDI: 0000000000000005 [ 152.850635][ T9919] RBP: 00007fd78c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.850660][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.850678][ T9919] R13: 00007fd78db06038 R14: 00007fd78db05fa0 R15: 00007ffce7b1bbe8 [ 152.850705][ T9919] [ 153.140582][ T9924] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.251237][ T9929] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2018'. [ 153.354937][ T9943] netlink: 'syz.8.2024': attribute type 4 has an invalid length. [ 153.517998][ T9953] lo speed is unknown, defaulting to 1000 [ 153.590089][ T9962] EXT4-fs: Ignoring removed orlov option [ 153.603975][ T9963] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.617481][ T9955] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 153.626167][ T9955] FAT-fs (loop4): Filesystem has been set read-only [ 153.850423][ T9980] netlink: 'syz.8.2036': attribute type 4 has an invalid length. [ 153.882045][ T9982] FAULT_INJECTION: forcing a failure. [ 153.882045][ T9982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.895249][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.4.2037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.895289][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.895371][ T9982] Call Trace: [ 153.895379][ T9982] [ 153.895389][ T9982] __dump_stack+0x1d/0x30 [ 153.895469][ T9982] dump_stack_lvl+0x95/0xd0 [ 153.895499][ T9982] dump_stack+0x15/0x1b [ 153.895520][ T9982] should_fail_ex+0x263/0x280 [ 153.895554][ T9982] should_fail+0xb/0x20 [ 153.895592][ T9982] should_fail_usercopy+0x1a/0x20 [ 153.895636][ T9982] _copy_from_user+0x1c/0xb0 [ 153.895664][ T9982] __sys_sendto+0x1ca/0x4d0 [ 153.895773][ T9982] __x64_sys_sendto+0x76/0x90 [ 153.895816][ T9982] x64_sys_call+0x29a7/0x3000 [ 153.895853][ T9982] do_syscall_64+0xc0/0x2a0 [ 153.895886][ T9982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.895994][ T9982] RIP: 0033:0x7f0d1f0eb78e [ 153.896015][ T9982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.896038][ T9982] RSP: 002b:00007f0d1db85e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.896067][ T9982] RAX: ffffffffffffffda RBX: 00007f0d1db876c0 RCX: 00007f0d1f0eb78e [ 153.896090][ T9982] RDX: 0000000000000020 RSI: 00007f0d1db86000 RDI: 0000000000000006 [ 153.896108][ T9982] RBP: 0000000000000000 R08: 00007f0d1db85f04 R09: 000000000000000c [ 153.896126][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 153.896143][ T9982] R13: 00007f0d1db85f58 R14: 00007f0d1db86000 R15: 0000000000000000 [ 153.896165][ T9982] [ 154.062667][ T9984] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.280217][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16980 sclass=netlink_route_socket pid=9992 comm=syz.4.2041 [ 154.303617][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16980 sclass=netlink_route_socket pid=9992 comm=syz.4.2041 [ 154.362266][ T9994] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 154.373866][ T9994] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 154.401550][ T9994] JBD2: no valid journal superblock found [ 154.407401][ T9994] EXT4-fs (loop7): Could not load journal inode [ 154.454831][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 154.454925][ T29] audit: type=1400 audit(1769546321.379:3623): avc: denied { sys_module } for pid=9995 comm="syz.8.2043" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 154.605829][T10014] netlink: 'syz.8.2048': attribute type 4 has an invalid length. [ 154.623305][T10016] FAULT_INJECTION: forcing a failure. [ 154.623305][T10016] name failslab, interval 1, probability 0, space 0, times 0 [ 154.636205][T10016] CPU: 0 UID: 0 PID: 10016 Comm: syz.4.2049 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.636239][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.636337][T10016] Call Trace: [ 154.636345][T10016] [ 154.636352][T10016] __dump_stack+0x1d/0x30 [ 154.636385][T10016] dump_stack_lvl+0x95/0xd0 [ 154.636415][T10016] dump_stack+0x15/0x1b [ 154.636498][T10016] should_fail_ex+0x263/0x280 [ 154.636601][T10016] should_failslab+0x8c/0xb0 [ 154.636632][T10016] __kvmalloc_node_noprof+0x148/0x680 [ 154.636670][T10016] ? file_tty_write+0x1a3/0x690 [ 154.636779][T10016] ? mutex_trylock+0x81/0xc0 [ 154.636813][T10016] file_tty_write+0x1a3/0x690 [ 154.636850][T10016] ? __pfx_tty_write+0x10/0x10 [ 154.636882][T10016] tty_write+0x25/0x30 [ 154.636977][T10016] vfs_write+0x5a6/0x9f0 [ 154.637061][T10016] ksys_write+0xdc/0x1a0 [ 154.637090][T10016] __x64_sys_write+0x40/0x50 [ 154.637191][T10016] x64_sys_call+0x2847/0x3000 [ 154.637223][T10016] do_syscall_64+0xc0/0x2a0 [ 154.637265][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.637295][T10016] RIP: 0033:0x7f0d1f12aeb9 [ 154.637364][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.637389][T10016] RSP: 002b:00007f0d1db87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.637412][T10016] RAX: ffffffffffffffda RBX: 00007f0d1f3a5fa0 RCX: 00007f0d1f12aeb9 [ 154.637432][T10016] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 154.637450][T10016] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 154.637468][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.637523][T10016] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 154.637549][T10016] [ 154.886641][T10024] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.987425][T10035] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.344483][T10053] tmpfs: Bad value for 'mpol' [ 155.383137][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2060'. [ 155.392135][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2060'. [ 155.401400][T10053] netlink: 'syz.7.2060': attribute type 13 has an