last executing test programs: 57.96928902s ago: executing program 1 (id=19): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000140)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) setuid(0xee00) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x0) faccessat2(r6, &(0x7f0000000040)='./file0\x00', 0x180, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 57.800259615s ago: executing program 1 (id=20): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000000)='veth1_to_team\x00') sendmmsg$inet_sctp(r4, &(0x7f0000000600)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000840000479998ee6d1bf69f0004000000180000000000000084000000000000009d5b250009260a0018000000000000008400000007000000640101010000000030000000000000008400000001000000050081000a0000000100000015260000000200000500000002000000", @ANYRES16=r4, @ANYBLOB=' '], 0x98, 0x4004011}], 0x1, 0x0) 56.922889771s ago: executing program 1 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}}, 0x1c}}, 0x40000) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1208490, &(0x7f0000000a40), 0x4, 0x4f7, &(0x7f0000000f80)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000080)={[{@subsystem='cpu'}, {@noprefix}, {@cpuset_v2_mode}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x18000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) 53.564182735s ago: executing program 1 (id=32): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000040)={[{@quota}, {@noblock_validity}, {@abort}, {@nojournal_checksum}, {@abort}, {@i_version}]}, 0x1, 0x797, &(0x7f00000007c0)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x4a, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r6, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x16, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x6, 0xffff, @loopback, 0x9}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004030000010400"/180], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb0800", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1, 0x0, 0x40}}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000100)={[0x2000000000000]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) 52.847296567s ago: executing program 1 (id=36): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001980), 0x101002, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000002c0)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}, {@appraise_type}, {@uid_lt}, {@fowner_lt}]}, 0x1, 0x4ee, &(0x7f0000001100)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x80, &(0x7f0000000280)=0x0) io_submit(r2, 0x0, &(0x7f00000002c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x100003) getpriority(0x1, 0xffffffffffffffff) 50.86411311s ago: executing program 1 (id=41): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0xb}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6444b163a5566dcf32b273ca44a49a9c5", 0x47, 0x200080c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r10, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r10, &(0x7f0000001200)=""/244, 0xfffffc9c) 50.786024687s ago: executing program 32 (id=41): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0xb}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6444b163a5566dcf32b273ca44a49a9c5", 0x47, 0x200080c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r10, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r10, &(0x7f0000001200)=""/244, 0xfffffc9c) 36.352272337s ago: executing program 4 (id=82): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x90) 35.591583243s ago: executing program 4 (id=84): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0x102, 0x4, 0x9, 0x81, 0xa, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000020601080023000000000000d5d66b0000000409000200310000000705000400683a6e65742c6e6574000000000500010006000000000000"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000004900c86e603000000000091b9bf000000314dc8bf7d01"], 0x14}, 0x1, 0x1000000, 0x0, 0x4004801}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x20000060) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1590, 0x7, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000110}, 0x20000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x509040, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x40c5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 33.784120771s ago: executing program 4 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000080)=[{r1, 0x13}, {r1, 0x1}], 0x15, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xa) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0xffffffffffffff6d, 0x3, 'geneve0\x00'}, @IFLA_VFINFO_LIST={0x20}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES32], 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001a000104000000000000000002202000ff00000a0002000005001b000600000008000300", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xea5bc50b6199d77e) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r10, @ANYBLOB="400125bd70000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ptrace(0x4207, 0xffffffffffffffff) fsopen(&(0x7f0000000000)='ext2\x00', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r6, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r11}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "930dd2dc40dcf9393cfd87835c50b840e863dc622cb63413"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 33.10407398s ago: executing program 4 (id=98): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b701000000000000850000000c000000b707000200000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaa18aab8aabb8100240086dd6d002000001011ff00000000000000000000ffff0a010102ff0200000000000000000000000000014f194e2000109078c243000100000000"], 0x4e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xa}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}]}, 0x38}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110800", @ANYRES32=r4, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) 31.645288738s ago: executing program 4 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'bridge_slave_1\x00', {0x2, 0x1, @loopback=0x7f000018}}) 30.026153359s ago: executing program 4 (id=113): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001980), 0x101002, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000002c0)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}, {@appraise_type}, {@uid_lt}, {@fowner_lt}]}, 0x1, 0x4ee, &(0x7f0000001100)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvbRCpFUSfCmp9jzHZhJBNNmQ3tQlFU/wAgogKPvnki+AHEKQfQYSCvosWRbTVBx+0Izs7sW26m6Qkzaab3w9O95w5s/M/Z5o9s7NzmAngzHo3Iq5HxFBEvBcR5WJ5WqTZIrXXe/Twznw7JZFlN/+eRFIs291WuzwcERciYiciRiLiG1+N+HbyfNzm1vbKXL1e2yjK1dbqerW5tX1leXVuqbZUW5uenvpw5urMBzOTWeFI/bwYEde+/ODHP/jFV6795rPf+ePsXy9/t92sL3y80+6ImD9SgB462y7l+2JXex9tvIxgfTBU9KfU74YAAHAo4xFxKSI+lX//L8dQ/m0OAAAAGCTZF0fjP0lEBgAAAAysNCJGI0krxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcW2nURY1FKF5frtclirvBYlJJ2eSrPPym/v6c8HRFvRsSPyufycmW+UV/o948fAAAAcEZceOfZ8/9/ldM8DwAAAAyYsZ4FAAAAYFA45QcAAIDB5/wfAAAABtrXbtxop2z3Od4Lt7Y2Vxq3rizUmiuV1c35ynxjY72y1Ggs5ffsWz1oe/VGY/1zsbZ5u9qqNVvV5tb27Gpjc601u/zMI7ABAACAE/TmO/f+kETEzufP5SmK+wDuNXTiLQNOlT/3uwHAcXJch7NruN8NAPqmdOAaRggYdMkB9T0n7/z2+NsCAAC8HBOfeP76/2tF3cG/DQCvsm5zfQCAwebqHpxdJTMA4cwb77y83qv+6Nf/s+yFGwUAAByr0TwlaaW4FjgaaVqpRLyRPxaglCwu12uTEfGRiPh9ufR6uzyVvzM5cM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlk3SRdlwIAAACvoIj0L0l+N/+IifL46N7fB15L/l2OB0XhZzd/cnuu1dqYai//Rzmvj4jWT4vl72ceCQAAAACnQOc8vXid6ndrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg0jx7emd9NJxn3b1+KiLFu8YdjJH8diVJEnP9nEsNPvS+JiKFjiL9zNyLe6hY/icdZlo0VregW/9xLjj+W75ru8dOIuHAM8eEsu9cef653+/yl8W7+2v3zN1yko+o9/qX/H/+Geow/bxwyxsX7v6r2jH834uJw9/FnN37SI/6lQ8b/1je3t3vVZT+PmOh6/EmeiVVtra5Xm1vbV5ZX55ZqS7W16empD2euznwwM1ldXK7Xin+7xvjhJ3/9eL/+n+8Rf+yA/o8fsv//vX/74Uc72VK3+JcvdT/+vtUjfloc+z5d5Nv1E7v5nU7+aW//8ndv79f/hR79P+j///Ih+//e17//p0OuCgCcgObW9spcvV7b2Cczcoh1ZF4kUzodzThFmex7nb/Ho23niG9/LpP1e7f0MdPvkQkAADhuT77097slAAAAAAAAAAAAAAAAAAAAcHadxO3E9sbc6U9XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29b8AAAD//3iP3Ow=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x80, &(0x7f0000000280)=0x0) io_submit(r2, 0x0, &(0x7f00000002c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x100003) getpriority(0x1, 0xffffffffffffffff) 29.962533705s ago: executing program 33 (id=113): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001980), 0x101002, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000002c0)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}, {@appraise_type}, {@uid_lt}, {@fowner_lt}]}, 0x1, 0x4ee, &(0x7f0000001100)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x80, &(0x7f0000000280)=0x0) io_submit(r2, 0x0, &(0x7f00000002c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x100003) getpriority(0x1, 0xffffffffffffffff) 2.923951695s ago: executing program 5 (id=441): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0xfffffffffffffcab, 0x3f) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x9, 0xfffffffffffffea9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x300}]}}}], 0x18}, 0x0) r6 = epoll_create(0x60d6) close_range(r6, 0xffffffffffffffff, 0x2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r6, &(0x7f0000001380)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0xb57, 0x7ff, 0xc) socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x1, 0x1be, &(0x7f0000000440)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write(r7, &(0x7f0000000040)="29000000140005b7ff000051915f95eb01010003a606a40e07fff00900000000000000000040000000", 0x29) io_setup(0xd, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x3f, 0x2, 0x201, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 2.702513374s ago: executing program 5 (id=443): r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) fcntl$lock(r0, 0x5, &(0x7f0000000340)={0x0, 0x1, 0x2, 0x2000000}) 2.622444241s ago: executing program 5 (id=445): prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0xffffffff}, &(0x7f00000002c0)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1, 0x2002, 0x6, 0x0, 0x1, 0xcaff}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) bind$x25(r1, &(0x7f0000000780)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0xfffffe96) bind$x25(r0, &(0x7f0000000080), 0x12) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x700000, 0x136}, 0x0, 0x10000, 0x8, 0x7, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r6, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) getrlimit(0x4, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000001240)='./file0\x00', 0x281d061, &(0x7f0000000180)=ANY=[], 0xfe, 0x123f, &(0x7f00000024c0)="$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") getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000180)=""/53, &(0x7f00000001c0)=0x35) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r7, r7, 0x0, 0xe3aa6ea) 2.500235411s ago: executing program 3 (id=449): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x59a8, &(0x7f0000000880)={0x0, 0x80be, 0x1000, 0x8000, 0x410252}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304ffff00000000000000082190909e3ae477a2eccf6fdbee85c3ad15c57f9cfcc504f055ec2991fe3ab133aee84a8934bde2e6b14e2a3063e924a1d5e53e77ffd15a23c4cfbb2ab1ea628f5b49aeea15d73f7588f0a533cb", @ANYRES32=0x0, @ANYBLOB="00000000010000002400128009000100766c616e000000001400028006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB], 0x4c}}, 0x8000) 2.445469686s ago: executing program 5 (id=451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000003f40000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020600) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bind$tipc(r1, 0x0, 0x0) 2.320264007s ago: executing program 5 (id=452): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1200000007000000080000000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fa6310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.302996079s ago: executing program 6 (id=453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) (fail_nth: 2) 2.28721128s ago: executing program 3 (id=454): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0xb, 0x23f, &(0x7f0000000f80)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3dc38396}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8608119827c186dd60a2bf00001c3a41fc020000000000000000000000000000ff020000000000000000000000200001820090780000fcfffe8000000000000000000000000000aa"], 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000a40)='./bus/file0\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 2.204514758s ago: executing program 5 (id=455): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r5, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.197505008s ago: executing program 3 (id=457): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc861}, 0x40008c0) (fail_nth: 4) 1.860644137s ago: executing program 3 (id=459): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) (async, rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 64) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async, rerun: 32) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async, rerun: 32) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7ffb, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x625, 0x4c1, 0xc1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84081, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x10004, 0x5ee, 0x8, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x4000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) (async, rerun: 32) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async) socket(0x26, 0xa, 0x8) 1.83429537s ago: executing program 0 (id=460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x26) pwritev2(r2, 0x0, 0x0, 0x7ff, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0xd8) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000080000000000000000000c0a010100000000000000000a0000060900020073797a31000001000900010073797a310000000014100000800c00018006000100d1030000140000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYRES32=r1], 0x1e0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x2d, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0), 0x4) unshare(0x400) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000300)=0xfffffec1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r9, 0x7f}, &(0x7f0000000080)=0x8) 1.772272955s ago: executing program 6 (id=461): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = syz_io_uring_setup(0x4799, &(0x7f0000000100)={0x0, 0x4, 0x100, 0x0, 0x217}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399, 0x0, r0}) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x7, 0x0, 0x40, 0x2, 0x0, 0x5, 0x48020, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x88, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x4, 0x5, 0xff, 0x480, 0x1000, 0x0, 0x3ff, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.646935646s ago: executing program 6 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x1, 0x4, 0x1, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x3}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x8000) 1.60904894s ago: executing program 3 (id=463): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d00000000fdffffff0100000009"], &(0x7f0000001f00)=""/4096, 0x3e, 0x1000, 0x1}, 0x28) ioctl$RTC_AIE_OFF(r0, 0x7002) 1.408049907s ago: executing program 3 (id=464): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0xb}, 0x20) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000180)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6444b163a5566dcf32b273ca44a49a9c5", 0x47, 0x200080c7, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r12, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r12, &(0x7f0000001200)=""/244, 0xfffffc9c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff1372}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func, @jmp={0x5, 0x0, 0xb, 0x0, 0xb, 0x10, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x80000001, 0x1000, &(0x7f0000000940)=""/4096, 0x41100, 0x10, '\x00', r11, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x6, 