last executing test programs: 2m56.150614638s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_pgetevents(0x0, 0x800, 0x2, &(0x7f0000000180)=[{}, {}], 0x0, &(0x7f0000000380)={&(0x7f0000000340)={[0x80000001]}, 0x8}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfbf, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xf9d, 0x0, @opaque="c36188db1b21bc2399f98fd1cd989dfe01d7c3d227f404606b4c0592153f0f80fec6842533dba5beffd4d44f8a00d33ec86feb6fe8cca450d31cd8c1745d419c207ef81b6728feba48c1fa7fa537d8fb647d47e6ebdaa143eb866356e0ff922826aa225e5340c0f97510244713ba9400073c39f330c81fa96c48deb4f30d7406fd96c1272003a31f184ca6e6bd9856e8db9c0243fc5b81bdd97ed886f408a02eec1a17a5dd8cae119e1d76a9c0ea5baf2422f11334d516a9b24f4f867d058dbec1bb9e79d0192cab3a15f58dc06f047ee3f46a16c3da51b886c2d7224a053ed216e2910176a7f8732ebeef55a0c4e7c10aaead641c7aca6d383669a682e39859e0688b21592cdcfbce7de55d056edc4f50f609f2ae068497836808674ef7cb510aa1d9f74e718e004b04f9005918128b2b127cf89cdd56805d6b57d77c09208e344d2229ef59ec750d4fefca61f16005dbcf229d736c9a4f58aba66c15b603ea8140a0f53aa757e62ec84f7dcf6639a14264213d6b7bca298ea620f6071142bb19e30941489b44cc37593fc805abcfb76a8a59644f54bff1cf632b56625211cfc265a57795d10dca69236c200425b54150996460c30d92b59726097256d130c565160aad5a1bbba56a7a8429e2d8a05395b3374b37aac913af186e3e984147845a9ba90e6843d3f3022b5e04ba458fa54e7b6fe39cfdf73711b7deab0de9a7ab2f7b84ed53ca2536ad0550cff43563a0d387fd16e63974dcf91d113806ac8b693734fb5a439b361544443249650f723408a27b291756052dddbeb2ec97840db4b22f885f12580dc83963dc8eae77994753b496b583b015711dcb0540774884236664ab3dbf308f3449e87c7304b3b404c24413c7ea3f07c232345a64bcdee63867c78a54191139c9fe63f5aaf7da500b2b0553f20eecec18e90f1bb3254648ef3663a6c18d4d0f07b3cae2d18d3a4e764c0a4c90523615f950cd7a4c20974ddceb72f7b8a1830607c5bc6d1c2dead238029f093b7579c428ed492f783657df9eea57da574edbcae25f55ff2cd6ef2923215ddfa569e900ac72dbb1530d5a737cc065204d6f4b0e965488619f966899cccd218eb9c26974d885fd8ccdd482f4245c7201cd2f13e5aef1efaad1a70a2a6e5da24bbf349453bcd71b677d4fa4e2881699a4f1d010c934eccd1453b07e4617636094a5d9dcc645fea2095e7147d07aafdfd5f0e260abe3ef02280bae5398d51a70565a4443c7139c514fcb6bd004bfa69b3c6239783f53c72c34b37dcf6a124ae4bf26326f929635553b72b3176985584d2e424bfa62f967d9da7ca4864c24bf58011a2d279d67b25a36f8889125cfb6ecff8737a91c44c29f4a49b259388f400db063336bad95ade5b2742e6fa6ec1c0be051d6b946fc812d113423060e492944bb29ab0dcc9a468bac617ee8beec89c6d4747777b46ad0defbb679c39bc31524c6e35a0100a5bc5dfbb771c62dffe3d8cee8d47d0fde520a266fa675d58ad893bd3878f92694c75f2d4313ef8f850906b1b303078856e8362022c2df4a3003857c41efc848dbebcb78213c582a7693e74de76fff13734b4f71fe93d5e8a402adf6bc29563ca500013a2fb739bcd00916ca99f57a590b58cf9ab5dadd040d6222c553b83fa61d127918cb388a831c41d243d27f4037cbf911e3e9e94d5ebc39ef02b1f2606c7fc46c1952c529aab3886b96c04abd5be74f2fce3bab3d96e714c9b4eac73f6c4f781c0407289992a057cb62c9746c35abf8a390aa4f7e7ad1f16ffdee3ec2d1300c9ce0377b6bf645adcf064977ba158064285c399ccc5e0af6d55726ab8c7105374a2b1b4dc69f87360ddd67676108c5622a7a29a243ff2f9eec13446299a5fc2882825dc68514c0e1b3ea0c1342dc85e9c78b03323d12b0e3e8ac1b9d03b4fa31998a2e7c355b0a9623d3eb8cfd5e9c634d6a0e89d525f89722a00f51e4d79870d71d468087fa4416037a26cf0f052d94abd2e239e2a71a7354d5ff2e49373127bf4ce959bd661aa607149564817393ea26cdc94a7ea2e67cd6781daf4586366d036f5531bac80e9c0fdfe4129e445c82ed77c8a55effc523dec5da0412d1f8389ffa390bb0fc3c83502bed630693337cacd081d692abdc8416f1943907036a01331544c1b804d31e1fb148e9a1bc3909e71985bec78fb69eaee933701522c8da9b20e5cbc19c14f7f65d8fd0c8d133a58194dd758556e094e77010d315f6b6ab149fa898482f1b3b7e3eeafea99527293ab6a563d5cf3d049ddd9619e0dd221195280aecf0299b77b85d2393516d84d92d4f03f118f9712f5c072eed8ca31bfa5f05dcd5b7d408d1650b758d60c32aa39646c3bc5611d2d7d43cf31ff6a3cc8dc2efe6d2c968b1202408d807b6a01f6848e10ec8a3ee69a02348035dac5c5f5e6247092275f435cecabde71cc2b8d186df01032a195ecbbb92cc093b4e44445dbd1c2f01622e08dbee78bb545d1e29c7d354d51610bd5f5f48a4e42c0924a5ad9577080c5aafedafc7e971d571d2fc7ce41dff9120753dc221d1a4a9552180a52339dfaf697b1721346f34f1ccfc72f7a9d6cb2261a8b1deabe124cf3c18494fa988bd770726adabf7b0e57d09c0ef5a3bbeee271319218a386d7dadd0daa2c40a7131115a1a7c0c0ae654512f61414b6dcfc5d74afb2071cfdf09b00457a5cf04489dc990a0307e0cc46f90f65205457588a71fd4e772f5e5aa6d0e335debac25f40d48d016f285c2e04f36fc7b8d9419c62123e47a4b9acd40a6dcbbb0d1b8f2765e4424ad848d740fd401bc49c0acc971d1de476e8c586fda0eccf35b29a9a326818b245d75ce36b89b18407bd8f0309f5612a97ca15db0eda6048b8f46e914bdad927c2b636673de0966a09c0ecb7a5fc287af412cc427e598b65ba74000eb394eb95a2f114da106e343edb1a46d1debdf3dae2f9ef6e60f7346c2c53411f2e2e27b1f9e2c020a99442a626f94f5202a5f5023e4aac49d8ceaec8074c223707f80a72be638413c80561e6909e489dd9030f8a110b82bf63e576a73f73cdc6b539b86745ff217ce5eafd18137fc2664e2be2320713417ef1c988486acfe1ae51d21ef4ff022f134d0a817a45b862562cb58e2170d1b906358fa30131e8d23bd24b2124c80f204f8f0d3f74a408aff08f567773e95dce095a2fd61a4d7441fb1a54689b34f3ff163e4686f8f1dfec0f066e2d79cf7354a0a2ad791bc0d089adf16711f7a5a9dc66689f55ca4aaf78eca23865180e6cc87ae773bb6c3fffb71138381377ce40ff7810f015b6f2d2d1f01ef64681825eba419ab413287320f61894ded416bb70a8d6fa164d065ec8d0866c7f9f2387efd74a6eec64e4e081d2a6d2937ba00119472ad0e615bbf7df0a6406f11a01d69a95a13e12aac40eaaf07c3bc3f9a73b931ed9a2a302366e5eee5b23775fc2f253d9ef8f22debeaca87a5af2259c649ce1c2cc8d599a245760739d9d4453409707a5a5fb17e79f2461f919793ddb2fd941a2576b7a929915469faf382fbfc0d6df2c1e301a1d74eef0f8e48a5bff8176f14e9a50432f3b3aa1db9a759c51b712645259cd1f29ccc7bca24b4fdaeb2ee8f7df72b5a60d40d49a1216001395699c6f56a060c65b00d7663e9052968aaff057440978378f8ff83acc4e2e462c9a5083c7ed190dcf5b698d6d045827a88c68ef4215cb5c381ad5f233f01df5f96be0d14bb7b15a5ef60abd5a1c5145a761e9ce47152b05466eb5dd397892fb0e6fb2dd5bc5746c5bc02ff7ddce08f296ccf2fb64b60f724185ee458ccf3a2faedc912af18fc0d71f2e99bf7e1c795b3949a5b2848383d1d905b7ec0a7d00f727caaf392bab8b2c21a16079977b9597c701b42b2b7dbb6d0e882d6d0fc21c88c7ec2b6bf1164cd221c20cd31d54e8e09705b0084c12092d3220e4b16747106c9e0694c8704053e89b99fb1c403d7c848140b941879f544e896f753a12cf00ce0c6c0091fe050258b73f39a6c5e45131386d78ccaed5bd904aff197756cdf6da0a640dce609e394e41dd044a35d6a286e1619e5faa06239006c13b559c737285a1680fbd9ff4b3447808fb6fa025572ffd9f15bd37b4470724a9a573aa0c44b65db5dea2493e88e661765e6cee71b0b662dcb0a2456