invalid length. [ 155.437570][ T29] audit: type=1326 audit(1769546322.286:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 155.461822][ T29] audit: type=1326 audit(1769546322.286:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 155.486329][ T29] audit: type=1326 audit(1769546322.286:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 155.509955][ T29] audit: type=1326 audit(1769546322.286:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d1f0eb78e code=0x7ffc0000 [ 155.534170][ T29] audit: type=1326 audit(1769546322.286:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0d1f12c1d7 code=0x7ffc0000 [ 155.557786][ T29] audit: type=1326 audit(1769546322.286:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 155.581966][ T29] audit: type=1326 audit(1769546322.286:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0d1f12c1d7 code=0x7ffc0000 [ 155.605529][ T29] audit: type=1326 audit(1769546322.286:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d1f0eb78e code=0x7ffc0000 [ 155.629530][ T29] audit: type=1326 audit(1769546322.286:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.4.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 155.662598][T10063] set_capacity_and_notify: 15 callbacks suppressed [ 155.662620][T10063] loop7: detected capacity change from 0 to 1024 [ 155.676261][T10063] EXT4-fs: Ignoring removed oldalloc option [ 155.682292][T10063] EXT4-fs: Ignoring removed bh option [ 155.764705][T10069] loop4: detected capacity change from 0 to 1024 [ 155.771583][T10069] EXT4-fs: Ignoring removed orlov option [ 155.936777][T10083] loop0: detected capacity change from 0 to 1024 [ 155.976000][T10083] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.987016][T10083] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.003234][T10083] JBD2: no valid journal superblock found [ 156.009072][T10083] EXT4-fs (loop0): Could not load journal inode [ 156.036519][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2064'. [ 156.332346][T10106] syz.2.2079 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 156.658788][T10114] loop7: detected capacity change from 0 to 1024 [ 156.681330][T10114] EXT4-fs: Ignoring removed orlov option [ 156.738661][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 156.777754][T10124] FAULT_INJECTION: forcing a failure. [ 156.777754][T10124] name failslab, interval 1, probability 0, space 0, times 0 [ 156.791235][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.4.2085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.791336][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.791354][T10124] Call Trace: [ 156.791364][T10124] [ 156.791383][T10124] __dump_stack+0x1d/0x30 [ 156.791411][T10124] dump_stack_lvl+0x95/0xd0 [ 156.791502][T10124] dump_stack+0x15/0x1b [ 156.791524][T10124] should_fail_ex+0x263/0x280 [ 156.791556][T10124] should_failslab+0x8c/0xb0 [ 156.791597][T10124] __kmalloc_noprof+0xb8/0x580 [ 156.791631][T10124] ? cttimeout_new_timeout+0x1b6/0x460 [ 156.791667][T10124] cttimeout_new_timeout+0x1b6/0x460 [ 156.791759][T10124] ? __nla_parse+0x40/0x60 [ 156.791805][T10124] nfnetlink_rcv_msg+0x509/0x5d0 [ 156.791923][T10124] netlink_rcv_skb+0x123/0x220 [ 156.791966][T10124] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 156.792075][T10124] nfnetlink_rcv+0x167/0x1720 [ 156.792117][T10124] ? xas_load+0x413/0x430 [ 156.792151][T10124] ? xas_load+0x413/0x430 [ 156.792331][T10124] ? __rcu_read_unlock+0x4e/0x70 [ 156.792392][T10124] ? xa_load+0xb1/0xe0 [ 156.792425][T10124] ? __account_obj_stock+0x211/0x350 [ 156.792453][T10124] ? obj_cgroup_charge_account+0x122/0x1a0 [ 156.792551][T10124] ? should_fail_ex+0x30/0x280 [ 156.792586][T10124] ? __rcu_read_unlock+0x4e/0x70 [ 156.792621][T10124] ? avc_has_perm_noaudit+0xab/0x130 [ 156.792736][T10124] ? should_fail_ex+0xd9/0x280 [ 156.792766][T10124] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 156.792802][T10124] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 156.792855][T10124] ? __wake_up+0x88/0xb0 [ 156.792883][T10124] ? __rcu_read_unlock+0x33/0x70 [ 156.792955][T10124] ? __netlink_lookup+0x276/0x2b0 [ 156.792980][T10124] netlink_unicast+0x5c0/0x690 [ 156.793075][T10124] netlink_sendmsg+0x5c8/0x6f0 [ 156.793169][T10124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.793188][T10124] ____sys_sendmsg+0x5af/0x600 [ 156.793217][T10124] ___sys_sendmsg+0x195/0x1e0 [ 156.793290][T10124] __x64_sys_sendmsg+0xd4/0x160 [ 156.793321][T10124] x64_sys_call+0x17ba/0x3000 [ 156.793435][T10124] do_syscall_64+0xc0/0x2a0 [ 156.793468][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.793493][T10124] RIP: 0033:0x7f0d1f12aeb9 [ 156.793515][T10124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.793599][T10124] RSP: 002b:00007f0d1db87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.793627][T10124] RAX: ffffffffffffffda RBX: 00007f0d1f3a5fa0 RCX: 00007f0d1f12aeb9 [ 156.793646][T10124] RDX: 0000000004040000 RSI: 0000200000000300 RDI: 0000000000000003 [ 156.793664][T10124] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 156.793757][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.793774][T10124] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 156.793801][T10124] [ 157.208551][T10136] netlink: 'syz.4.2091': attribute type 1 has an invalid length. [ 157.223245][T10136] bond8: entered promiscuous mode [ 157.228926][T10136] 8021q: adding VLAN 0 to HW filter on device bond8 [ 157.237190][T10136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=10136 comm=syz.4.2091 [ 157.320734][T10163] loop4: detected capacity change from 0 to 1024 [ 