0xd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000003c0)=[r12], &(0x7f0000000400)=[{0x4, 0x3, 0x0, 0xb}, {0x1, 0x5, 0x1, 0xc}, {0x3, 0x4}, {0x2, 0x3, 0xd, 0x3}], 0x10, 0x1d88}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) 1.136308051s ago: executing program 6 (id=467): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0x19}], 0x1, 0x33, 0xf5) 1.112063362s ago: executing program 6 (id=468): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000100)=""/14, 0xe}], 0x4, 0x4, 0xfffff001, 0x1) unshare(0x20000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x22020600) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) statx(0xffffffffffffffff, 0x0, 0x200, 0x800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x66200, 0x99) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20040, 0x0) pread64(r3, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0xb4, @loopback}}}, 0x32) 948.176307ms ago: executing program 0 (id=471): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE_CONST_STR(0x1800000000000000, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x57, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3}, 0x50) 924.172279ms ago: executing program 0 (id=472): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sockfs\x00', 0x8, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) unshare(0x8000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) mlockall(0x3) r8 = syz_open_procfs(0x0, 0x0) preadv(r8, &(0x7f00000011c0), 0x0, 0x200000, 0x9) r9 = semget(0x3, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) semtimedop(r9, &(0x7f0000000000)=[{0x0, 0x949, 0x959905a9c6751973}], 0x1, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000040)=[0x2]) unshare(0x60040000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b00010062726964676500001400028005000700060000000500290001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 684.29066ms ago: executing program 2 (id=474): r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0) fgetxattr(r1, &(0x7f0000009880)=@known='security.selinux\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40, @empty}, 0x1c) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfdff}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 621.016396ms ago: executing program 2 (id=475): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 254.039407ms ago: executing program 6 (id=476): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x7, 0x1, 0xfffffffd, 0xc2ce, 0xfd, "00000816000001f6150000160200", 0x248000, 0x1fd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x5, 0xc8b, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "c7fa05f3c5ef1c29f2dd62a447e01a96fac6eb30fdb06d2796cb5cfb5b8fca1474c4b1680b7aba8f2521309e74527993d689ac354dded0e54d54e2ca6edae1bc"}}, 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40080) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="011a0406000000000010"], 0xa) sendfile(r5, r0, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x80047210, 0x0) linkat(r6, &(0x7f00000000c0)='./bus\x00', r0, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 253.616708ms ago: executing program 2 (id=486): r0 = socket(0xa, 0x5, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)}], 0x1) 228.53681ms ago: executing program 0 (id=477): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0xfffffff5}, 0x10) 210.261171ms ago: executing program 2 (id=478): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x8000000000000001, 0x40, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x2c020400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24000806) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000f20010238f1581d7e28e1ba2e77f4bc5d14755", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x424e00, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x200005, 0x0) recvmsg$kcm(r5, 0x0, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x3d, &(0x7f0000000300)=[{&(0x7f0000000b00)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 110.90735ms ago: executing program 0 (id=479): socket(0x2a, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x3, 0x0, 0x0, 0x40040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_config_ext={0x1000, 0x2}, 0xc00, 0x3ffffffc, 0x0, 0x8, 0x103fb, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x400000000000009}, 0x0, 0xf, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone3(&(0x7f0000007040)={0x400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) 99.242021ms ago: executing program 2 (id=480): openat$dir(0xffffffffffffff9c, 0x0, 0xc08900, 0x284) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x700}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}}, @IFLA_GRE_OKEY={0x8, 0x5, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffdf}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a3100000000080002400000000304000600140000001100", @ANYRES64=r2], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f80)={0x24, 0xd, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 62.082634ms ago: executing program 0 (id=481): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x4010004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000001240)='./file0\x00', 0x14001, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x1236, &(0x7f00000024c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x2000000000003]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r9, 0x8931, &(0x7f0000000080)={'netdevsim0\x00', @ifru_mtu=0x3}) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) unshare(0x6020480) r12 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xf447) 0s ago: executing program 2 (id=482): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000002000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffd30, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001f80)={{r2, &(0x7f0000000280)='\x00', 0x200001, &(0x7f00000002c0)={@_ha_fsid={[0xf0, 0x1]}, {0x9, 0x1, 0x0, 0x7}}, 0x7fffffff, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}, 0x8, &(0x7f0000001e80)=[{0x1, 0x5, &(0x7f00000003c0)='\x00', &(0x7f0000000a40)="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", 0x1000, 0x20}, {0x0, 0x6, &(0x7f0000000400)='rfdno', &(0x7f0000000440)="da8877e9863fdc9bd47860ca66cb0f6d94a214d7fb303fe82114296bd4cedb39e68fea48f8763ac973a1d4b8fdef1542f0b5db6e94fc08b373fd2586c3a3384bd1b079a39f6ff6b11211d77dab915e903076157616810f15028ca5ceb67e18d74049bb0a293e2940652a2444b19351e1ba956e41dafb826929d5d639b5c8e95f55122746a54011ab57ab2e8845ed430c54dca3f0185bd48726eb13b80bcc733687aad97d0315a88b5977922f83993be1722416ffec2f10782e7ef5f5ac5b1cc28fe692e68a5f486a1c5eec724874a11ed43c968445330c88c919ed1274385a09229a149a663e36e60fc42f0e3e32080372", 0xf1, 0x8}, {0x3, 0x818, &(0x7f0000000540)='security.capability\x00', &(0x7f00000005c0)="903c4195d594a26fa27e2d9b1d00751d190e0f01c735fd52d1d8509f1fa9eb2f79c0beec052f3c6ce0c49a2cfdcc413e48dc4bd0a49b6199577e1fe840527214302c568143349cc468d8a382a12c0af13694429df5d0cfcf4d4976300086444b0af84b0a84334dc03f1b7b11099bd5472c35e48b352b916657c8963bb59f9c72699a996997678a5c7ed3f8961770ab7cdca84e956e2906acb3e303994e753b0824115c11f6bec38e6679b8ff399eae525d6ed21cf3efb7b93f91d7b4a114a4912419dfb82543f5789b5a206cdaa712cd9a1e87f548bb8ba6f1049cf21897838eb856841746e8943bcca3a46a91", 0xed, 0x22}, {0x1, 0x6, &(0x7f00000006c0)='\x00', &(0x7f0000001a40)="6be8d2c9f5021ebf7db7598ef8e645ab526aae4475321f22e61dd7cdf57f3cb285e8f61ee9b64cbf7afb424745da56c823be1bc7c0c5d10f81373511b74886b450bf06b6450451b2831dbdd8924477507c66f08021dc3a132f9a42702202741f16c83400e666e0078de6c0bd65a13fb442e6a6f7a5d984fb2cdda3772f4542cd132fcce87e10b0eaa77c8de823a1", 0x8e}, {0x3, 0xf592, &(0x7f0000001b00)='syzkaller\x00', &(0x7f0000001b40)="9e9252370d7928ed643cb36ec823fe036585b4785c049b0f656e191ca2e421f96dc809f814facb1b64ae132c394ede9a77739c8b0af147e41d8334208b5378f5b2ce5671475661c3b9c29851c5aefaaf57589c5bbf37f962deb6f68c554ace7765fbc942a3459e776e549a6e2ee8740a6dde90695cf664c61dbd062477b456ddb9a0dc0a3bc74ac2cf68e7f46f3e081ea72f00475c3e90b4768ede6ec0eec8f856f3976df06a9784dcfc1c052c313d5042f7dadae555f2bf3b052d6177c69a7fff9022a47010816b1ac1c2211e0b4541f4bfd36c0f43f9c78458919f0bf6812f8243757e205cc53422971785943f2860f93f0054e487", 0xf6, 0x12}, {0x1, 0x7, &(0x7f0000001c40)='\x00', &(0x7f0000001c80)="d76b5a396708df4dbd099d6a2a394a11e9a4ed6af3d7fbaacebb3f568a940731a15f9e5649ee5c452b9ce4cabb42c6080bb5119efac8211d8295c75b9d070fe04c2f0be4c73c72c2d2f07400581d2a74904b76f138f3b56b97a1fadcf29145b3ee8699be3ad28fc1751641b60e29f4d3d924e89c56cbbaaf1ebcfa420e333db822f3cf03176573d3792c8eafced4788eefd6a2be5b38ba6e871d6318", 0x9c, 0x30}, {0x1, 0x9ea1, &(0x7f0000001d40)='/dev/mISDNtimer\x00', &(0x7f0000001d80)="def531af458b8ee84f619afd74a70701642baa0c92e70b85410c5fae5ac2c91248ef481585ff5892d7eb6a1dccd65445dfa5fd91b3d702444476aa03f6bf4110a2a05c4248d8e3e5d8dab7c2283f03a5ec4856caa464511bf6cdaa1e02ffef4462d012ce0c168191e2221c3e77e2eb0b3f09a5b8", 0x74, 0x22}, {0x2, 0x6, &(0x7f0000001e00)='security.capability\x00', &(0x7f0000001e40)="5a46edc658f84903efe08af5ee7866ded1a2d194e68656a70cd10e7bc2f34aba9b3dc7e851b422e9e5bbfbc3f4dc2e", 0x2f, 0x30}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESOCT, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800) kernel console output (not intermixed with test programs): -fs error (device loop4): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 42.021234][ T2574] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 42.034510][ T2574] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.034510][ T2574] [ 42.056676][ T2574] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 42.074550][ T2574] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 42.093399][ T2574] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.093399][ T2574] [ 42.114276][ T3547] loop0: detected capacity change from 0 to 1024 [ 42.133919][ T3547] EXT4-fs: Ignoring removed bh option [ 42.157143][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 42.232647][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.282929][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 42.372043][ T3556] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.387359][ T3572] loop2: detected capacity change from 0 to 512 [ 44.399273][ T3572] EXT4-fs: Ignoring removed i_version option [ 44.416887][ T3572] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 44.427594][ T3572] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.053696][ T3577] loop0: detected capacity change from 0 to 512 [ 45.109987][ T3572] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.123432][ T3573] loop1: detected capacity change from 0 to 512 [ 45.148295][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.160920][ T3577] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.204576][ T3564] cgroup: No subsys list or none specified [ 45.211535][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 45.211640][ T28] audit: type=1400 audit(1771829224.739:241): avc: denied { mounton } for pid=3558 comm="syz.0.24" path="/4/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.229460][ T3572] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 45.256900][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.269566][ T3573] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.283909][ T3565] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 45.290023][ T3572] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.303253][ T3572] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.28: Failed to acquire dquot type 1 [ 45.314876][ T3572] loop2: lost filesystem error report for type 5 error -117 [ 45.316309][ T3572] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 45.333848][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 45.333873][ C1] EXT4-fs (loop2): last error at time 1771829224: ext4_acquire_dquot:7001 [ 45.354723][ T3572] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.374586][ T3572] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.28: Failed to acquire dquot type 1 [ 45.404498][ T3572] loop2: lost filesystem error report for type 5 error -117 [ 45.404806][ T3572] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.28: Invalid block bitmap block 0 in block_group 0 [ 45.464590][ T3572] loop2: lost filesystem error report for type 5 error -117 [ 45.464814][ T3572] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 45.536462][ T3572] loop2: lost filesystem error report for type 5 error -117 [ 45.536782][ T3572] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 45.555191][ T3572] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.565418][ T3572] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.28: Failed to acquire dquot type 1 [ 45.576982][ T3572] loop2: lost filesystem error report for type 5 error -117 [ 45.577228][ T3572] EXT4-fs (loop2): 1 orphan inode deleted [ 45.591075][ T3572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.732107][ T3588] loop4: detected capacity change from 0 to 512 [ 45.751706][ T3571] loop3: detected capacity change from 0 to 512 [ 45.775632][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.786781][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.832614][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.845542][ T3588] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.869632][ T3571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.887871][ T3588] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 45.968665][ T3571] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.119489][ T3570] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 46.177646][ T28] audit: type=1400 audit(1771829225.689:242): avc: denied { create } for pid=3593 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.232739][ T28] audit: type=1400 audit(1771829225.759:243): avc: denied { create } for pid=3595 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.253811][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.256009][ T28] audit: type=1400 audit(1771829225.759:244): avc: denied { bind } for pid=3595 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.282991][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.298580][ T3596] loop1: detected capacity change from 0 to 2048 [ 46.305678][ T3596] EXT4-fs: Ignoring removed i_version option [ 46.345103][ T3596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.358820][ T3602] loop2: detected capacity change from 0 to 256 [ 46.370098][ T3595] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 46.421063][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.701908][ T3622] loop2: detected capacity change from 0 to 512 [ 47.776393][ T3622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 47.791827][ T3622] System zones: 1-20 [ 47.797033][ T3612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.807792][ T3622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.969057][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.434952][ T3651] loop4: detected capacity change from 0 to 512 [ 50.505853][ T3651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.519002][ T3651] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.538173][ T3651] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 50.697092][ T3637] loop3: detected capacity change from 0 to 512 [ 50.808151][ T3635] chnl_net:caif_netlink_parms(): no params data found [ 50.848450][ T3637] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 50.951881][ T3661] loop2: detected capacity change from 0 to 512 [ 51.069225][ T3661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.081949][ T3661] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.219407][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.435999][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.464519][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.487994][ T3635] bridge_slave_0: entered allmulticast mode [ 51.500220][ T3635] bridge_slave_0: entered promiscuous mode [ 51.507472][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.515140][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.522499][ T3635] bridge_slave_1: entered allmulticast mode [ 51.529370][ T3635] bridge_slave_1: entered promiscuous mode [ 