last executing test programs: 2m42.238289026s ago: executing program 32 (id=1815): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0xc000) 2m41.590816644s ago: executing program 33 (id=1833): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000000440)="9637e7e23f9bf6b81bb91f924a76aa27c2db4a5cdaa7fcbe21d8652b9c17474a3056fbff6ebc643a76dbbf55a17165cecd6d52cf5b932a47dbcee398bde19ddf0dadc84a09d6050da3087fee1984db767aeea530f911", 0x56}, {&(0x7f0000001500)="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", 0xfab}], 0x2, 0x0, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f00000000c0)=0xfffffff9, 0x0, 0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911a200000000008510000002000000850000008800000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x4e23, 0x0, 'nq\x00', 0x2c, 0xfffffff8, 0x17}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31ab3240000800c000440000000000000000508000340000000020c00054000000000000010"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000500), 0x3) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xc0, 0x1, 0x0, @mcast1, @remote, 0x700, 0x80, 0x4, 0xfeb8}}) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, r8}, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc000) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r11, @ANYBLOB="00000000e5d7b6725a827ab7d982965d17a2a900000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) 2m12.05363547s ago: executing program 1 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5000, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x19800c10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x202, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000004) 2m11.479498534s ago: executing program 1 (id=2505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300fffffff500000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a07020000000000000000070a00000900020073797a3100000000090001"], 0xc0}}, 0x0) 2m11.3726325s ago: executing program 1 (id=2507): ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x100080001, 0x0, 0xb}, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_clone(0x21000000, &(0x7f0000000680), 0x0, 0x0, 0x0, &(0x7f0000000800)="5023a304b28d5b06ebe1bee699e1942165fed1549dd26cf61ac1d28d9882ff1c116b430f0aa1a3c1ec9cb40b7909980be8baf89e79bb66a183") r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xfff}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x10, @mcast2, 0x6}}}, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000240), &(0x7f00000008c0)=0x4) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op, @ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_sqe_op={0x1, 0x11}, @ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0xa}, @ioring_restriction_register_op={0x0, 0x1d}, @ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_flags_required, @ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x9) openat(r6, &(0x7f0000000180)='./file1\x00', 0x181242, 0x178) pwritev2(r0, &(0x7f0000000080), 0x0, 0x9, 0x5, 0x19) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r7, 0x6000000) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x20, 0x0, 0xfffffffffdfffffd}) 2m11.017209261s ago: executing program 1 (id=2514): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000680)}, 0x1}], 0x1, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 2m9.518795008s ago: executing program 1 (id=2528): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'usrj\x0f\x97\x0e\xcd\x96\x96<\xb9ota=\x8b\x8dP{\x11\x96n\xc3\x95\x8f~\x83{\x05\r\xf1o\x12\xe8~\x1a\xc8\xdcR\xc2X\xc2\xff\xb9\xefD=*J\xf4!\xee\xb6\x99\x81<\x04z\xef\xa4;\x94\x0eHw\xdc\n\xb9\x1c\xec\xdaf,\b`\xa6/G\xf2 5\xdf\xa4kn\x19\xc8\xea\xa0\xb44\x06\x8b\"\xd84\x05X\x98\xcf\xf5\xdaR\x05\xc3o&g\xf4M\xe7q\xe4JW\x81\xb9\x8d=L(\xae\xaf\xb9+\x99\nG\x12\x8d\xc39\xb8\xdc\x95\xb1\xa9\xd5F\xe7\b\x9b\x1d\xf1\xe8O\x12\x7f\xc8=5g\x8a\xf9\xbajh(WX\xcfl4\x82B\xcf\x14s\x04%w\r}\x19\xed\x84o\xc2{Z\xd2_\xcamc\xe5\xb4\xcd\x14\xc0\xb3\xf5\xce\xa1T5\x02\xdcY\xdcY\xf9c~\xea\f\xab]\x93%\xfbh\xa2\xf4\x034\x13\n\xc1\x13V\x9f^\xd1\x84\xeb\xe5bBv\x0f\x1b\xec\x18\xb8Yg\xec3A\xc9\x97]\x1fp\xef\xc6yQ\xa7mi\xed}\xca\x8c\x98\xd0\xa10\x16\xf0m#Jy', 0x3a, '', 0x3a, './file2/file0'}, 0x138) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000140)={0x2, 0x42d7ebcd94d1c013, 0xadd, 0x9}) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RLOCK(r7, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x1}, 0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "c1efe7ec9a0ce9f2", "4dea01ac0c30e0ec1a1989ee54f62e18", '\x00', '\x00\a\x00'}, 0x28) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 2m9.479514771s ago: executing program 34 (id=2528): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'usrj\x0f\x97\x0e\xcd\x96\x96<\xb9ota=\x8b\x8dP{\x11\x96n\xc3\x95\x8f~\x83{\x05\r\xf1o\x12\xe8~\x1a\xc8\xdcR\xc2X\xc2\xff\xb9\xefD=*J\xf4!\xee\xb6\x99\x81<\x04z\xef\xa4;\x94\x0eHw\xdc\n\xb9\x1c\xec\xdaf,\b`\xa6/G\xf2 5\xdf\xa4kn\x19\xc8\xea\xa0\xb44\x06\x8b\"\xd84\x05X\x98\xcf\xf5\xdaR\x05\xc3o&g\xf4M\xe7q\xe4JW\x81\xb9\x8d=L(\xae\xaf\xb9+\x99\nG\x12\x8d\xc39\xb8\xdc\x95\xb1\xa9\xd5F\xe7\b\x9b\x1d\xf1\xe8O\x12\x7f\xc8=5g\x8a\xf9\xbajh(WX\xcfl4\x82B\xcf\x14s\x04%w\r}\x19\xed\x84o\xc2{Z\xd2_\xcamc\xe5\xb4\xcd\x14\xc0\xb3\xf5\xce\xa1T5\x02\xdcY\xdcY\xf9c~\xea\f\xab]\x93%\xfbh\xa2\xf4\x034\x13\n\xc1\x13V\x9f^\xd1\x84\xeb\xe5bBv\x0f\x1b\xec\x18\xb8Yg\xec3A\xc9\x97]\x1fp\xef\xc6yQ\xa7mi\xed}\xca\x8c\x98\xd0\xa10\x16\xf0m#Jy', 0x3a, '', 0x3a, './file2/file0'}, 0x138) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000140)={0x2, 0x42d7ebcd94d1c013, 0xadd, 0x9}) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RLOCK(r7, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x1}, 0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "c1efe7ec9a0ce9f2", "4dea01ac0c30e0ec1a1989ee54f62e18", '\x00', '\x00\a\x00'}, 0x28) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 1m45.70217702s ago: executing program 5 (id=2985): syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f00000000c0)='./file0\x00', 0x1c808, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES16, @ANYRES8], 0x40, 0x307, &(0x7f0000001100)="$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") open(0x0, 0x40, 0x171) 1m45.584278447s ago: executing program 5 (id=2988): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) fchdir(r1) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) r2 = io_uring_setup(0x7969, &(0x7f0000000040)={0x0, 0x42a7, 0x400, 0x3, 0x255, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002440)={0xb2, 0x0, &(0x7f0000002380)=[{&(0x7f00000000c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/26, 0x1a}, {&(0x7f0000001380)=""/4096, 0x1000}], &(0x7f0000002400)=[0x5], 0x6}, 0x20) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002480), 0x600b01) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f00000024c0)) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002580)=@generic={&(0x7f0000002540)='./file0\x00'}, 0x18) close(r4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000002600), &(0x7f0000002640)=0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x40000000000000) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000002680)={@in6={{0xa, 0x4e20, 0x5, @remote, 0x3}}, 0x0, 0x0, 0x43, 0x0, "a38dc306f1eb4941c3cef5c992a8cb91c9e56a8c3304d7f01c80d5b01af0c114ecccbe2aeacc658239c83963c4d58bee475294033cc99a4445990bc0cde4a330dc0fa919084d5a063bab5cb0eba9a40f"}, 0xd8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x28, 0x1410, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000002880)={0x7, 'ip6gre0\x00', {0x4}, 0x99f1}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002900), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r8 = perf_event_open(&(0x7f0000002a40)={0x2, 0x80, 0x5, 0xce, 0x9, 0x0, 0x0, 0x4, 0x20, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000002a00), 0xa}, 0x80, 0x1, 0x4, 0x4, 0x41d, 0x8, 0x24, 0x0, 0x5, 0x0, 0xfffffffffffffb20}, 0x0, 0x1, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r5) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b00), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b40)={0x120, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), r9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x41, 0x17}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4010) close_range(r5, r2, 0x0) 1m45.405247448s ago: executing program 5 (id=2994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000001818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200004e03404fb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x40f00, 0xc}, 0x94) 1m45.353757531s ago: executing program 5 (id=2996): r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xd4aa6c3a0ba5a270, 0x0, 0x0, 0x9, 0x8001, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x0, 0xea, 0x32, 0x0, @multicast2, @loopback}, "0c03000000000057"}}}}}, 0x0) 1m45.353537491s ago: executing program 5 (id=2997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105007f000001000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000e50000bb000000003c"], 0x1fc}, 0x1, 0x0, 0x0, 0x40090}, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) 1m45.309308953s ago: executing program 5 (id=2998): syz_read_part_table(0x5cb, &(0x7f0000000000)="$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") syz_emit_ethernet(0x32, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @opaque="ab14e2aa0ff9ca59"}}}}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0xffffffffffffff86, &(0x7f00000003c0)}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd4, 0x18, 0x200, 0x70bd28, 0x25dfdbfc, {0xf}, [@generic="9ec1ba9fe9d21355dd8e636d8f94c62097d57fbbf9f3ecbe283704549a480613b195e3735f74746023ddbd502a13126991c72140e1156420ccc4a54a9b1a36dca9fbb521882c45870674e58a535cf7ee71fb3603e24d340cfa2a28d1e6dcba09a5927601a793a7281e6aeae47a1215bec3d7d5ba7cb6421ae6590702e874ae74301d49d5c614148245af04dc81529d1022a815e9f478e66750122f5d988b5f1a4cc827cbf6b841a4922d886f9717831360cfe243caf531bda2f329a906"]}, 0xd4}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 32) ptrace(0x10, r6) (async, rerun: 32) ptrace$setsig(0x4203, r6, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x8c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x78, 0x1, [@m_gact={0x74, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1cee, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2598, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xffffff4d, 0x8, 0xb, 0x4}}]}, {0x15, 0x6, "68a2e5ffc9201f767ea2f22e3f6e6fadbb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x8c}, 0x1, 0x2b1e}, 0x0) 1m30.235263515s ago: executing program 35 (id=2998): syz_read_part_table(0x5cb, &(0x7f0000000000)="$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") syz_emit_ethernet(0x32, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @opaque="ab14e2aa0ff9ca59"}}}}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0xffffffffffffff86, &(0x7f00000003c0)}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd4, 0x18, 0x200, 0x70bd28, 0x25dfdbfc, {0xf}, [@generic="9ec1ba9fe9d21355dd8e636d8f94c62097d57fbbf9f3ecbe283704549a480613b195e3735f74746023ddbd502a13126991c72140e1156420ccc4a54a9b1a36dca9fbb521882c45870674e58a535cf7ee71fb3603e24d340cfa2a28d1e6dcba09a5927601a793a7281e6aeae47a1215bec3d7d5ba7cb6421ae6590702e874ae74301d49d5c614148245af04dc81529d1022a815e9f478e66750122f5d988b5f1a4cc827cbf6b841a4922d886f9717831360cfe243caf531bda2f329a906"]}, 0xd4}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 32) ptrace(0x10, r6) (async, rerun: 32) ptrace$setsig(0x4203, r6, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x8c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x78, 0x1, [@m_gact={0x74, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1cee, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2598, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xffffff4d, 0x8, 0xb, 0x4}}]}, {0x15, 0x6, "68a2e5ffc9201f767ea2f22e3f6e6fadbb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x8c}, 0x1, 0x2b1e}, 0x0) 1m26.19664812s ago: executing program 6 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) 1m26.126791265s ago: executing program 6 (id=3355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x11000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0xee) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f00000002c0)=""/21, 0x15, 0x0, &(0x7f0000000300)=""/92, 0x5c}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0xbcfd}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x6, 0x8, 0x80, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0x6, 0xf, &(0x7f0000000580)=""/15, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x1, 0x3, 0x88f9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x3, 0x2, 0x0, 0x1}, {0x1, 0x5, 0xc, 0xa}, {0x3, 0x4, 0x1}, {0x3, 0x1, 0x8}, {0x5, 0x2, 0xd, 0x5}], 0x10, 0x35da70ce}, 0x94) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x11c, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x105, 0x2a, [@chsw_timing={0x68, 0x4, {0x7ff, 0xfffd}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xce, 0xb5, 0x1}}, @sec_chan_ofs={0x3e, 0x1}, @ibss={0x6, 0x2, 0x3}, @random_vendor={0xdd, 0xec, "f262184772bd2a4f867bdb016ecbf9d51c65f091e8858da8b637bb12fc9159dffb2cc1db69aed884638eed905a834daf8db49d12511864790007500ae970f80a2bcf7d01c67f9230c3e38f0dde6b3cad77f3a9791219ecedf1e9253fbaf8cc15422140a13c3d6910146b5b7d3485ce2e863328966a7d5198b6c61ce95f57f65c85517831cd50ba5f504f1ab2371192770b4c41403818f16cf7895dea86422c53c72ceeabf981660004871cd827645ad6360e9a896210afa3d264fe1e17a59cc2383c6917c12f339134e3637e90e731f519dcc58960d3353768cd8b0b2939c607a9b52fcc9be5dd221d792e24"}]}]}, 0x11c}}, 0x10) (async, rerun: 64) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r7) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (rerun: 32) rename(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000400)='./file1/file4/file5\x00') (async) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x14046, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pK \x00'}, 0x20) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='auxv\x00') bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xf, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x223d, 0x0, 0x0, 0x0, 0xdd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @alu={0x7, 0x0, 0xc, 0x5, 0x1, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x44, &(0x7f00000001c0)=""/68, 0x1f00, 0x42, '\x00', 0x0, @fallback=0x14, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0x1, 0x0, 0x7}, 0x10, r3, r4, 0x5, &(0x7f0000000900)=[0x1, r6, r7, r9, r10, r11], &(0x7f0000000940)=[{0x4, 0x1, 0xb, 0x3}, {0x5, 0x1, 0xb}, {0x2, 0x2, 0x7, 0x2}, {0x2, 0x2, 0xf, 0x7}, {0x3, 0x5, 0x3, 0x2}], 0x10, 0x4}, 0x94) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m26.04920866s ago: executing program 6 (id=3357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @empty=0xac141436}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000180)=""/166) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x2dc, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2a8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x1d8, 0x2, [@m_skbedit={0x84, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x209, 0x8, 0x0, 0xe, 0x7}}]}, {0x3e, 0x6, "5566b4e4530191c4c47c5e5d814a094cb4bde72a32bd67dc4f4a1b756bfc405f042825ed257945eda78ad999c601de91f4ea41fc32a3d25d7fc5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x715a0f6cb1e4d925, 0x1}}}}, @m_skbedit={0x84, 0x17, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xffef}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xb}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xe}}]}, {0x37, 0x6, "0dac121e9b325601d1ff8ee1a0fb641c3a9d4aa85d2b23e18f900e7aa02140fd850c1b4fb3d60884bb876e4451c052db5fa544"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xcc, 0x15, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7cb}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x3b, 0x6, "58ed939de2a2fbb0c6a17422419559dbbb75103bf6b7b0aeea22b1bf8e39a84c6ac38879cd35891d8cfbe40692f37875b8f1ca82606e31"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xa4, 0x2, [@m_police={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x72, 0x6, "d018921344622edadc9fc40f9c4bc580a58ab091b093b02ee2edc1eeca6386c5256d3e2106b0d7fda05ae5dd8c8ffcae7e2305a2e18266ba3890811199ef7b39dbb576413a554eabd66a1171d98c2d9540567cd3fffe012fdb14b25dfdfe73066f9e743dc2776b8f264e550476b6"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xd}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 1m25.985678703s ago: executing program 6 (id=3359): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000001240)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_clone(0x2400, &(0x7f00000003c0)="03352f28d5c8013d90c124e1e96408fea58bd9cf1c95551dd3260b1849c2c40eba029fbe763016a726422172205705170b20174849217db955f66baa999239251e9c67126e607c4d8cef8994f340a5301aa3af1ab2613dff21a47edc61b0331d8ccd8dc1a7b5099d3e0f5276d0e6dc6459dd8633a19e34a8e31383e2eef53e82bc2835554db1a5a252892e81ecb4c545a6d81bea14d379c1c9c5612550a2", 0x9e, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)="28029203185fba171270f3a546054580a42e657e520ab41288be33") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100020002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01010200000b0000240012800900010062596e64000000010006"], 0x44}}, 0x0) r3 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x1, &(0x7f0000000140)={0x1b, 0x7, 0x7}) wait4(r2, 0x0, 0x4, &(0x7f0000000480)) (async) wait4(r2, 0x0, 0x4, &(0x7f0000000480)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x700}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}}, @IFLA_GRE_OKEY={0x8, 0x5, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x700}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}}, @IFLA_GRE_OKEY={0x8, 0x5, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./bus\x00', r0, 0x4000, r4}, 0x18) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m25.662895402s ago: executing program 6 (id=3360): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000814000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m25.297535533s ago: executing program 6 (id=3368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024000780080005000000004408000500000000000800050000000000080005000000000004000780140007"], 0xd0}}, 0x0) 1m25.297299283s ago: executing program 36 (id=3368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024000780080005000000004408000500000000000800050000000000080005000000000004000780140007"], 0xd0}}, 0x0) 1m21.868477454s ago: executing program 8 (id=3409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000008004000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 1m21.737871802s ago: executing program 8 (id=3411): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00000000000000140000000000000001"], 0x4c}, 0x20001850) r1 = fsopen(&(0x7f00000001c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x4004091}, 0x20004000) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00') fallocate(r1, 0x4, 0x7, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@delchain={0x74, 0x65, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff4}, {0xd, 0x5}, {0xe, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_PERTURB={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48d1}, 0x2000c08c) r6 = socket$inet6(0xa, 0x2, 0x8) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x6}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}], 0x1, 0x4000040) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000c00)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000028000000b70300000000000085000000b400000095"], &(0x7f0000000b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m21.614264739s ago: executing program 8 (id=3414): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000040)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x400004}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x98, 0x69, 0x1, 0x0, 0xfffffffd, {0x1, 0x3, 0x2}, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x9}, @generic="27f757f5c3cf8bbfcfd80d713fe8811d21ef02d3e4386b48a828fda2ee393015454a734b4fd9916b03cd1633db6e3772181178951aa7bee5e0b7a8b2e0970ee7610749868856a911baf4716ce95aa5b09fa2276e40ece30538b3a1c7c3b5c4b0d93875f969f84e4e39de8ac568c30bc1b94beda0a17788"]}, 0x98}}, 0x4) r5 = getpid() prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300, 0x23000000}}}}}}]}, 0x48}}, 0x4040004) 1m21.516898835s ago: executing program 8 (id=3415): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x563, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0xa800, 0x4fed0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0xc40, 0x0) setns(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=0x0, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4040400}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) listen(r4, 0x4) shutdown(r2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x3, &(0x7f00000003c0)={&(0x7f0000000400)=""/120, 0x78}) getpgid(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x10}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x24, 0xf}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtclass={0x34, 0x28, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x2}, {0x4, 0x2}, {0xa, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x52}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1m21.291026407s ago: executing program 8 (id=3423): semget$private(0x0, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac4000000060a0b0400000000000000000200fffe980004802800018008000100666962001c000280080003400000000608000240000000010800014000000009200001800700010063740000140002800800024000000011080004400000000c400001800d00010073796e70726f7879000000002c000280050002000700000005000200090000000600014090100400050002000200000006000140000800000c00018008000100647570000900010073797a30000000000900020073797a32"], 0x100}}, 0x0) 1m20.977278786s ago: executing program 8 (id=3432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88ce359bdb02b57d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) write(r0, &(0x7f0000000040)="3d4866eb12705f44efb6bc", 0xb) 1m20.967546726s ago: executing program 37 (id=3432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88ce359bdb02b57d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) write(r0, &(0x7f0000000040)="3d4866eb12705f44efb6bc", 0xb) 1m9.047002043s ago: executing program 7 (id=3650): perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000880)=ANY=[@ANYBLOB='overriderockperm,iocharset=macturkish,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f4e6861727365743d6d61636975726b0b000010696f636861727365743d6b6f69382d72752c00"], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) eventfd2(0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m8.717890773s ago: executing program 7 (id=3656): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x8002) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x97ffffff) 1m8.689431984s ago: executing program 7 (id=3657): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0x49) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x58, r5, 0x236db90eefe19449, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) r6 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0xab11, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2000128010000180090001006c617374000000000c0001a0080001006475700008000340000001"], 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x20000000) recvmmsg(r10, &(0x7f0000000600)=[{{0x0, 0x9494, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m7.575802329s ago: executing program 7 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000001c0)={[{@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x10000083, 0x200, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/235, 0xeb}], 0x1}}], 0x1, 0x82, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x40, 0xa20, 0x8000c63) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x1f, r5, 0xd9f, 0x87) ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r8, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1m7.540621111s ago: executing program 7 (id=3675): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850048012f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 1m7.38855683s ago: executing program 7 (id=3679): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x138, 0xe138, 0x198, 0x138, 0x198, 0x238, 0x358, 0x358, 0x238, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0xffffff00, 0xffffffff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x8c8b, 0x1000, 0x7, 0x80000001}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0xfffffffe, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x4000000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x464d13015c35a690, 0x3, 0x6, 0x73, 'snmp\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) 1m7.365897202s ago: executing program 38 (id=3679): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x138, 0xe138, 0x198, 0x138, 0x198, 0x238, 0x358, 0x358, 0x238, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0xffffff00, 0xffffffff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x8c8b, 0x1000, 0x7, 0x80000001}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0xfffffffe, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x4000000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x464d13015c35a690, 0x3, 0x6, 0x73, 'snmp\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) 2.940277378s ago: executing program 0 (id=5030): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f00000026c0)="2600000022004701050000070001000000000000002b1f000a4e51f1ee839cd53400b017ca7e", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r2, &(0x7f0000000000)='\"', 0xfdef) 2.115095416s ago: executing program 3 (id=5044): syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='auxv\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100800000000000000a0000000000c800000000000c00090008000000", @ANYRES32=r0, @ANYBLOB="14000500000000000000000000000000000b0012"], 0x3c}, 0x1, 0x11, 0x0, 0x80}, 0x0) 2.089315248s ago: executing program 3 (id=5046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004429fffe8000000000000000000000000000aaff02fff5000000000000000000000001"], 0xfdef) 2.072280499s ago: executing program 0 (id=5047): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r2) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000200)="555a646551ad0f23f6885bac5d085df76fbff366223f76355f376d11792aca2861e14369", 0x24}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c0003"], 0x80}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.012131122s ago: executing program 9 (id=5048): r0 = socket(0x1e, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0x7ff, 0x1, 0x6, 0x6}, 0x1c) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000980), &(0x7f00000009c0)=0x4) socket$kcm(0x22, 0x2, 0x21) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff3c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20044800) 1.960926335s ago: executing program 3 (id=5050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x40f, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0x8, 0x0, 0x10001, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYBLOB="1a94e49a6692c3981eaa5ccfb3ce33bba010d7c8558f577c673b5e919865debd465ef8cd1f800ab1", @ANYBLOB="0c000280060912"], 0x24}}, 0x4880) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1a00"/12, @ANYRES32=r0, @ANYBLOB="44c1949e599bfd42489d4ffe45f212379603f3482e7643313efb6b1c07be66cbcda6a0b76b26eb32cde7ebc850691f806dd7fc87f377d0492c7ad8a44758c2161f71585de7ad77e4fc80305086a07ab1f81a6a22eab7ccddd1cdbcef7a98ff11b94ba4f29dafc03f51567a937b63794b6f893c00e5c22e364eafd5c4703ff7f31ba4a8105078124c6ca630356bf9520e1c72dd2b67444f843d7bd2aaf3c924776742dcf0f4b8c19cf108bebb593a054f3df85ae5b1adbbb18937316bc790f2e2c1cf1d52d1bedc1d028cf3c8cb5ae2c938981e0c114995b46f5fec", @ANYRES64=r1], 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000bd475b2b07a5865a000000000000000000f0ff0000003d93de510d10cad350554aeecf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x110) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) creat(0x0, 0x40) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'wlan1\x00', 0x2000004}, 0x18) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="fffdde828f1abf702e3538e20c0baa555f98", @ANYRES32, @ANYBLOB="0b000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x20014890) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu&\t\t') r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=r11], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486"], 0xcfa4) 1.957228756s ago: executing program 9 (id=5051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="600100001800010029bd7000000000201d0100001e01060007024e00ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128b27616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adbfdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e5b2f74e28233f4129d4587eee87ec5d42c3ef060c753f4d5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea00000c000b0000000000020000e008000500fb07f808150004000100000003010000504855a89e2a9c3104"], 0x160}}, 0x0) 1.862279s ago: executing program 9 (id=5053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140018001000010000000000000000000200000ac4000000060a0b0400000000000000000200fffe980004802800018008000100666962001c000280080003400000000608000240000000010800014000000009200001800700010063740000140002800800024000000011080004400000000c400001800d00010073796e70726f7879000000002c000280050002000700000005000200090000000600014090100400050002000200000006000140000800000c00018008000100647570000900010073797a30000000000900020073797a32"], 0x100}}, 0x0) 1.773263736s ago: executing program 9 (id=5054): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 1.726673119s ago: executing program 9 (id=5057): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f00000026c0)="2600000022004701050000070001000000000000002b1f000a4e51f1ee839cd53400b017ca7e", 0x26) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r2, &(0x7f0000000000)='\"', 0xfdef) 1.629228334s ago: executing program 2 (id=5058): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0xdf0b}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 1.501325892s ago: executing program 2 (id=5061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0xfffe, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x3503, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x500, 0xabf}]}]}, 0x17c}}, 0x0) 1.500259152s ago: executing program 2 (id=5063): syz_clone3(&(0x7f00000006c0)={0x1001000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280), {}, &(0x7f0000000480)=""/11, 0xb, &(0x7f0000000500)=""/222, &(0x7f0000000600)=[0x0], 0x1}, 0x58) fchdir(r0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1.220469468s ago: executing program 0 (id=5065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 1.090866316s ago: executing program 3 (id=5066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000180)=""/59, 0x3b, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a0001002dbd70000000000081808000000000000000008008000f0000"], 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 1.089229946s ago: executing program 0 (id=5068): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040004) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, ':,:]-$'}}]}, 0x1, 0x511, &(0x7f0000000c40)="$eJzs3e9rHGkdAPDvTLK5tM2ZPRWpB94d3kl7aHeTi3eNIm0F0VcFtb6vMdmEkE02ZDe1CUVT/AMEERX8A3wj+AcI0j9BhIK+FxVFtNWX2pHdnWh+7CZLssnWzecDT/Z55pmZ7/MM2dn58TATwIX1VkTciYiRiHg3Iibz6WmeYqedmvM9f/ZovpmSyLJ7f0siyafFnmVGI+JKvth4RHz9KxHfSg7HrW9tr8xVq5WNvFxurK6X61vbN5ZX55YqS5W1mZnpD2Zvzr4/O5XlTtXPYkTc+tKffvT9n3351q8+8+3f3//L9e80m/WFj0XkzZs/VYAu2usutLbFruY22jiLYAPS7E9hZNCtAACgF81j9g9HxCdbx/+TMdI6mgMAAACGSXZ7Iv6VRGQAAADA0EojYiKStJSPBZiINC2V2mN4PxqX02qt3vj0Ym1zbaFZF1GMQrq4XK1M5WOFi1FImuXpfIztbvm9A+WZiHgtIn44ealVLs3XqguDvvgBAAAAF8SVN/ef//9zMm3lAQAAgCFT7FoAAAAAhoVTfgAAABh+zv8BAABgqH317t1mynbf473wYGtzpfbgxkKlvlJa3Zwvzdc21ktLtdpS65l9q8etr1qrrX821jYflhuVeqNc39q+v1rbXGvcX973CmwAAADgHL325pPfJRGx8/lLrRT5cwAB9vnjoBsA9NPIoBsADMzooBsADEzh2DnsIWDYJcfUHx68075WGL8+m/YAAAD9d+3jh+//j+V1x18bAP6fGesDABePu3twcRVOOgLwar9bAgzKh9ofr3Sr7/rwjh7u/7evMWTZiRoGAAD0zUQrJWkpP06fiDQtlSJebb0WoJAsLlcrU/n5wW8nC680y9OtJZNjxwwDAAAAAAAAAAAAAAAAAAAAAAAAAG1ZlkQGAAAADLWI9M9J62n+Edcm35nYf3XgwFu/fnrvxw/nGo2N6Yix5O+TzUljEdH4ST79vcwrAQAAAOAl0D5Pzz+nB90aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbN82eP5nfTecb96xcjotgp/miMtz7HoxARl/+RxOie5ZKIGOlD/J3HEXG1U/wkXmRZVsxb0Sn+pTOOX2xtms7x04i40of4cJE9ae5/7nT6/qXxVuuz8/dvNE+n1X3/l/53/zfSZf/z6oFyN68//UW5a/zHEa+Pdt7/7MZP2vH3hWgW3u6xj9/8xvZ2x4o9q+wUf2+scmN1vVzf2r6xvDq3VFmqrM3MTH8we3P2/dmp8uJytZL/7RjmB5/45Yuj+n+5S/zi/v4f2v7v9NT7LP799OGzj7QLhU7xr7/d+ff3apf4af7b96k836y/tpvfaef3euPnv3njqP4vdOn/+DH9v95T/+Nz737te3/oWHNoawAA56G+tb0yV61WNo7IjPcwzzlnbr8czehjJl6OZgwqk323/f94uvWccvFDmew0i49GH5oxduh7OhInXWESsdNcV4//kAAAwJD530H/UXeQAAAAAAAAAAAAAAAAAAAAgLN0wseSjUdEzzMfjLkzmK4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzpPwEAAP//gEfRew==") 1.063265647s ago: executing program 0 (id=5069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)}, 0x10012) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYRES64=r6, @ANYRES16=r6, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b000360aba3097461759128c78749000000060006000200000008000200", @ANYRES32=r1, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 1.001417611s ago: executing program 3 (id=5070): syz_clone3(&(0x7f00000006c0)={0x1001000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280), {}, &(0x7f0000000480)=""/11, 0xb, &(0x7f0000000500)=""/222, &(0x7f0000000600)=[0x0], 0x1}, 0x58) fchdir(r0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socket(0x8, 0x1, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 768.157845ms ago: executing program 9 (id=5074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001800400030008"], 0x44}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xbe, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x8, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0xb144b, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0xfffffffffffffc2c, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2e4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x808, &(0x7f0000000300)={[{@nogrpid}, {@usrjquota}, {@nodelalloc}]}, 0x1, 0x5d0, &(0x7f0000000cc0)="$eJzs3W+IHGcdB/Df7t2lyeVq/tiqrbE5DbWB0NvL5RIS9YUl/qk1qRXFF6EQjtz2LmTv9sxdoLcVbPGNKIjgGxGEin1hRTSQN5VS2xctvlFQ6h8qGgMqiFC0UhBBXXl2d9JtM2nSXu6mufl8YPZmnpnd59lbvjszO8/MBFBao+mhEjESEeciYkt38tULjHb/tPadnU1DJdrtz/y90lluet/Z2WzR7Hmb08NgxMaI2H64EruGLq13cbl1aqrRqJ/uTdeW5hZqi8utO0/OTc3UZ+rz+w9OHpo4MHlw8tq91/GfD9/8l9vvvfDYs//6z7d/e+CHqb0jvXn97yNH+83UNxqjvf/JUGzrKx+sRNzzZl7wLWig+1HH7X1llcECG8RVa7e3/yB9fm+PiF2d/G+Jgeh+eC88ef8/t8Sv7y66jcDqaWfyZ7/UBtatamcbuFIdi4jueLU6Ntbdhr8phquN5uLSngeaZ+anu9vKW2Oo+sDJRn28t6+wNYYqaXpvZ/yV6YnXTO+L6GwDf3lgU2d67ESzMb3WX3ZAx0jE+XOfP7Fh82vy/9eBbv6B9Svl/1fPPfF0Gn95oOjWAGsp5f/7L899MuQfSkf+obzkH8pL/mHdGH6jT5B/KC/5h/KSfygv+Yfykn8oL/mH8sryf9/Ro3Hf0aPtVu/89/nmzMlTswuHJsbH5s6cGDvRPL0wNtNsznTO2Jm78us2ms2FvRNx5sHaUn1xqba43Do+1zwzv3S8c17/8XrOpQCAAhy7sPGebTufeaESEQ9/YFNnSDb05ssqrG/tdiWKPgcZKIZdfygvl2qD8rKPD1SuMH/j5WY0rn1bgLVRLboBQGHuuMXxPygrv/9Defn9H8rLNj7g938oH7//Q3mNXOb+Xzf23btrPCLeFhE/Gxi6IbvXF3BdedWu/kjE+fPf/Vzt4n24jVwPI9nH91Zpj5F1O1LIdxSwhl4JfdEtAYoyve/sbDasVZ1PzaxVTUCeF+/qdgJKuW/1hu6cwYvHBoZWqZ/QttvS44//8Oju2YE0RO97aBWqAnI8/EhEvCtv/V/pHBvY2ltue3exuCkibo6Id0TEO1dY9zc/HTEaz9X7y+Qf1s7V5v+WiEir61sj4t0RsSMi3rPCun95LuX/N5v6y+QfyuELzxbdAqAon3ii6BYARTmmjwGU1vceKroFQFGe/FHRLQCK8rXni24BlNszd0XEeN7xv2rneH9mqHddwBt61wLYFBHDEbG5dw7hjb1zBLf0HTO8kuOfihiN237SX+b4H6ydrP9f65L+f9WL/f8GImLnCup46kMjX80rn9qR8v/YQ1n/vzSk+rO+gMDqevGRiFtz81+52Oe3EimnEe/Nef4Hr6KO0S9eeDyv/Pl70+sO/UL+oRjt70S8P/Lzn0ljtaW5hdricuvOzn28Z+rz+w9OHpo4MHlwsta5REgtu1BIjiP/eGlPXvnvJ1L+v7Vf/qEYaf0/fJn892//v28FdRz+xleO5ZWP/Cnlf8fTr5//6t82VD7bmc7uS/Dg1NLS6b0RGypHLi2fWEFDYZ3LMpJlKOV/9678/f/tveek9f/hiPhI2l6IiP9GxP8i4qMR8bGI+HhE3P06dX79jpkLeeV/fDzl/9FT1v9QjJT/6Sus/9Pff6+gjj27f/qlvPIP70z5H/vdn4/cP5gG+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC49haXW6emGo366VUcKfo9AgAAAAAAQFn8PwAA//+5aTFq") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) 395.199507ms ago: executing program 4 (id=5075): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0xfffffffffffffffc, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r0 = open(&(0x7f00009e1000)='./file1\x00', 0x28040, 0x0) unshare(0x6020400) inotify_rm_watch(r0, 0x0) 357.904479ms ago: executing program 4 (id=5076): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000400030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 356.900829ms ago: executing program 2 (id=5077): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x12, r0, 