157.346387][T10163] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.357483][T10163] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.375339][T10163] JBD2: no valid journal superblock found [ 157.381180][T10163] EXT4-fs (loop4): Could not load journal inode [ 157.453697][T10171] FAULT_INJECTION: forcing a failure. [ 157.453697][T10171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.467046][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.0.2098 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.467111][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.467129][T10171] Call Trace: [ 157.467136][T10171] [ 157.467144][T10171] __dump_stack+0x1d/0x30 [ 157.467169][T10171] dump_stack_lvl+0x95/0xd0 [ 157.467192][T10171] dump_stack+0x15/0x1b [ 157.467232][T10171] should_fail_ex+0x263/0x280 [ 157.467275][T10171] should_fail_alloc_page+0xf2/0x100 [ 157.467336][T10171] __alloc_frozen_pages_noprof+0x108/0x350 [ 157.467383][T10171] alloc_pages_mpol+0xb3/0x260 [ 157.467421][T10171] alloc_frozen_pages_noprof+0x8f/0x110 [ 157.467457][T10171] ___kmalloc_large_node+0x3f/0xe0 [ 157.467637][T10171] __kmalloc_large_node_noprof+0x16/0xa0 [ 157.467673][T10171] __kmalloc_noprof+0x342/0x580 [ 157.467705][T10171] ? iovec_from_user+0x84/0x200 [ 157.467750][T10171] iovec_from_user+0x84/0x200 [ 157.467771][T10171] ? process_vm_rw+0x14f/0x9c0 [ 157.467798][T10171] process_vm_rw+0x16f/0x9c0 [ 157.467826][T10171] ? audit_log_end+0x23d/0x250 [ 157.467870][T10171] ? kmem_cache_free+0xdf/0x380 [ 157.467951][T10171] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 157.468091][T10171] ? __fget_files+0x184/0x1c0 [ 157.468126][T10171] __x64_sys_process_vm_writev+0x78/0x90 [ 157.468153][T10171] x64_sys_call+0x27ef/0x3000 [ 157.468243][T10171] do_syscall_64+0xc0/0x2a0 [ 157.468363][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.468392][T10171] RIP: 0033:0x7f8e7518aeb9 [ 157.468413][T10171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.468479][T10171] RSP: 002b:00007f8e73be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 157.468505][T10171] RAX: ffffffffffffffda RBX: 00007f8e75405fa0 RCX: 00007f8e7518aeb9 [ 157.468566][T10171] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000045f [ 157.468604][T10171] RBP: 00007f8e73be7090 R08: 000000000000023a R09: 0000000000000000 [ 157.468620][T10171] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 157.468655][T10171] R13: 00007f8e75406038 R14: 00007f8e75405fa0 R15: 00007ffd68273148 [ 157.468678][T10171] [ 157.700008][T10175] loop8: detected capacity change from 0 to 128 [ 157.745699][T10177] FAULT_INJECTION: forcing a failure. [ 157.745699][T10177] name failslab, interval 1, probability 0, space 0, times 0 [ 157.758452][T10177] CPU: 0 UID: 0 PID: 10177 Comm: syz.0.2100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.758486][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.758535][T10177] Call Trace: [ 157.758545][T10177] [ 157.758555][T10177] __dump_stack+0x1d/0x30 [ 157.758588][T10177] dump_stack_lvl+0x95/0xd0 [ 157.758616][T10177] dump_stack+0x15/0x1b [ 157.758642][T10177] should_fail_ex+0x263/0x280 [ 157.758751][T10177] should_failslab+0x8c/0xb0 [ 157.758776][T10177] __kmalloc_cache_noprof+0x64/0x4a0 [ 157.758808][T10177] ? __inet_diag_dump_start+0x53/0x850 [ 157.758836][T10177] __inet_diag_dump_start+0x53/0x850 [ 157.759015][T10177] ? __rcu_read_unlock+0x33/0x70 [ 157.759072][T10177] ? __netlink_lookup+0x276/0x2b0 [ 157.759095][T10177] inet_diag_dump_start_compat+0x1a/0x30 [ 157.759238][T10177] __netlink_dump_start+0x334/0x520 [ 157.759357][T10177] inet_diag_rcv_msg_compat+0x10b/0x200 [ 157.759393][T10177] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 157.759430][T10177] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 157.759463][T10177] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 157.759558][T10177] sock_diag_rcv_msg+0x189/0x2c0 [ 157.759588][T10177] netlink_rcv_skb+0x123/0x220 [ 157.759629][T10177] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 157.759656][T10177] sock_diag_rcv+0x1c/0x30 [ 157.759750][T10177] netlink_unicast+0x5c0/0x690 [ 157.759854][T10177] netlink_sendmsg+0x5c8/0x6f0 [ 157.759879][T10177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.759899][T10177] ____sys_sendmsg+0x5af/0x600 [ 157.759921][T10177] ___sys_sendmsg+0x195/0x1e0 [ 157.759964][T10177] __x64_sys_sendmsg+0xd4/0x160 [ 157.759993][T10177] x64_sys_call+0x17ba/0x3000 [ 157.760019][T10177] do_syscall_64+0xc0/0x2a0 [ 157.760101][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.760198][T10177] RIP: 0033:0x7f8e7518aeb9 [ 157.760289][T10177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.760364][T10177] RSP: 002b:00007f8e73be7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.760392][T10177] RAX: ffffffffffffffda RBX: 00007f8e75405fa0 RCX: 00007f8e7518aeb9 [ 157.760411][T10177] RDX: 0000000000040800 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.760430][T10177] RBP: 00007f8e73be7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.760448][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.760514][T10177] R13: 00007f8e75406038 R14: 00007f8e75405fa0 R15: 00007ffd68273148 [ 157.760539][T10177] [ 158.053958][T10185] loop7: detected capacity change from 0 to 512 [ 158.094424][T10185] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.383298][T10216] loop7: detected capacity change from 0 to 512 [ 158.445951][T10216] EXT4-fs (loop7): blocks per group (8192) and clusters per group (2304) inconsistent [ 158.563403][T10212] netlink: 'syz.8.2109': attribute type 1 has an invalid length. [ 158.656748][T10231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10231 comm=syz.8.2115 [ 158.793092][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2117'. [ 