52.395419][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.412445][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.716315][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.092776][ T3681] loop3: detected capacity change from 0 to 512 [ 54.118939][ T3681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.131745][ T3681] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.312755][ T3635] team0: Port device team_slave_0 added [ 54.319962][ T3635] team0: Port device team_slave_1 added [ 54.336931][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.343924][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.394597][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.406028][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.413005][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.444471][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.024518][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.447980][ T3635] hsr_slave_0: entered promiscuous mode [ 55.454100][ T3635] hsr_slave_1: entered promiscuous mode [ 55.465156][ T3635] debugfs: 'hsr0' already exists in 'hsr' [ 55.521634][ T3635] Cannot create hsr debugfs directory [ 57.065326][ T3635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.078841][ T3701] loop2: detected capacity change from 0 to 4096 [ 57.096871][ T3635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.104648][ T3701] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 57.127109][ T3635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.146873][ T3635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.375605][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 57.375620][ T28] audit: type=1400 audit(1771829236.919:266): avc: denied { kexec_image_load } for pid=3708 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 57.463693][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.523079][ T28] audit: type=1400 audit(1771829237.059:267): avc: denied { name_connect } for pid=3708 comm="syz.4.53" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 57.553709][ T3701] loop2: detected capacity change from 0 to 8192 [ 57.562526][ T3635] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.616789][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.624057][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.644500][ T28] audit: type=1400 audit(1771829237.129:268): avc: denied { ioctl } for pid=3708 comm="syz.4.53" path="socket:[6163]" dev="sockfs" ino=6163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.679852][ T3306] loop2: p1 < > p2 p4 < p5 > [ 57.688877][ T3306] loop2: partition table partially beyond EOD, truncated [ 57.700237][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.707399][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.736177][ T3306] loop2: p1 start 134217728 is beyond EOD, truncated [ 57.742935][ T3306] loop2: p2 size 591360 extends beyond EOD, truncated [ 57.771173][ T3711] dvmrp6: entered allmulticast mode [ 57.820736][ T3306] loop2: p5 size 591360 extends beyond EOD, truncated [ 57.832417][ T3635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.939770][ T3701] loop2: p1 < > p2 p4 < p5 > [ 57.947870][ T3701] loop2: partition table partially beyond EOD, truncated [ 57.983475][ T3701] loop2: p1 start 134217728 is beyond EOD, truncated [ 58.000316][ T3701] loop2: p2 size 591360 extends beyond EOD, truncated [ 58.020550][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.027924][ T3701] loop2: p5 size 591360 extends beyond EOD, truncated [ 58.033780][ T28] audit: type=1400 audit(1771829237.569:269): avc: denied { read write } for pid=3717 comm="syz.3.55" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.139733][ T28] audit: type=1400 audit(1771829237.569:270): avc: denied { open } for pid=3717 comm="syz.3.55" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.245758][ T28] audit: type=1326 audit(1771829237.759:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591de8c629 code=0x7ffc0000 [ 58.372111][ T3735] xt_hashlimit: size too large, truncated to 1048576 [ 59.244522][ T28] audit: type=1326 audit(1771829237.759:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591de8c629 code=0x7ffc0000 [ 59.268067][ T28] audit: type=1326 audit(1771829237.759:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591de8c629 code=0x7ffc0000 [ 59.407159][ T3736] loop0: detected capacity change from 0 to 512 [ 59.413947][ T3736] EXT4-fs: Ignoring removed nobh option [ 59.574357][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 59.585606][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.587318][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.605562][ T3736] EXT4-fs (loop0): 1 orphan inode deleted [ 59.611742][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.636181][ T3744] process 'syz.3.60' launched '/dev/fd/3' with NULL argv: empty string added [ 59.651910][ T28] audit: type=1326 audit(1771829237.759:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591de8c629 code=0x7ffc0000 [ 59.695586][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 59.708831][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.721597][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 59.760470][ T28] audit: type=1326 audit(1771829237.759:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f591de8c629 code=0x7ffc0000 [ 59.857522][ T3744] loop3: detected capacity change from 0 to 2048 [ 59.970494][ T3744] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 60.025020][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.037588][ T3744] System zones: 0-7 [ 60.050018][ T3744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.096893][ T3744] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.60: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 60.130503][ T3763] loop2: detected capacity change from 0 to 512 [ 60.179242][ T3763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.192075][ T3763] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.403988][ T3635] veth0_vlan: entered promiscuous mode [ 60.418534][ T3744] EXT4-fs (loop3): Remounting filesystem read-only [ 60.450313][ T3635] veth1_vlan: entered promiscuous mode [ 60.570057][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.580418][ T3635] veth0_macvtap: entered promiscuous mode [ 60.588185][ T3635] veth1_macvtap: entered promiscuous mode [ 60.601777][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.616866][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.625681][ T3770] loop0: detected capacity change from 0 to 256 [ 60.632465][ T3770] vfat: Unknown parameter 'sRortname' [ 60.670601][ T264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.703714][ T264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.768443][ T3774] loop4: detected capacity change from 0 to 128 [ 60.799368][ T3774] FAT-fs (loop4): bogus number of reserved sectors [ 60.812674][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.824625][ T3774] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 60.824812][ T264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.846759][ T3774] FAT-fs (loop4): Can't find a valid FAT filesystem [ 60.875277][ T264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.027493][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.87'. [ 62.179861][ T3810] bridge0: port 3(batadv1) entered blocking state [ 62.207837][ T3801] loop0: detected capacity change from 0 to 512 [ 62.247991][ T3810] bridge0: port 3(batadv1) entered disabled state [ 62.345889][ T3810] batadv1: entered allmulticast mode [ 62.353060][ T3801] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.386960][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 62.387044][ T28] audit: type=1326 audit(1771829241.919:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 62.420959][ T3810] batadv1: entered promiscuous mode [ 62.604645][ T50] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 62.613947][ T50] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 62.901078][ T28] audit: type=1326 audit(1771829241.959:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 62.943039][ T3801] syz.0.74 (3801) used greatest stack depth: 9288 bytes left [ 63.146584][ T3828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=3828 comm=syz.2.80 [ 63.185301][ T28] audit: type=1326 audit(1771829241.959:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 63.209834][ T3833] FAULT_INJECTION: forcing a failure. [ 63.209834][ T3833] name failslab, interval 1, probability 0, space 0, times 1 [ 63.273739][ T3833] CPU: 0 UID: 0 PID: 3833 Comm: syz.0.83 Tainted: G W syzkaller #0 PREEMPT(full) [ 63.273777][ T3833] Tainted: [W]=WARN [ 63.273786][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.273802][ T3833] Call Trace: [ 63.273809][ T3833] [ 63.273818][ T3833] __dump_stack+0x1d/0x30 [ 63.273852][ T3833] dump_stack_lvl+0x95/0xd0 [ 63.273908][ T3833] dump_stack+0x15/0x1b [ 63.273977][ T3833] should_fail_ex+0x263/0x280 [ 63.274005][ T3833] should_failslab+0x8c/0xb0 [ 63.274030][ T3833] __kvmalloc_node_noprof+0x155/0x650 [ 63.274132][ T3833] ? alloc_netdev_mqs+0x54f/0xa40 [ 63.274188][ T3833] alloc_netdev_mqs+0x54f/0xa40 [ 63.274216][ T3833] rtnl_create_link+0x239/0x720 [ 63.274242][ T3833] rtnl_newlink_create+0x174/0x650 [ 63.274265][ T3833] ? security_capable+0x7b/0x90 [ 63.274338][ T3833] ? netlink_ns_capable+0x86/0xa0 [ 63.274368][ T3833] rtnl_newlink+0x10a0/0x1330 [ 63.274413][ T3833] ? __siphash_unaligned+0x197/0x2e0 [ 63.274492][ T3833] ? __rcu_read_unlock+0x4e/0x70 [ 63.274553][ T3833] ? avc_has_perm_noaudit+0xab/0x130 [ 63.274629][ T3833] ? cred_has_capability+0x224/0x2a0 [ 63.274657][ T3833] ? selinux_capable+0x31/0x40 [ 63.274692][ T3833] ? security_capable+0x7b/0x90 [ 63.274714][ T3833] ? ns_capable+0x7c/0xb0 [ 63.274731][ T3833] ? __pfx_rtnl_newlink+0x10/0x10 [ 63.274832][ T3833] rtnetlink_rcv_msg+0x64b/0x720 [ 63.274976][ T3833] netlink_rcv_skb+0x123/0x220 [ 63.275084][ T3833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.275136][ T3833] rtnetlink_rcv+0x1c/0x30 [ 63.275171][ T3833] netlink_unicast+0x5c0/0x690 [ 63.275197][ T3833] netlink_sendmsg+0x5c8/0x6f0 [ 63.275242][ T3833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.275345][ T3833] ____sys_sendmsg+0x5af/0x600 [ 63.275447][ T3833] ___sys_sendmsg+0x195/0x1e0 [ 63.275497][ T3833] __x64_sys_sendmsg+0xd4/0x160 [ 63.275537][ T3833] x64_sys_call+0x194c/0x3020 [ 63.275592][ T3833] do_syscall_64+0x12c/0x370 [ 63.275637][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.275660][ T3833] RIP: 0033:0x7f5c1fe1c629 [ 63.275675][ T3833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.275707][ T3833] RSP: 002b:00007f5c1e877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.275731][ T3833] RAX: ffffffffffffffda RBX: 00007f5c20095fa0 RCX: 00007f5c1fe1c629 [ 63.275744][ T3833] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 63.275756][ T3833] RBP: 00007f5c1e877090 R08: 0000000000000000 R09: 0000000000000000 [ 63.275768][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.275820][ T3833] R13: 00007f5c20096038 R14: 00007f5c20095fa0 R15: 00007ffdd1925018 [ 63.275839][ T3833] [ 63.566656][ T28] audit: type=1326 audit(1771829241.969:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 63.618184][ T28] audit: type=1326 audit(1771829241.969:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 63.675285][ T3826] 9pnet_fd: p9_fd_create_unix (3826): problem connecting socket: ./file0: -2 [ 63.714494][ T28] audit: type=1326 audit(1771829241.969:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 63.780392][ T28] audit: type=1326 audit(1771829241.979:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 63.877640][ T28] audit: type=1326 audit(1771829241.979:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 64.231175][ T3834] bridge_slave_0: left allmulticast mode [ 64.237615][ T3834] bridge_slave_0: left promiscuous mode [ 64.243915][ T28] audit: type=1326 audit(1771829241.989:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 64.270553][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.289569][ T28] audit: type=1326 audit(1771829241.989:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f591de4cece code=0x7ffc0000 [ 64.329616][ T3844] loop0: detected capacity change from 0 to 512 [ 64.340762][ T3844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.353975][ T3844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.462889][ T3844] EXT4-fs (loop0): 1 truncate cleaned up [ 64.469709][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.667378][ T3834] bridge_slave_1: left allmulticast mode [ 64.800973][ T3834] bridge_slave_1: left promiscuous mode [ 64.887848][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.986576][ T3834] bond0: (slave bond_slave_0): Releasing backup interface [ 65.053211][ T3834] bond0: (slave bond_slave_1): Releasing backup interface [ 65.135629][ T3834] team0: Port device team_slave_0 removed [ 65.158820][ T3856] sctp: [Deprecated]: syz.5.81 (pid 3856) Use of int in maxseg socket option. [ 65.158820][ T3856] Use struct sctp_assoc_value instead [ 65.238204][ T3834] team0: Port device team_slave_1 removed [ 65.276567][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.283995][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.313106][ T3836] netlink: 112 bytes leftover after parsing attributes in process `syz.5.81'. [ 65.343932][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.372003][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.399420][ T3834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.399531][ T3855] loop3: detected capacity change from 0 to 512 [ 65.482823][ T3855] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.617126][ T3855] EXT4-fs (loop3): 1 truncate cleaned up [ 65.656689][ T3856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.667704][ T3860] netlink: 52 bytes leftover after parsing attributes in process `syz.4.89'. [ 65.682762][ T3855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.153472][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.201496][ T3883] loop2: detected capacity change from 0 to 512 [ 66.233403][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.266746][ T3887] loop3: detected capacity change from 0 to 4096 [ 66.275523][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.348120][ T3883] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.96: bg 0: block 5: invalid block bitmap [ 66.376972][ T3886] loop4: detected capacity change from 0 to 512 [ 66.393526][ T3883] loop2: lost filesystem error report for type 5 error -117 [ 66.393768][ T3883] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 66.401193][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 66.401244][ C1] EXT4-fs (loop2): initial error at time 1771829245: ext4_validate_block_bitmap:432 [ 66.401273][ C1] EXT4-fs (loop2): last error at time 1771829245: ext4_validate_block_bitmap:432 [ 66.507911][ T3886] EXT4-fs: Ignoring removed i_version option [ 66.514299][ T3886] EXT4-fs: Ignoring removed oldalloc option [ 66.556003][ T3883] loop2: lost filesystem error report for type 5 error -117 [ 66.561567][ T3883] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.96: invalid indirect mapped block 3 (level 2) [ 66.584938][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.614394][ T3883] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.626031][ T3886] EXT4-fs (loop4): 1 truncate cleaned up [ 66.649400][ T3883] EXT4-fs (loop2): 1 orphan inode deleted [ 66.652767][ T3886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.679608][ T3883] EXT4-fs (loop2): 1 truncate cleaned up [ 66.708414][ T3883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.723320][ T3881] loop5: detected capacity change from 0 to 512 [ 66.744128][ T3881] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 66.766393][ T3883] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 66.845510][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 66.865511][ T3883] netem: change failed [ 66.874940][ T3898] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 66.900060][ T3889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 