cb59a134e9301f7ecb44f84291bad3d0f6a229ab4a6d45e119e0e465a4d3a01eb960ded6df76a35da9c188ec1398d0ce36fe8b6c9878a92dd007c9738e3f6640c9190e819707aedae6cbfa99dac49cc598066211d231de93b960620037f4a35a3c94f188020fb2e40cc38b3896999f7cb34d7ebded96f0c696cacc12ae867850d99fe0cf2fa6eb9dd71cfd518586ee772b73bedbdc16e438bfcdbedd5bda2f9698f94e1cc85d9560e0410f21f3ca4dadeefcb1539f0126bd119e65b81654c58b0e168797c7edfd4bb72f44df3d5e0a967155d5cce7ddd90dc4e5db48a6fdf3045aab0855c930d85b038fc999a0e6c5da88aa2180c0fe413fc92cf665e0d12bbc166186669b11abb1cc7ed40c360889f5e7a74e58cdc001650145cdbed086dc2f85ba24d70b6dac47c17876a273b98f1b345f503e82b51768720337a689f70a237f8b6476c96c10335d81edc4a063fbbd878ed5108115e38e690f37cac99110fdbcbc1ec0f52afed136b44d2b12e70ca067ad87da23f9f07a79c0582694bee1d7b9d1ded93cae3dc1d509477706414130039bb9f6d6c91ea5f7538d1993373dca2dfb5c40b1ad1305004c4c81931bec9363ba166feafa32e3eee9b26b22778b6d40c11ec09eb57597c4da7ecf049d58cac998cf27498bf0d414ff444f7355d7ffdb5aebcd1f8809ca1aa5ac9b52c6dd4329e51ffbf0368f1d6e1615a1256ad321b38c591218366a20ac6ad33641c6db0e51fa7e57aa3f6f16da3a94edf130a8eb2fe714620d2687388d5c5c4dbaaa852864cd3ab38d067002b9c15268fd4635d38ba6a9eb96bc55dcb4d8df9590ae8bf2b2e5a3ca5d98532b3ec4aeb9cfc4bac61728c3bf41a094afd26151c9859c6106a0e668682e3b0c18b21a1af2ffb206c60146846650c7579a3b01ac6bbe658d17d5453d7652e5dc0dc89f7cd5b76c810a4a111d51fe85a30470f1ed67dd30fdd6d0900c2e729040cd65634c8376377528275542187f9dde3fa779224804c1f43fbbbe7f0c568f7b0b6291ed2d567ded326aaa67ffce3529c8f11251c9d562cd02739935c8e303c1c997d8820876815c763d7802e85885966f5f7e38086b7218c11d65e0f9133ef47cbe1222ea8b0652e924d8924544a88a26461e1ad24bfbc7194005b4fb3fe7344c1e68a5034aaeaedfd46c2204e465617391835af34ec320bd7dad276ae9d7fb1f09aa3dc066bb6aa153394b3edb09491fa913d0e4c158baa16e66809180420596f59f20224f61cce7c1c4bd73d6da82ce9129bc8dab8ece3a255185061b6830c99d73a73563c8880ca33abc07e36219398fb6641c39b22a099920219e66e1130d14a8bbb6f9ee2eba93ee50025970627781b38e5f6b82d7ddd5ae2f6612701758ffff9fb706e599ae109998bbba94505115aa09f36e97adf0ce23a03ec8ecda201b7e2be501122dfafecfdae775f609c215e35a16236214c03053e8ec"}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2m52.615087661s ago: executing program 3 (id=252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000fc01000000000000000000000000000100000000000000000000ffffc4c723d30000ecdf000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) 2m50.377942597s ago: executing program 3 (id=258): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf3000000000000015000200091b00003d030100000000148701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m50.367171628s ago: executing program 3 (id=260): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2389df4d9a41a528, 0x1, 0x1, 0xfffe}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x4, @empty, 0x4, 0x2}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000002c0)) getpeername$inet6(r1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000c2d36d8e00000000000000000000000000000000000000000000000000000000000000000000f9ffff00ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff"]}, 0x108) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101801) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noquota}]}, 0x1, 0x440, &(0x7f0000000780)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffff25d8, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) ioprio_set$uid(0x3, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00001cb000/0x1000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000666000/0x2000)=nil, &(0x7f00006c3000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000063000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = getpgid(0x0) r5 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x900}], 0x1, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfffffeb6}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) rt_tgsigqueueinfo(r4, r5, 0xf, &(0x7f0000000140)={0x2d, 0x5, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49845) r6 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m49.969074128s ago: executing program 3 (id=267): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0x4, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000600)=ANY=[], 0x1, 0x1fc, &(0x7f00000008c0)="$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") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) listen(r2, 0xd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/snmp6\x00') socket$isdn(0x22, 0x3, 0x22) mount(0x0, &(0x7f00000001c0)='./bus//file0\x00', 0x0, 0x1000000, 0x0) lseek(r8, 0x87, 0x0) listen(r7, 0x8) r9 = accept4(r7, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020603000000000000000000000000060900020073797a3100000000050001000700000014000780080013005607497408001240000000000500050002000000050004000100000012000000686173683a6e65742c706f7274000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x6, 0x6, 0xffffffff}, 0x10) 2m49.35984926s ago: executing program 3 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000fc01000000000000000000000000000100000000000000000000ffffc4c723d30000ecdf000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) 2m49.293074463s ago: executing program 32 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000fc01000000000000000000000000000100000000000000000000ffffc4c723d30000ecdf000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) 1m13.152099173s ago: executing program 2 (id=1292): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x28400) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000100)="32eb1509aa02113766eea6bbc2038ebe809fe53889f498567be696498047969e3cde4f54", 0x24, 0x4000000, &(0x7f0000000140)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x2}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0xfffffffe, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffc, 0x30, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="754840edca7b2758ff85183214c3bc13bc4ce67aaf818cb059d7f31be573bb06ddc855322d23b67c4a9be1e8b1050352", 0x0, 0x2, 0x10003, 0xfffffffd, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 1m13.053894009s ago: executing program 2 (id=1293): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010020000000000000000000000000000000020000000000d8799d471f3903a3c496ef7b4b7393a89696480d2747821d8526732ce99a65c65c35a0c1f5db83f7cd8592a8e992fe29c3b86ad1de01e1e022ead02b437dc3850e059e793bda3a2ca2f9e149d35724300e603d5c5c2375370be1bed4b33ab57bb265a7cff528523ae8db8a796fda414778b79cc035e4d07eea8acdefe796f264305166baa8f29297ce30123567d2f6fa41c678ceeecf1ecc1d60c21b2f96e3323e0738132f6a5680579b4de8723ed68576bafb1ffb4e04a94caa9fb64614cd0c2d34b432a93f089d1f7f4a30760d533dbae1ae"], 0x0, 0x1a, 0x0, 0x2}, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c01000010000100feffffff00010000fe8800000000000000000000000000010000000000000000000000004f99a41b0001d5ec4e230005000000603a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x28400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffc, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000005c0)="b608000000b7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) 1m13.02006221s ago: executing program 2 (id=1294): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = io_uring_setup(0x5654, &(0x7f0000000140)={0x0, 0xee9, 0x240, 0x3, 0x2f5}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x44002, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280)=[r5, r2, r1, r0, r6, r2, 0xffffffffffffffff], 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m12.780859603s ago: executing program 2 (id=1299): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$eJzs3c9rHFUcAPDv7Cb9GZuotdraarSKwR9Jk/6wBw8qCoIKgh7qMSZprd020kRoS9AoUs8F7+JR8OjJmxdRD+IfoOBRCkWD0FQUIrM7k2R/Jdsm6TbJ5wPbfW/2zcx7M+9l37y3Mw1g0+pN/0kiuiLi14jorkSrE/RW3mZnpkZuzEyNJDE39+afSTnd9ZmpkTxpvt7OLNJXiCh8msTzSf1+Jy5eOjNcKo2dz+IDk2ffH5i4eOmZ02eHT42dGjs3dPz4kcODzx4bOlq1XoNN1dneYFlaruv7Phzfv/eVt6+8PnLiyjs/fp1ua8+ByudZOba0sPmIG3W5eDViui5Zb3rU/porq/3s8ZZ2tH7ctSicdLQxI9yUYkSkp6uz3P67oxgLJ687Xv6krZkD1lT63bS1+cfTc8AGlkS7cwC0R/5Fn17/5q/47zZ1Pu4A115YuOifnZkamZ0fz+iIQra8cw333xsRJ6b/+SJ9Rc14CgDAWij3bZ6u6f+VFWJP+b0y17Erm0PpiYi7I+KeiLg3InZHxH0R5bT3R8QDlZXnulvcf29NvL7/U7jaMM+rJO3/Pbeo7zc7M1U9HFaInmL5rTLH0ROdycnTpbFD2THpi86taXxwiX1891LzaaXF/b/0leahJgNXOyoL5jcyOjw5vFoH4drHEfs6qsqfHf9kfiYgrQF7I2LfzW16Vx44/eRX+5slalT+vC+8rFWYZ5r7MuKJyvmfjpry55Im85NpHT82dHRgW5TGDg3ktaLeT79cfqPZ/ldU/lWQnv8d1fW/JkX330llvrYzSqWx8xM3v4/Lv33W9Jpm+fLP1/95af3fkrxVnrP++d3KsgvDk5PnByO2JK+V41lj2Rbp8qGFdS9k8Tx9Wv6+g43qf6H8Ny6y8/9gRKSV+EDEroci4uEs749ExKMRcXCJ8v/w4mPvLVH+JJJo6/kfjcbtP9OTLJ6vv4VA8cz33zabt2/t/B8pz673ZUvKf/+W0WoGV3j4AAAAYF0oRERXJIX+Sri3KwqF/v7Kb/h3x45CaXxi8qmT4x+cG63cI9ATnYV8pKt70XjoYJL//r0SH8rGivPPD2fjxp8Xt5fj/SPjpdE2lx02u53V7T/y9p/6o9ju3AFrrvk82hK3BgAbQm37L7QpH8Dt18rvaFwLwMbUoP0veobGv9W3CtU/5wJYxzoahIDNoVGr/6gmXtf/b/SULWDdqW//vzd4ZB2wEen1w+al/cPmpf3DprSS+/pvPZDfLLBk4jyLDdNsa/kO/80SyB8Ps5b72h4LS6JQDnRF07V2tOto5GPVSybubmWDEfHNivNTXIVypS2meklxuQKuMNDqf4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZ/s/AAD//16M4Cg=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x5, 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) mount(0x0, 0x0, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000140)={0xb, 0x4, 0x2081, 0x31e, 0x80000008f}) 1m11.778522515s ago: executing program 2 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1m11.528012338s ago: executing program 2 (id=1321): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x80002, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000ac0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c696f636861727365743d6b6f69382d722c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c636f6465706167653d3737352c636865636b3d7374726963742c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c706f73697861636c2c6673636f6e746578743d756e636f6e66696e65645f752c736d61636b6673666c6f6f723d2f2c005180f4e7b2da8c3f2fe272df26ff9ca497387fc9af57e51670999e8bc199be03b478bd734a1ad4517930c37f173275bdc3477cead3e348e86c54d3ca19a73e96d5a4291dd83fea6bbb7174e668baf7433889e34758bb3912cc", @ANYRESDEC, @ANYRES64], 0x1, 0x276, &(0x7f0000000840)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000280)={0x0, 0x4c1d, 0x10, 0x0, 0x200004, 0x0, r3}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20004804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c040800}, 0x2000800) socket(0x1, 0x803, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a310000000008004100727865001400330067726530000000000000000000000000091b3794bae77d69b689c5938293e3551e0bfa367021b61e18957d0fe4a81c"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000021, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x1a, 0x4, 0x3, 0x5, 0x1014, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@ssrr={0x89, 0x1b, 0xa1, [@broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @local]}, @end, @lsrr={0x83, 0xf, 0x8b, [@dev={0xac, 0x14, 0x14, 0x42}, @empty, @local]}, @timestamp={0x44, 0x10, 0x31, 0x0, 0x9, [0x8000, 0x4, 0x100]}, @ra={0x94, 0x4, 0x8}, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x8, [{@local, 0xfffffffa}, {@loopback}]}]}}, {0x4e26, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "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"}}}}, 0x1022) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m11.47554668s ago: executing program 33 (id=1321): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x80002, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x1, 0x276, &(0x7f0000000840)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000280)={0x0, 0x4c1d, 0x10, 0x0, 0x200004, 0x0, r3}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20004804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c040800}, 0x2000800) socket(0x1, 0x803, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a310000000008004100727865001400330067726530000000000000000000000000091b3794bae77d69b689c5938293e3551e0bfa367021b61e18957d0fe4a81c"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000021, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x1a, 0x4, 0x3, 0x5, 0x1014, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@ssrr={0x89, 0x1b, 0xa1, [@broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @local]}, @end, @lsrr={0x83, 0xf, 0x8b, [@dev={0xac, 0x14, 0x14, 0x42}, @empty, @local]}, @timestamp={0x44, 0x10, 0x31, 0x0, 0x9, [0x8000, 0x4, 0x100]}, @ra={0x94, 0x4, 0x8}, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x8, [{@local, 0xfffffffa}, {@loopback}]}]}}, {0x4e26, 0x4e20, 