158.875294][T10242] bond0: (slave dummy0): Releasing backup interface [ 158.883395][T10242] bond0: (slave bond_slave_0): Releasing backup interface [ 158.891918][T10242] bond0: (slave bond_slave_1): Releasing backup interface [ 158.900387][T10242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.910557][T10242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.926237][T10242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.954541][T10250] loop8: detected capacity change from 0 to 512 [ 158.981591][T10250] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.995715][T10255] loop4: detected capacity change from 0 to 1024 [ 159.047928][T10255] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.059617][T10255] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.083245][T10255] JBD2: no valid journal superblock found [ 159.089239][T10255] EXT4-fs (loop4): Could not load journal inode [ 159.167916][T10268] FAULT_INJECTION: forcing a failure. [ 159.167916][T10268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.181136][T10268] CPU: 1 UID: 0 PID: 10268 Comm: syz.7.2128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.181194][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.181211][T10268] Call Trace: [ 159.181220][T10268] [ 159.181231][T10268] __dump_stack+0x1d/0x30 [ 159.181259][T10268] dump_stack_lvl+0x95/0xd0 [ 159.181283][T10268] dump_stack+0x15/0x1b [ 159.181310][T10268] should_fail_ex+0x263/0x280 [ 159.181397][T10268] should_fail+0xb/0x20 [ 159.181452][T10268] should_fail_usercopy+0x1a/0x20 [ 159.181485][T10268] strncpy_from_user+0x27/0x250 [ 159.181513][T10268] getname_flags+0xad/0x3b0 [ 159.181601][T10268] user_path_at+0x28/0x130 [ 159.181689][T10268] do_fchownat+0x92/0x1e0 [ 159.181722][T10268] __x64_sys_chown+0x47/0x60 [ 159.181787][T10268] x64_sys_call+0x2eb9/0x3000 [ 159.181813][T10268] do_syscall_64+0xc0/0x2a0 [ 159.181852][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.181909][T10268] RIP: 0033:0x7f0c9da2aeb9 [ 159.181962][T10268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.181986][T10268] RSP: 002b:00007f0c9c487028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 159.182036][T10268] RAX: ffffffffffffffda RBX: 00007f0c9dca5fa0 RCX: 00007f0c9da2aeb9 [ 159.182053][T10268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001840 [ 159.182068][T10268] RBP: 00007f0c9c487090 R08: 0000000000000000 R09: 0000000000000000 [ 159.182085][T10268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.182163][T10268] R13: 00007f0c9dca6038 R14: 00007f0c9dca5fa0 R15: 00007ffe54b22388 [ 159.182190][T10268] [ 159.626703][T10287] FAT-fs (loop7): IO charset cp1251 not found [ 159.641210][T10295] tmpfs: Unknown parameter 'nr_b' [ 159.761340][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2137'. [ 159.797632][T10299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.804959][T10299] IPv6: NLM_F_CREATE should be set when creating new route [ 159.812225][T10299] IPv6: NLM_F_CREATE should be set when creating new route [ 159.837285][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 159.837306][ T29] audit: type=1326 audit(1769546326.421:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.0.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7518aeb9 code=0x7ffc0000 [ 160.010882][T10316] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.102092][T10327] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2145'. [ 160.111321][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2145'. [ 160.135309][T10324] 9p: Bad value for 'rfdno' [ 160.145663][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2146'. [ 160.278619][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2148'. [ 160.439290][T10344] EXT4-fs (loop4): 1 truncate cleaned up [ 160.522657][T10350] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.533690][T10350] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.545307][T10350] JBD2: no valid journal superblock found [ 160.551117][T10350] EXT4-fs (loop7): Could not load journal inode [ 160.733829][T10353] __nla_validate_parse: 1 callbacks suppressed [ 160.733851][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2155'. [ 160.915437][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2157'. [ 160.965503][T10361] netlink: 'syz.8.2158': attribute type 4 has an invalid length. [ 160.979075][T10361] netlink: 'syz.8.2158': attribute type 4 has an invalid length. [ 161.082091][ T29] audit: type=1400 audit(1769546327.581:3803): avc: denied { getopt } for pid=10362 comm="syz.8.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 161.190050][ T29] audit: type=1326 audit(1769546327.656:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7518aeb9 code=0x7ffc0000 [ 161.214267][ T29] audit: type=1326 audit(1769546327.656:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e7518aeb9 code=0x7ffc0000 [ 161.237890][ T29] audit: type=1326 audit(1769546327.665:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7518aeb9 code=0x7ffc0000 [ 161.261765][ T29] audit: type=1326 audit(1769546327.665:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e7514b78e code=0x7ffc0000 [ 161.286079][ T29] audit: type=1326 audit(1769546327.665:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e7518c1d7 code=0x7ffc0000 [ 161.286141][ T29] audit: type=1326 audit(1769546327.665:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e7518aeb9 code=0x7ffc0000 [ 161.286204][ T29] audit: type=1326 audit(1769546327.674:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8e7518c1d7 code=0x7ffc0000 [ 161.286240][ T29] audit: type=1326 audit(1769546327.674:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.0.