66.931724][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.031034][ T3903] loop0: detected capacity change from 0 to 512 [ 67.097325][ T3903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.113895][ T3903] EXT4-fs (loop0): 1 truncate cleaned up [ 67.121210][ T3903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.188634][ T3903] syzkaller1: entered promiscuous mode [ 67.195371][ T3903] syzkaller1: entered allmulticast mode [ 67.320913][ T3907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'. [ 67.467004][ T3907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'. [ 67.489489][ T3906] loop5: detected capacity change from 0 to 4096 [ 67.582031][ T3906] EXT4-fs (loop5): stripe (257) is not aligned with cluster size (16), stripe is disabled [ 67.717610][ T3314] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 67.792128][ T3906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.892400][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.964844][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 67.964861][ T28] audit: type=1400 audit(1771829247.509:407): avc: denied { unlink } for pid=3314 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 68.056151][ T3314] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 68.095141][ T28] audit: type=1400 audit(1771829247.579:408): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.174133][ T3920] loop5: detected capacity change from 0 to 512 [ 68.205339][ T28] audit: type=1400 audit(1771829247.749:409): avc: denied { sqpoll } for pid=3916 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.290716][ T3920] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.312255][ T3314] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 68.340343][ T28] audit: type=1400 audit(1771829247.789:410): avc: denied { mount } for pid=3923 comm="syz.2.108" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.404528][ T28] audit: type=1400 audit(1771829247.809:411): avc: denied { remount } for pid=3923 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.434539][ T28] audit: type=1400 audit(1771829247.869:412): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.454653][ T28] audit: type=1400 audit(1771829247.919:413): avc: denied { bind } for pid=3925 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.473848][ T28] audit: type=1400 audit(1771829247.919:414): avc: denied { name_bind } for pid=3925 comm="syz.2.109" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.508735][ T3920] EXT4-fs (loop5): 1 truncate cleaned up [ 68.542683][ T3920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.556239][ T28] audit: type=1400 audit(1771829247.919:415): avc: denied { node_bind } for pid=3925 comm="syz.2.109" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.843989][ T3929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.865016][ T3314] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 68.909224][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.177787][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.265120][ T28] audit: type=1400 audit(1771829248.799:416): avc: denied { write } for pid=3931 comm="syz.3.111" name="raw6" dev="proc" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.310288][ T3932] loop3: detected capacity change from 0 to 512 [ 69.319991][ T3934] loop2: detected capacity change from 0 to 2048 [ 69.354752][ T3932] ext4: Unknown parameter 'obj_user' [ 69.368289][ T3934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.393724][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.418210][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 69.481339][ T3947] netlink: 'syz.5.114': attribute type 10 has an invalid length. [ 69.487216][ T3939] bond1 (unregistering): Released all slaves [ 69.499662][ T3949] loop3: detected capacity change from 0 to 512 [ 69.511889][ T3945] netlink: 'syz.5.114': attribute type 10 has an invalid length. [ 69.553623][ T3947] team0: Failed to send options change via netlink (err -105) [ 69.563317][ T3947] team0: Port device dummy0 added [ 69.569125][ T3945] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 69.690183][ T3934] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.112: bg 0: block 234: padding at end of block bitmap is not set [ 69.707363][ T3966] FAULT_INJECTION: forcing a failure. [ 69.707363][ T3966] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.715729][ T3934] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2044 with error 28 [ 69.743590][ T3966] CPU: 0 UID: 0 PID: 3966 Comm: syz.3.119 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.743630][ T3966] Tainted: [W]=WARN [ 69.743638][ T3966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.743651][ T3966] Call Trace: [ 69.743657][ T3966] [ 69.743663][ T3966] __dump_stack+0x1d/0x30 [ 69.743756][ T3966] dump_stack_lvl+0x95/0xd0 [ 69.743791][ T3966] dump_stack+0x15/0x1b [ 69.743820][ T3966] should_fail_ex+0x263/0x280 [ 69.743848][ T3966] should_fail_alloc_page+0xf2/0x100 [ 69.743936][ T3966] __alloc_frozen_pages_noprof+0x108/0x360 [ 69.743975][ T3966] alloc_pages_mpol+0xb3/0x260 [ 69.744073][ T3966] ? css_rstat_updated+0xbb/0x280 [ 69.744101][ T3966] vma_alloc_folio_noprof+0x1a9/0x300 [ 69.744194][ T3966] handle_mm_fault+0x111f/0x3020 [ 69.744226][ T3966] ? vma_start_read+0x1c7/0x2c0 [ 69.744256][ T3966] do_user_addr_fault+0x62f/0x1050 [ 69.744310][ T3966] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 69.744341][ T3966] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 69.744367][ T3966] ? trace_page_fault_user+0x1f/0xe0 [ 69.744543][ T3966] exc_page_fault+0x62/0xa0 [ 69.744578][ T3966] asm_exc_page_fault+0x26/0x30 [ 69.744605][ T3966] RIP: 0033:0x7fe7057edf4b [ 69.744624][ T3966] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 69.744647][ T3966] RSP: 002b:00007fe70437dfa0 EFLAGS: 00010206 [ 69.744705][ T3966] RAX: 0000000000000000 RBX: 00007fe705ba5fa0 RCX: 0000000000000000 [ 69.744754][ T3966] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140 [ 69.744768][ T3966] RBP: 00007fe70437f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.744780][ T3966] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000001 [ 69.744794][ T3966] R13: 00007fe705ba6038 R14: 00007fe705ba5fa0 R15: 00007ffdf8e73978 [ 69.744819][ T3966] [ 69.762266][ T3934] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.762266][ T3934] [ 69.788085][ T3966] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 69.806372][ T3934] EXT4-fs (loop2): Total free blocks count 0 [ 69.975178][ T3934] EXT4-fs (loop2): Free/Dirty block details [ 69.983955][ T3978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.984615][ T3934] EXT4-fs (loop2): free_blocks=0 [ 70.007713][ T3934] EXT4-fs (loop2): dirty_blocks=2048 [ 70.013052][ T3934] EXT4-fs (loop2): Block reservation details [ 70.019115][ T3934] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 70.056610][ T3985] loop3: detected capacity change from 0 to 128 [ 70.121612][ T3941] chnl_net:caif_netlink_parms(): no params data found [ 70.131971][ T3985] random: crng reseeded on system resumption [ 70.165009][ T3998] netlink: 'syz.5.126': attribute type 2 has an invalid length. [ 70.178174][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.185491][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.190399][ T3998] netlink: 14 bytes leftover after parsing attributes in process `syz.5.126'. [ 70.193071][ T3941] bridge_slave_0: entered allmulticast mode [ 70.208408][ T3941] bridge_slave_0: entered promiscuous mode [ 70.215312][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.222442][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.229807][ T3941] bridge_slave_1: entered allmulticast mode [ 70.236395][ T3941] bridge_slave_1: entered promiscuous mode [ 70.248408][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.260243][ T3941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.270879][ T3941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.322502][ T3998] team0: Port device dummy0 removed [ 70.331965][ T4006] loop6: detected capacity change from 0 to 7 [ 70.347664][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.348083][ T4009] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 70.357320][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.375266][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.384905][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.390141][ T3941] team0: Port device team_slave_0 added [ 70.393494][ T3303] loop6: unable to read partition table [ 70.409346][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.419056][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.427158][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.429128][ T3941] team0: Port device team_slave_1 added [ 70.436771][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.440824][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.459824][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.467928][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.477585][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.485885][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.495527][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.503603][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.513271][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.516546][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.523947][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 70.537691][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.545535][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.546167][ T4006] loop6: unable to read partition table [ 70.579268][ T4006] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 70.607267][ T3941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.609792][ T4016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.641500][ T4016] block device autoloading is deprecated and will be removed. [ 70.659571][ T4014] loop2: detected capacity change from 0 to 512 [ 70.671552][ T4006] loop3: detected capacity change from 0 to 1024 [ 70.678862][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.686974][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.713018][ T4014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.724992][ T3941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.746275][ T4014] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.130: invalid indirect mapped block 83886080 (level 1) [ 70.760229][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.785760][ T4025] loop0: detected capacity change from 0 to 512 [ 70.794034][ T4014] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 70.795850][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.811482][ C0] EXT4-fs (loop2): initial error at time 1771829250: ext4_free_branches:1023: inode 16 [ 70.821174][ C0] EXT4-fs (loop2): last error at time 1771829250: ext4_free_branches:1023: inode 16 [ 70.840848][ T4014] EXT4-fs (loop2): Remounting filesystem read-only [ 70.847584][ T4014] EXT4-fs (loop2): 1 orphan inode deleted [ 70.853342][ T4014] EXT4-fs (loop2): 1 truncate cleaned up [ 70.872521][ T4025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.915308][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.936163][ T4014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.976941][ T3941] hsr_slave_0: entered promiscuous mode [ 70.983283][ T3941] hsr_slave_1: entered promiscuous mode [ 70.989366][ T3941] debugfs: 'hsr0' already exists in 'hsr' [ 70.995153][ T3941] Cannot create hsr debugfs directory [ 71.055062][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.110621][ T4040] FAULT_INJECTION: forcing a failure. [ 71.110621][ T4040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.141088][ T4040] CPU: 0 UID: 0 PID: 4040 Comm: syz.2.136 Tainted: G W syzkaller #0 PREEMPT(full) [ 71.141126][ T4040] Tainted: [W]=WARN [ 71.141135][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.141152][ T4040] Call Trace: [ 71.141161][ T4040] [ 71.141172][ T4040] __dump_stack+0x1d/0x30 [ 71.141285][ T4040] dump_stack_lvl+0x95/0xd0 [ 71.141317][ T4040] dump_stack+0x15/0x1b [ 71.141345][ T4040] should_fail_ex+0x263/0x280 [ 71.141374][ T4040] should_fail+0xb/0x20 [ 71.141398][ T4040] should_fail_usercopy+0x1a/0x20 [ 71.141467][ T4040] _copy_from_user+0x1c/0xb0 [ 71.141501][ T4040] __sys_bpf+0x183/0x7e0 [ 71.141587][ T4040] __x64_sys_bpf+0x41/0x50 [ 71.141631][ T4040] x64_sys_call+0x10cb/0x3020 [ 71.141670][ T4040] do_syscall_64+0x12c/0x370 [ 71.141775][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.141802][ T4040] RIP: 0033:0x7fde8e3ec629 [ 71.141824][ T4040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.141927][ T4040] RSP: 002b:00007fde8ce3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.142022][ T4040] RAX: ffffffffffffffda RBX: 00007fde8e665fa0 RCX: 00007fde8e3ec629 [ 71.142040][ T4040] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 71.142057][ T4040] RBP: 00007fde8ce3f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.142072][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.142088][ T4040] R13: 00007fde8e666038 R14: 00007fde8e665fa0 R15: 00007ffccce67e08 [ 71.142111][ T4040] [ 71.256071][ T4042] x_tables: duplicate underflow at hook 1 [ 71.339071][ T3941] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.348556][ T3941] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.381426][ T4054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 71.391542][ T3941] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.470405][ T4054] netlink: 'syz.3.140': attribute type 8 has an invalid length. [ 71.542859][ T3941] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.649968][ T3941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.661016][ T4076] EXT4-fs: Ignoring removed nobh option [ 71.666988][ T4076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.702904][ T4076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.705857][ T3941] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.749999][ T4084] netlink: 10 bytes leftover after parsing attributes in process `syz.2.148'. [ 71.770136][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.777440][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.789984][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.797279][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.857794][ T4092] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 71.876348][ T4092] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.149: iget: bad i_size value: 12154757448730 [ 71.908339][ T4092] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 71.908551][ T4092] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.149: couldn't read orphan inode 13 (err -117) [ 71.917795][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 71.917817][ C0] EXT4-fs (loop0): initial error at time 1771829251: ext4_orphan_get:1391: inode 13 [ 71.917859][ C0] EXT4-fs (loop0): last error at time 1771829251: ext4_orphan_get:1391: inode 13 [ 71.986722][ T4092] loop0: lost filesystem error report for type 5 error -117 [ 72.010675][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.163777][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 72.396615][ T4109] EXT4-fs error (device loop5): __ext4_fill_super:5563: inode #2: comm syz.5.154: iget: checksum invalid [ 72.427258][ T4109] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 72.427513][ T4109] EXT4-fs (loop5): get root inode failed [ 72.436548][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 72.436570][ C1] EXT4-fs (loop5): initial error at time 1771829251: __ext4_fill_super:5563: inode 2 [ 72.436608][ C1] EXT4-fs (loop5): last error at time 1771829251: __ext4_fill_super:5563: inode 2 [ 72.527485][ T4109] EXT4-fs (loop5): mount failed [ 72.579774][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.595725][ T4117] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 72.678751][ T4117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.730113][ T3941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.001995][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.085494][ T3941] veth0_vlan: entered promiscuous mode [ 73.096838][ T4161] netlink: 17 bytes leftover after parsing attributes in process `syz.2.166'. [ 73.149462][ T4162] netlink: 17 bytes leftover after parsing attributes in process `syz.2.166'. [ 73.162045][ T4161] netlink: 'syz.2.166': attribute type 5 has an invalid length. [ 73.169952][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 73.169970][ T28] audit: type=1400 audit(1771829252.699:455): avc: denied { write } for pid=4165 comm="syz.5.167" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.216755][ T3941] veth1_vlan: entered promiscuous mode [ 73.226358][ T4161] ip6erspan0: entered promiscuous mode [ 73.292292][ T3941] veth0_macvtap: entered promiscuous mode [ 73.302484][ T3941] veth1_macvtap: entered promiscuous mode [ 73.329357][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.352294][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.360352][ T28] audit: type=1400 audit(1771829252.889:456): avc: denied { write } for pid=4174 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.384362][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.169'. [ 73.384392][ T28] audit: type=1400 audit(1771829252.919:457): avc: denied { create } for pid=4171 comm="syz.5.