0x0) mbind(&(0x7f00003d4000/0x3000)=nil, 0x3000, 0x8000, &(0x7f00000003c0)=0x9, 0x5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe4a84}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb2d1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x4000850) 293.238823ms ago: executing program 4 (id=5078): r0 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf25000000", @ANYRESHEX=r1, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000300000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x2, 0x5, 0x4470}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x20000084) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) syz_extract_tcp_res$synack(&(0x7f0000000540)={0x41424344}, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344, 0x41424344}, 0x9, 0x7) write$tun(0xffffffffffffffff, &(0x7f00000005c0)={@void, @val={0x0, 0x3, 0x40, 0x3, 0xa, 0x800}, @ipv6=@tcp={0x9, 0x6, "c6515b", 0x2b9, 0x6, 0x1, @rand_addr=' \x01\x00', @empty, {[@hopopts={0x87, 0xd, '\x00', [@generic={0x1, 0x55, "51de1216725984fa3c1d71f7f2480f24cdab18befd38000d0d3f813785355b165fe8bfbae6c15142c0827944487cfe062ada6c06aa457589ad48dfb85b0abe9ef94c860b2dd5c5b1300b951aa766e0389592012918"}, @hao={0xc9, 0x10, @remote}]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x5, 0x10, 0xae, [@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @dstopts={0x2c, 0x26, '\x00', [@generic={0x7, 0x50, "d6c6fd33d8a57e065f260c85c845fc19a9909b0242dcf49ff3476ccd82d8e3aaf56f9cfc8099bb82e0aae0eaff4b076cc8e5369b6b71fad85472ab37a74939b906ae483c20dd36c94bdbf1200c826f20"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x4c, 0xcd, "84a7a4afdc1163bacae518f5a860758d3c79bd16a9dbea39611733fed5b74524da9c9a4e3b5904bcbaca389a3740498f6422d94fe8c105fb5d580fd981e798f541eb75c376de209080542efe39147e262358f78d45b79b1733c77fce9fb5b149515d309e0f22be17370791ffa03e7b585e2860c431c1bbfea523734569e70fa59fa855cd403fd0dda1a64a10c35e03433f8746d2457ad923361c1b5ce2594ab9499ca343598b3aa810e162cf3fdeed34c4cce85762e0f06d707fcca1f5d4cb5e5c66e8cd8b0ddefa3698beeee1"}]}], {{0x4e22, 0x4e21, r3, r4, 0x0, 0x0, 0x6, 0xc2, 0x4, 0x0, 0x6, {[@window={0x3, 0x3, 0xf}]}}, {"28b64dedff21f6ef88a26a7a7498479aed436599528e13a9894f665e450b9fc5f863365db13d95dfbc75c4cfa2c2ea6eb900d874a243da51adc218d9681b518345981758c9370a3fc77b17195538582e1f702abf747d83fb870f087453f80244227565ab2e26ac556eb143be5fa7503610a1c2088230e71c7d8da51a7fa6d750804c5805fff1dbd9e4eaac224f180c2cb2fbbaf32ce8a6311174cc847cef09c36b57ce9b4987bc55dcb7d6a28e1f5dc930"}}}}}, 0x2eb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8932, &(0x7f0000000080)) 292.453132ms ago: executing program 4 (id=5079): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004) 286.040353ms ago: executing program 4 (id=5080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd071000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x10180, 0x10003, 0x80000001, 0x3, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x505, &(0x7f0000000f40)="$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") r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000180)={0xffffffffffffff26, 0xa, 0x1, 0x1}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000040)={[{@errors_remount}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r2 = open(&(0x7f0000000000)='./file1\x00', 0x4787e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x4006d1c, 0x2}) r4 = socket$inet6(0xa, 0x80000, 0x400) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2a04a9, &(0x7f0000000000)=ANY=[@ANYBLOB="6e724878cd099d6b730900000000"]) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000ad4f00000000000000ba53aa8d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYRESDEC=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8ffffff", @ANYRES16=r7, @ANYBLOB="01000000000000000000030000004c0001801000010069623a70696d36726567300038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a30000000000500040002000000140007800500150000000000080011400000000c050005000800000005000100060000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xae31cbdd19173c73, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000500)=""/226, 0xe2, 0x0, &(0x7f0000001680)=""/4096, 0x1000}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 208.975347ms ago: executing program 2 (id=5081): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500, 0x2}, 0x1075, 0x6, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x1, r1, 0x0, 0x8000000a, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x181281, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000240)=0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 165.29507ms ago: executing program 0 (id=5082): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xf1) setns(r2, 0x66020000) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ac4000000060a0b0400000000000000000200fffe980004802800018008000100666962001c000280080003400000000608000240000000010800014000000009200001800700010063740000140002800800024000000011080004400000000c400001800d00010073796e70726f7879000000002c000280050002000700000005000200090000000600014090100400050002000200000006000140000800000c00018008000100647570000900010073797a30000000000900020073797a32"], 0x100}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @random="8310a57ebd94"}) 117.441413ms ago: executing program 3 (id=5083): syz_clone3(&(0x7f00000006c0)={0x1001000, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000280), {}, &(0x7f0000000480)=""/11, 0xb, &(0x7f0000000500)=""/222, &(0x7f0000000600)=[0x0], 0x1}, 0x58) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1.847259ms ago: executing program 2 (id=5084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r1, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 0s ago: executing program 4 (id=5085): syz_clone3(&(0x7f00000006c0)={0x1001000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280), {}, &(0x7f0000000480)=""/11, 0xb, &(0x7f0000000500)=""/222, &(0x7f0000000600)=[0x0], 0x1}, 0x58) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) kernel console output (not intermixed with test programs): 0771][T18219] bond2 (unregistering): Released all slaves [ 236.573984][T18234] loop9: detected capacity change from 0 to 128 [ 236.679439][T18242] loop4: detected capacity change from 0 to 8192 [ 236.729865][ T3642] loop4: p2 p3 p4 [ 236.733697][ T3642] loop4: p2 size 8388608 extends beyond EOD, truncated [ 236.743503][ T3642] loop4: p3 start 134217728 is beyond EOD, truncated [ 236.750263][ T3642] loop4: p4 size 262144 extends beyond EOD, truncated [ 236.763038][T18242] loop4: p2 p3 p4 [ 236.767002][T18242] loop4: p2 size 8388608 extends beyond EOD, truncated [ 236.775420][T18242] loop4: p3 start 134217728 is beyond EOD, truncated [ 236.782224][T18242] loop4: p4 size 262144 extends beyond EOD, truncated [ 236.874141][T18268] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 236.880757][T18268] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.888208][T18268] vhci_hcd vhci_hcd.0: Device attached [ 236.917284][T18268] netlink: 'syz.2.4248': attribute type 1 has an invalid length. [ 237.008823][T18268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.024645][T18269] vhci_hcd: connection closed [ 237.025009][ T4535] vhci_hcd vhci_hcd.2: stop threads [ 237.027322][T18282] lo speed is unknown, defaulting to 1000 [ 237.030209][ T4535] vhci_hcd vhci_hcd.2: release socket [ 237.047805][ T4535] vhci_hcd vhci_hcd.2: disconnect device [ 237.066021][T18282] lo speed is unknown, defaulting to 1000 [ 237.071825][T14885] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 237.123017][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 237.129710][T14913] udevd[14913]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 237.165931][T14913] udevd[14913]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 237.177018][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 237.193283][T18295] veth12: entered promiscuous mode [ 237.198468][T18295] veth12: entered allmulticast mode [ 237.206774][T18293] loop4: detected capacity change from 0 to 8192 [ 237.390701][T18306] EXT4-fs (loop4): 1 truncate cleaned up [ 237.619993][ T3642] loop0: p1 < > p4 [ 237.628384][ T3642] loop0: p4 size 722688 extends beyond EOD, truncated [ 237.651266][T18308] loop0: p1 < > p4 [ 237.655776][T18308] loop0: p4 size 722688 extends beyond EOD, truncated [ 237.713415][T18308] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 237.759650][T18331] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 237.777264][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop3 [ 237.791634][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop3 [ 237.799615][T18308] bond2 (unregistering): Released all slaves [ 237.827490][T18330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.913783][T18330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.973204][T18330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.032672][T18330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.127144][T13843] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.151995][T11385] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.170205][T11385] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.192706][T11385] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.471980][T18349] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.485103][T18351] netlink: 'syz.3.4275': attribute type 12 has an invalid length. [ 238.563786][T18363] FAT-fs (loop2): bogus number of FAT sectors [ 238.569985][T18363] FAT-fs (loop2): Can't find a valid FAT filesystem [ 238.602884][T18365] lo speed is unknown, defaulting to 1000 [ 238.656808][T18372] FAULT_INJECTION: forcing a failure. [ 238.656808][T18372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.670084][T18372] CPU: 1 UID: 0 PID: 18372 Comm: syz.3.4282 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.670185][T18372] Tainted: [W]=WARN [ 238.670191][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.670204][T18372] Call Trace: [ 238.670210][T18372] [ 238.670218][T18372] __dump_stack+0x1d/0x30 [ 238.670244][T18372] dump_stack_lvl+0x95/0xd0 [ 238.670294][T18372] dump_stack+0x15/0x1b [ 238.670314][T18372] should_fail_ex+0x263/0x280 [ 238.670377][T18372] should_fail+0xb/0x20 [ 238.670404][T18372] should_fail_usercopy+0x1a/0x20 [ 238.670464][T18372] _copy_from_user+0x1c/0xb0 [ 238.670489][T18372] ___sys_sendmsg+0xc1/0x1e0 [ 238.670646][T18372] __x64_sys_sendmsg+0xd4/0x160 [ 238.670670][T18372] x64_sys_call+0x17ba/0x3000 [ 238.670698][T18372] do_syscall_64+0xc0/0x2a0 [ 238.670733][T18372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.670817][T18372] RIP: 0033:0x7fe679e3aeb9 [ 238.670836][T18372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.670854][T18372] RSP: 002b:00007fe678897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.670873][T18372] RAX: ffffffffffffffda RBX: 00007fe67a0b5fa0 RCX: 00007fe679e3aeb9 [ 238.670887][T18372] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 238.670922][T18372] RBP: 00007fe678897090 R08: 0000000000000000 R09: 0000000000000000 [ 238.670968][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.670981][T18372] R13: 00007fe67a0b6038 R14: 00007fe67a0b5fa0 R15: 00007ffdf8267eb8 [ 238.671003][T18372] [ 238.679146][T18365] lo speed is unknown, defaulting to 1000 [ 238.971799][T18385] netlink: 'syz.2.4287': attribute type 12 has an invalid length. [ 239.696400][T18415] netlink: 'syz.4.4300': attribute type 12 has an invalid length. [ 239.726143][T18422] __nla_validate_parse: 28 callbacks suppressed [ 239.726161][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4302'. [ 239.741643][T18422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4302'. [ 239.877165][T18434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.892142][T18434] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.4305: corrupted xattr entries [ 239.916170][T18434] EXT4-fs (loop4): Remounting filesystem read-only [ 239.944785][T18434] EXT4-fs (loop4): 1 truncate cleaned up [ 239.967299][T18443] netlink: 'syz.0.4308': attribute type 13 has an invalid length. [ 239.979431][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 239.979447][ T29] audit: type=1326 audit(1769440251.515:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.9.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.010293][ T29] audit: type=1326 audit(1769440251.515:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.9.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.033802][ T29] audit: type=1326 audit(1769440251.515:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.9.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.057469][ T29] audit: type=1326 audit(1769440251.515:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.9.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.060089][T18443] netlink: 'syz.0.4308': attribute type 3 has an invalid length. [ 240.080974][ T29] audit: type=1326 audit(1769440251.515:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18445 comm="syz.9.4311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.163646][T14885] IPVS: starting estimator thread 0... [ 240.249921][T18456] IPVS: using max 2400 ests per chain, 120000 per kthread [ 240.310421][T18471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4320'. [ 240.359086][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 240.411785][ T29] audit: type=1326 audit(1769440251.945:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.435328][ T29] audit: type=1326 audit(1769440251.945:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.450174][T18481] set_capacity_and_notify: 14 callbacks suppressed [ 240.450194][T18481] loop3: detected capacity change from 0 to 8192 [ 240.458913][ T29] audit: type=1326 audit(1769440251.945:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.467458][T18484] netlink: 'syz.0.4325': attribute type 4 has an invalid length. [ 240.471723][ T29] audit: type=1326 audit(1769440251.945:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.526333][ T29] audit: type=1326 audit(1769440251.945:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18478 comm="syz.9.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 240.596532][T18483] netlink: 'syz.0.4325': attribute type 4 has an invalid length. [ 240.714814][T18493] loop9: detected capacity change from 0 to 512 [ 240.738473][T18493] ext4: Unknown parameter 'uid<00000000000000000000' [ 240.771782][T18499] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4332'. [ 240.911828][T18503] loop4: detected capacity change from 0 to 128 [ 240.930441][T18503] loop4: detected capacity change from 0 to 512 [ 240.940291][T18503] EXT4-fs: inline encryption not supported [ 240.951525][T18493] : renamed from veth0_to_bond (while UP) [ 241.009048][T18493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18493 comm=syz.9.4328 [ 241.029957][T18503] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 241.041456][T18503] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.051442][T18503] EXT4-fs (loop4): 1 orphan inode deleted [ 241.059281][T12852] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 1 [ 241.138095][T18519] lo speed is unknown, defaulting to 1000 [ 241.184126][T18523] loop2: detected capacity change from 0 to 1024 [ 241.240265][T18523] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.287507][T18522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4339'. [ 241.288465][T18519] lo speed is unknown, defaulting to 1000 [ 241.306978][T18523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 241.331132][T18523] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.4338: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.345500][T18523] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.4338: lblock 0 mapped to illegal pblock 48 (length 1) [ 241.363197][T18523] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4338: Failed to acquire dquot type 0 [ 241.375717][T18523] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 241.385784][T18523] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.4338: mark_inode_dirty error [ 241.397425][T18523] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 241.401049][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4344'. [ 241.408529][T18523] EXT4-fs (loop2): 1 orphan inode deleted [ 241.416642][T18538] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4344'. [ 241.422497][ T3428] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 241.455181][T18540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7699 sclass=netlink_route_socket pid=18540 comm=syz.3.4343 [ 241.455552][ T3428] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 241.552545][T18544] loop9: detected capacity change from 0 to 4096 [ 241.598105][T18519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4338'. [ 241.626637][T18547] loop3: detected capacity change from 0 to 8192 [ 241.674087][T18551] netlink: 10 bytes leftover after parsing attributes in process `syz.9.4347'. [ 241.693155][T14865] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 241.725491][T14865] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 241.788594][T14865] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 241.840063][T18559] loop9: detected capacity change from 0 to 512 [ 241.877144][T18559] EXT4-fs: Ignoring removed nobh option [ 241.903773][T18565] loop3: detected capacity change from 0 to 1024 [ 241.919675][T18565] EXT4-fs: inline encryption not supported [ 241.931320][T18565] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.945683][T18559] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.993513][T18571] lo speed is unknown, defaulting to 1000 [ 242.058182][T18559] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.4350: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 242.078401][T18565] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4353: lblock 2 mapped to illegal pblock 2 (length 1) [ 242.098265][T18574] loop4: detected capacity change from 0 to 4096 [ 242.108826][T18565] EXT4-fs (loop3): Remounting filesystem read-only [ 242.134212][T18565] EXT4-fs (loop3): 1 orphan inode deleted [ 242.222661][T18571] lo speed is unknown, defaulting to 1000 [ 242.308751][T18554] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.4350: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 242.532338][T18619] EXT4-fs: Ignoring removed bh option [ 242.561583][T18619] EXT4-fs: Ignoring removed oldalloc option [ 242.625682][T18619] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.4374: Parent and EA inode have the same ino 15 [ 242.666273][T18619] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.4374: Parent and EA inode have the same ino 15 [ 242.679412][T18619] EXT4-fs (loop2): 1 orphan inode deleted [ 242.755219][T18643] vhci_hcd vhci_hcd.0: default hub control req: 4015 v0003 i0002 l0 [ 242.781594][T18642] lo speed is unknown, defaulting to 1000 [ 242.801478][T18643] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.4374: deleted inode referenced: 15 [ 242.848881][T18650] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.893288][T18642] lo speed is unknown, defaulting to 1000 [ 242.928371][T18661] FAULT_INJECTION: forcing a failure. [ 242.928371][T18661] name failslab, interval 1, probability 0, space 0, times 0 [ 242.941147][T18661] CPU: 1 UID: 0 PID: 18661 Comm: syz.9.4388 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.941182][T18661] Tainted: [W]=WARN [ 242.941190][T18661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.941204][T18661] Call Trace: [ 242.941211][T18661] [ 242.941254][T18661] __dump_stack+0x1d/0x30 [ 242.941281][T18661] dump_stack_lvl+0x95/0xd0 [ 242.941305][T18661] dump_stack+0x15/0x1b [ 242.941391][T18661] should_fail_ex+0x263/0x280 [ 242.941486][T18661] should_failslab+0x8c/0xb0 [ 242.941513][T18661] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 242.941619][T18661] ? __alloc_skb+0x2f0/0x4b0 [ 242.941652][T18661] __alloc_skb+0x2f0/0x4b0 [ 242.941726][T18661] ? __alloc_skb+0x219/0x4b0 [ 242.941828][T18661] netlink_alloc_large_skb+0xbf/0xf0 [ 242.941862][T18661] netlink_sendmsg+0x40c/0x6f0 [ 242.941882][T18661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.941899][T18661] ____sys_sendmsg+0x5af/0x600 [ 242.941929][T18661] ___sys_sendmsg+0x195/0x1e0 [ 242.941961][T18661] __x64_sys_sendmsg+0xd4/0x160 [ 242.941998][T18661] x64_sys_call+0x17ba/0x3000 [ 242.942062][T18661] do_syscall_64+0xc0/0x2a0 [ 242.942093][T18661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.942149][T18661] RIP: 0033:0x7ff7644baeb9 [ 242.942164][T18661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.942181][T18661] RSP: 002b:00007ff762f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.942248][T18661] RAX: ffffffffffffffda RBX: 00007ff764735fa0 RCX: 00007ff7644baeb9 [ 242.942263][T18661] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.942276][T18661] RBP: 00007ff762f17090 R08: 0000000000000000 R09: 0000000000000000 [ 242.942288][T18661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.942300][T18661] R13: 00007ff764736038 R14: 00007ff764735fa0 R15: 00007ffdb5a35668 [ 242.942397][T18661] [ 243.162742][T18663] validate_nla: 1 callbacks suppressed [ 243.162759][T18663] netlink: 'syz.9.4389': attribute type 1 has an invalid length. [ 243.442689][T18696] EXT4-fs: Ignoring removed orlov option [ 243.448481][T18696] EXT4-fs: Ignoring removed i_version option [ 243.454609][T18696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.479295][T18696] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 243.488377][T18696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 243.501587][T18696] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.514533][T18696] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 243.529928][T18696] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 243.530730][T18714] vfat: Unknown parameter 'ÿÿÍV' [ 243.542850][T18696] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4400: bg 0: block 40: padding at end of block bitmap is not set [ 243.567298][T18696] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 243.584231][T18696] EXT4-fs (loop0): 1 truncate cleaned up [ 244.308961][T18822] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 244.365889][T18817] lo speed is unknown, defaulting to 1000 [ 244.503939][T18851] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 244.515525][T18851] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 244.538585][T18851] JBD2: no valid journal superblock found [ 244.544377][T18851] EXT4-fs (loop9): Could not load journal inode [ 244.595437][T18817] lo speed is unknown, defaulting to 1000 [ 244.756665][T18869] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.769186][T18869] EXT4-fs (loop2): 1 truncate cleaned up [ 244.854529][T18874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 244.862934][T18874] System zones: 1-12 [ 244.867161][T18874] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.4423: Directory hole found for htree index block 0 [ 244.881239][T18874] EXT4-fs (loop2): Remounting filesystem read-only [ 244.894080][T18874] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 244.902964][T18874] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 244.927397][T18874] __nla_validate_parse: 20 callbacks suppressed [ 244.927413][T18874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4423'. [ 244.990946][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 244.990962][ T29] audit: type=1326 audit(1769440256.525:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.001553][T14550] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 245.031413][T14550] CPU: 0 UID: 0 PID: 14550 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.031446][T14550] Tainted: [W]=WARN [ 245.031455][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.031532][T14550] Call Trace: [ 245.031538][T14550] [ 245.031545][T14550] __dump_stack+0x1d/0x30 [ 245.031584][T14550] dump_stack_lvl+0x95/0xd0 [ 245.031609][T14550] dump_stack+0x15/0x1b [ 245.031633][T14550] dump_header+0x80/0x240 [ 245.031702][T14550] oom_kill_process+0x295/0x350 [ 245.031786][T14550] out_of_memory+0x97d/0xb80 [ 245.031879][T14550] try_charge_memcg+0x62e/0xa10 [ 245.031961][T14550] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 245.032035][T14550] __read_swap_cache_async+0x17b/0x2d0 [ 245.032074][T14550] swap_cluster_readahead+0x262/0x3c0 [ 245.032110][T14550] swapin_readahead+0xde/0x840 [ 245.032210][T14550] ? __perf_event_task_sched_in+0xa65/0xad0 [ 245.032240][T14550] ? __rcu_read_unlock+0x4e/0x70 [ 245.032333][T14550] ? swap_cache_get_folio+0x26f/0x280 [ 245.032369][T14550] do_swap_page+0x59b/0x2a50 [ 245.032405][T14550] ? finish_task_switch+0x79/0x280 [ 245.032433][T14550] ? __schedule+0x82d/0xc90 [ 245.032496][T14550] ? __rcu_read_lock+0x36/0x50 [ 245.032587][T14550] ? __pfx_default_wake_function+0x10/0x10 [ 245.032674][T14550] handle_mm_fault+0xb40/0x3030 [ 245.032750][T14550] ? vma_start_read+0x1c7/0x2c0 [ 245.032778][T14550] do_user_addr_fault+0x62f/0x1050 [ 245.032846][T14550] exc_page_fault+0x62/0xa0 [ 245.032878][T14550] asm_exc_page_fault+0x26/0x30 [ 245.032897][T14550] RIP: 0033:0x7ff7644760d7 [ 245.032950][T14550] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 245.032971][T14550] RSP: 002b:00007ffdb5a35960 EFLAGS: 00010202 [ 245.032990][T14550] RAX: 0000000000000000 RBX: 0000555584e00500 RCX: 00007ff7644760d7 [ 245.033006][T14550] RDX: 00007ffdb5a359a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.033019][T14550] RBP: 00007ffdb5a35a0c R08: 0000000000000000 R09: 0000000000000000 [ 245.033031][T14550] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 245.033108][T14550] R13: 00000000000927c0 R14: 000000000003bcbc R15: 00007ffdb5a35a60 [ 245.033193][T14550] [ 245.033199][T14550] memory: usage 307200kB, limit 307200kB, failcnt 298 [ 245.052074][ T29] audit: type=1326 audit(1769440256.525:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.058762][T14550] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0 [ 245.062671][ T29] audit: type=1326 audit(1769440256.525:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.065104][T14550] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 245.065118][T14550] Memory cgroup stats for /syz9 [ 245.069420][ T29] audit: type=1326 audit(1769440256.525:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.073957][T14550] : [ 245.078064][ T29] audit: type=1326 audit(1769440256.525:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.102205][T18880] netlink: 'syz.2.4425': attribute type 1 has an invalid length. [ 245.104276][ T29] audit: type=1326 audit(1769440256.525:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.159733][T18881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4425'. [ 245.162345][ T29] audit: type=1400 audit(1769440256.525:8920): avc: denied { append } for pid=18879 comm="syz.2.4425" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 245.317799][T14550] cache 0 [ 245.325030][ T29] audit: type=1326 audit(1769440256.525:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.331585][T14550] rss 12288 [ 245.331594][T14550] shmem 0 [ 245.331601][T14550] mapped_file 0 [ 245.331608][T14550] dirty 0 [ 245.331616][T14550] writeback 0 [ 245.331622][T14550] workingset_refault_anon 34 [ 245.336445][ T29] audit: type=1326 audit(1769440256.525:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.359865][T14550] workingset_refault_file 0 [ 245.359877][T14550] swap 163840 [ 245.359885][T14550] swapcached 24576 [ 245.359894][T14550] pgpgin 36908 [ 245.359902][T14550] pgpgout 36899 [ 245.359910][T14550] pgfault 65831 [ 245.359917][T14550] pgmajfault 9 [ 245.359987][T14550] inactive_anon 12288 [ 245.359996][T14550] active_anon 20480 [ 245.360005][T14550] inactive_file 4096 [ 245.360013][T14550] active_file 0 [ 245.360021][T14550] unevictable 0 [ 245.360030][T14550] hierarchical_memory_limit 314572800 [ 245.360041][T14550] hierarchical_memsw_limit 9223372036854771712 [ 245.360052][T14550] total_cache 0 [ 245.360060][T14550] total_rss 12288 [ 245.360090][T14550] total_shmem 0 [ 245.360099][T14550] total_mapped_file 0 [ 245.360107][T14550] total_dirty 0 [ 245.360114][T14550] total_writeback 0 [ 245.360123][T14550] total_workingset_refault_anon 34 [ 245.360131][T14550] total_workingset_refault_file 0 [ 245.360182][T14550] total_swap 163840 [ 245.360189][T14550] total_swapcached 24576 [ 245.360197][T14550] total_pgpgin 36908 [ 245.360256][T14550] total_pgpgout 36899 [ 245.360263][T14550] total_pgfault 65831 [ 245.360279][T14550] total_pgmajfault 9 [ 245.360288][T14550] total_inactive_anon 12288 [ 245.360297][T14550] total_active_anon 20480 [ 245.360306][T14550] total_inactive_file 4096 [ 245.360314][T14550] total_active_file 0 [ 245.360323][T14550] total_unevictable 0 [ 245.360333][T14550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4424,pid=18875,uid=0 [ 245.360487][T14550] Memory cgroup out of memory: Killed process 18875 (syz.9.4424) total-vm:94132kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 245.568818][T18887] netlink: 348 bytes leftover after parsing attributes in process `syz.9.4427'. [ 245.574067][ T29] audit: type=1326 audit(1769440256.525:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.4425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 245.806808][T18899] lo speed is unknown, defaulting to 1000 [ 245.824481][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 245.833484][T18903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4434'. [ 245.865454][T18899] lo speed is unknown, defaulting to 1000 [ 245.934070][T18904] set_capacity_and_notify: 14 callbacks suppressed [ 245.934088][T18904] loop3: detected capacity change from 0 to 4096 [ 245.993904][T18912] SELinux: failed to load policy [ 246.013662][T18909] loop2: detected capacity change from 0 to 8192 [ 246.025926][T18911] loop9: detected capacity change from 0 to 8192 [ 246.126186][T18916] loop2: detected capacity change from 0 to 512 [ 246.157303][T18916] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.315907][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4444'. [ 246.470631][T14865] EXT4-fs unmount: 95 callbacks suppressed [ 246.470649][T14865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.504328][T18947] loop4: detected capacity change from 0 to 8192 [ 246.574830][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4455'. [ 246.625176][T18961] loop9: detected capacity change from 0 to 128 [ 246.675638][T18968] loop4: detected capacity change from 0 to 128 [ 246.725837][T18968] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.752725][T18968] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.794161][T18971] loop3: detected capacity change from 0 to 8192 [ 246.795453][T18968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.4457: bg 0: bad block bitmap checksum [ 246.852866][T18982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4464'. [ 246.878988][T18968] xt_hashlimit: max too large, truncated to 1048576 [ 246.916420][T11826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.997514][T18990] loop9: detected capacity change from 0 to 8192 [ 247.069806][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4470'. [ 247.078837][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4470'. [ 247.352996][T19003] loop9: detected capacity change from 0 to 512 [ 247.360398][T19003] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 247.365929][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 247.625441][T19011] FAULT_INJECTION: forcing a failure. [ 247.625441][T19011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.638756][T19011] CPU: 0 UID: 0 PID: 19011 Comm: syz.2.4475 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 247.638790][T19011] Tainted: [W]=WARN [ 247.638817][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.638854][T19011] Call Trace: [ 247.638892][T19011] [ 247.638901][T19011] __dump_stack+0x1d/0x30 [ 247.638964][T19011] dump_stack_lvl+0x95/0xd0 [ 247.638986][T19011] dump_stack+0x15/0x1b [ 247.639005][T19011] should_fail_ex+0x263/0x280 [ 247.639127][T19011] should_fail_alloc_page+0xf2/0x100 [ 247.639156][T19011] __alloc_frozen_pages_noprof+0x108/0x350 [ 247.639253][T19011] alloc_pages_mpol+0xb3/0x260 [ 247.639295][T19011] vma_alloc_folio_noprof+0x1a9/0x300 [ 247.639394][T19011] do_wp_page+0xf6d/0x2560 [ 247.639432][T19011] ? css_rstat_updated+0xbb/0x280 [ 247.639457][T19011] ? __rcu_read_lock+0x36/0x50 [ 247.639488][T19011] handle_mm_fault+0x8c7/0x3030 [ 247.639684][T19011] ? vma_start_read+0x1c7/0x2c0 [ 247.639773][T19011] do_user_addr_fault+0x62f/0x1050 [ 247.639802][T19011] ? ksys_mmap_pgoff+0xc1/0x310 [ 247.639831][T19011] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 247.639998][T19011] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 247.640033][T19011] ? irqentry_exit+0x3c/0x510 [ 247.640062][T19011] exc_page_fault+0x62/0xa0 [ 247.640089][T19011] asm_exc_page_fault+0x26/0x30 [ 247.640125][T19011] RIP: 0033:0x7f951e7527e3 [ 247.640143][T19011] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 247.640165][T19011] RSP: 002b:00007f951d2f6470 EFLAGS: 00010206 [ 247.640182][T19011] RAX: 0000000000005400 RBX: 00007f951d2f6530 RCX: 00007f9514ed7000 [ 247.640203][T19011] RDX: 00007f951d2f66d0 RSI: 0000000000000002 RDI: 00007f951d2f65d0 [ 247.640217][T19011] RBP: 00000000000000b4 R08: 0000000000000006 R09: 000000000000000e [ 247.640241][T19011] R10: 0000000000000016 R11: 00007f951d2f6530 R12: 0000000000000001 [ 247.640269][T19011] R13: 00007f951e947900 R14: 000000000000002e R15: 00007f951d2f65d0 [ 247.640287][T19011] [ 247.843091][T19011] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 247.861877][T19011] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 247.918101][T19017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 247.949469][T19017] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.4478: corrupted xattr entries [ 247.983075][T19017] EXT4-fs (loop4): Remounting filesystem read-only [ 247.989774][T19017] EXT4-fs (loop4): 1 truncate cleaned up [ 247.996041][T19017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.022231][T19022] lo speed is unknown, defaulting to 1000 [ 248.048259][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.192244][T19022] lo speed is unknown, defaulting to 1000 [ 248.222156][T19034] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 248.417018][T19042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.681514][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.802189][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.810011][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.817810][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.825593][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.833391][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.841138][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.848866][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.856698][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.864455][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.872222][ T9] hid-generic 0000:FFFFFFFE:0007.0006: unknown main item tag 0x0 [ 248.882137][T19061] tipc: Started in network mode [ 248.886988][T19061] tipc: Node identity , cluster identity 4711 [ 248.893176][T19061] tipc: Failed to obtain node identity [ 248.898626][T19061] tipc: Enabling of bearer rejected, failed to enable media [ 248.939944][ T9] hid-generic 0000:FFFFFFFE:0007.