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e7514b78e code=0x7ffc0000 [ 161.340190][T10370] set_capacity_and_notify: 5 callbacks suppressed [ 161.340210][T10370] loop8: detected capacity change from 0 to 512 [ 161.495283][T10370] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.978258][T10387] netlink: 'syz.2.2168': attribute type 1 has an invalid length. [ 161.986831][T10387] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 161.995001][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 162.037592][T10387] lo speed is unknown, defaulting to 1000 [ 162.058565][T10389] netlink: 'syz.0.2169': attribute type 4 has an invalid length. [ 162.082849][T10390] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2167'. [ 162.129113][T10389] netlink: 'syz.0.2169': attribute type 4 has an invalid length. [ 162.138721][ T36] lo speed is unknown, defaulting to 1000 [ 162.145160][ T36] syz2: Port: 1 Link ACTIVE [ 162.180421][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2170'. [ 162.381415][T10403] loop0: detected capacity change from 0 to 512 [ 162.404947][T10403] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.473061][T10409] loop8: detected capacity change from 0 to 512 [ 162.520811][T10415] loop4: detected capacity change from 0 to 512 [ 162.527584][T10415] EXT4-fs: Ignoring removed oldalloc option [ 162.563711][T10415] EXT4-fs (loop4): 1 truncate cleaned up [ 162.582755][T10409] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.595691][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2176'. [ 162.617342][T10415] FAULT_INJECTION: forcing a failure. [ 162.617342][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.631278][T10415] CPU: 1 UID: 0 PID: 10415 Comm: syz.4.2176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.631313][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.631330][T10415] Call Trace: [ 162.631340][T10415] [ 162.631350][T10415] __dump_stack+0x1d/0x30 [ 162.631384][T10415] dump_stack_lvl+0x95/0xd0 [ 162.631406][T10415] dump_stack+0x15/0x1b [ 162.631461][T10415] should_fail_ex+0x263/0x280 [ 162.631503][T10415] should_fail+0xb/0x20 [ 162.631541][T10415] should_fail_usercopy+0x1a/0x20 [ 162.631590][T10415] _copy_to_user+0x20/0xa0 [ 162.631657][T10415] simple_read_from_buffer+0xb5/0x130 [ 162.631695][T10415] proc_fail_nth_read+0x10e/0x150 [ 162.631731][T10415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.631885][T10415] vfs_read+0x1ab/0x7f0 [ 162.631973][T10415] ? __schedule+0x82d/0xc90 [ 162.631997][T10415] ? __rcu_read_unlock+0x4e/0x70 [ 162.632087][T10415] ? __fget_files+0x184/0x1c0 [ 162.632119][T10415] ? mutex_lock+0x57/0x90 [ 162.632149][T10415] ksys_read+0xdc/0x1a0 [ 162.632169][T10415] __x64_sys_read+0x40/0x50 [ 162.632225][T10415] x64_sys_call+0x2889/0x3000 [ 162.632260][T10415] do_syscall_64+0xc0/0x2a0 [ 162.632373][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.632401][T10415] RIP: 0033:0x7f0d1f0eb78e [ 162.632421][T10415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.632446][T10415] RSP: 002b:00007f0d1db86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.632472][T10415] RAX: ffffffffffffffda RBX: 00007f0d1db876c0 RCX: 00007f0d1f0eb78e [ 162.632507][T10415] RDX: 000000000000000f RSI: 00007f0d1db870a0 RDI: 0000000000000009 [ 162.632520][T10415] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 162.632538][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.632555][T10415] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 162.632590][T10415] [ 162.892496][T10423] loop8: detected capacity change from 0 to 512 [ 162.945737][T10423] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.978195][T10431] netlink: 'syz.7.2181': attribute type 4 has an invalid length. [ 163.026403][T10431] netlink: 'syz.7.2181': attribute type 4 has an invalid length. [ 163.283730][T10450] FAULT_INJECTION: forcing a failure. [ 163.283730][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 163.296887][T10450] CPU: 1 UID: 0 PID: 10450 Comm: syz.4.2186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.296922][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.296970][T10450] Call Trace: [ 163.297054][T10450] [ 163.297063][T10450] __dump_stack+0x1d/0x30 [ 163.297117][T10450] dump_stack_lvl+0x95/0xd0 [ 163.297214][T10450] dump_stack+0x15/0x1b [ 163.297234][T10450] should_fail_ex+0x263/0x280 [ 163.297340][T10450] should_failslab+0x8c/0xb0 [ 163.297371][T10450] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 163.297436][T10450] ? __alloc_skb+0x2f0/0x4b0 [ 163.297478][T10450] __alloc_skb+0x2f0/0x4b0 [ 163.297507][T10450] ? path_openat+0x1e8e/0x23c0 [ 163.297552][T10450] tipc_msg_create+0x47/0x230 [ 163.297593][T10450] tipc_group_proto_xmit+0xb7/0x2f0 [ 163.297621][T10450] tipc_group_delete+0xab/0x2a0 [ 163.297653][T10450] tipc_release+0x121/0xf50 [ 163.297756][T10450] ? proc_fail_nth_write+0x13b/0x160 [ 163.297868][T10450] sock_close+0x6b/0x150 [ 163.297958][T10450] ? __pfx_sock_close+0x10/0x10 [ 163.297985][T10450] __fput+0x29b/0x650 [ 163.298016][T10450] fput_close_sync+0xad/0x190 [ 163.298055][T10450] __x64_sys_close+0x55/0xf0 [ 163.298094][T10450] x64_sys_call+0x2c25/0x3000 [ 163.298207][T10450] do_syscall_64+0xc0/0x2a0 [ 163.298253][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.298283][T10450] RIP: 0033:0x7f0d1f12aeb9 [ 163.298303][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.298325][T10450] RSP: 002b:00007f0d1db87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 163.298402][T10450] RAX: ffffffffffffffda RBX: 00007f0d1f3a5fa0 RCX: 00007f0d1f12aeb9 [ 163.298421][T10450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 163.298436][T10450] RBP: 