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.384449][ T28] audit: type=1400 audit(1771829252.919:458): avc: denied { setopt } for pid=4171 comm="syz.5.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.385214][ T264] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.385320][ T264] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.385421][ T264] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.385454][ T264] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.531213][ T28] audit: type=1400 audit(1771829253.069:459): avc: denied { bind } for pid=4179 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.612520][ T4191] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 73.631516][ T28] audit: type=1400 audit(1771829253.089:460): avc: denied { name_bind } for pid=4179 comm="syz.3.171" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.669695][ T28] audit: type=1400 audit(1771829253.089:461): avc: denied { node_bind } for pid=4179 comm="syz.3.171" saddr=2001::2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.703974][ T4195] set_capacity_and_notify: 4 callbacks suppressed [ 73.703990][ T4195] loop6: detected capacity change from 0 to 1024 [ 73.750533][ T4195] EXT4-fs: Ignoring removed orlov option [ 73.780716][ T28] audit: type=1326 audit(1771829253.239:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d03e7c629 code=0x7ffc0000 [ 73.815157][ T4195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.822594][ T4195] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 73.829506][ T28] audit: type=1326 audit(1771829253.239:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d03e7c629 code=0x7ffc0000 [ 73.854152][ T28] audit: type=1326 audit(1771829253.239:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.6.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9d03e7c629 code=0x7ffc0000 [ 74.018475][ T4221] loop5: detected capacity change from 0 to 512 [ 74.046494][ T4230] FAULT_INJECTION: forcing a failure. [ 74.046494][ T4230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.075663][ T4230] CPU: 0 UID: 0 PID: 4230 Comm: syz.3.182 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.075710][ T4230] Tainted: [W]=WARN [ 74.075729][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.075744][ T4230] Call Trace: [ 74.075752][ T4230] [ 74.075762][ T4230] __dump_stack+0x1d/0x30 [ 74.075792][ T4230] dump_stack_lvl+0x95/0xd0 [ 74.075862][ T4230] dump_stack+0x15/0x1b [ 74.075889][ T4230] should_fail_ex+0x263/0x280 [ 74.075917][ T4230] should_fail+0xb/0x20 [ 74.075937][ T4230] should_fail_usercopy+0x1a/0x20 [ 74.075960][ T4230] strncpy_from_user+0x27/0x250 [ 74.076016][ T4230] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 74.076046][ T4230] do_getname+0x59/0x1c0 [ 74.076072][ T4230] getname_uflags+0x23/0x30 [ 74.076093][ T4230] __x64_sys_execveat+0x5d/0xa0 [ 74.076182][ T4230] x64_sys_call+0x2a33/0x3020 [ 74.076208][ T4230] do_syscall_64+0x12c/0x370 [ 74.076302][ T4230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.076363][ T4230] RIP: 0033:0x7fe70592c629 [ 74.076378][ T4230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.076411][ T4230] RSP: 002b:00007fe70437f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 74.076435][ T4230] RAX: ffffffffffffffda RBX: 00007fe705ba5fa0 RCX: 00007fe70592c629 [ 74.076448][ T4230] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 74.076471][ T4230] RBP: 00007fe70437f090 R08: 0000000000001000 R09: 0000000000000000 [ 74.076563][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.076578][ T4230] R13: 00007fe705ba6038 R14: 00007fe705ba5fa0 R15: 00007ffdf8e73978 [ 74.076603][ T4230] [ 74.321827][ T4242] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 74.331163][ T4234] loop2: detected capacity change from 0 to 128 [ 74.340038][ T4238] loop3: detected capacity change from 0 to 512 [ 74.344861][ T4242] bridge0: port 3(netdevsim1) entered blocking state [ 74.353361][ T4242] bridge0: port 3(netdevsim1) entered disabled state [ 74.360572][ T4238] ext4: Unknown parameter 'hash' [ 74.368454][ T4242] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 74.400881][ T4242] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 74.401442][ T4248] 9p: Bad value for 'rfdno' [ 74.433444][ T4242] bridge0: port 3(netdevsim1) entered blocking state [ 74.440284][ T4242] bridge0: port 3(netdevsim1) entered forwarding state [ 75.026587][ T4276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=4276 comm=syz.3.190 [ 75.136004][ T4284] loop5: detected capacity change from 0 to 128 [ 75.292291][ T4284] netlink: 'syz.5.189': attribute type 10 has an invalid length. [ 75.318357][ T4291] netlink: 'syz.5.189': attribute type 10 has an invalid length. [ 75.326624][ T4280] 9p: Could not find request transport: xen [ 75.370243][ T4280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.482356][ T4280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.670606][ T4292] loop3: detected capacity change from 0 to 512 [ 75.714394][ T4292] EXT4-fs: inline encryption not supported [ 75.867303][ T4292] EXT4-fs (loop3): 1 orphan inode deleted [ 75.876488][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.928318][ T4292] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.048760][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 76.122089][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 76.172660][ T4304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 76.232785][ T4308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 76.280001][ T4313] loop6: detected capacity change from 0 to 1024 [ 76.332624][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.383166][ T4313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.416438][ T4313] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.432464][ T4321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.199'. [ 76.455406][ T3941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.569198][ T4327] FAULT_INJECTION: forcing a failure. [ 76.569198][ T4327] name failslab, interval 1, probability 0, space 0, times 0 [ 76.576150][ T4325] netlink: 156 bytes leftover after parsing attributes in process `syz.3.202'. [ 76.660759][ T4334] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 76.664714][ T4327] CPU: 0 UID: 0 PID: 4327 Comm: syz.6.201 Tainted: G W syzkaller #0 PREEMPT(full) [ 76.664947][ T4327] Tainted: [W]=WARN [ 76.664969][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.665011][ T4327] Call Trace: [ 76.665031][ T4327] [ 76.665129][ T4327] __dump_stack+0x1d/0x30 [ 76.665255][ T4327] dump_stack_lvl+0x95/0xd0 [ 76.665293][ T4327] dump_stack+0x15/0x1b [ 76.665376][ T4327] should_fail_ex+0x263/0x280 [ 76.665450][ T4327] should_failslab+0x8c/0xb0 [ 76.665579][ T4327] __kvmalloc_node_noprof+0x155/0x650 [ 76.665739][ T4327] ? vmemdup_user+0x2b/0xd0 [ 76.665810][ T4327] vmemdup_user+0x2b/0xd0 [ 76.665934][ T4327] map_get_next_key+0x140/0x330 [ 76.666081][ T4327] ? __sys_bpf+0x643/0x7e0 [ 76.666156][ T4327] __sys_bpf+0x64d/0x7e0 [ 76.666248][ T4327] __x64_sys_bpf+0x41/0x50 [ 76.666396][ T4327] x64_sys_call+0x10cb/0x3020 [ 76.666469][ T4327] do_syscall_64+0x12c/0x370 [ 76.666611][ T4327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.666732][ T4327] RIP: 0033:0x7f9d03e7c629 [ 76.666786][ T4327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.666843][ T4327] RSP: 002b:00007f9d028cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.666977][ T4327] RAX: ffffffffffffffda RBX: 00007f9d040f5fa0 RCX: 00007f9d03e7c629 [ 76.667092][ T4327] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 76.667155][ T4327] RBP: 00007f9d028cf090 R08: 0000000000000000 R09: 0000000000000000 [ 76.667197][ T4327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.667284][ T4327] R13: 00007f9d040f6038 R14: 00007f9d040f5fa0 R15: 00007ffc681ca658 [ 76.667359][ T4327] [ 76.843413][ T4334] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.871420][ T4334] vhci_hcd vhci_hcd.0: Device attached [ 76.880184][ T4342] loop3: detected capacity change from 0 to 256 [ 76.888590][ T4342] vfat: Unknown parameter '·' [ 76.906502][ T4343] loop0: detected capacity change from 0 to 128 [ 76.970724][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 77.005475][ T4337] vhci_hcd: connection closed [ 77.005663][ T406] vhci_hcd vhci_hcd.3: stop threads [ 77.016166][ T406] vhci_hcd vhci_hcd.3: release socket [ 77.021625][ T406] vhci_hcd vhci_hcd.3: disconnect device [ 77.310433][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.209'. [ 77.350155][ T4352] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 77.360145][ T4352] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 77.381002][ T4352] netlink: 'syz.6.209': attribute type 10 has an invalid length. [ 77.392065][ T4352] macvlan1: entered allmulticast mode [ 77.401596][ T4352] veth1_vlan: entered allmulticast mode [ 77.411713][ T4352] team0: Port device macvlan1 added [ 77.632254][ T4355] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 77.818414][ T4361] FAULT_INJECTION: forcing a failure. [ 77.818414][ T4361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.839552][ T4361] CPU: 1 UID: 0 PID: 4361 Comm: syz.3.215 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.839584][ T4361] Tainted: [W]=WARN [ 77.839590][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.839653][ T4361] Call Trace: [ 77.839661][ T4361] [ 77.839670][ T4361] __dump_stack+0x1d/0x30 [ 77.839704][ T4361] dump_stack_lvl+0x95/0xd0 [ 77.839733][ T4361] dump_stack+0x15/0x1b [ 77.839791][ T4361] should_fail_ex+0x263/0x280 [ 77.839828][ T4361] should_fail+0xb/0x20 [ 77.839903][ T4361] should_fail_usercopy+0x1a/0x20 [ 77.839932][ T4361] _copy_from_user+0x1c/0xb0 [ 77.839966][ T4361] ____sys_sendmsg+0x1e2/0x600 [ 77.840008][ T4361] ___sys_sendmsg+0x195/0x1e0 [ 77.840084][ T4361] __x64_sys_sendmsg+0xd4/0x160 [ 77.840120][ T4361] x64_sys_call+0x194c/0x3020 [ 77.840147][ T4361] do_syscall_64+0x12c/0x370 [ 77.840214][ T4361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.840242][ T4361] RIP: 0033:0x7fe70592c629 [ 77.840263][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.840283][ T4361] RSP: 002b:00007fe70437f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.840366][ T4361] RAX: ffffffffffffffda RBX: 00007fe705ba5fa0 RCX: 00007fe70592c629 [ 77.840384][ T4361] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 77.840432][ T4361] RBP: 00007fe70437f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.840444][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.840459][ T4361] R13: 00007fe705ba6038 R14: 00007fe705ba5fa0 R15: 00007ffdf8e73978 [ 77.840484][ T4361] [ 77.919038][ T4370] loop2: detected capacity change from 0 to 256 [ 78.079328][ T4370] FAT-fs (loop2): Directory bread(block 64) failed [ 78.090138][ T4372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.102487][ T4370] FAT-fs (loop2): Directory bread(block 65) failed [ 78.109770][ T4370] FAT-fs (loop2): Directory bread(block 66) failed [ 78.116516][ T4370] FAT-fs (loop2): Directory bread(block 67) failed [ 78.123138][ T4370] FAT-fs (loop2): Directory bread(block 68) failed [ 78.129997][ T4370] FAT-fs (loop2): Directory bread(block 69) failed [ 78.136849][ T4370] FAT-fs (loop2): Directory bread(block 70) failed [ 78.136876][ T4370] FAT-fs (loop2): Directory bread(block 71) failed [ 78.136971][ T4370] FAT-fs (loop2): Directory bread(block 72) failed [ 78.148479][ T4372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.151091][ T4370] FAT-fs (loop2): Directory bread(block 73) failed [ 78.172197][ T4372] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.201850][ T4372] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.217: corrupted xattr block 32: bad e_name length [ 78.204244][ T4380] ext4: Bad value for 'auto_da_alloc' [ 78.245167][ T4370] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 78.253889][ T4370] FAT-fs (loop2): Filesystem has been set read-only [ 78.260683][ T4372] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 78.277700][ T4370] syz.2.216: attempt to access beyond end of device [ 78.277700][ T4370] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 78.291505][ T4372] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.217: corrupted xattr block 32: bad e_name length [ 78.336835][ T4370] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 78.356358][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.220'. [ 78.370935][ T4370] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 78.384813][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 78.405410][ T4380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 78.413756][ T4370] syz.2.216: attempt to access beyond end of device [ 78.413756][ T4370] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 78.464512][ T4370] syz.2.216: attempt to access beyond end of device [ 78.464512][ T4370] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 78.497921][ T4370] syz.2.216: attempt to access beyond end of device [ 78.497921][ T4370] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 78.534242][ T4370] syz.2.216: attempt to access beyond end of device [ 78.534242][ T4370] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 78.574909][ T3303] loop6: p1 < > p2 p4 < p5 > [ 78.579771][ T3303] loop6: partition table partially beyond EOD, truncated [ 78.587345][ T3303] loop6: p1 start 134217728 is beyond EOD, truncated [ 78.606956][ T3303] loop6: p2 size 591360 extends beyond EOD, truncated [ 78.632191][ T3303] loop6: p5 size 591360 extends beyond EOD, truncated [ 78.662085][ T4403] veth3: entered promiscuous mode [ 78.667359][ T4403] veth3: entered allmulticast mode [ 78.694176][ T4383] loop6: p1 < > p2 p4 < p5 > [ 78.709981][ T4407] EXT4-fs: Ignoring removed i_version option [ 78.714232][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 78.714328][ T28] audit: type=1326 audit(1771829258.249:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e3ec629 code=0x7ffc0000 [ 78.731330][ T4383] loop6: partition table partially beyond EOD, [ 78.745626][ T4407] EXT4-fs: Ignoring removed nobh option [ 78.757945][ T28] audit: type=1326 audit(1771829258.289:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fde8e3ec629 code=0x7ffc0000 [ 78.781762][ T4407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.782890][ T28] audit: type=1326 audit(1771829258.289:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e3ec629 code=0x7ffc0000 [ 78.815165][ T4383] truncated [ 78.818761][ T4383] loop6: p1 start 134217728 is beyond EOD, truncated [ 78.819399][ T4407] EXT4-fs (loop0): 1 truncate cleaned up [ 78.826075][ T4383] loop6: p2 size 591360 extends beyond EOD, truncated [ 78.838609][ T28] audit: type=1326 audit(1771829258.299:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8e3ec629 code=0x7ffc0000 [ 78.864470][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.880159][ T28] audit: type=1400 audit(1771829258.419:587): avc: denied { add_name } for pid=4406 comm="syz.0.228" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.901511][ T4383] loop6: p5 size 591360 extends beyond EOD, truncated [ 79.271698][ T28] audit: type=1400 audit(1771829258.809:588): avc: denied { getopt } for pid=4414 comm="syz.6.