0xfac, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "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"}}}}, 0x1022) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.135023404s ago: executing program 6 (id=2047): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r3 = socket(0x29, 0x1, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="290b000000000000000020000000050003"], 0x1c}}, 0x2404c044) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0x188, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x350}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9}) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x50, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) fcntl$setlease(r7, 0x400, 0x1) 4.091945918s ago: executing program 6 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000040bfa200000000000007020000f8ffffffb703000008000000b7060000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.933108986s ago: executing program 6 (id=2068): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x381240) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000340)=""/138, 0x8a}], 0x2) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x8004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) close(r4) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f40)="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", 0x1e5}, {&(0x7f0000001300)="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", 0x5b4}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) 3.397342974s ago: executing program 0 (id=2073): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0xcfff7ff8) (fail_nth: 1) 3.174019955s ago: executing program 0 (id=2076): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x3, 0xfffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs_stats\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1b, 0xffffffff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000100000f030000001700001d440000000000007a0a00fe000000001f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.353777638s ago: executing program 5 (id=2082): clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) close(0xffffffffffffffff) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000850000000700000095000000000000009500000018000000ce8920f29328b7ddd3856df677997bc5cafa405a82061c5386992ff41f5524a21802a859883d24cc98e697e9e2aa06a6ade7a79a62029a98a8e09c7c6edefac53c5f767377cfcd6bb593240100378e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 2.353010468s ago: executing program 6 (id=2083): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r0 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xa01f, 0x100000000) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x837, 0x248000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7961000000087300fedb9f257e0000000c009900070000001700"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000380)={0x24, r7, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x440) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES16=r2, @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x80}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0xc) (async, rerun: 32) connect$x25(r9, &(0x7f0000000a80), 0x12) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64) r10 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3c26c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0x1, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3929, 0x2, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r10, 0x0) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) eventfd(0x0) 2.269711192s ago: executing program 6 (id=2084): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbf8, 0x3b, 0xb6b, 0x800c1, 0x2, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7ff, 0x3, 0x63d, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x881, 0x79b, 0x5, 0x1, 0x7e, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x7, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xf, 0x84, 0x100, 0x5, 0x252, 0x81, 0xfffffff8, 0x4, 0xa0006, 0x7, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x5, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x82, 0x42, 0x7ff, 0x4, 0x4, 0x401, 0x66cd, 0x1000000a, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x82b) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x212a7, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x80000, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x6, 0xef7e835, 0x46, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0x8, 0x1}}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x12c) fcntl$notify(r5, 0x402, 0x8) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2}) r6 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/10, 0xa}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x10022, 0x0) connect(r6, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @loopback}, 0x2, 0x0, 0x3}}, 0x80) renameat2(r5, &(0x7f0000000440)='./file0\x00', r5, &(0x7f0000000000)='./file7\x00', 0x4) 2.183645887s ago: executing program 0 (id=2086): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa00000000000000000000f0000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a00010090000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}, 0x1, 0x200000000000000}, 0x24000058) 2.098128772s ago: executing program 0 (id=2087): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x102, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.892141312s ago: executing program 4 (id=2088): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0xcfff7ff8) 1.784551348s ago: executing program 4 (id=2089): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x28400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffc, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000005c0)="2808000000b7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5}) 1.685849042s ago: executing program 4 (id=2090): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r2, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000580)={&(0x7f00000003c0)=[{0x1, 0xdf, 0xfff, 0x7, 0x138}, {0x5, 0x2, 0x6, 0x0, 0x8cd3}, {0x75, 0x4, 0x7, 0x0, 0x2}, {0x6, 0xb, 0x0, 0x8, 0x6}], 0x4, 0x28, 0x7, 0x4}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000280), 0xf}, 0x0, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x204, 0x0, 0x10000, 0x0, 0x3, 