00007f0d1db87090 R08: 0000000000000000 R09: 0000000000000000 [ 163.298534][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.298551][T10450] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 163.298578][T10450] [ 163.640209][T10455] syzkaller0: entered promiscuous mode [ 163.645899][T10455] syzkaller0: entered allmulticast mode [ 163.780385][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2190'. [ 163.800564][T10468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.808052][T10468] IPv6: NLM_F_CREATE should be set when creating new route [ 163.815323][T10468] IPv6: NLM_F_CREATE should be set when creating new route [ 163.867536][T10471] loop4: detected capacity change from 0 to 512 [ 163.879889][T10473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2192'. [ 163.907322][T10475] netlink: 'syz.7.2194': attribute type 4 has an invalid length. [ 163.916199][T10469] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2191'. [ 163.921491][T10465] lo speed is unknown, defaulting to 1000 [ 163.937924][T10475] netlink: 'syz.7.2194': attribute type 4 has an invalid length. [ 163.968924][T10471] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.023337][T10481] FAULT_INJECTION: forcing a failure. [ 164.023337][T10481] name failslab, interval 1, probability 0, space 0, times 0 [ 164.036038][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.7.2196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.036108][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.036122][T10481] Call Trace: [ 164.036129][T10481] [ 164.036140][T10481] __dump_stack+0x1d/0x30 [ 164.036244][T10481] dump_stack_lvl+0x95/0xd0 [ 164.036267][T10481] dump_stack+0x15/0x1b [ 164.036295][T10481] should_fail_ex+0x263/0x280 [ 164.036394][T10481] should_failslab+0x8c/0xb0 [ 164.036422][T10481] kmem_cache_alloc_noprof+0x68/0x490 [ 164.036526][T10481] ? audit_log_start+0x34c/0x730 [ 164.036566][T10481] audit_log_start+0x34c/0x730 [ 164.036671][T10481] audit_seccomp+0x47/0x100 [ 164.036702][T10481] ? __seccomp_filter+0x8db/0x1350 [ 164.036731][T10481] __seccomp_filter+0x8ec/0x1350 [ 164.036763][T10481] ? single_next+0x1d/0x30 [ 164.036878][T10481] __secure_computing+0x81/0x150 [ 164.036913][T10481] syscall_trace_enter+0xce/0x1e0 [ 164.036960][T10481] do_syscall_64+0x9a/0x2a0 [ 164.037044][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.037069][T10481] RIP: 0033:0x7f0c9d9eb78e [ 164.037090][T10481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.037179][T10481] RSP: 002b:00007f0c9c486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.037206][T10481] RAX: ffffffffffffffda RBX: 00007f0c9c4876c0 RCX: 00007f0c9d9eb78e [ 164.037225][T10481] RDX: 000000000000000f RSI: 00007f0c9c4870a0 RDI: 0000000000000006 [ 164.037243][T10481] RBP: 00007f0c9c487090 R08: 0000000000000000 R09: 0000000000000000 [ 164.037328][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.037341][T10481] R13: 00007f0c9dca6038 R14: 00007f0c9dca5fa0 R15: 00007ffe54b22388 [ 164.037367][T10481] [ 164.199261][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.235697][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.361251][T10493] loop0: detected capacity change from 0 to 1024 [ 164.379980][T10493] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.391606][T10493] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.405115][T10493] JBD2: no valid journal superblock found [ 164.410938][T10493] EXT4-fs (loop0): Could not load journal inode [ 164.480429][T10499] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2203'. [ 164.502522][T10465] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 164.510402][ T4368] IPVS: starting estimator thread 0... [ 164.624147][T10500] IPVS: using max 1968 ests per chain, 98400 per kthread [ 164.823434][T10511] loop8: detected capacity change from 0 to 1024 [ 164.835512][T10512] netlink: 'syz.4.2204': attribute type 1 has an invalid length. [ 164.913342][T10511] EXT4-fs: Ignoring removed oldalloc option [ 164.919367][T10511] EXT4-fs: Ignoring removed bh option [ 165.316682][T10149] IPVS: stop unused estimator thread 0... [ 165.782670][T10532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10532 comm=syz.8.2211 [ 165.818049][T10528] bond1: option arp_interval: invalid value (18446744073709551615) [ 165.826136][T10528] bond1: option arp_interval: allowed values 0 - 2147483647 [ 165.860272][T10528] bond1 (unregistering): Released all slaves [ 165.893389][T10534] loop0: detected capacity change from 0 to 2048 [ 165.978038][T10534] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 166.225408][T10565] loop8: detected capacity change from 0 to 512 [ 166.454139][T10571] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.507037][T10565] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.541614][T10577] EXT4-fs: Ignoring removed oldalloc option [ 166.547628][T10577] EXT4-fs: Ignoring removed bh option [ 167.107681][T10596] xt_hashlimit: size too large, truncated to 1048576 [ 167.142806][T10598] FAULT_INJECTION: forcing a failure. [ 167.142806][T10598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.155986][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.7.2229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.156023][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.156047][T10598] Call Trace: [ 167.156056][T10598] [ 167.156065][T10598] __dump_stack+0x1d/0x30 [ 167.156098][T10598] dump_stack_lvl+0x95/0xd0 [ 167.156148][T10598] dump_stack+0x15/0x1b [ 167.156175][T10598] should_fail_ex+0x263/0x280 [ 167.156252][T10598] should_fail+0xb/0x20 [ 167.156289][T10598] should_fail_usercopy+0x1a/0x20 [ 167.156333][T10598] _copy_from_user+0x1c/0xb0 [ 