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 248.999857][T19069] lo speed is unknown, defaulting to 1000 [ 249.008882][T19065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.077988][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.095026][T19069] lo speed is unknown, defaulting to 1000 [ 249.324957][T19093] EXT4-fs: Ignoring removed bh option [ 249.373146][T19093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.409565][T19104] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19104 comm=syz.2.4509 [ 249.410384][T19093] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 249.443164][T19101] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 249.452869][T19101] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 249.472437][T19101] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.4508: Invalid inode table block 1 in block_group 0 [ 249.488698][T19101] EXT4-fs (loop0): Remounting filesystem read-only [ 249.495678][T19101] EXT4-fs (loop0): get root inode failed [ 249.501356][T19101] EXT4-fs (loop0): mount failed [ 249.547413][T14550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.595961][T19109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.701750][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.718757][T19128] bond0: left promiscuous mode [ 249.724268][T19128] bond_slave_0: left promiscuous mode [ 249.729940][T19128] bond_slave_1: left promiscuous mode [ 249.740905][T19130] delete_channel: no stack [ 249.765746][T19128] dummy0: left promiscuous mode [ 249.771355][T19128] gretap0: left promiscuous mode [ 249.780568][T19128] ip6gretap0: left promiscuous mode [ 249.804948][T19135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.817984][T19135] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.828963][T19136] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 249.847297][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop2 [ 250.024180][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.036820][T19152] __nla_validate_parse: 6 callbacks suppressed [ 250.036836][T19152] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4523'. [ 250.088092][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4525'. [ 250.228887][T19161] lo speed is unknown, defaulting to 1000 [ 250.264948][T19163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.294681][T19161] lo speed is unknown, defaulting to 1000 [ 250.312456][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.348429][T19172] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4531'. [ 250.374246][T19172] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4531'. [ 250.410499][T19170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.446153][T19182] FAULT_INJECTION: forcing a failure. [ 250.446153][T19182] name failslab, interval 1, probability 0, space 0, times 0 [ 250.458890][T19182] CPU: 0 UID: 0 PID: 19182 Comm: syz.4.4533 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.458988][T19182] Tainted: [W]=WARN [ 250.458995][T19182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.459032][T19182] Call Trace: [ 250.459039][T19182] [ 250.459048][T19182] __dump_stack+0x1d/0x30 [ 250.459075][T19182] dump_stack_lvl+0x95/0xd0 [ 250.459100][T19182] dump_stack+0x15/0x1b [ 250.459122][T19182] should_fail_ex+0x263/0x280 [ 250.459205][T19182] should_failslab+0x8c/0xb0 [ 250.459227][T19182] kmem_cache_alloc_noprof+0x68/0x490 [ 250.459255][T19182] ? getname_flags+0x7f/0x3b0 [ 250.459319][T19182] getname_flags+0x7f/0x3b0 [ 250.459346][T19182] user_path_at+0x28/0x130 [ 250.459373][T19182] __se_sys_mount+0x25b/0x2e0 [ 250.459392][T19182] ? fput+0x8f/0xc0 [ 250.459455][T19182] __x64_sys_mount+0x67/0x80 [ 250.459476][T19182] x64_sys_call+0x2cca/0x3000 [ 250.459583][T19182] do_syscall_64+0xc0/0x2a0 [ 250.459614][T19182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.459638][T19182] RIP: 0033:0x7f993384aeb9 [ 250.459656][T19182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.459677][T19182] RSP: 002b:00007f99322a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.459800][T19182] RAX: ffffffffffffffda RBX: 00007f9933ac5fa0 RCX: 00007f993384aeb9 [ 250.459814][T19182] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 250.459830][T19182] RBP: 00007f99322a7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.459885][T19182] R10: 0000000000800404 R11: 0000000000000246 R12: 0000000000000001 [ 250.459900][T19182] R13: 00007f9933ac6038 R14: 00007f9933ac5fa0 R15: 00007ffdd056b158 [ 250.459921][T19182] [ 250.673141][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 250.673158][ T29] audit: type=1326 audit(1769440262.205:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19186 comm="syz.2.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 250.733776][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.772459][ T29] audit: type=1326 audit(1769440262.245:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19186 comm="syz.2.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 250.796728][ T29] audit: type=1326 audit(1769440262.245:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19186 comm="syz.2.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 250.820959][ T29] audit: type=1326 audit(1769440262.245:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19186 comm="syz.2.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 250.845160][ T29] audit: type=1326 audit(1769440262.245:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19186 comm="syz.2.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951e89aeb9 code=0x7ffc0000 [ 250.887162][T19193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.923476][T12909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.005724][T19198] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4543'. [ 251.015585][T19198] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4543'. [ 251.037658][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4539'. [ 251.093785][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4545'. [ 251.110853][T19208] set_capacity_and_notify: 17 callbacks suppressed [ 251.110868][T19208] loop2: detected capacity change from 0 to 512 [ 251.132396][T19208] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 251.141991][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop2 [ 251.162949][T19218] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4549'. [ 251.172335][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4549'. [ 251.202574][T19220] lo speed is unknown, defaulting to 1000 [ 251.212653][ T29] audit: type=1326 audit(1769440262.745:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.4.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 251.263029][T19224] loop9: detected capacity change from 0 to 4096 [ 251.275233][T19224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.277789][T19225] loop0: detected capacity change from 0 to 4096 [ 251.309488][ T29] audit: type=1326 audit(1769440262.745:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.4.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 251.334441][ T29] audit: type=1326 audit(1769440262.745:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.4.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 251.340464][T19220] lo speed is unknown, defaulting to 1000 [ 251.358555][ T29] audit: type=1326 audit(1769440262.745:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.4.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 251.387797][ T29] audit: type=1326 audit(1769440262.745:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.4.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 251.416883][T14550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.427690][T19225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.472970][T12909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.534096][T19239] loop9: detected capacity change from 0 to 1024 [ 251.542687][T19239] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.553608][T19239] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 251.563473][T19239] JBD2: no valid journal superblock found [ 251.569193][T19239] EXT4-fs (loop9): Could not load journal inode [ 251.746282][T19253] loop2: detected capacity change from 0 to 512 [ 251.760346][T19253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.787648][T19253] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.4560: corrupted xattr entries [ 251.809113][T19266] loop3: detected capacity change from 0 to 128 [ 251.822138][T19266] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 251.849819][T19253] EXT4-fs (loop2): Remounting filesystem read-only [ 251.870725][T19253] EXT4-fs (loop2): 1 truncate cleaned up [ 251.876850][T19253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.893591][T19253] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 251.932976][T19271] loop3: detected capacity change from 0 to 4096 [ 251.964119][T14865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.988404][T19271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.015150][T19268] loop0: detected capacity change from 0 to 8192 [ 252.038627][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.063921][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.083629][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.097105][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.117300][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.120670][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.146542][T19290] lo speed is unknown, defaulting to 1000 [ 252.150995][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.176384][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.196039][T19293] syz_tun: entered allmulticast mode [ 252.206315][T19292] syz_tun: left allmulticast mode [ 252.222110][T19294] loop2: detected capacity change from 0 to 4096 [ 252.238684][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.257205][T19287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19287 comm=syz.9.4566 [ 252.283429][T19294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.312657][T19290] lo speed is unknown, defaulting to 1000 [ 252.319312][T19303] loop3: detected capacity change from 0 to 164 [ 252.337811][T19303] Unable to read rock-ridge attributes [ 252.346309][T19303] Unable to read rock-ridge attributes [ 252.411566][T14865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.491084][T19316] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 252.501775][T19316] SELinux: failed to load policy [ 252.513616][T19318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.563971][T14865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.642993][T19321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.710327][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.738589][T19326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 252.788737][T19328] EXT4-fs: Ignoring removed nobh option [ 252.841926][T19328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.885839][T19328] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.894303][T19340] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 252.904283][T19340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 252.912304][T19340] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.919403][T19340] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.4586: iget: bad i_size value: 12154761577498 [ 252.939045][T19340] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4586: couldn't read orphan inode 13 (err -117) [ 252.957031][T19340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.998772][T19340] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.4586: dx entry: limit 65535 != root limit 120 [ 253.011280][T19340] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4586: Corrupt directory, running e2fsck is recommended [ 253.026757][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.048883][T19350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.111419][T12909] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.122790][T14865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.136906][T19353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.183271][T19363] IPVS: Unknown mcast interface: dvmrp1 [ 253.208632][T19363] 8021q: VLANs not supported on ip_vti0 [ 253.232228][T14550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.260244][T19372] x_tables: duplicate underflow at hook 2 [ 253.370405][T19382] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 253.410698][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 253.497880][T19392] random: crng reseeded on system resumption [ 253.770772][T12909] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 253.781730][T12909] CPU: 1 UID: 0 PID: 12909 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.781767][T12909] Tainted: [W]=WARN [ 253.781775][T12909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.781789][T12909] Call Trace: [ 253.781796][T12909] [ 253.781805][T12909] __dump_stack+0x1d/0x30 [ 253.781876][T12909] dump_stack_lvl+0x95/0xd0 [ 253.781901][T12909] dump_stack+0x15/0x1b [ 253.781924][T12909] dump_header+0x80/0x240 [ 253.781947][T12909] oom_kill_process+0x295/0x350 [ 253.781976][T12909] out_of_memory+0x97d/0xb80 [ 253.782069][T12909] try_charge_memcg+0x62e/0xa10 [ 253.782094][T12909] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 253.782127][T12909] __read_swap_cache_async+0x17b/0x2d0 [ 253.782218][T12909] swap_cluster_readahead+0x262/0x3c0 [ 253.782257][T12909] swapin_readahead+0xde/0x840 [ 253.782419][T12909] ? __perf_event_task_sched_in+0xa65/0xad0 [ 253.782448][T12909] ? __rcu_read_unlock+0x4e/0x70 [ 253.782524][T12909] ? swap_cache_get_folio+0x26f/0x280 [ 253.782621][T12909] do_swap_page+0x59b/0x2a50 [ 253.782656][T12909] ? finish_task_switch+0x79/0x280 [ 253.782689][T12909] ? __schedule+0x82d/0xc90 [ 253.782710][T12909] ? __rcu_read_lock+0x36/0x50 [ 253.782808][T12909] ? __pfx_default_wake_function+0x10/0x10 [ 253.782842][T12909] handle_mm_fault+0xb40/0x3030 [ 253.782921][T12909] ? vma_start_read+0x1c7/0x2c0 [ 253.782948][T12909] do_user_addr_fault+0x62f/0x1050 [ 253.782975][T12909] exc_page_fault+0x62/0xa0 [ 253.782997][T12909] asm_exc_page_fault+0x26/0x30 [ 253.783081][T12909] RIP: 0033:0x7f09b3d660d7 [ 253.783097][T12909] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 253.783118][T12909] RSP: 002b:00007fff266169c0 EFLAGS: 00010202 [ 253.783159][T12909] RAX: 0000000000000000 RBX: 000055555a46a500 RCX: 00007f09b3d660d7 [ 253.783175][T12909] RDX: 00007fff26616a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.783189][T12909] RBP: 00007fff26616a6c R08: 0000000000000000 R09: 0000000000000000 [ 253.783203][T12909] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 253.783218][T12909] R13: 00000000000927c0 R14: 000000000003ddea R15: 00007fff26616ac0 [ 253.783240][T12909] [ 253.783248][T12909] memory: usage 307200kB, limit 307200kB, failcnt 19571 [ 254.022028][T12909] memory+swap: usage 109548kB, limit 9007199254740988kB, failcnt 0 [ 254.029982][T12909] kmem: usage 100540kB, limit 9007199254740988kB, failcnt 0 [ 254.037290][T12909] Memory cgroup stats for /syz0: [ 254.038897][T12909] cache 0 [ 254.047522][T12909] rss 28672 [ 254.050649][T12909] shmem 0 [ 254.053575][T12909] mapped_file 0 [ 254.057102][T12909] dirty 0 [ 254.060778][T12909] writeback 12288 [ 254.064409][T12909] workingset_refault_anon 1625 [ 254.069170][T12909] workingset_refault_file 2394 [ 254.073962][T12909] swap 745472 [ 254.077240][T12909] swapcached 28672 [ 254.081730][T12909] pgpgin 310719 [ 254.085186][T12909] pgpgout 310704 [ 254.088726][T12909] pgfault 290388 [ 254.092310][T12909] pgmajfault 244 [ 254.095894][T12909] inactive_anon 12288 [ 254.100672][T12909] active_anon 24576 [ 254.104519][T12909] inactive_file 24576 [ 254.108593][T12909] active_file 0 [ 254.112072][T12909] unevictable 0 [ 254.115520][T12909] hierarchical_memory_limit 314572800 [ 254.121705][T12909] hierarchical_memsw_limit 9223372036854771712 [ 254.127848][T12909] total_cache 0 [ 254.131356][T12909] total_rss 28672 [ 254.134980][T12909] total_shmem 0 [ 254.138433][T12909] total_mapped_file 0 [ 254.143226][T12909] total_dirty 0 [ 254.146685][T12909] total_writeback 12288 [ 254.150863][T12909] total_workingset_refault_anon 1625 [ 254.156170][T12909] total_workingset_refault_file 2394 [ 254.162120][T12909] total_swap 745472 [ 254.165918][T12909] total_swapcached 28672 [ 254.170247][T12909] total_pgpgin 310719 [ 254.174218][T12909] total_pgpgout 310704 [ 254.178277][T12909] total_pgfault 290388 [ 254.183075][T12909] total_pgmajfault 244 [ 254.187207][T12909] total_inactive_anon 12288 [ 254.191723][T12909] total_active_anon 24576 [ 254.196086][T12909] total_inactive_file 24576 [ 254.201345][T12909] total_active_file 0 [ 254.205394][T12909] total_unevictable 0 [ 254.209367][T12909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4602,pid=19378,uid=0 [ 254.224712][T12909] Memory cgroup out of memory: Killed process 19378 (syz.0.4602) total-vm:94132kB, anon-rss:1208kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 254.259799][T19400] EXT4-fs: Ignoring removed i_version option [ 254.266110][T19400] EXT4-fs: Ignoring removed bh option [ 254.303900][T19403] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 254.314905][T19403] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 254.325925][T19403] JBD2: no valid journal superblock found [ 254.326881][T19400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.331882][T19403] EXT4-fs (loop0): Could not load journal inode [ 254.358208][T19400] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.369588][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.419796][T14550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.462176][T19411] lo speed is unknown, defaulting to 1000 [ 254.546737][T19422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.569008][T19418] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 254.624628][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop3 [ 254.689060][T19411] lo speed is unknown, defaulting to 1000 [ 254.697979][T19434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.736389][T14550] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.950883][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.237333][T19450] __nla_validate_parse: 11 callbacks suppressed [ 255.237354][T19450] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4625'. [ 255.286431][T19440] Set syz1 is full, maxelem 65536 reached [ 255.417717][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'. [ 255.534529][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4632'. [ 255.620788][T19471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.644597][T19471] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.4634: corrupted xattr entries [ 255.666313][T19471] EXT4-fs (loop4): Remounting filesystem read-only [ 255.672957][T19471] EXT4-fs (loop4): 1 truncate cleaned up [ 255.679108][T19471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.696332][T19476] lo speed is unknown, defaulting to 1000 [ 255.705301][T19478] FAULT_INJECTION: forcing a failure. [ 255.705301][T19478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.718592][T19478] CPU: 1 UID: 0 PID: 19478 Comm: syz.0.4629 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.718633][T19478] Tainted: [W]=WARN [ 255.718640][T19478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.718652][T19478] Call Trace: [ 255.718659][T19478] [ 255.718667][T19478] __dump_stack+0x1d/0x30 [ 255.718694][T19478] dump_stack_lvl+0x95/0xd0 [ 255.718720][T19478] dump_stack+0x15/0x1b [ 255.718791][T19478] should_fail_ex+0x263/0x280 [ 255.718823][T19478] should_fail_alloc_page+0xf2/0x100 [ 255.718851][T19478] __alloc_frozen_pages_noprof+0x108/0x350 [ 