0x80000001, 0x169f, 0x0, 0x81, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x2, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write(r4, &(0x7f0000000340)='\n\x00', 0x2) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x90) connect$qrtr(r1, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) socket$inet6_udp(0xa, 0x2, 0x0) 1.658083694s ago: executing program 0 (id=2091): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1b, 0xffffffff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.53824898s ago: executing program 1 (id=2092): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc5, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010062726964676500fc1400028006002700000f"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.085891904s ago: executing program 6 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x5, 0x800) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000000c0)=""/104, 0x12) sendfile(0xffffffffffffffff, r4, 0x0, 0xffdf) bind$packet(r1, &(0x7f0000000440)={0x11, 0x10, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @remote}, 0x14) syz_emit_ethernet(0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="abbbbbbbbbbbbbbbbbbbbbbb810010000011aaec63bcfb580017bcfb98de84bcc2f81801af1c18aa13b509838623d4867e7c50d0c30e5697a4ee80c87ddcf1e2dd35a02bcc89ce30ac7b908dad56830760aa6bff374d10b1bdf73dd665d107b792424a2a959f4b17c7e02d66c713d77d9f10b7c30a281f98cbd501c60aa4f99288962da58b4c7b18af1ffb69da961bcad8fdd074bbd094e1a21d3eb970a8d53f01cddf2db6842655bd120779c0ebe28408cfe73cf1612589efbd6b"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="94c42b81572a6f58ebdc1f282998", @ANYRES16=r1, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRESHEX=r2, @ANYRES32=r2, @ANYRES8=0xffffffffffffffff], 0x0) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x8, &(0x7f0000002fc0)=ANY=[@ANYRES16=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300004f00"/20, @ANYRESDEC=r8, @ANYBLOB="6fd04e9006a8b4061a880637b07044965dc1ccaa2300e88f932682965b4a92117373a7a6999e317125b96e95efe4878da5ccc9cf206d6da376e3c33ee1305115c0398c7fc562a9", @ANYBLOB="000000000000000000000000001f00cc00"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="00000000000000000056850000000000000000a195cdce", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB='\x00'/28, @ANYRESOCT=0x0, @ANYRESOCT=r7], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x1c, &(0x7f0000000340)=ANY=[@ANYRESOCT=r7], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) epoll_create1(0x80000) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000a1401002dbd7000fedbdf27080001000000000007000100010000000800010002000009"], 0x28}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x10}], 0x1}, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0xb, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) 994.609408ms ago: executing program 5 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 882.489614ms ago: executing program 1 (id=2095): epoll_create1(0x80000) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00)={[{@jqfmt_vfsold}, {@lazytime}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@auto_da_alloc}]}, 0x6, 0x485, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x7af9, 0xefd, 0x6}) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f00000001c0)=""/111) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="000000000700000077600c000000000022918000ffffffff1858000003000000000000000000000018370000040000000000000000000000182b0000", @ANYRES32=r5, @ANYBLOB="00000000de000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) 769.73186ms ago: executing program 4 (id=2096): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x60880, 0x2f, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x14, 0x0, 0xfffffd75) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000002000000000000372de00fc800000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) syz_emit_ethernet(0x66, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="14000000150a01d60f0000000000000000000020"], 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x140) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x1, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x40, [0x9, 0x1]}}]}, 0x28) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d9c000/0x2000)=nil, 0x2000, 0x0, 0x5fd, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 758.891381ms ago: executing program 0 (id=2097): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x3, 0xfffffffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs_stats\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1b, 0xffffffff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 753.710121ms ago: executing program 5 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44804) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) (async, rerun: 64) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x41000002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4009880) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000008c0)={0x10001, 0x10000, 0xffffffff, 0x0, 0x1, 0x9, 0x0, 0x5}, &(0x7f0000000900)={0x8000000000000000, 0xffffffffffffffff, 0x5f8e, 0xf3e, 0x5, 0x6, 0x8, 0x2}, &(0x7f0000000940)={0x9, 0x1, 0x7, 0x0, 0x1, 0x9, 0x0, 0x1245}, &(0x7f0000000980)={0x0, 0x989680}, &(0x7f0000000a00)={&(0x7f00000009c0), 0x8}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000b80)=0x0) quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000201, r10, &(0x7f0000000bc0)='./file0\x00') (async, rerun: 64) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000c40), r9) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000c80)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001640)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000000cc0)={0x934, r11, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x8b8, 0x8, 0x0, 0x1, [{0x78c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "87e189e0c2127f304af23f5d70e499fb04f3fbe131699b8c3189f8fa2c2f4e2c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x4cc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0xa}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @remote, 0x8000}}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7a487bebca917985729c753604e2334e54760ed7169ce6eba3ec5057d8d1575"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x9}]}, 