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.292841][ T4415] netlink: 22 bytes leftover after parsing attributes in process `syz.6.231'. [ 79.337572][ T28] audit: type=1400 audit(1771829258.879:589): avc: denied { connect } for pid=4416 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 79.359215][ T4421] set_capacity_and_notify: 4 callbacks suppressed [ 79.359236][ T4421] loop6: detected capacity change from 0 to 1024 [ 79.389287][ T4421] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.467086][ T28] audit: type=1400 audit(1771829258.989:590): avc: denied { ioctl } for pid=4422 comm="syz.5.234" path="/40/file0" dev="tmpfs" ino=231 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.513701][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.667326][ T28] audit: type=1400 audit(1771829259.209:591): avc: denied { create } for pid=4441 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.712150][ T28] audit: type=1400 audit(1771829259.219:592): avc: denied { bind } for pid=4442 comm="syz.5.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.791073][ T4459] loop0: detected capacity change from 0 to 512 [ 79.805145][ T4459] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.815991][ T4459] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 79.825875][ T4459] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.245: attempt to clear invalid blocks 2 len 1 [ 79.838803][ T4460] loop2: detected capacity change from 0 to 1024 [ 79.839496][ T4459] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.846210][ T4459] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, [ 79.855420][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 79.855446][ C0] EXT4-fs (loop0): initial error at time 1771829259: ext4_clear_blocks:876: inode 13 [ 79.855483][ C0] EXT4-fs (loop0): last error at time 1771829259: ext4_clear_blocks:876: inode 13 [ 79.871358][ T4460] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 79.880052][ T4459] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.910133][ T4459] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.245: invalid indirect mapped block 1819239214 (level 0) [ 79.922570][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.924565][ T4459] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.938278][ T4459] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.245: invalid indirect mapped block 1819239214 (level 1) [ 79.973683][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.249'. [ 79.986864][ T4459] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 79.987407][ T4459] EXT4-fs (loop0): 1 truncate cleaned up [ 80.003167][ T4459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.020318][ T4459] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 80.032708][ T4460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.069944][ T4460] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.082704][ T4460] Direct I/O collision with buffered writes! File: /file1 Comm: syz.2.246 [ 80.136220][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.150920][ T406] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 4) [ 80.192548][ T406] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 80.226420][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 80.235188][ T406] EXT4-fs (loop2): This should not happen!! Data will be lost [ 80.235188][ T406] [ 80.263434][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.283680][ T4484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.251'. [ 80.542723][ T4505] loop2: detected capacity change from 0 to 128 [ 80.622570][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 80.801564][ T4514] loop6: detected capacity change from 0 to 512 [ 80.885653][ T4514] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 80.924836][ T4514] EXT4-fs (loop6): 1 truncate cleaned up [ 80.932874][ T4514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.968778][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.984829][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.000199][ T3941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.000936][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.017304][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.080752][ T4532] loop0: detected capacity change from 0 to 1024 [ 81.124503][ T4532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.148315][ T4532] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.161005][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.271'. [ 81.170530][ T4538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4538 comm=syz.6.272 [ 81.186821][ T4537] loop3: detected capacity change from 0 to 512 [ 81.213276][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.223148][ T4538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4538 comm=syz.6.272 [ 81.246650][ T4537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.260486][ T4537] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.272319][ T4538] loop6: detected capacity change from 0 to 164 [ 81.284916][ T4538] iso9660: Unknown parameter ' ' [ 81.295184][ T4547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.275'. [ 81.305166][ T4537] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 81.337143][ T4537] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 81.345203][ T4547] netlink: 'syz.0.275': attribute type 5 has an invalid length. [ 81.395827][ T4546] loop5: detected capacity change from 0 to 512 [ 81.417739][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.429843][ T4549] loop6: detected capacity change from 0 to 4096 [ 81.468935][ T4549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.611781][ T3941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.629768][ T4570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.697124][ T4570] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.814300][ T4546] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.895182][ T4570] EXT4-fs (loop0): shut down requested (2) [ 81.931266][ T4546] EXT4-fs (loop5): 1 orphan inode deleted [ 81.970225][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.004773][ T4546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.111419][ T4589] rock: directory entry would overflow storage [ 82.117732][ T4589] rock: sig=0x5245, size=8, remaining=5 [ 82.350457][ T4607] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 82.414287][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.415448][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.421797][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.435339][ T4605] EXT4-fs: Ignoring removed orlov option [ 82.457262][ T4605] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.478469][ T4607] bridge0: entered allmulticast mode [ 82.546326][ T4605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.706402][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.720122][ T4625] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.740921][ T4625] binfmt_misc: register: failed to install interpreter file ./file2 [ 82.749478][ T4625] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.294: iget: bad i_size value: 2533274857506816 [ 82.762816][ T4625] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 82.786253][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.235844][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.389036][ T4724] EXT4-fs: Ignoring removed i_version option [ 83.415806][ T4726] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.430814][ T4724] EXT4-fs: Ignoring removed nobh option [ 83.444909][ T4726] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.455078][ T4724] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.472353][ T4726] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.300: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.496060][ T4724] EXT4-fs (loop5): 1 truncate cleaned up [ 83.505643][ T4724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.517836][ T4726] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 83.524459][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 83.540039][ C0] EXT4-fs (loop0): initial error at time 1771829263: ext4_ext_check_inode:521: inode 2 [ 83.549752][ C0] EXT4-fs (loop0): last error at time 1771829263: ext4_ext_check_inode:521: inode 2 [ 83.580497][ T4726] EXT4-fs (loop0): no journal found [ 83.800393][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 83.800407][ T28] audit: type=1400 audit(1771829263.339:644): avc: denied { create } for pid=4733 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=caif_socket permissive=1 [ 83.890602][ T28] audit: type=1400 audit(1771829263.419:645): avc: denied { ioctl } for pid=4741 comm="syz.2.306" path="socket:[10313]" dev="sockfs" ino=10313 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.206974][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.230928][ T4756] FAULT_INJECTION: forcing a failure. [ 84.230928][ T4756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.276055][ T4758] __nla_validate_parse: 5 callbacks suppressed [ 84.276071][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.312'. [ 84.294750][ T4756] CPU: 0 UID: 0 PID: 4756 Comm: syz.2.311 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.294790][ T4756] Tainted: [W]=WARN [ 84.294797][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.294809][ T4756] Call Trace: [ 84.294816][ T4756] [ 84.294823][ T4756] __dump_stack+0x1d/0x30 [ 84.294878][ T4756] dump_stack_lvl+0x95/0xd0 [ 84.294910][ T4756] dump_stack+0x15/0x1b [ 84.294950][ T4756] should_fail_ex+0x263/0x280 [ 84.294978][ T4756] should_fail+0xb/0x20 [ 84.295005][ T4756] should_fail_usercopy+0x1a/0x20 [ 84.295035][ T4756] _copy_from_user+0x1c/0xb0 [ 84.295130][ T4756] kstrtouint_from_user+0x69/0xf0 [ 84.295159][ T4756] proc_fail_nth_write+0x50/0x160 [ 84.295187][ T4756] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.295285][ T4756] vfs_write+0x269/0x9f0 [ 84.295327][ T4756] ? __rcu_read_unlock+0x4e/0x70 [ 84.295356][ T4756] ? __fget_files+0x184/0x1c0 [ 84.295462][ T4756] ? mutex_lock+0x57/0x90 [ 84.295489][ T4756] ksys_write+0xdc/0x1a0 [ 84.295583][ T4756] __x64_sys_write+0x40/0x50 [ 84.295626][ T4756] x64_sys_call+0x27e1/0x3020 [ 84.295687][ T4756] do_syscall_64+0x12c/0x370 [ 84.295740][ T4756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.295770][ T4756] RIP: 0033:0x7fde8e3acece [ 84.295852][ T4756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.295871][ T4756] RSP: 002b:00007fde8ce1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.295891][ T4756] RAX: ffffffffffffffda RBX: 00007fde8ce1e6c0 RCX: 00007fde8e3acece [ 84.295944][ T4756] RDX: 0000000000000001 RSI: 00007fde8ce1e0a0 RDI: 0000000000000003 [ 84.295962][ T4756] RBP: 00007fde8ce1e090 R08: 0000000000000000 R09: 0000000000000000 [ 84.295989][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.296006][ T4756] R13: 00007fde8e666128 R14: 00007fde8e666090 R15: 00007ffccce67e08 [ 84.296032][ T4756] [ 84.554781][ T4761] set_capacity_and_notify: 7 callbacks suppressed [ 84.554797][ T4761] loop0: detected capacity change from 0 to 128 [ 84.570987][ T28] audit: type=1400 audit(1771829264.089:646): avc: denied { mount } for pid=4760 comm="syz.0.313" name="/" dev="ramfs" ino=9341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.609087][ T28] audit: type=1400 audit(1771829264.149:647): avc: denied { remount } for pid=4760 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 84.653661][ T4761] FAT-fs (loop0): error, corrupted directory (invalid i_start) [ 84.670217][ T4761] FAT-fs (loop0): Filesystem has been set read-only [ 84.859355][ T28] audit: type=1326 audit(1771829264.399:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.0.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c1fe1c629 code=0x0 [ 84.934649][ T28] audit: type=1400 audit(1771829264.469:649): avc: denied { map } for pid=4777 comm="syz.3.319" path="socket:[10391]" dev="sockfs" ino=10391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.976640][ T4780] loop0: detected capacity change from 0 to 1024 [ 84.994076][ T28] audit: type=1400 audit(1771829264.529:650): avc: denied { accept } for pid=4777 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.075658][ T4780] EXT4-fs: Ignoring removed orlov option [ 85.084861][ T28] audit: type=1400 audit(1771829264.619:651): avc: denied { create } for pid=4787 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.104829][ T4780] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 85.117477][ T4788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 85.124139][ T4788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.148749][ T28] audit: type=1400 audit(1771829264.679:652): avc: denied { write } for pid=4791 comm="syz.3.323" lport=53093 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.157375][ T4792] loop3: detected capacity change from 0 to 128 [ 85.180213][ T4788] vhci_hcd vhci_hcd.0: Device attached [ 85.188551][ T4780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.214618][ T28] audit: type=1400 audit(1771829264.679:653): avc: denied { getopt } for pid=4791 comm="syz.3.323" lport=53093 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 85.220766][ T4793] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 85.245342][ T4793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.277683][ T4793] vhci_hcd vhci_hcd.0: Device attached [ 85.297728][ T4792] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.311827][ T4793] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 85.318485][ T4793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.336887][ T4792] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.387489][ T4793] vhci_hcd vhci_hcd.0: Device attached [ 85.414546][ T1033] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 85.416401][ T4788] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 85.428591][ T4788] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.453363][ T4804] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 85.460142][ T4804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.467814][ T4788] vhci_hcd vhci_hcd.0: Device attached [ 85.473518][ T4804] vhci_hcd vhci_hcd.0: Device attached [ 85.534668][ T4788] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(19) [ 85.534699][ T4788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.534833][ T4788] vhci_hcd vhci_hcd.0: Device attached [ 85.550273][ T4793] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.551083][ T4788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.551388][ T4788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.557187][ T4809] vhci_hcd: connection closed [ 85.557289][ T4798] vhci_hcd: connection closed [ 85.557674][ T4789] vhci_hcd: connection reset by peer [ 85.557896][ T4702] vhci_hcd vhci_hcd.2: stop threads [ 85.557917][ T4702] vhci_hcd vhci_hcd.2: release socket [ 85.557996][ T4702] vhci_hcd vhci_hcd.2: disconnect device [ 85.558132][ T4702] vhci_hcd vhci_hcd.2: stop threads [ 85.558146][ T4702] vhci_hcd vhci_hcd.2: release socket [ 85.558167][ T4702] vhci_hcd vhci_hcd.2: disconnect device [ 85.558384][ T4702] vhci_hcd vhci_hcd.2: stop threads [ 85.558397][ T4702] vhci_hcd vhci_hcd.2: release socket [ 85.558421][ T4702] vhci_hcd vhci_hcd.2: disconnect device [ 85.558458][ T4794] vhci_hcd: connection closed [ 85.558565][ T4807] vhci_hcd: connection closed [ 85.558692][ T4702] vhci_hcd vhci_hcd.2: stop threads [ 85.558710][ T4702] vhci_hcd vhci_hcd.2: release socket [ 85.558733][ T4702] vhci_hcd vhci_hcd.2: disconnect device [ 85.559365][ T4702] vhci_hcd vhci_hcd.2: stop threads [ 85.559445][ T4702] vhci_hcd vhci_hcd.2: release socket [ 85.559487][ T4702] vhci_hcd vhci_hcd.2: disconnect device [ 85.559528][ T4802] vhci_hcd: connection closed [ 85.560611][ T4702] vhci_hcd vhci_hcd.2: stop