167.156376][T10598] ___sys_sendmsg+0xc1/0x1e0 [ 167.156418][T10598] __x64_sys_sendmsg+0xd4/0x160 [ 167.156479][T10598] x64_sys_call+0x17ba/0x3000 [ 167.156512][T10598] do_syscall_64+0xc0/0x2a0 [ 167.156613][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.156652][T10598] RIP: 0033:0x7f0c9da2aeb9 [ 167.156673][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.156699][T10598] RSP: 002b:00007f0c9c487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.156750][T10598] RAX: ffffffffffffffda RBX: 00007f0c9dca5fa0 RCX: 00007f0c9da2aeb9 [ 167.156769][T10598] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 167.156787][T10598] RBP: 00007f0c9c487090 R08: 0000000000000000 R09: 0000000000000000 [ 167.156805][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.156875][T10598] R13: 00007f0c9dca6038 R14: 00007f0c9dca5fa0 R15: 00007ffe54b22388 [ 167.156901][T10598] [ 167.190204][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 167.190254][ T29] audit: type=1400 audit(1769546333.277:3865): avc: denied { remount } for pid=10599 comm="syz.4.2231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.398852][ T29] audit: type=1400 audit(1769546333.492:3866): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.450740][T10607] bond2: Removing last arp target with arp_interval on [ 167.458155][T10607] bond2: entered promiscuous mode [ 167.463235][T10607] bond2: entered allmulticast mode [ 167.469264][T10607] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.547591][ T29] audit: type=1326 audit(1769546333.614:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.571380][ T29] audit: type=1326 audit(1769546333.614:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.594971][ T29] audit: type=1326 audit(1769546333.614:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.618595][ T29] audit: type=1326 audit(1769546333.614:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.642204][ T29] audit: type=1326 audit(1769546333.614:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.666010][ T29] audit: type=1326 audit(1769546333.633:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.689623][ T29] audit: type=1326 audit(1769546333.633:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.713243][ T29] audit: type=1326 audit(1769546333.633:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1f12aeb9 code=0x7ffc0000 [ 167.764796][T10611] xt_CT: No such helper "snmp_trap" [ 167.864170][T10628] FAULT_INJECTION: forcing a failure. [ 167.864170][T10628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.877358][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.4.2239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.877395][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.877413][T10628] Call Trace: [ 167.877420][T10628] [ 167.877429][T10628] __dump_stack+0x1d/0x30 [ 167.877479][T10628] dump_stack_lvl+0x95/0xd0 [ 167.877501][T10628] dump_stack+0x15/0x1b [ 167.877593][T10628] should_fail_ex+0x263/0x280 [ 167.877629][T10628] should_fail+0xb/0x20 [ 167.877733][T10628] should_fail_usercopy+0x1a/0x20 [ 167.877771][T10628] _copy_from_user+0x1c/0xb0 [ 167.877827][T10628] memdup_user+0x5e/0xd0 [ 167.877851][T10628] strndup_user+0x68/0xb0 [ 167.877871][T10628] __se_sys_mount+0x4d/0x2e0 [ 167.877892][T10628] ? fput+0x8f/0xc0 [ 167.877939][T10628] ? ksys_write+0x194/0x1a0 [ 167.877960][T10628] __x64_sys_mount+0x67/0x80 [ 167.878032][T10628] x64_sys_call+0x2cca/0x3000 [ 167.878064][T10628] do_syscall_64+0xc0/0x2a0 [ 167.878103][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.878137][T10628] RIP: 0033:0x7f0d1f12aeb9 [ 167.878154][T10628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.878177][T10628] RSP: 002b:00007f0d1db87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.878276][T10628] RAX: ffffffffffffffda RBX: 00007f0d1f3a5fa0 RCX: 00007f0d1f12aeb9 [ 167.878290][T10628] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000 [ 167.878303][T10628] RBP: 00007f0d1db87090 R08: 0000200000000480 R09: 0000000000000000 [ 167.878315][T10628] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 167.878399][T10628] R13: 00007f0d1f3a6038 R14: 00007f0d1f3a5fa0 R15: 00007ffd1aa3a668 [ 167.878418][T10628] [ 167.933495][T10619] __nla_validate_parse: 3 callbacks suppressed [ 167.933546][T10619] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2235'. [ 168.129099][T10638] set_capacity_and_notify: 2 callbacks suppressed [ 168.129154][T10638] loop4: detected capacity change from 0 to 128 [ 168.205297][T10638] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.275949][T10646] lo speed is unknown, defaulting to 1000 [ 168.353767][T10651] loop4: detected capacity change from 0 to 1024 [ 168.366846][T10651] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.377823][T10651] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.417736][T10651] JBD2: no valid journal superblock found [ 168.424200][T10651] EXT4-fs (loop4): Could not load journal inode [ 168.751741][T10666] loop0: detected capacity change from 0 to 512 [ 168.829291][T10666] ext4 filesystem being mounted at /472/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.427240][T10684] loop7: detected capacity change from 0 to 512 [ 169.568314][T10689] loop0: detected capacity change from 0 to 512 [ 169.622520][T10689] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.674040][T10684] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.944389][T10704] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 169.950972][T10704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.958635][T10704] vhci_hcd vhci_hcd.0: Device attached [ 169.982351][T10700] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2260'. [ 