0x934}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c4}, 0x20040010) r13 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r13, &(0x7f0000001780)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @remote, 0xff}}, 0x24) 686.409684ms ago: executing program 4 (id=2099): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 506.721184ms ago: executing program 5 (id=2100): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000000000), 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0xcfff7ff8) 337.308693ms ago: executing program 4 (id=2101): pipe2$9p(0x0, 0x84880) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@noacl}]}, 0x1, 0x787, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) mlockall(0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffff9, 0x2, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) munlockall() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 270.101567ms ago: executing program 1 (id=2102): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000a00000000100000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000000)=""/147}, 0x94) 210.13005ms ago: executing program 5 (id=2103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000080)="c6647358013a98f1fd740954d4bddf0103f24ef500d3bd323a61e614b1883720e41bb8fc2d5259afe78c885f4733f1e5639e75d67d4272d8605433b3296244b3d8e97884") sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 127.126823ms ago: executing program 1 (id=2104): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.98862ms ago: executing program 1 (id=2105): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in=@local}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getdents(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0xc200}, r4}}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 257.72µs ago: executing program 5 (id=2106): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x5) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbf8, 0x7, 0xb6b, 0x800c1, 0x2, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7ff, 0x3, 0x63d, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x881, 0x79b, 0x5, 0x1, 0x7e, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x7, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xf, 0x84, 0x100, 0x5, 0x252, 0x81, 0xfffffff8, 0x4, 0xa0006, 0x7, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x5, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x82, 0x42, 0x7ff, 0x4, 0x4, 0x401, 0x66cd, 0x1000000a, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x82b) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x0, r3, 0x0, 0x80000}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x12c) fcntl$notify(r5, 0x402, 0x8) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2}) r6 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/10, 0xa}}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x10022, 0x0) renameat2(r5, &(0x7f0000000440)='./file0\x00', r5, &(0x7f0000000000)='./file7\x00', 0x4) 0s ago: executing program 1 (id=2107): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x4000800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) socket$igmp(0x2, 0x3, 0x2) write$P9_RGETLOCK(r1, &(0x7f0000000100)={0x1f, 0x37, 0x2, {0x2, 0x0, 0x6, 0x0, 0x1, '='}}, 0x1f) fsopen(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000240)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) shutdown(r2, 0x1) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="ec8a2d4bf716b98e94857f00", 0xc}], 0x1, 0xffff, 0xfffffffe, 0x0) kernel console output (not intermixed with test programs): ] type 2 family 0 port 20004 - 0 [ 173.688289][ T8375] ------------[ cut here ]------------ [ 173.701004][ T8375] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.1.1401/8375 [ 173.710798][ T8375] Modules linked in: [ 173.714952][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.1.1401 Not tainted syzkaller #0 PREEMPT(full) [ 173.724865][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.737437][ T8375] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 173.743438][ T8375] Code: 8b 05 f1 7b 19 08 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 09 65 04 cc e8 7e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 70 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 173.763680][ T8375] RSP: 0018:ffffc90003be3dd8 EFLAGS: 00010093 [ 173.770540][ T8375] RAX: ffffffff813b3452 RBX: ffff8881050d2200 RCX: ffff8881050d2200 [ 173.779302][ T8375] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 173.787388][ T8375] RBP: 0000000000000080 R08: ffff8881050d2cf8 R09: 0000000000000000 [ 173.795451][ T8375] R10: ffffc90003be3df0 R11: 0001c90003be3df0 R12: ffff8881050d2200 [ 173.803758][ T8375] R13: ffff8881050d2a28 R14: ffff888105236d10 R15: 0000000000000080 [ 173.811729][ T8375] FS: 0000000000000000(0000) GS:ffff8882ae6c9000(0000) knlGS:0000000000000000 [ 173.820989][ T8375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.828113][ T8375] CR2: 00007fa2593dee9c CR3: 0000000006e32000 CR4: 00000000003506f0 [ 173.837749][ T8375] DR0: 0000200000000340 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.847506][ T8375] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 173.856382][ T8375] Call Trace: [ 173.859782][ T8375] [ 173.862803][ T8375] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 173.868546][ T8375] ? __list_add_valid_or_report+0x38/0xe0 [ 173.874591][ T8375] do_exit+0xc13/0x1530 [ 173.879328][ T8375] __x64_sys_exit+0x1f/0x20 [ 173.884130][ T8375] x64_sys_call+0x301d/0x3020 [ 173.889770][ T8375] do_syscall_64+0x12c/0x3b0 [ 173.895162][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.902758][ T8375] RIP: 0033:0x7fdbc913cdd9 [ 173.908249][ T8375] Code: Unable to access opcode bytes at 0x7fdbc913cdaf. [ 173.917668][ T8375] RSP: 002b:0000200000001b98 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 173.927474][ T8375] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fdbc913cdd9 [ 173.936391][ T8375] RDX: 00007fdbc913cdd9 RSI: 0000200000001bc0 RDI: 000000000000000b [ 173.946684][ T8375] RBP: 00007fdbc91d2d69 R08: 0000200000002200 R09: 0000000000000000 [ 173.955180][ T8375] R10: 0000200000002200 R11: 0000000000000246 R12: 0000000000000000 [ 173.963418][ T8375] R13: 00007fdbc93b6038 R14: 00007fdbc93b5fa0 R15: 00007fff89238e68 [ 173.971714][ T8375] [ 173.974750][ T8375] ---[ end trace 0000000000000000 ]--- [ 173.980991][ T6682] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 173.997830][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.089061][ T8386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=8386 comm=syz.6.1324 [ 174.120167][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1324'. [ 174.132874][ T8388] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 174.155173][ T8388] loop1: detected capacity change from 0 to 512 [ 174.177317][ T8388] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 174.204142][ T8388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.223590][ T8388] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1406: Block bitmap for bg 0 marked uninitialized [ 174.246381][ T8390] loop4: detected capacity change from 0 to 8192 [ 174.252471][ T8388] loop1: lost filesystem error report for type 5 error -117 [ 174.256686][ T8388] EXT4-fs (loop1): Remounting filesystem read-only [ 174.263659][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 174.266828][ T8388] EXT4-fs (loop1): 1 orphan inode deleted [ 174.272561][ C0] EXT4-fs (loop1): initial error at time 1777069805: ext4_read_block_bitmap_nowait:517 [ 174.280107][ T8388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.285731][ C0] [ 174.285741][ C0] EXT4-fs (loop1): last error at time 1777069805: ext4_read_block_bitmap_nowait:517 [ 174.364420][ T8388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.531129][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 174.597638][ T8407] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1415'. [ 174.714634][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1419'. [ 174.736521][ T8418] loop1: detected capacity change from 0 to 512 [ 174.763596][ T8418] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 174.792842][ T8418] EXT4-fs (loop1): 1 truncate cleaned up [ 174.808435][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1419'. [ 174.812103][ T8418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.885988][ T8429] loop5: detected capacity change from 0 to 1764 [ 175.790375][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.880519][ T8441] futex_wake_op: syz.0.1425 tries to shift op by -9; fix this program [ 176.217135][ T8449] loop0: detected capacity change from 0 to 4096 [ 176.261015][ T8449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.341295][ T28] audit: type=1400 audit(1777069807.457:873): avc: denied { create } for pid=8448 comm="syz.0.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 176.398945][ T8459] loop4: detected capacity change from 0 to 512 [ 176.419764][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.467985][ T8459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.550105][ T8459] EXT4-fs (loop4): 1 truncate cleaned up [ 176.565537][ T8459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.599540][ T8465] loop0: detected capacity change from 0 to 8192 [ 176.691114][ T8468] xt_l2tp: missing protocol rule (udp|l2tpip) [ 176.704412][ T8465] loop0: detected capacity change from 0 to 128 [ 176.726460][ T8468] macvlan0: entered allmulticast mode [ 176.743704][ T8468] bridge0: entered allmulticast mode [ 176.770126][ T8484] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1439'. [ 176.794729][ T8468] bridge0: port 3(macvlan0) entered blocking state [ 176.836464][ T8468] bridge0: port 3(macvlan0) entered disabled state [ 176.845885][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.864135][ T8468] bridge0: left allmulticast mode [ 176.885153][ T8470] lo speed is unknown, defaulting to 1000 [ 177.051635][ T8492] macsec1: entered promiscuous mode [ 177.128492][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1446'. [ 177.156765][ T8499] xfrm1: entered promiscuous mode [ 177.177066][ T8499] xfrm1: entered allmulticast mode [ 177.232591][ T8499] netlink: 'syz.5.1446': attribute type 10 has an invalid length. [ 177.282272][ T8505] loop1: detected capacity change from 0 to 8192 [ 177.307535][ T28] audit: type=1400 audit(1777069808.427:874): avc: denied { ioctl } for pid=8520 comm="syz.4.1454" path="socket:[22723]" dev="sockfs" ino=22723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 177.433013][ T28] audit: type=1400 audit(1777069808.547:875): avc: denied { read } for pid=8530 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.694817][ T8543] 9p: Bad value for 'rfdno' [ 178.384976][ T28] audit: type=1400 audit(1777069809.467:876): avc: denied { shutdown } for pid=8556 comm="syz.1.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.482544][ T8567] loop5: detected capacity change from 0 to 512 [ 178.516560][ T8567] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.567433][ T8567] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1471: corrupted xattr entries [ 178.625239][ T8567] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.625607][ T8567] EXT4-fs (loop5): Remounting filesystem read-only [ 178.635062][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 178.635089][ C0] EXT4-fs (loop5): initial error at time 1777069809: xattr_find_entry:337: inode 15 [ 178.635121][ C0] EXT4-fs (loop5): last error at time 1777069809: xattr_find_entry:337: inode 15 [ 178.743530][ T8567] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 178.881968][ T8567] EXT4-fs (loop5): 1 orphan inode deleted [ 178.925906][ T8567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.314747][ T8587] loop0: detected capacity change from 0 to 1024 [ 179.357898][ T8587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.373736][ T8587] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.414186][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.430823][ T8587] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 179.446441][ T8587] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.446441][ T8587] [ 179.453674][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.467445][ T8427] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 179.507227][ T28] audit: type=1400 audit(1777069810.627:877): avc: denied { map } for pid=8585 comm="syz.0.1477" path="/349/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.531649][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.558330][ T8600] futex_wake_op: syz.4.1480 tries to shift op by -9; fix this program [ 179.585038][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.621398][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.657172][ T28] audit: type=1400 audit(1777069810.777:878): avc: denied { listen } for pid=8604 comm="syz.5.