threads [ 85.560632][ T4702] vhci_hcd vhci_hcd.2: release socket [ 85.560711][ T4702] vhci_hcd vhci_hcd.2: disconnect device [ 85.608393][ T4819] loop5: detected capacity change from 0 to 1024 [ 85.610274][ T4817] loop6: detected capacity change from 0 to 256 [ 85.610518][ T4817] vfat: Unknown parameter '' [ 85.610978][ T4819] EXT4-fs: inline encryption not supported [ 85.611020][ T4819] EXT4-fs: Ignoring removed nobh option [ 85.611045][ T4819] EXT4-fs: Ignoring removed bh option [ 85.640577][ T4819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.692412][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.996375][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.767508][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.782868][ T4847] loop3: detected capacity change from 0 to 512 [ 86.846521][ T4847] ext4: Unknown parameter 'fsname' [ 86.857981][ T4851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.337'. [ 86.878630][ T4850] loop5: detected capacity change from 0 to 512 [ 86.907756][ T4847] pim6reg1: entered promiscuous mode [ 86.911096][ T4850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.913281][ T4847] pim6reg1: entered allmulticast mode [ 86.998145][ T4856] pimreg: tun_chr_ioctl cmd 1074025677 [ 87.003820][ T4856] pimreg: linktype set to 270 [ 87.011347][ T4850] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.084226][ T4850] binfmt_misc: register: failed to install interpreter file ./file2 [ 87.092902][ T4850] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.335: iget: bad i_size value: 2533274857506816 [ 87.127771][ T4850] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 87.158182][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.254384][ T4862] loop3: detected capacity change from 0 to 512 [ 87.308738][ T4862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.343675][ T4862] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.499425][ T4874] netlink: 44 bytes leftover after parsing attributes in process `syz.5.344'. [ 87.508450][ T4874] netlink: 43 bytes leftover after parsing attributes in process `syz.5.344'. [ 87.517459][ T4874] netlink: 'syz.5.344': attribute type 5 has an invalid length. [ 87.535866][ T4872] loop2: detected capacity change from 0 to 512 [ 87.556526][ T4874] netlink: 43 bytes leftover after parsing attributes in process `syz.5.344'. [ 87.645692][ T4877] FAULT_INJECTION: forcing a failure. [ 87.645692][ T4877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.688432][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.718358][ T4877] CPU: 1 UID: 0 PID: 4877 Comm: syz.5.346 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.718397][ T4877] Tainted: [W]=WARN [ 87.718418][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.718438][ T4877] Call Trace: [ 87.718445][ T4877] [ 87.718454][ T4877] __dump_stack+0x1d/0x30 [ 87.718490][ T4877] dump_stack_lvl+0x95/0xd0 [ 87.718520][ T4877] dump_stack+0x15/0x1b [ 87.718556][ T4877] should_fail_ex+0x263/0x280 [ 87.718583][ T4877] should_fail+0xb/0x20 [ 87.718604][ T4877] should_fail_usercopy+0x1a/0x20 [ 87.718627][ T4877] _copy_from_user+0x1c/0xb0 [ 87.718653][ T4877] ____sys_sendmsg+0x1e2/0x600 [ 87.718762][ T4877] ___sys_sendmsg+0x195/0x1e0 [ 87.718807][ T4877] __x64_sys_sendmsg+0xd4/0x160 [ 87.718937][ T4877] x64_sys_call+0x194c/0x3020 [ 87.718972][ T4877] do_syscall_64+0x12c/0x370 [ 87.719023][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.719081][ T4877] RIP: 0033:0x7f6df69ac629 [ 87.719131][ T4877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.719149][ T4877] RSP: 002b:00007f6df5407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.719169][ T4877] RAX: ffffffffffffffda RBX: 00007f6df6c25fa0 RCX: 00007f6df69ac629 [ 87.719228][ T4877] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 87.719245][ T4877] RBP: 00007f6df5407090 R08: 0000000000000000 R09: 0000000000000000 [ 87.719261][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.719275][ T4877] R13: 00007f6df6c26038 R14: 00007f6df6c25fa0 R15: 00007fffd9f18178 [ 87.719301][ T4877] [ 87.734529][ T4872] EXT4-fs (loop2): 1 orphan inode deleted [ 87.763961][ T4879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.348'. [ 87.857741][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.348'. [ 87.863837][ T4872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.869527][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.348'. [ 88.081340][ T3513] IPVS: starting estimator thread 0... [ 88.098761][ T4892] smc: net device hsr0 applied user defined pnetid SYZ2 [ 88.106645][ T4894] smc: net device hsr0 erased user defined pnetid SYZ2 [ 88.194569][ T4890] IPVS: using max 1776 ests per chain, 88800 per kthread [ 88.343888][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.406182][ T4904] loop2: detected capacity change from 0 to 512 [ 88.436146][ T4907] FAULT_INJECTION: forcing a failure. [ 88.436146][ T4907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.480243][ T4907] CPU: 0 UID: 0 PID: 4907 Comm: syz.3.355 Tainted: G W syzkaller #0 PREEMPT(full) [ 88.480308][ T4907] Tainted: [W]=WARN [ 88.480316][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.480332][ T4907] Call Trace: [ 88.480341][ T4907] [ 88.480351][ T4907] __dump_stack+0x1d/0x30 [ 88.480378][ T4907] dump_stack_lvl+0x95/0xd0 [ 88.480443][ T4907] dump_stack+0x15/0x1b [ 88.480509][ T4907] should_fail_ex+0x263/0x280 [ 88.480537][ T4907] should_fail+0xb/0x20 [ 88.480579][ T4907] should_fail_usercopy+0x1a/0x20 [ 88.480608][ T4907] _copy_to_user+0x20/0xa0 [ 88.480719][ T4907] simple_read_from_buffer+0xb5/0x130 [ 88.480747][ T4907] proc_fail_nth_read+0x10e/0x150 [ 88.480796][ T4907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.480906][ T4907] vfs_read+0x1ab/0x7f0 [ 88.480956][ T4907] ? __rcu_read_unlock+0x4e/0x70 [ 88.480981][ T4907] ? __fget_files+0x184/0x1c0 [ 88.481010][ T4907] ? mutex_lock+0x57/0x90 [ 88.481107][ T4907] ksys_read+0xdc/0x1a0 [ 88.481143][ T4907] __x64_sys_read+0x40/0x50 [ 88.481182][ T4907] x64_sys_call+0x2886/0x3020 [ 88.481223][ T4907] do_syscall_64+0x12c/0x370 [ 88.481264][ T4907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.481292][ T4907] RIP: 0033:0x7fe7058ecece [ 88.481312][ T4907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.481339][ T4907] RSP: 002b:00007fe70437efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.481359][ T4907] RAX: ffffffffffffffda RBX: 00007fe70437f6c0 RCX: 00007fe7058ecece [ 88.481372][ T4907] RDX: 000000000000000f RSI: 00007fe70437f0a0 RDI: 0000000000000005 [ 88.481384][ T4907] RBP: 00007fe70437f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.481398][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.481413][ T4907] R13: 00007fe705ba6038 R14: 00007fe705ba5fa0 R15: 00007ffdf8e73978 [ 88.481469][ T4907] [ 88.481690][ T4904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.489886][ T4905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.517402][ T4904] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.577704][ T4905] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.772833][ T4904] binfmt_misc: register: failed to install interpreter file ./file2 [ 88.782742][ T4904] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.351: iget: bad i_size value: 2533274857506816 [ 88.804706][ T4904] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 88.836625][ T4916] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001 [ 88.843906][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 88.843921][ T28] audit: type=1400 audit(1771829268.379:668): avc: denied { setattr } for pid=4915 comm="syz.3.356" path="socket:[9553]" dev="sockfs" ino=9553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.895628][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.914326][ T4905] netlink: 'syz.0.354': attribute type 4 has an invalid length. [ 88.922150][ T4905] netlink: 17 bytes leftover after parsing attributes in process `syz.0.354'. [ 88.933769][ T28] audit: type=1400 audit(1771829268.379:669): avc: denied { ioctl } for pid=4915 comm="syz.3.356" path="socket:[9553]" dev="sockfs" ino=9553 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.991826][ T4922] iso9660: Bad value for 'block' [ 89.007857][ T4922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 89.017499][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.025388][ T28] audit: type=1400 audit(1771829268.419:670): avc: denied { accept } for pid=4915 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.070919][ T28] audit: type=1400 audit(1771829268.529:671): avc: denied { mounton } for pid=4920 comm="syz.2.357" path="/file1" dev="ramfs" ino=10604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 89.154606][ T4892] syz.6.345 (4892) used greatest stack depth: 9016 bytes left [ 89.191409][ T28] audit: type=1400 audit(1771829268.729:672): avc: denied { create } for pid=4927 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.253341][ T28] audit: type=1400 audit(1771829268.729:673): avc: denied { ioctl } for pid=4927 comm="syz.0.362" path="socket:[9595]" dev="sockfs" ino=9595 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.366531][ T28] audit: type=1400 audit(1771829268.729:674): avc: denied { append } for pid=4927 comm="syz.0.362" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.589564][ T3425] IPVS: starting estimator thread 0... [ 89.623343][ T4930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.649375][ T28] audit: type=1400 audit(1771829269.079:675): avc: denied { create } for pid=4942 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.656050][ T4941] set_capacity_and_notify: 4 callbacks suppressed [ 89.656206][ T4941] loop0: detected capacity change from 0 to 512 [ 89.670032][ T28] audit: type=1400 audit(1771829269.079:676): avc: denied { ioctl } for pid=4942 comm="syz.2.367" path="socket:[9624]" dev="sockfs" ino=9624 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.739243][ T4940] IPVS: using max 2208 ests per chain, 110400 per kthread [ 89.770756][ T4941] ext4: Unknown parameter 'nodioreadSnolock' [ 89.881270][ T4949] loop2: detected capacity change from 0 to 1024 [ 89.891233][ T4949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.923311][ T3941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.954804][ T4949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 90.032824][ T4949] System zones: 0-1, 3-36 [ 90.056348][ T4949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.113371][ T4949] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.369: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 90.176184][ T28] audit: type=1400 audit(1771829269.689:677): avc: denied { listen } for pid=4948 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.199536][ T4952] loop3: detected capacity change from 0 to 128 [ 90.382186][ T4956] 9p: Bad value for 'rfdno' [ 90.494712][ T1033] usb 5-1: enqueue for inactive port 0 [ 90.500355][ T1033] usb 5-1: enqueue for inactive port 0 [ 90.644500][ T1033] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 90.756702][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.842114][ T3500] kernel read not supported for file bpf-prog (pid: 3500 comm: kworker/0:5) [ 90.869753][ T4975] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 90.881435][ T4978] loop6: detected capacity change from 0 to 128 [ 90.906732][ T4975] bond3 (unregistering): Released all slaves [ 90.952295][ T4981] FAULT_INJECTION: forcing a failure. [ 90.952295][ T4981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.976295][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.0.379 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.976328][ T4981] Tainted: [W]=WARN [ 90.976334][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.976422][ T4981] Call Trace: [ 90.976431][ T4981] [ 90.976440][ T4981] __dump_stack+0x1d/0x30 [ 90.976467][ T4981] dump_stack_lvl+0x95/0xd0 [ 90.976491][ T4981] dump_stack+0x15/0x1b [ 90.976513][ T4981] should_fail_ex+0x263/0x280 [ 90.976548][ T4981] should_fail+0xb/0x20 [ 90.976571][ T4981] should_fail_usercopy+0x1a/0x20 [ 90.976597][ T4981] _copy_from_user+0x1c/0xb0 [ 90.976622][ T4981] __copy_msghdr+0x244/0x300 [ 90.976674][ T4981] ___sys_sendmsg+0x10c/0x1e0 [ 90.976724][ T4981] __x64_sys_sendmsg+0xd4/0x160 [ 90.976781][ T4981] x64_sys_call+0x194c/0x3020 [ 90.976808][ T4981] do_syscall_64+0x12c/0x370 [ 90.976924][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.976946][ T4981] RIP: 0033:0x7f5c1fe1c629 [ 90.976962][ T4981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.976984][ T4981] RSP: 002b:00007f5c1e877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.977004][ T4981] RAX: ffffffffffffffda RBX: 00007f5c20095fa0 RCX: 00007f5c1fe1c629 [ 90.977079][ T4981] RDX: 00000000040408c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 90.977092][ T4981] RBP: 00007f5c1e877090 R08: 0000000000000000 R09: 0000000000000000 [ 90.977104][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.977192][ T4981] R13: 00007f5c20096038 R14: 00007f5c20095fa0 R15: 00007ffdd1925018 [ 90.977217][ T4981] [ 91.165504][ T4983] __nla_validate_parse: 1 callbacks suppressed [ 91.165593][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.380'. [ 91.356070][ T4989] ip6erspan0: left promiscuous mode [ 91.805654][ T5001] loop5: detected capacity change from 0 to 128 [ 91.902728][ T5013] loop5: detected capacity change from 0 to 128 [ 91.992243][ T5015] IPv6: sit1: Disabled Multicast RS [ 92.115003][ T5021] capability: warning: `syz.5.391' uses deprecated v2 capabilities in a way that may be insecure [ 92.225015][ T5029] vxcan1: entered promiscuous mode [ 92.237200][ T5028] FAULT_INJECTION: forcing a failure. [ 92.237200][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 92.249035][ T5025] loop0: detected capacity change from 0 to 128 [ 92.259938][ T5021] loop5: detected capacity change from 0 to 8192 [ 92.281427][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.2.394 Tainted: G W syzkaller #0 PREEMPT(full) [ 92.281525][ T5028] Tainted: [W]=WARN [ 92.281534][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.281551][ T5028] Call Trace: [ 92.281569][ T5028] [ 92.281579][ T5028] __dump_stack+0x1d/0x30 [ 92.281655][ T5028] dump_stack_lvl+0x95/0xd0 [ 92.281687][ T5028] dump_stack+0x15/0x1b [ 92.281715][ T5028] should_fail_ex+0x263/0x280 [ 92.281815][ T5028] should_failslab+0x8c/0xb0 [ 92.281842][ T5028] __kvmalloc_node_noprof+0x155/0x650 [ 92.281875][ T5028] ? seq_read_iter+0x143/0x940 [ 92.281997][ T5028] seq_read_iter+0x143/0x940 [ 92.282037][ T5028] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 92.282106][ T5028] copy_splice_read+0x471/0x6c0 [ 92.282157][ T5028] ? __pfx_copy_splice_read+0x10/0x10 [ 92.282261][ T5028] splice_file_to_pipe+0x237/0x390 [ 92.282331][ T5028] do_splice+0xc46/0x10b0 [ 92.282358][ T5028] ? proc_fail_nth_write+0x13b/0x160 [ 92.282397][ T5028] ? __rcu_read_unlock+0x4e/0x70 [ 92.282478][ T5028] ? __fget_files+0x184/0x1c0 [ 92.282513][ T5028] __se_sys_splice+0x26c/0x3a0 [ 92.282568][ T5028] __x64_sys_splice+0x78/0x90 [ 92.282597][ T5028] x64_sys_call+0x16ef/0x3020 [ 92.282668][ T5028] do_syscall_64+0x12c/0x370 [ 92.282712][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.282749][ T5028] RIP: 0033:0x7fde8e3ec629 [ 92.282817][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.282842][ T5028] RSP: 002b:00007fde8ce3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 92.282917][ T5028] RAX: ffffffffffffffda RBX: 00007fde8e665fa0 RCX: 00007fde8e3ec629 [ 92.282937][ T5028] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 92.282953][ T5028] RBP: 00007fde8ce3f090 R08: 00000000000009b2 R09: 000000000000000f [ 92.282971][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.282987][ T5028] R13: 00007fde8e666038 R14: 00007fde8e665fa0 R15: 00007ffccce67e08 [ 92.283091][ T5028] [ 92.534474][ T5025] 9p: Could not find request transport: xen [ 92.557758][ T5025] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 92.805460][ T5023] loop6: detected capacity change from 0 to 32768 [ 92.851981][ T5025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.907787][ T5023] loop6: p1 p3 < > [ 93.118188][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 93.140337][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 93.247619][ T5048] loop6: detected capacity change from 0 to 128 [ 93.365791][ T5052] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 93.379147][ T5054] iso9660: Bad value for 'block' [ 93.406123][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.6.403'. [ 93.646006][ T5064] vxcan1: left promiscuous mode [ 94.073290][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 94.073362][ T28] audit: type=1400 audit(1771829273.609:690): avc: denied { getopt } for pid=5065 comm="syz.5.