255.718952][T19478] alloc_pages_mpol+0xb3/0x260 [ 255.718981][T19478] vma_alloc_folio_noprof+0x1a9/0x300 [ 255.719016][T19478] do_wp_page+0xf6d/0x2560 [ 255.719092][T19478] ? css_rstat_updated+0xbb/0x280 [ 255.719122][T19478] ? __rcu_read_lock+0x36/0x50 [ 255.719157][T19478] handle_mm_fault+0x8c7/0x3030 [ 255.719196][T19478] ? vma_start_read+0x1c7/0x2c0 [ 255.719237][T19478] do_user_addr_fault+0x62f/0x1050 [ 255.719343][T19478] ? ksys_mmap_pgoff+0xc1/0x310 [ 255.719370][T19478] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 255.719392][T19478] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 255.719429][T19478] ? irqentry_exit+0x3c/0x510 [ 255.719458][T19478] exc_page_fault+0x62/0xa0 [ 255.719490][T19478] asm_exc_page_fault+0x26/0x30 [ 255.719514][T19478] RIP: 0033:0x7f09b3c62898 [ 255.719595][T19478] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 255.719668][T19478] RSP: 002b:00007f09b2806470 EFLAGS: 00010202 [ 255.719687][T19478] RAX: 000000000000b400 RBX: 00007f09b2806530 RCX: 0000000000000063 [ 255.719743][T19478] RDX: 0000000000002c4e RSI: 0000000000004c4f RDI: 00007f09b28065d0 [ 255.719757][T19478] RBP: 0000000000000064 R08: 00007f09aa3e7000 R09: 0000000000000073 [ 255.719773][T19478] R10: 0000200000001102 R11: 0000000000000305 R12: 0000000000004001 [ 255.719789][T19478] R13: 00007f09b3e57900 R14: 000000000000001c R15: 00007f09b28065d0 [ 255.719810][T19478] [ 255.742365][T19476] lo speed is unknown, defaulting to 1000 [ 255.745879][T19478] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 255.865605][T19476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.893317][T19478] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 256.008461][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.030714][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 256.030731][ T29] audit: type=1400 audit(1769440267.565:9404): avc: denied { write } for pid=19487 comm="syz.0.4641" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 256.030839][T19489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4641'. [ 256.079805][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.104686][T19493] netlink: 'syz.9.4638': attribute type 1 has an invalid length. [ 256.125049][T19493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.160922][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4640'. [ 256.172899][T19508] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4646'. [ 256.182344][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4646'. [ 256.229119][T19514] selinux_netlink_send: 60 callbacks suppressed [ 256.229139][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.260088][T19509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.267328][T19509] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 256.278162][T19486] uprobe: syz.9.4638:19486 failed to unregister, leaking uprobe [ 256.286615][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.300717][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.313355][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.314232][T19509] bond0: (slave gre1): Error -95 calling set_mac_address [ 256.326586][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.350242][T19520] set_capacity_and_notify: 21 callbacks suppressed [ 256.350260][T19520] loop4: detected capacity change from 0 to 764 [ 256.364912][T19520] iso9660: Unknown parameter 'ioNharset' [ 256.374409][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.388570][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.416223][T19511] lo speed is unknown, defaulting to 1000 [ 256.422980][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.455616][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.482425][T19514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19514 comm=syz.3.4639 [ 256.528593][ T29] audit: type=1326 audit(1769440268.055:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.553707][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4651'. [ 256.566821][ T29] audit: type=1326 audit(1769440268.055:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.590286][ T29] audit: type=1326 audit(1769440268.055:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.613998][ T29] audit: type=1326 audit(1769440268.055:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.638108][ T29] audit: type=1326 audit(1769440268.055:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.640505][T19511] lo speed is unknown, defaulting to 1000 [ 256.661735][ T29] audit: type=1326 audit(1769440268.055:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.661777][ T29] audit: type=1326 audit(1769440268.055:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.661877][ T29] audit: type=1326 audit(1769440268.055:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.661906][ T29] audit: type=1326 audit(1769440268.055:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19528 comm="syz.9.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 256.690200][T19535] sctp: [Deprecated]: syz.0.4655 (pid 19535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.690200][T19535] Use struct sctp_sack_info instead [ 256.827060][T19544] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4656'. [ 256.838774][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4657'. [ 256.852165][T19545] loop2: detected capacity change from 0 to 128 [ 256.862592][T19546] bond2 (unregistering): Released all slaves [ 256.905989][T19544] bond2 (unregistering): Released all slaves [ 256.961197][T19558] loop2: detected capacity change from 0 to 764 [ 256.967979][T19558] iso9660: Unknown parameter 'ioNharset' [ 256.988215][T19560] veth6: entered promiscuous mode [ 256.994071][T19560] veth6: entered allmulticast mode [ 257.034244][T19564] delete_channel: no stack [ 257.073976][T19567] lo speed is unknown, defaulting to 1000 [ 257.139709][T19567] lo speed is unknown, defaulting to 1000 [ 257.144630][T19573] loop4: detected capacity change from 0 to 4096 [ 257.154521][T19574] loop3: detected capacity change from 0 to 4096 [ 257.165964][T19574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.179601][T19573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.215733][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.344441][T16161] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.990841][T19601] loop2: detected capacity change from 0 to 8192 [ 258.057950][T19608] delete_channel: no stack [ 258.120888][T19616] lo speed is unknown, defaulting to 1000 [ 258.226529][T19627] loop9: detected capacity change from 0 to 512 [ 258.236907][T19627] EXT4-fs: dax option not supported [ 258.239846][T19616] lo speed is unknown, defaulting to 1000 [ 258.257745][T19624] lo speed is unknown, defaulting to 1000 [ 258.299877][T19629] loop4: detected capacity change from 0 to 4096 [ 258.321274][T19629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.419003][T19624] lo speed is unknown, defaulting to 1000 [ 258.419025][T19631] lo speed is unknown, defaulting to 1000 [ 258.530266][T19631] lo speed is unknown, defaulting to 1000 [ 258.632908][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.649314][T19647] FAULT_INJECTION: forcing a failure. [ 258.649314][T19647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.663148][T19647] CPU: 1 UID: 0 PID: 19647 Comm: syz.0.4698 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 258.663187][T19647] Tainted: [W]=WARN [ 258.663194][T19647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.663206][T19647] Call Trace: [ 258.663213][T19647] [ 258.663220][T19647] __dump_stack+0x1d/0x30 [ 258.663243][T19647] dump_stack_lvl+0x95/0xd0 [ 258.663308][T19647] dump_stack+0x15/0x1b [ 258.663332][T19647] should_fail_ex+0x263/0x280 [ 258.663361][T19647] should_fail+0xb/0x20 [ 258.663393][T19647] should_fail_usercopy+0x1a/0x20 [ 258.663429][T19647] _copy_to_user+0x20/0xa0 [ 258.663452][T19647] simple_read_from_buffer+0xb5/0x130 [ 258.663524][T19647] proc_fail_nth_read+0x10e/0x150 [ 258.663549][T19647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.663579][T19647] vfs_read+0x1ab/0x7f0 [ 258.663603][T19647] ? __rcu_read_unlock+0x4e/0x70 [ 258.663633][T19647] ? __fget_files+0x184/0x1c0 [ 258.663773][T19647] ? mutex_lock+0x57/0x90 [ 258.663860][T19647] ksys_read+0xdc/0x1a0 [ 258.663907][T19647] __x64_sys_read+0x40/0x50 [ 258.663926][T19647] x64_sys_call+0x2889/0x3000 [ 258.663949][T19647] do_syscall_64+0xc0/0x2a0 [ 258.664051][T19647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.664073][T19647] RIP: 0033:0x7f09b3d6b78e [ 258.664089][T19647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.664106][T19647] RSP: 002b:00007f09b2806fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.664125][T19647] RAX: ffffffffffffffda RBX: 00007f09b28076c0 RCX: 00007f09b3d6b78e [ 258.664212][T19647] RDX: 000000000000000f RSI: 00007f09b28070a0 RDI: 0000000000000006 [ 258.664261][T19647] RBP: 00007f09b2807090 R08: 0000000000000000 R09: 0000000000000000 [ 258.664279][T19647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.664294][T19647] R13: 00007f09b4026038 R14: 00007f09b4025fa0 R15: 00007fff266166c8 [ 258.664317][T19647] [ 258.897737][T19648] delete_channel: no stack [ 258.958837][T19655] loop2: detected capacity change from 0 to 1024 [ 258.993674][T19655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.039996][T19655] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 259.063320][T19666] lo speed is unknown, defaulting to 1000 [ 259.102583][T19655] EXT4-fs (loop2): Remounting filesystem read-only [ 259.114278][T19633] vhci_hcd vhci_hcd.1: default hub control req: 5f00 v0000 i0000 l0 [ 259.167942][T19666] lo speed is unknown, defaulting to 1000 [ 259.179307][T14865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.495787][T19687] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 259.508167][T19687] bond2 (unregistering): Released all slaves [ 259.527890][T19691] netlink: 'syz.3.4700': attribute type 8 has an invalid length. [ 259.535761][T19691] netem: change failed [ 259.674541][T19697] loop9: detected capacity change from 0 to 8192 [ 259.810287][T19704] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.825331][T19704] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.839794][T19704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.4705: bg 0: bad block bitmap checksum [ 259.852938][T19704] xt_hashlimit: max too large, truncated to 1048576 [ 259.897774][T16161] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.899190][T19712] lo speed is unknown, defaulting to 1000 [ 259.952009][T19712] lo speed is unknown, defaulting to 1000 [ 259.986673][T19723] lo speed is unknown, defaulting to 1000 [ 260.017420][T19724] delete_channel: no stack [ 260.020177][T19719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.143831][T19723] lo speed is unknown, defaulting to 1000 [ 260.280785][T19745] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 260.291745][T19745] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 260.307819][T19742] __nla_validate_parse: 24 callbacks suppressed [ 260.307834][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4719'. [ 260.330743][T19742] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 260.353232][T14913] udevd[14913]: incorrect ext4 checksum on /dev/loop2 [ 260.361356][T19745] JBD2: no valid journal superblock found [ 260.367105][T19745] EXT4-fs (loop4): Could not load journal inode [ 260.433128][T19748] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4720'. [ 260.444306][T19748] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4720'. [ 260.501111][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4722'. [ 260.601098][T19761] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4724'. [ 260.691638][T19769] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 260.698180][T19769] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.705685][T19769] vhci_hcd vhci_hcd.0: Device attached [ 260.718532][T19769] netlink: 'syz.9.4728': attribute type 1 has an invalid length. [ 260.742888][T19769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.753613][T19775] lo speed is unknown, defaulting to 1000 [ 260.776255][T19769] bond1: (slave gretap1): making interface the new active one [ 260.795467][T19769] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 260.805823][T19775] lo speed is unknown, defaulting to 1000 [ 260.833001][T19782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4732'. [ 260.845890][T19772] vhci_hcd: connection closed [ 260.846258][T11381] vhci_hcd vhci_hcd.9: stop threads [ 260.856258][T11381] vhci_hcd vhci_hcd.9: release socket [ 260.861663][T11381] vhci_hcd vhci_hcd.9: disconnect device [ 260.888017][T19782] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4732'. [ 260.896447][T14887] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 260.965186][T19790] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.092240][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4730'. [ 261.110147][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4741'. [ 261.119116][T19803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4741'. [ 261.183856][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 261.183908][ T29] audit: type=1326 audit(1769440272.715:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.220770][ T29] audit: type=1326 audit(1769440272.755:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.244970][ T29] audit: type=1326 audit(1769440272.755:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.269252][ T29] audit: type=1326 audit(1769440272.755:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.271468][T19801] selinux_netlink_send: 101 callbacks suppressed [ 261.271503][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.293601][ T29] audit: type=1326 audit(1769440272.755:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.293650][ T29] audit: type=1326 audit(1769440272.755:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.293711][ T29] audit: type=1326 audit(1769440272.755:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.328076][ T29] audit: type=1326 audit(1769440272.855:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.353148][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.371584][ T29] audit: type=1326 audit(1769440272.855:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.371617][ T29] audit: type=1326 audit(1769440272.855:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.4.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 261.488098][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.523111][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.540261][T19817] set_capacity_and_notify: 5 callbacks suppressed [ 261.540278][T19817] loop9: detected capacity change from 0 to 256 [ 261.557031][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.571499][T19817] delete_channel: no stack [ 261.571525][T19817] delete_channel: no stack [ 261.572271][T19817] netlink: 'syz.9.4745': attribute type 1 has an invalid length. [ 261.572342][T19818] netlink: 'syz.9.4745': attribute type 1 has an invalid length. [ 261.602212][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.617862][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.621934][T19817] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 261.643544][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.658476][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.674830][T19801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19801 comm=syz.3.4739 [ 261.884670][T19835] loop9: detected capacity change from 0 to 512 [ 261.893430][T19835] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 261.905742][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 262.212287][T19848] lo speed is unknown, defaulting to 1000 [ 262.324985][T19848] lo speed is unknown, defaulting to 1000 [ 262.653269][T19875] loop4: detected capacity change from 0 to 128 [ 262.671425][T19872] lo speed is unknown, defaulting to 1000 [ 262.704472][T19875] loop4: detected capacity change from 0 to 512 [ 262.751400][T19878] loop9: detected capacity change from 0 to 4096 [ 262.824418][T19872] lo speed is unknown, defaulting to 1000 [ 263.030040][T19916] FAULT_INJECTION: forcing a failure. [ 263.030040][T19916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.043149][T19916] CPU: 0 UID: 0 PID: 19916 Comm: syz.9.4769 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 263.043241][T19916] Tainted: [W]=WARN [ 263.043249][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.043263][T19916] Call Trace: [ 263.043271][T19916] [ 263.043280][T19916] __dump_stack+0x1d/0x30 [ 263.043387][T19916] dump_stack_lvl+0x95/0xd0 [ 263.043411][T19916] dump_stack+0x15/0x1b [ 263.043470][T19916] should_fail_ex+0x263/0x280 [ 263.043498][T19916] should_fail+0xb/0x20 [ 263.043524][T19916] should_fail_usercopy+0x1a/0x20 [ 263.043628][T19916] _copy_from_user+0x1c/0xb0 [ 263.043648][T19916] ___sys_sendmsg+0xc1/0x1e0 [ 263.043677][T19916] __x64_sys_sendmsg+0xd4/0x160 [ 263.043703][T19916] x64_sys_call+0x17ba/0x3000 [ 263.043833][T19916] do_syscall_64+0xc0/0x2a0 [ 263.043867][T19916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.043890][T19916] RIP: 0033:0x7ff7644baeb9 [ 263.043908][T19916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.043929][T19916] RSP: 002b:00007ff762f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.043998][T19916] RAX: ffffffffffffffda RBX: 00007ff764735fa0 RCX: 00007ff7644baeb9 [ 263.044015][T19916] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 263.044031][T19916] RBP: 00007ff762f17090 R08: 0000000000000000 R09: 0000000000000000 [ 263.044046][T19916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.044060][T19916] R13: 00007ff764736038 R14: 00007ff764735fa0 R15: 00007ffdb5a35668 [ 263.044090][T19916] [ 263.853281][T20019] loop4: detected capacity change from 0 to 4096 [ 264.235937][T20055] loop4: detected capacity change from 0 to 128 [ 264.271872][T20059] lo speed is unknown, defaulting to 1000 [ 264.311544][T20055] loop4: detected capacity change from 0 to 512 [ 264.320036][T20055] journal_path: Non-blockdev passed as './file0' [ 264.326461][T20055] EXT4-fs: error: could not find journal device path [ 264.414794][T20059] lo speed is unknown, defaulting to 1000 [ 264.907043][T20090] loop9: detected capacity change from 0 to 512 [ 264.922616][T20090] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 