170.019295][ T3314] EXT4-fs unmount: 56 callbacks suppressed [ 170.019313][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.226045][ T10] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 170.516666][T10728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2265'. [ 170.623400][T10705] vhci_hcd: connection reset by peer [ 170.641804][T10157] vhci_hcd vhci_hcd.7: stop threads [ 170.647211][T10157] vhci_hcd vhci_hcd.7: release socket [ 170.652633][T10157] vhci_hcd vhci_hcd.7: disconnect device [ 170.670114][T10738] loop8: detected capacity change from 0 to 2048 [ 170.679253][T10738] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.685844][T10738] EXT4-fs: Ignoring removed nobh option [ 170.747611][T10738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.761026][T10744] loop7: detected capacity change from 0 to 1024 [ 170.761051][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2273'. [ 170.761132][T10747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.782301][T10744] EXT4-fs: Ignoring removed oldalloc option [ 170.783714][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 170.789729][T10744] EXT4-fs: Ignoring removed bh option [ 170.796824][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 170.804591][T10738] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.2270: corrupted in-inode xattr: invalid ea_ino [ 170.858955][T10747] lo speed is unknown, defaulting to 1000 [ 170.894920][ T7372] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.926567][T10744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.093412][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.114634][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.297401][T10765] loop0: detected capacity change from 0 to 512 [ 171.324725][T10765] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.333952][T10765] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 171.355185][T10765] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 171.368582][T10765] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 171.376938][ T36] IPVS: starting estimator thread 0... [ 171.384881][T10765] System zones: 0-2, 18-18, 34-35 [ 171.390501][T10765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.418702][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.498208][T10769] IPVS: using max 2448 ests per chain, 122400 per kthread [ 171.535707][T10744] ================================================================== [ 171.543852][T10744] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 171.551122][T10744] [ 171.553471][T10744] write to 0xffff88811ba0142c of 4 bytes by task 10757 on cpu 1: [ 171.561226][T10744] xas_set_mark+0x12b/0x140 [ 171.565783][T10744] tag_pages_for_writeback+0xe3/0x2e0 [ 171.571208][T10744] ext4_do_writepages+0x6a8/0x2800 [ 171.576365][T10744] ext4_writepages+0x18f/0x320 [ 171.581176][T10744] do_writepages+0x1c6/0x310 [ 171.585830][T10744] file_write_and_wait_range+0x178/0x2f0 [ 171.591489][T10744] generic_buffers_fsync_noflush+0x45/0x130 [ 171.597422][T10744] ext4_sync_file+0x1aa/0x680 [ 171.602156][T10744] vfs_fsync_range+0x10d/0x130 [ 171.606955][T10744] ext4_buffered_write_iter+0x34f/0x3c0 [ 171.612562][T10744] ext4_file_write_iter+0x380/0xf70 [ 171.617801][T10744] iter_file_splice_write+0x6bc/0xa80 [ 171.623212][T10744] direct_splice_actor+0x156/0x2a0 [ 171.628354][T10744] splice_direct_to_actor+0x311/0x670 [ 171.633761][T10744] do_splice_direct+0x119/0x1a0 [ 171.638639][T10744] do_sendfile+0x382/0x650 [ 171.643096][T10744] __x64_sys_sendfile64+0x105/0x150 [ 171.648336][T10744] x64_sys_call+0x2db1/0x3000 [ 171.653046][T10744] do_syscall_64+0xc0/0x2a0 [ 171.657600][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.663556][T10744] [ 171.665930][T10744] read to 0xffff88811ba0142c of 4 bytes by task 10744 on cpu 0: [ 171.673605][T10744] xas_find_marked+0x5d7/0x620 [ 171.678420][T10744] filemap_get_folios_tag+0xfa/0x510 [ 171.683773][T10744] filemap_fdatawait_range+0x88/0x1e0 [ 171.689186][T10744] __writeback_single_inode+0xdb/0x7b0 [ 171.694748][T10744] writeback_single_inode+0x16d/0x3f0 [ 171.700175][T10744] sync_inode_metadata+0x6e/0xa0 [ 171.705154][T10744] generic_buffers_fsync_noflush+0xee/0x130 [ 171.711089][T10744] ext4_sync_file+0x1aa/0x680 [ 171.715930][T10744] vfs_fsync_range+0x10d/0x130 [ 171.720738][T10744] ext4_buffered_write_iter+0x34f/0x3c0 [ 171.726335][T10744] ext4_file_write_iter+0x380/0xf70 [ 171.731589][T10744] iter_file_splice_write+0x6bc/0xa80 [ 171.737000][T10744] direct_splice_actor+0x156/0x2a0 [ 171.742146][T10744] splice_direct_to_actor+0x311/0x670 [ 171.747552][T10744] do_splice_direct+0x119/0x1a0 [ 171.752457][T10744] do_sendfile+0x382/0x650 [ 171.756926][T10744] __x64_sys_sendfile64+0x105/0x150 [ 171.762191][T10744] x64_sys_call+0x2db1/0x3000 [ 171.766915][T10744] do_syscall_64+0xc0/0x2a0 [ 171.771475][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.777423][T10744] [ 171.779774][T10744] value changed: 0x02000021 -> 0x04000021 [ 171.785521][T10744] [ 171.787875][T10744] Reported by Kernel Concurrency Sanitizer on: [ 171.794059][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.7.2272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.803905][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.814003][T10744] ================================================================== [ 171.871371][ T6022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.057538][T10152] IPVS: stop unused estimator thread 0... [ 175.646139][ T10] usb 15-1: enqueue for inactive port 0 [ 175.651871][ T10] usb 15-1: enqueue for inactive port 0 [ 175.731664][ T10] vhci_hcd vhci_hcd.7: vhci_device speed not set