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.130559][ T28] audit: type=1400 audit(1771829273.639:691): avc: denied { ioctl } for pid=5065 comm="syz.5.405" path="socket:[9853]" dev="sockfs" ino=9853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.247396][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 94.326329][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.408'. [ 94.335321][ T5074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.408'. [ 94.336190][ T28] audit: type=1400 audit(1771829273.869:692): avc: denied { read } for pid=5072 comm="syz.5.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.443910][ T5081] tmpfs: Bad value for 'nr_inodes' [ 94.450740][ T28] audit: type=1400 audit(1771829273.989:693): avc: denied { write } for pid=5080 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.451154][ T5081] netlink: 124 bytes leftover after parsing attributes in process `syz.2.411'. [ 94.549678][ T28] audit: type=1400 audit(1771829274.089:694): avc: denied { read } for pid=5086 comm="syz.6.413" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.603502][ T28] audit: type=1400 audit(1771829274.089:695): avc: denied { open } for pid=5086 comm="syz.6.413" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.628480][ T28] audit: type=1400 audit(1771829274.089:696): avc: denied { ioctl } for pid=5086 comm="syz.6.413" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.683799][ T28] audit: type=1400 audit(1771829274.209:697): avc: denied { setopt } for pid=5086 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.716831][ T5098] set_capacity_and_notify: 3 callbacks suppressed [ 94.716860][ T5098] loop3: detected capacity change from 0 to 128 [ 94.906136][ T5113] FAULT_INJECTION: forcing a failure. [ 94.906136][ T5113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.970972][ T5113] CPU: 0 UID: 0 PID: 5113 Comm: syz.2.423 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.971014][ T5113] Tainted: [W]=WARN [ 94.971022][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.971035][ T5113] Call Trace: [ 94.971044][ T5113] [ 94.971055][ T5113] __dump_stack+0x1d/0x30 [ 94.971150][ T5113] dump_stack_lvl+0x95/0xd0 [ 94.971173][ T5113] dump_stack+0x15/0x1b [ 94.971206][ T5113] should_fail_ex+0x263/0x280 [ 94.971234][ T5113] should_fail+0xb/0x20 [ 94.971258][ T5113] should_fail_usercopy+0x1a/0x20 [ 94.971282][ T5113] _copy_to_user+0x20/0xa0 [ 94.971454][ T5113] simple_read_from_buffer+0xb5/0x130 [ 94.971490][ T5113] proc_fail_nth_read+0x10e/0x150 [ 94.971529][ T5113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.971558][ T5113] vfs_read+0x1ab/0x7f0 [ 94.971587][ T5113] ? mutex_lock+0x57/0x90 [ 94.971758][ T5113] ? mutex_lock+0x60/0x90 [ 94.971786][ T5113] ksys_read+0xdc/0x1a0 [ 94.971870][ T5113] __x64_sys_read+0x40/0x50 [ 94.971901][ T5113] x64_sys_call+0x2886/0x3020 [ 94.971937][ T5113] do_syscall_64+0x12c/0x370 [ 94.972021][ T5113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.972050][ T5113] RIP: 0033:0x7fde8e3acece [ 94.972067][ T5113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.972084][ T5113] RSP: 002b:00007fde8ce3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.972104][ T5113] RAX: ffffffffffffffda RBX: 00007fde8ce3f6c0 RCX: 00007fde8e3acece [ 94.972181][ T5113] RDX: 000000000000000f RSI: 00007fde8ce3f0a0 RDI: 0000000000000004 [ 94.972194][ T5113] RBP: 00007fde8ce3f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.972206][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.972219][ T5113] R13: 00007fde8e666038 R14: 00007fde8e665fa0 R15: 00007ffccce67e08 [ 94.972241][ T5113] [ 95.844838][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 95.856093][ T5128] netlink: 236 bytes leftover after parsing attributes in process `syz.3.429'. [ 95.867505][ T5128] netlink: 236 bytes leftover after parsing attributes in process `syz.3.429'. [ 95.886400][ T5133] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 95.912981][ T28] audit: type=1400 audit(1771829275.449:698): avc: denied { cmd } for pid=5127 comm="syz.3.429" path="socket:[10943]" dev="sockfs" ino=10943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.956019][ T5140] SELinux: Context âŒ_Ôø·Áü v‘x% is not valid (left unmapped). [ 95.963868][ T28] audit: type=1400 audit(1771829275.499:699): avc: denied { mac_admin } for pid=5139 comm="syz.6.431" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.098799][ T5150] loop3: detected capacity change from 0 to 1024 [ 96.109043][ T5152] loop2: detected capacity change from 0 to 1024 [ 96.146118][ T5152] EXT4-fs: Ignoring removed oldalloc option [ 96.160677][ T5152] EXT4-fs: Ignoring removed bh option [ 96.165442][ T5150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.201876][ T5159] loop6: detected capacity change from 0 to 512 [ 96.218788][ T5152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.252422][ T5150] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 96.282264][ T5150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.282303][ T5150] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.282303][ T5150] [ 96.282320][ T5150] EXT4-fs (loop3): Total free blocks count 0 [ 96.282336][ T5150] EXT4-fs (loop3): Free/Dirty block details [ 96.282393][ T5150] EXT4-fs (loop3): free_blocks=20480 [ 96.282408][ T5150] EXT4-fs (loop3): dirty_blocks=80 [ 96.282422][ T5150] EXT4-fs (loop3): Block reservation details [ 96.282433][ T5150] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 96.291538][ T5159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.291619][ T5159] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.292198][ T5159] EXT4-fs warning (device loop6): verify_group_input:156: Last group not full [ 96.316948][ T5150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 96.449915][ T5172] loop5: detected capacity change from 0 to 128 [ 96.642077][ T5175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 96.718648][ T3941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.761026][ T5185] tipc: Failed to remove unknown binding: 66,0,0/0:2255657956/2255657958 [ 96.769712][ T5185] tipc: Failed to remove unknown binding: 66,0,0/0:2255657956/2255657957 [ 96.778574][ T5185] tipc: Failed to remove unknown binding: 66,0,0/0:2255657956/2255657958 [ 96.787074][ T5185] tipc: Failed to remove unknown binding: 66,0,0/0:2255657956/2255657957 [ 96.811651][ T5181] loop5: detected capacity change from 0 to 8192 [ 96.922200][ T5196] netlink: 96 bytes leftover after parsing attributes in process `syz.5.451'. [ 96.954245][ T5196] tipc: Failed to remove unknown binding: 66,0,0/0:590978431/590978433 [ 96.963008][ T5196] tipc: Failed to remove unknown binding: 66,0,0/0:590978431/590978432 [ 96.981946][ T5197] netlink: 44 bytes leftover after parsing attributes in process `syz.3.449'. [ 97.093009][ T5201] loop3: detected capacity change from 0 to 128 [ 97.138795][ T5203] FAULT_INJECTION: forcing a failure. [ 97.138795][ T5203] name failslab, interval 1, probability 0, space 0, times 0 [ 97.167272][ T5203] CPU: 0 UID: 0 PID: 5203 Comm: syz.6.453 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.167314][ T5203] Tainted: [W]=WARN [ 97.167323][ T5203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.167338][ T5203] Call Trace: [ 97.167345][ T5203] [ 97.167362][ T5203] __dump_stack+0x1d/0x30 [ 97.167397][ T5203] dump_stack_lvl+0x95/0xd0 [ 97.167472][ T5203] dump_stack+0x15/0x1b [ 97.167499][ T5203] should_fail_ex+0x263/0x280 [ 97.167526][ T5203] should_failslab+0x8c/0xb0 [ 97.167552][ T5203] kmem_cache_alloc_noprof+0x66/0x400 [ 97.167579][ T5203] ? security_inode_alloc+0x37/0x100 [ 97.167638][ T5203] security_inode_alloc+0x37/0x100 [ 97.167740][ T5203] inode_init_always_gfp+0x4b7/0x500 [ 97.167765][ T5203] ? __pfx_sock_alloc_inode+0x10/0x10 [ 97.167826][ T5203] alloc_inode+0x58/0x170 [ 97.167846][ T5203] do_accept+0xa0/0x390 [ 97.167867][ T5203] ? _raw_spin_lock+0x52/0xa0 [ 97.167895][ T5203] __sys_accept4+0xbe/0x170 [ 97.167918][ T5203] __x64_sys_accept4+0x51/0x60 [ 97.167949][ T5203] x64_sys_call+0x48d/0x3020 [ 97.167977][ T5203] do_syscall_64+0x12c/0x370 [ 97.168013][ T5203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.168089][ T5203] RIP: 0033:0x7f9d03e7c629 [ 97.168105][ T5203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.168124][ T5203] RSP: 002b:00007f9d028cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 97.168145][ T5203] RAX: ffffffffffffffda RBX: 00007f9d040f5fa0 RCX: 00007f9d03e7c629 [ 97.168159][ T5203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 97.168171][ T5203] RBP: 00007f9d028cf090 R08: 0000000000000000 R09: 0000000000000000 [ 97.168220][ T5203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.168233][ T5203] R13: 00007f9d040f6038 R14: 00007f9d040f5fa0 R15: 00007ffc681ca658 [ 97.168252][ T5203] [ 97.456993][ T5212] FAULT_INJECTION: forcing a failure. [ 97.456993][ T5212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.470532][ T5212] CPU: 0 UID: 0 PID: 5212 Comm: syz.3.457 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.470574][ T5212] Tainted: [W]=WARN [ 97.470582][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.470595][ T5212] Call Trace: [ 97.470602][ T5212] [ 97.470610][ T5212] __dump_stack+0x1d/0x30 [ 97.470669][ T5212] dump_stack_lvl+0x95/0xd0 [ 97.470729][ T5212] dump_stack+0x15/0x1b [ 97.470807][ T5212] should_fail_ex+0x263/0x280 [ 97.470831][ T5212] should_fail+0xb/0x20 [ 97.470855][ T5212] should_fail_usercopy+0x1a/0x20 [ 97.470913][ T5212] _copy_from_iter+0xcf/0xea0 [ 97.470939][ T5212] ? __alloc_skb+0x4f6/0x690 [ 97.471014][ T5212] ? __alloc_skb+0x200/0x690 [ 97.471038][ T5212] netlink_sendmsg+0x4ae/0x6f0 [ 97.471209][ T5212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.471257][ T5212] ____sys_sendmsg+0x5af/0x600 [ 97.471319][ T5212] ___sys_sendmsg+0x195/0x1e0 [ 97.471364][ T5212] __x64_sys_sendmsg+0xd4/0x160 [ 97.471399][ T5212] x64_sys_call+0x194c/0x3020 [ 97.471432][ T5212] do_syscall_64+0x12c/0x370 [ 97.471475][ T5212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.471540][ T5212] RIP: 0033:0x7fe70592c629 [ 97.471560][ T5212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.471582][ T5212] RSP: 002b:00007fe70437f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.471606][ T5212] RAX: ffffffffffffffda RBX: 00007fe705ba5fa0 RCX: 00007fe70592c629 [ 97.471682][ T5212] RDX: 00000000040008c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 97.471698][ T5212] RBP: 00007fe70437f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.471749][ T5212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.471761][ T5212] R13: 00007fe705ba6038 R14: 00007fe705ba5fa0 R15: 00007ffdf8e73978 [ 97.471780][ T5212] [ 97.786347][ T5226] loop6: detected capacity change from 0 to 2048 [ 97.908364][ T5230] sctp: [Deprecated]: syz.0.460 (pid 5230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.908364][ T5230] Use struct sctp_sack_info instead [ 97.959831][ T5226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.991082][ T5226] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.057732][ T5226] netlink: 28 bytes leftover after parsing attributes in process `syz.6.462'. [ 98.091888][ T5226] netlink: 28 bytes leftover after parsing attributes in process `syz.6.462'. [ 98.169683][ T5242] loop2: detected capacity change from 0 to 1024 [ 98.445544][ T5257] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 98.905159][ T5257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5257 comm=syz.0.472 [ 99.119767][ T5273] loop6: detected capacity change from 0 to 1024 [ 99.140092][ T5273] EXT4-fs: Ignoring removed oldalloc option [ 99.174583][ T5273] EXT4-fs: Ignoring removed bh option [ 99.190745][ T5277] netlink: 'syz.2.478': attribute type 21 has an invalid length. [ 99.202905][ T5277] netlink: 144 bytes leftover after parsing attributes in process `syz.2.478'. [ 99.220028][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 99.220042][ T28] audit: type=1400 audit(1771829278.759:759): avc: denied { create } for pid=5272 comm="syz.6.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.307698][ T5286] tipc: Started in network mode [ 99.312772][ T5286] tipc: Node identity c2687f21528a, cluster identity 4711 [ 99.329661][ T5286] tipc: Enabled bearer , priority 0 [ 99.344285][ T5286] syzkaller0: entered promiscuous mode [ 99.435846][ T5286] syzkaller0: entered allmulticast mode [ 99.453838][ T5286] tipc: Resetting bearer [ 99.775830][ T5286] tipc: Resetting bearer [ 99.806220][ T5286] tipc: Disabling bearer [ 99.862313][ T5273] ================================================================== [ 99.870478][ T5273] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 99.878540][ T5273] [ 99.880909][ T5273] write to 0xffff88811b07f2ac of 4 bytes by task 5288 on cpu 1: [ 99.888570][ T5273] xas_set_mark+0x12b/0x140 [ 99.893124][ T5273] tag_pages_for_writeback+0xe3/0x2e0 [ 99.898644][ T5273] ext4_do_writepages+0x6b9/0x2840 [ 99.903820][ T5273] ext4_writepages+0x18f/0x320 [ 99.908631][ T5273] do_writepages+0x1c6/0x310 [ 99.913270][ T5273] file_write_and_wait_range+0x178/0x2f0 [ 99.918962][ T5273] generic_buffers_fsync_noflush+0x45/0x130 [ 99.924908][ T5273] ext4_sync_file+0x1aa/0x6b0 [ 99.929611][ T5273] vfs_fsync_range+0xc5/0xe0 [ 99.934230][ T5273] ext4_buffered_write_iter+0x34f/0x3c0 [ 99.939821][ T5273] ext4_file_write_iter+0x380/0xfa0 [ 99.945062][ T5273] iter_file_splice_write+0x6c4/0xa80 [ 99.950460][ T5273] direct_splice_actor+0x156/0x2a0 [ 99.955590][ T5273] splice_direct_to_actor+0x311/0x670 [ 99.961155][ T5273] do_splice_direct+0x119/0x1a0 [ 99.966028][ T5273] do_sendfile+0x382/0x650 [ 99.970473][ T5273] __x64_sys_sendfile64+0x105/0x150 [ 99.975695][ T5273] x64_sys_call+0x2dc4/0x3020 [ 99.980491][ T5273] do_syscall_64+0x12c/0x370 [ 99.985132][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.991053][ T5273] [ 99.993398][ T5273] read to 0xffff88811b07f2ac of 4 bytes by task 5273 on cpu 0: [ 100.001053][ T5273] file_write_and_wait_range+0x130/0x2f0 [ 100.006725][ T5273] generic_buffers_fsync_noflush+0x45/0x130 [ 100.012676][ T5273] ext4_sync_file+0x1aa/0x6b0 [ 100.017376][ T5273] vfs_fsync_range+0xc5/0xe0 [ 100.021990][ T5273] ext4_buffered_write_iter+0x34f/0x3c0 [ 100.027575][ T5273] ext4_file_write_iter+0x380/0xfa0 [ 100.032812][ T5273] iter_file_splice_write+0x6c4/0xa80 [ 100.038210][ T5273] direct_splice_actor+0x156/0x2a0 [ 100.043348][ T5273] splice_direct_to_actor+0x311/0x670 [ 100.048746][ T5273] do_splice_direct+0x119/0x1a0 [ 100.053614][ T5273] do_sendfile+0x382/0x650 [ 100.058054][ T5273] __x64_sys_sendfile64+0x105/0x150 [ 100.063278][ T5273] x64_sys_call+0x2dc4/0x3020 [ 100.067986][ T5273] do_syscall_64+0x12c/0x370 [ 100.072687][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.078606][ T5273] [ 100.080946][ T5273] value changed: 0x02000021 -> 0x04000021 [ 100.086673][ T5273] [ 100.089009][ T5273] Reported by Kernel Concurrency Sanitizer on: [ 100.095179][ T5273] CPU: 0 UID: 0 PID: 5273 Comm: syz.6.476 Tainted: G W syzkaller #0 PREEMPT(full) [ 100.105968][ T5273] Tainted: [W]=WARN [ 100.109814][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.119904][ T5273] ================================================================== [ 100.572157][ T28] audit: type=1400 audit(1771829280.109:760): avc: denied { mounton } for pid=5287 comm="syz.2.482" path="/114/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 100.659918][ T3425] kernel read not supported for file bpf-prog (pid: 3425 comm: kworker/1:5)