264.951088][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 265.124340][T20099] loop3: detected capacity change from 0 to 4096 [ 265.177954][T20109] lo speed is unknown, defaulting to 1000 [ 265.263344][T20109] lo speed is unknown, defaulting to 1000 [ 265.369361][T20126] __nla_validate_parse: 24 callbacks suppressed [ 265.369380][T20126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4815'. [ 265.387743][T20126] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4815'. [ 265.399361][T20125] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.437036][T20135] geneve2: entered promiscuous mode [ 265.448222][T13843] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 44848 - 0 [ 265.453242][T20125] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.4813: bg 0: bad block bitmap checksum [ 265.466653][T13843] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 44848 - 0 [ 265.506920][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4820'. [ 265.524116][T20125] xt_hashlimit: max too large, truncated to 1048576 [ 265.550572][T13843] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 44848 - 0 [ 265.572398][T13843] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 44848 - 0 [ 265.581690][T20143] lo speed is unknown, defaulting to 1000 [ 265.645066][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4821'. [ 265.729015][T20157] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.4827: corrupted in-inode xattr: invalid ea_ino [ 265.744440][T20143] lo speed is unknown, defaulting to 1000 [ 265.756861][T20157] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4827: couldn't read orphan inode 15 (err -117) [ 265.815083][T20164] delete_channel: no stack [ 265.879056][T20171] journal_path: Non-blockdev passed as './file0' [ 265.885660][T20171] EXT4-fs: error: could not find journal device path [ 265.915665][T20174] netlink: 92 bytes leftover after parsing attributes in process `syz.9.4835'. [ 265.951816][T20174] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4835'. [ 265.966244][T20176] iso9660: Unknown parameter 'ioNharset' [ 265.990431][T20180] FAULT_INJECTION: forcing a failure. [ 265.990431][T20180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.004398][T20180] CPU: 1 UID: 0 PID: 20180 Comm: syz.3.4836 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.004525][T20180] Tainted: [W]=WARN [ 266.004593][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.004606][T20180] Call Trace: [ 266.004612][T20180] [ 266.004619][T20180] __dump_stack+0x1d/0x30 [ 266.004646][T20180] dump_stack_lvl+0x95/0xd0 [ 266.004666][T20180] dump_stack+0x15/0x1b [ 266.004684][T20180] should_fail_ex+0x263/0x280 [ 266.004788][T20180] should_fail_alloc_page+0xf2/0x100 [ 266.004811][T20180] __alloc_frozen_pages_noprof+0x108/0x350 [ 266.004850][T20180] alloc_pages_mpol+0xb3/0x260 [ 266.004885][T20180] folio_alloc_mpol_noprof+0x39/0x80 [ 266.004916][T20180] shmem_get_folio_gfp+0x3da/0xd60 [ 266.004995][T20180] ? simple_xattr_get+0xb9/0x120 [ 266.005030][T20180] shmem_write_begin+0xfc/0x1f0 [ 266.005060][T20180] generic_perform_write+0x183/0x490 [ 266.005111][T20180] shmem_file_write_iter+0xc5/0xf0 [ 266.005143][T20180] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 266.005233][T20180] vfs_write+0x5a6/0x9f0 [ 266.005254][T20180] ksys_write+0xdc/0x1a0 [ 266.005273][T20180] __x64_sys_write+0x40/0x50 [ 266.005343][T20180] x64_sys_call+0x2847/0x3000 [ 266.005367][T20180] do_syscall_64+0xc0/0x2a0 [ 266.005456][T20180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.005480][T20180] RIP: 0033:0x7fe679dfb78e [ 266.005498][T20180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.005517][T20180] RSP: 002b:00007fe678896da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.005537][T20180] RAX: ffffffffffffffda RBX: 00007fe6788976c0 RCX: 00007fe679dfb78e [ 266.005551][T20180] RDX: 0000000000010000 RSI: 00007fe670477000 RDI: 0000000000000004 [ 266.005625][T20180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.005641][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 266.005656][T20180] R13: 00007fe678896ee0 R14: 00007fe678896ea0 R15: 00007fe670477000 [ 266.005677][T20180] [ 266.018989][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4837'. [ 266.076661][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4833'. [ 266.109536][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4839'. [ 266.170096][T20185] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 266.183862][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4838'. [ 266.201726][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop4 [ 266.399206][T20205] lo speed is unknown, defaulting to 1000 [ 266.412642][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 266.412658][ T29] audit: type=1326 audit(1769440277.945:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.443255][ T29] audit: type=1326 audit(1769440277.945:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.482468][ T29] audit: type=1326 audit(1769440278.005:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.506553][ T29] audit: type=1326 audit(1769440278.005:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.518786][T20205] lo speed is unknown, defaulting to 1000 [ 266.530937][ T29] audit: type=1326 audit(1769440278.005:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.550316][T20221] iso9660: Unknown parameter 'ioNharset' [ 266.560117][ T29] audit: type=1326 audit(1769440278.015:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.589193][ T29] audit: type=1326 audit(1769440278.015:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.613414][ T29] audit: type=1326 audit(1769440278.015:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.637582][ T29] audit: type=1326 audit(1769440278.015:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.661596][ T29] audit: type=1326 audit(1769440278.015:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.9.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 266.811568][T20239] netlink: 'syz.2.4855': attribute type 1 has an invalid length. [ 266.845162][T20245] selinux_netlink_send: 22 callbacks suppressed [ 266.845196][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 266.856461][T20239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20239 comm=syz.2.4855 [ 266.871165][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 266.901514][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.007551][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.027729][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.056034][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.075509][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.080842][T20260] set_capacity_and_notify: 11 callbacks suppressed [ 267.080914][T20260] loop2: detected capacity change from 0 to 1024 [ 267.091952][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.103738][T20260] EXT4-fs: Ignoring removed orlov option [ 267.120948][T20245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20245 comm=syz.0.4858 [ 267.181511][T20269] loop2: detected capacity change from 0 to 128 [ 267.249001][T20274] loop2: detected capacity change from 0 to 128 [ 267.256614][T20274] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.270483][T20274] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.287945][T14887] hid_parser_main: 76 callbacks suppressed [ 267.287963][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.302262][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.310687][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.318436][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.326263][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.334714][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.340301][T20281] loop9: detected capacity change from 0 to 512 [ 267.342496][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.352025][T20281] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 267.357179][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.374980][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.380943][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 267.382757][T14887] hid-generic 0000:FFFFFFFE:0007.0007: unknown main item tag 0x0 [ 267.395178][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 267.400445][T20279] tipc: Started in network mode [ 267.408668][T20279] tipc: Node identity , cluster identity 4711 [ 267.415584][T20279] tipc: Failed to obtain node identity [ 267.421089][T20279] tipc: Enabling of bearer rejected, failed to enable media [ 267.433864][T14887] hid-generic 0000:FFFFFFFE:0007.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 267.456125][T15293] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.502678][T20289] FAULT_INJECTION: forcing a failure. [ 267.502678][T20289] name failslab, interval 1, probability 0, space 0, times 0 [ 267.515995][T20289] CPU: 1 UID: 0 PID: 20289 Comm: syz.2.4875 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 267.516032][T20289] Tainted: [W]=WARN [ 267.516040][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.516054][T20289] Call Trace: [ 267.516060][T20289] [ 267.516067][T20289] __dump_stack+0x1d/0x30 [ 267.516151][T20289] dump_stack_lvl+0x95/0xd0 [ 267.516175][T20289] dump_stack+0x15/0x1b [ 267.516229][T20289] should_fail_ex+0x263/0x280 [ 267.516258][T20289] should_failslab+0x8c/0xb0 [ 267.516308][T20289] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 267.516338][T20289] ? __alloc_skb+0x2f0/0x4b0 [ 267.516370][T20289] __alloc_skb+0x2f0/0x4b0 [ 267.516401][T20289] ? __alloc_skb+0x219/0x4b0 [ 267.516458][T20289] netlink_alloc_large_skb+0xbf/0xf0 [ 267.516488][T20289] netlink_sendmsg+0x40c/0x6f0 [ 267.516507][T20289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.516563][T20289] ____sys_sendmsg+0x5af/0x600 [ 267.516613][T20289] ___sys_sendmsg+0x195/0x1e0 [ 267.516692][T20289] __x64_sys_sendmsg+0xd4/0x160 [ 267.516717][T20289] x64_sys_call+0x17ba/0x3000 [ 267.516743][T20289] do_syscall_64+0xc0/0x2a0 [ 267.516830][T20289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.516855][T20289] RIP: 0033:0x7f951e89aeb9 [ 267.516917][T20289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.516937][T20289] RSP: 002b:00007f951d2f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.516960][T20289] RAX: ffffffffffffffda RBX: 00007f951eb15fa0 RCX: 00007f951e89aeb9 [ 267.517027][T20289] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 267.517043][T20289] RBP: 00007f951d2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.517058][T20289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.517070][T20289] R13: 00007f951eb16038 R14: 00007f951eb15fa0 R15: 00007ffe038f1b58 [ 267.517090][T20289] [ 267.884609][T20304] lo speed is unknown, defaulting to 1000 [ 267.922462][T20304] lo speed is unknown, defaulting to 1000 [ 267.949723][T20313] netlink: 'syz.0.4883': attribute type 1 has an invalid length. [ 267.973451][T20313] netlink: 'syz.0.4883': attribute type 1 has an invalid length. [ 267.989599][T20317] loop4: detected capacity change from 0 to 764 [ 267.997154][T20317] iso9660: Unknown parameter 'ioNharset' [ 268.273288][T20343] loop9: detected capacity change from 0 to 1024 [ 268.289171][T20343] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 268.300263][T20343] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 268.335674][T20343] JBD2: no valid journal superblock found [ 268.341521][T20343] EXT4-fs (loop9): Could not load journal inode [ 268.580200][T20347] delete_channel: no stack [ 268.772524][T20357] loop2: detected capacity change from 0 to 512 [ 268.779350][T20357] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 268.792369][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop2 [ 268.792529][T20355] loop9: detected capacity change from 0 to 8192 [ 268.928182][T20372] loop4: detected capacity change from 0 to 1024 [ 268.935564][T20372] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.947085][T20372] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 268.956932][T20372] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.964670][T20372] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #3: block 3: comm syz.4.4904: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.980931][T20372] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4904: Failed to acquire dquot type 0 [ 268.992353][T20377] loop3: detected capacity change from 0 to 1024 [ 268.992958][T20372] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 3: comm syz.4.4904: lblock 3 mapped to illegal pblock 3 (length 1) [ 269.006124][T20377] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 269.013259][T20372] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4904: Failed to acquire dquot type 0 [ 269.024140][T20377] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 269.032480][T20377] JBD2: no valid journal superblock found [ 269.035821][T20372] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.4904: Freeing blocks not in datazone - block = 0, count = 4096 [ 269.044949][T20377] EXT4-fs (loop3): Could not load journal inode [ 269.088624][T20372] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 3: comm syz.4.4904: lblock 3 mapped to illegal pblock 3 (length 1) [ 269.111635][T20372] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4904: Failed to acquire dquot type 0 [ 269.143666][T20372] EXT4-fs (loop4): 1 orphan inode deleted [ 269.154186][T20380] delete_channel: no stack [ 270.066815][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 270.075415][T20526] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 270.091307][ T3642] udevd[3642]: incorrect ext4 checksum on /dev/loop9 [ 270.435565][T20590] qrtr: Invalid version 0 [ 270.556482][T20596] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 270.566800][T20596] SELinux: failed to load policy [ 270.583597][T20596] EXT4-fs: inline encryption not supported [ 270.609593][T20596] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 270.617717][T20596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 270.627832][T20596] EXT4-fs (loop4): 1 orphan inode deleted [ 270.633761][T15293] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 270.733883][T20606] lo speed is unknown, defaulting to 1000 [ 270.766872][T20604] __nla_validate_parse: 29 callbacks suppressed [ 270.766902][T20604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4945'. [ 270.816188][T20606] lo speed is unknown, defaulting to 1000 [ 270.844691][T20610] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4947'. [ 270.855921][T20610] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4947'. [ 270.888553][T20608] FAULT_INJECTION: forcing a failure. [ 270.888553][T20608] name failslab, interval 1, probability 0, space 0, times 0 [ 270.901982][T20608] CPU: 1 UID: 0 PID: 20608 Comm: syz.9.4946 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.902138][T20608] Tainted: [W]=WARN [ 270.902165][T20608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.902177][T20608] Call Trace: [ 270.902184][T20608] [ 270.902192][T20608] __dump_stack+0x1d/0x30 [ 270.902216][T20608] dump_stack_lvl+0x95/0xd0 [ 270.902237][T20608] dump_stack+0x15/0x1b [ 270.902255][T20608] should_fail_ex+0x263/0x280 [ 270.902340][T20608] should_failslab+0x8c/0xb0 [ 270.902368][T20608] __kmalloc_noprof+0xb8/0x580 [ 270.902395][T20608] ? iovec_from_user+0x84/0x200 [ 270.902417][T20608] iovec_from_user+0x84/0x200 [ 270.902491][T20608] __import_iovec+0xf3/0x530 [ 270.902546][T20608] import_iovec+0x60/0x80 [ 270.902642][T20608] vfs_writev+0xfb/0x900 [ 270.902762][T20608] __se_sys_pwritev2+0xfc/0x1c0 [ 270.902791][T20608] __x64_sys_pwritev2+0x67/0x80 [ 270.902813][T20608] x64_sys_call+0x2c9e/0x3000 [ 270.902908][T20608] do_syscall_64+0xc0/0x2a0 [ 270.902939][T20608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.902964][T20608] RIP: 0033:0x7ff7644baeb9 [ 270.902979][T20608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.903052][T20608] RSP: 002b:00007ff762ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 270.903074][T20608] RAX: ffffffffffffffda RBX: 00007ff764736090 RCX: 00007ff7644baeb9 [ 270.903141][T20608] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 270.903158][T20608] RBP: 00007ff762ef6090 R08: 0000000000000000 R09: 0000000000000003 [ 270.903172][T20608] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 270.903249][T20608] R13: 00007ff764736128 R14: 00007ff764736090 R15: 00007ffdb5a35668 [ 270.903268][T20608] [ 271.241352][T14887] kernel read not supported for file /vcs (pid: 14887 comm: kworker/1:6) [ 271.340015][T20633] FAULT_INJECTION: forcing a failure. [ 271.340015][T20633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.353237][T20633] CPU: 0 UID: 0 PID: 20633 Comm: syz.0.4956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.353273][T20633] Tainted: [W]=WARN [ 271.353279][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.353291][T20633] Call Trace: [ 271.353297][T20633] [ 271.353304][T20633] __dump_stack+0x1d/0x30 [ 271.353402][T20633] dump_stack_lvl+0x95/0xd0 [ 271.353427][T20633] dump_stack+0x15/0x1b [ 271.353445][T20633] should_fail_ex+0x263/0x280 [ 271.353474][T20633] should_fail+0xb/0x20 [ 271.353580][T20633] should_fail_usercopy+0x1a/0x20 [ 271.353673][T20633] _copy_from_user+0x1c/0xb0 [ 271.353697][T20633] ___sys_sendmsg+0xc1/0x1e0 [ 271.353806][T20633] __x64_sys_sendmsg+0xd4/0x160 [ 271.353833][T20633] x64_sys_call+0x17ba/0x3000 [ 271.353862][T20633] do_syscall_64+0xc0/0x2a0 [ 271.353907][T20633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.353932][T20633] RIP: 0033:0x7f09b3daaeb9 [ 271.353947][T20633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.353975][T20633] RSP: 002b:00007f09b2807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.354046][T20633] RAX: ffffffffffffffda RBX: 00007f09b4025fa0 RCX: 00007f09b3daaeb9 [ 271.354060][T20633] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 271.354074][T20633] RBP: 00007f09b2807090 R08: 0000000000000000 R09: 0000000000000000 [ 271.354090][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.354105][T20633] R13: 00007f09b4026038 R14: 00007f09b4025fa0 R15: 00007fff266166c8 [ 271.354133][T20633] [ 271.396293][T20636] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 271.537476][T20636] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 271.556324][T20639] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4958'. [ 271.569409][T20636] JBD2: no valid journal superblock found [ 271.575194][T20636] EXT4-fs (loop4): Could not load journal inode [ 271.575682][T20642] iso9660: Unknown parameter 'ioNharset' [ 271.698406][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 271.698442][ T29] audit: type=1326 audit(1769440283.225:10526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.743075][ T29] audit: type=1326 audit(1769440283.265:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.767369][ T29] audit: type=1326 audit(1769440283.275:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.791651][ T29] audit: type=1326 audit(1769440283.275:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.815323][ T29] audit: type=1326 audit(1769440283.275:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.839772][ T29] audit: type=1326 audit(1769440283.275:10531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.864026][ T29] audit: type=1326 audit(1769440283.275:10532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.888256][ T29] audit: type=1326 audit(1769440283.275:10533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.911913][ T29] audit: type=1326 audit(1769440283.275:10534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 271.936117][ T29] audit: type=1326 audit(1769440283.275:10535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20647 comm="syz.9.4962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7644baeb9 code=0x7ffc0000 [ 272.001651][T20654] 9p: Bad value for 'rfdno' [ 272.106828][T20660] netlink: 'syz.3.4966': attribute type 2 has an invalid length. [ 272.114657][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4966'. [ 272.174115][T20663] delete_channel: no stack [ 272.232483][T20675] set_capacity_and_notify: 10 callbacks suppressed [ 272.232501][T20675] loop9: detected capacity change from 0 to 512 [ 272.261928][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4974'. [ 272.272200][T20671] loop2: detected capacity change from 0 to 764 [ 272.278848][T20675] journal_path: Non-blockdev passed as './file0' [ 272.282957][T20671] iso9660: Unknown parameter 'ioNharset' [ 272.285439][T20675] EXT4-fs: error: could not find journal device path [ 272.335604][T20669] loop3: detected capacity change from 0 to 8192 [ 272.495400][T20690] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4980'. [ 272.505577][T20690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4980'. [ 272.518705][T20689] loop2: detected capacity change from 0 to 4096 [ 272.533805][T20685] siw: device registration error -23 [ 272.542713][T20691] delete_channel: no stack [ 272.573733][T20694] xt_hashlimit: size too large, truncated to 1048576 [ 272.581199][T20694] xt_hashlimit: max too large, truncated to 1048576 [ 272.620330][T20702] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4986'. [ 272.683528][T20709] loop2: detected capacity change from 0 to 512 [ 272.687349][T20710] loop4: detected capacity change from 0 to 764 [ 272.690376][T20709] journal_path: Lookup failure for './file0' [ 272.702933][T20709] EXT4-fs: error: could not find journal device path [ 272.720661][T20710] iso9660: Unknown parameter 'ioNharset' [ 272.737388][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 272.832251][T20713] loop2: detected capacity change from 0 to 8192 [ 272.906086][T20720] ªªªªªª: renamed from vlan0 (while UP) [ 272.933415][T20724] delete_channel: no stack [ 273.036406][T20728] loop9: detected capacity change from 0 to 512 [ 273.067319][T20728] EXT4-fs (loop9): 1 orphan inode deleted [ 273.102736][T20733] loop3: detected capacity change from 0 to 4096 [ 273.303055][T20745] loop3: detected capacity change from 0 to 764 [ 273.322525][T20745] iso9660: Unknown parameter 'ioNharset' [ 273.615695][T20754] tmpfs: Bad value for 'nr_blocks' [ 273.615729][T20755] delete_channel: no stack [ 273.691463][T20758] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.762400][T20766] selinux_netlink_send: 119 callbacks suppressed [ 273.762452][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.790190][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.808725][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.815204][T20770] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.822650][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.832959][T20770] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 273.842986][T20770] JBD2: no valid journal superblock found [ 273.846827][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.855185][T20770] EXT4-fs (loop3): Could not load journal inode [ 273.883764][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.897114][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.910808][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.924939][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 273.938410][T20766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20766 comm=syz.2.5008 [ 274.663593][T20870] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.5021: bad orphan inode 15 [ 274.693468][T20867] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 274.713057][T14913] udevd[14913]: incorrect ext4 checksum on /dev/loop2 [ 274.838247][T20889] journal_path: Lookup failure for './file0' [ 274.844768][T20889] EXT4-fs: error: could not find journal device path [ 274.942186][T20901] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.011043][T20915] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 275.018524][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 275.278403][T20969] lo speed is unknown, defaulting to 1000 [ 275.369808][T20980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 275.376344][T20980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.384479][T20980] vhci_hcd vhci_hcd.0: Device attached [ 275.398422][T20980] netlink: 'syz.2.5037': attribute type 1 has an invalid length. [ 275.398432][T20969] lo speed is unknown, defaulting to 1000 [ 275.416982][T20981] delete_channel: no stack [ 275.421185][T20980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.432897][T20982] vhci_hcd: connection closed [ 275.433263][ T6777] vhci_hcd vhci_hcd.2: stop threads [ 275.443203][ T6777] vhci_hcd vhci_hcd.2: release socket [ 275.448677][ T6777] vhci_hcd vhci_hcd.2: disconnect device [ 275.463849][T20975] FAULT_INJECTION: forcing a failure. [ 275.463849][T20975] name failslab, interval 1, probability 0, space 0, times 0 [ 275.476538][T20975] CPU: 1 UID: 0 PID: 20975 Comm: syz.3.5032 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.476573][T20975] Tainted: [W]=WARN [ 275.476581][T20975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.476594][T20975] Call Trace: [ 275.476679][T20975] [ 275.476687][T20975] __dump_stack+0x1d/0x30 [ 275.476712][T20975] dump_stack_lvl+0x95/0xd0 [ 275.476810][T20975] dump_stack+0x15/0x1b [ 275.476833][T20975] should_fail_ex+0x263/0x280 [ 275.476869][T20975] should_failslab+0x8c/0xb0 [ 275.476922][T20975] __kmalloc_cache_noprof+0x64/0x4a0 [ 275.477022][T20975] ? __iomap_dio_rw+0x194/0x14c0 [ 275.477044][T20975] __iomap_dio_rw+0x194/0x14c0 [ 275.477063][T20975] ? __brelse+0x32/0x60 [ 275.477100][T20975] iomap_dio_rw+0x40/0x90 [ 275.477125][T20975] ext4_file_write_iter+0xae5/0xf70 [ 275.477188][T20975] do_iter_readv_writev+0x4fd/0x5a0 [ 275.477314][T20975] vfs_writev+0x2e1/0x900 [ 275.477344][T20975] __se_sys_pwritev2+0xfc/0x1c0 [ 275.477366][T20975] __x64_sys_pwritev2+0x67/0x80 [ 275.477392][T20975] x64_sys_call+0x2c9e/0x3000 [ 275.477495][T20975] do_syscall_64+0xc0/0x2a0 [ 275.477570][T20975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.477595][T20975] RIP: 0033:0x7fe679e3aeb9 [ 275.477613][T20975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.477633][T20975] RSP: 002b:00007fe678876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 275.477664][T20975] RAX: ffffffffffffffda RBX: 00007fe67a0b6090 RCX: 00007fe679e3aeb9 [ 275.477681][T20975] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000004 [ 275.477694][T20975] RBP: 00007fe678876090 R08: 0000000000000000 R09: 0000000000000003 [ 275.477708][T20975] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 275.477722][T20975] R13: 00007fe67a0b6128 R14: 00007fe67a0b6090 R15: 00007ffdf8267eb8 [ 275.477743][T20975] [ 275.716074][T20992] 9p: Bad value for 'wfdno' [ 275.724267][T20992] vhci_hcd vhci_hcd.0: default hub control req: 8216 v0000 i0000 l0 [ 275.805403][T21001] __nla_validate_parse: 12 callbacks suppressed [ 275.805419][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5043'. [ 275.896532][T21003] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 275.949490][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5043'. [ 276.022770][T21008] lo speed is unknown, defaulting to 1000 [ 276.070709][T21008] lo speed is unknown, defaulting to 1000 [ 276.109244][T21016] delete_channel: no stack [ 276.158859][T21022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5047'. [ 276.181003][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5050'. [ 276.229277][T21021] lo speed is unknown, defaulting to 1000 [ 276.331585][T21021] lo speed is unknown, defaulting to 1000 [ 276.376973][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5056'. [ 276.585934][T21021] IPVS: Unknown mcast interface: wlan1 [ 276.600498][T21053] FAULT_INJECTION: forcing a failure. [ 276.600498][T21053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.614245][T21053] CPU: 1 UID: 0 PID: 21053 Comm: syz.4.5062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.614310][T21053] Tainted: [W]=WARN [ 276.614317][T21053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.614332][T21053] Call Trace: [ 276.614339][T21053] [ 276.614348][T21053] __dump_stack+0x1d/0x30 [ 276.614375][T21053] dump_stack_lvl+0x95/0xd0 [ 276.614444][T21053] dump_stack+0x15/0x1b [ 276.614467][T21053] should_fail_ex+0x263/0x280 [ 276.614496][T21053] should_fail+0xb/0x20 [ 276.614525][T21053] should_fail_usercopy+0x1a/0x20 [ 276.614615][T21053] _copy_from_iter+0xcf/0xea0 [ 276.614729][T21053] ? __alloc_skb+0x397/0x4b0 [ 276.614757][T21053] ? __alloc_skb+0x219/0x4b0 [ 276.614854][T21053] netlink_sendmsg+0x4ae/0x6f0 [ 276.614877][T21053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.614899][T21053] ____sys_sendmsg+0x5af/0x600 [ 276.614937][T21053] ___sys_sendmsg+0x195/0x1e0 [ 276.615012][T21053] __x64_sys_sendmsg+0xd4/0x160 [ 276.615083][T21053] x64_sys_call+0x17ba/0x3000 [ 276.615106][T21053] do_syscall_64+0xc0/0x2a0 [ 276.615133][T21053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.615186][T21053] RIP: 0033:0x7f993384aeb9 [ 276.615204][T21053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.615252][T21053] RSP: 002b:00007f99322a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.615296][T21053] RAX: ffffffffffffffda RBX: 00007f9933ac5fa0 RCX: 00007f993384aeb9 [ 276.615310][T21053] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 276.615324][T21053] RBP: 00007f99322a7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.615378][T21053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.615391][T21053] R13: 00007f9933ac6038 R14: 00007f9933ac5fa0 R15: 00007ffdd056b158 [ 276.615409][T21053] [ 276.885747][T21058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5064'. [ 276.951423][T21058] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5064'. [ 277.244069][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 277.244084][ T29] audit: type=1326 audit(1769440288.775:11219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 277.251892][T21079] set_capacity_and_notify: 14 callbacks suppressed [ 277.251908][T21079] loop4: detected capacity change from 0 to 512 [ 277.276397][ T29] audit: type=1326 audit(1769440288.775:11220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 277.311344][ T29] audit: type=1326 audit(1769440288.775:11221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 277.335266][ T29] audit: type=1326 audit(1769440288.775:11222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f993380b78e code=0x7ffc0000 [ 277.359093][ T29] audit: type=1326 audit(1769440288.775:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f993384c1d7 code=0x7ffc0000 [ 277.382743][ T29] audit: type=1326 audit(1769440288.775:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 277.406466][ T29] audit: type=1326 audit(1769440288.775:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f993384c1d7 code=0x7ffc0000 [ 277.430042][ T29] audit: type=1326 audit(1769440288.775:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f993380b78e code=0x7ffc0000 [ 277.453505][ T29] audit: type=1326 audit(1769440288.775:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 277.453732][T21084] loop9: detected capacity change from 0 to 512 [ 277.477074][ T29] audit: type=1326 audit(1769440288.775:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.4.5073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f993384aeb9 code=0x7ffc0000 [ 277.516757][T21079] EXT4-fs error (device loop4): __ext4_iget:5426: inode #2: block 3: comm syz.4.5073: invalid block [ 277.533313][T14913] udevd[14913]: incorrect ext4 checksum on /dev/loop9 [ 277.555375][T21084] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 277.567081][T21079] EXT4-fs (loop4): get root inode failed [ 277.572847][T21079] EXT4-fs (loop4): mount failed [ 277.607106][T21079] loop4: detected capacity change from 0 to 764 [ 277.620644][T21079] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 277.631400][T21079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5073'. [ 277.640505][T21079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5073'. [ 277.775414][T21098] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5078'. [ 277.908981][T21102] loop4: detected capacity change from 0 to 512 [ 277.931181][T21106] lo speed is unknown, defaulting to 1000 [ 277.932453][T21102] EXT4-fs mount: 49 callbacks suppressed [ 277.932468][T21102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.955729][T21102] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.977259][T21106] lo speed is unknown, defaulting to 1000 [ 278.058958][T21114] loop3: detected capacity change from 0 to 8192 [ 278.106807][T11826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.129349][T11826] ================================================================== [ 278.137453][T11826] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 278.145119][T11826] [ 278.147424][T11826] read-write to 0xffff888237d26468 of 1 bytes by task 21116 on cpu 1: [ 278.155565][T11826] folio_add_lru+0xa4/0x1e0 [ 278.160063][T11826] folio_add_lru_vma+0x49/0x70 [ 278.164835][T11826] do_wp_page+0x15be/0x2560 [ 278.169338][T11826] handle_mm_fault+0x8c7/0x3030 [ 278.174184][T11826] do_user_addr_fault+0x62f/0x1050 [ 278.179287][T11826] exc_page_fault+0x62/0xa0 [ 278.183781][T11826] asm_exc_page_fault+0x26/0x30 [ 278.188617][T11826] [ 278.190926][T11826] read to 0xffff888237d26468 of 1 bytes by task 11826 on cpu 0: [ 278.198536][T11826] __lru_add_drain_all+0x17e/0x450 [ 278.203640][T11826] lru_add_drain_all+0x10/0x20 [ 278.208399][T11826] invalidate_bdev+0x47/0x70 [ 278.212982][T11826] ext4_put_super+0x624/0x7d0 [ 278.217647][T11826] generic_shutdown_super+0xe6/0x210 [ 278.222925][T11826] kill_block_super+0x2a/0x70 [ 278.227586][T11826] ext4_kill_sb+0x42/0x80 [ 278.231913][T11826] deactivate_locked_super+0x75/0x1c0 [ 278.237279][T11826] deactivate_super+0x97/0xa0 [ 278.241951][T11826] cleanup_mnt+0x2bb/0x330 [ 278.246358][T11826] __cleanup_mnt+0x19/0x20 [ 278.250763][T11826] task_work_run+0x130/0x1a0 [ 278.255342][T11826] exit_to_user_mode_loop+0x1f7/0x6f0 [ 278.260719][T11826] do_syscall_64+0x1d3/0x2a0 [ 278.265303][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.271189][T11826] [ 278.273496][T11826] value changed: 0x0b -> 0x0c [ 278.278151][T11826] [ 278.280454][T11826] Reported by Kernel Concurrency Sanitizer on: [ 278.286589][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.298119][T11826] Tainted: [W]=WARN [ 278.301904][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.311953][T11826] ================================================================== [ 278.474310][T21120] loop4: detected capacity change from 0 to 8192 [ 285.081744][T15293] team0: left allmulticast mode [ 285.086671][T15293] team_slave_0: left allmulticast mode [ 285.092625][T15293] team_slave_1: left allmulticast mode [ 285.098075][T15293] geneve1: left allmulticast mode [ 285.103122][T15293] team0: left promiscuous mode [ 285.107905][T15293] team_slave_0: left promiscuous mode [ 285.113808][T15293] team_slave_1: left promiscuous mode [ 285.119289][T15293] geneve1: left promiscuous mode [ 285.124399][T15293] bridge0: port 4(team0) entered disabled state [ 285.131685][T15293] bridge_slave_1: left allmulticast mode [ 285.137307][T15293] bridge_slave_1: left promiscuous mode [ 285.143088][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.151637][T15293] bridge_slave_0: left allmulticast mode [ 285.157292][T15293] bridge_slave_0: left promiscuous mode [ 285.163038][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.195521][T15293] bond2 (unregistering): (slave gretap1): Releasing active interface [ 285.206849][T15293] bond3 (unregistering): (slave geneve2): Releasing active interface [ 285.218737][T15293] team0: Port device geneve1 removed [ 285.261879][T15293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.271309][T15293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.280842][T15293] bond0 (unregistering): Released all slaves [ 285.288355][T15293] bond1 (unregistering): (slave veth5): Releasing active interface [ 285.297083][T15293] bond1 (unregistering): Released all slaves [ 285.305802][T15293] bond2 (unregistering): Released all slaves [ 285.315523][T15293] bond3 (unregistering): Released all slaves [ 285.323852][T15293] bond4 (unregistering): Released all slaves [ 285.332262][T15293] bond5 (unregistering): Released all slaves [ 285.437544][T15293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.444982][T15293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.452499][T15293] batman_adv: batadv0: Interface deactivated: dummy0 [ 285.459234][T15293] batman_adv: batadv0: Removing interface: dummy0 [ 285.496303][T15293] team0 (unregistering): Port device team_slave_1 removed [ 285.505977][T15293] team0 (unregistering): Port device team_slave_0 removed [ 285.723028][T15293] IPVS: stop unused estimator thread 0...