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.679100][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.712294][ T8585] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.727476][ T8585] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.745000][ T8587] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.760919][ T8585] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.1477: lblock 0 mapped to illegal pblock 0 (length 1) [ 179.812315][ T8608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.293981][ T3324] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 180.306722][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.467962][ T8625] loop0: detected capacity change from 0 to 512 [ 180.497605][ T8625] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.559800][ T8632] loop5: detected capacity change from 0 to 512 [ 180.579178][ T8625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.639341][ T8625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.663712][ T8635] loop6: detected capacity change from 0 to 512 [ 180.666890][ T8625] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.674559][ T8635] EXT4-fs: quotafile must be on filesystem root [ 180.811207][ T8642] geneve1: entered promiscuous mode [ 180.818317][ T8642] macsec1: entered allmulticast mode [ 180.824870][ T8642] geneve1: entered allmulticast mode [ 180.930897][ T8625] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.1488: bad entry in directory: directory entry overrun - offset=60, inode=0, rec_len=2048, size=2048 fake=0 [ 181.013440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.161749][ T8640] __nla_validate_parse: 2 callbacks suppressed [ 181.161770][ T8640] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1492'. [ 181.190194][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.236658][ T8647] loop0: detected capacity change from 0 to 512 [ 181.254557][ T8647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.272937][ T8647] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.294412][ T8647] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 181.304207][ T8647] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 181.323846][ T8647] EXT4-fs (loop0): 1 truncate cleaned up [ 181.334062][ T8647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.385715][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.557246][ T8661] loop4: detected capacity change from 0 to 8192 [ 181.637581][ T28] audit: type=1400 audit(1777069812.757:879): avc: denied { map } for pid=8662 comm="syz.5.1499" path="socket:[23576]" dev="sockfs" ino=23576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.806204][ T28] audit: type=1400 audit(1777069812.757:880): avc: denied { read accept } for pid=8662 comm="syz.5.1499" path="socket:[23576]" dev="sockfs" ino=23576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.843840][ T8675] loop4: detected capacity change from 0 to 512 [ 181.923488][ T28] audit: type=1326 audit(1777069813.037:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8681 comm="syz.0.1505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec3878cdd9 code=0x0 [ 182.057328][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1509'. [ 182.136556][ T28] audit: type=1400 audit(1777069813.257:882): avc: denied { mount } for pid=8681 comm="syz.0.1505" name="/" dev="autofs" ino=23616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 182.163060][ T8690] loop5: detected capacity change from 0 to 8192 [ 182.529044][ T8732] loop4: detected capacity change from 0 to 512 [ 182.773997][ T8732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.930703][ T8732] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.004985][ T8747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1518'. [ 183.071930][ T8748] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1518'. [ 183.143127][ T8754] EXT4-fs error (device loop4): __ext4_add_entry:2412: inode #12: comm syz.4.1516: Directory hole found for htree leaf block 0 [ 183.205190][ T8754] EXT4-fs (loop4): Remounting filesystem read-only [ 183.444312][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.454289][ T8775] loop5: detected capacity change from 0 to 8192 [ 183.455676][ T6666] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 183.577442][ T8781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.339173][ T8803] lo speed is unknown, defaulting to 1000 [ 184.427780][ T6666] Quota error (device loop4): write_blk: dquota write failed [ 184.435665][ T6666] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 184.473259][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1528'. [ 184.651201][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1528'. [ 185.147058][ T28] audit: type=1400 audit(1777069816.247:883): avc: denied { mount } for pid=8832 comm="syz.5.1531" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.171371][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.333065][ T8815] set_capacity_and_notify: 1 callbacks suppressed [ 185.333113][ T8815] loop6: detected capacity change from 0 to 512 [ 185.365299][ T8815] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.382444][ T8815] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 185.473812][ T28] audit: type=1400 audit(1777069816.597:884): avc: denied { mount } for pid=8853 comm="syz.5.1539" name="/" dev="hugetlbfs" ino=23318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 186.062184][ T8869] lo speed is unknown, defaulting to 1000 [ 186.123654][ T8875] lo speed is unknown, defaulting to 1000 [ 186.139531][ T28] audit: type=1400 audit(1777069817.257:885): avc: denied { create } for pid=8874 comm="syz.5.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.165674][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.239000][ T28] audit: type=1400 audit(1777069817.277:886): avc: denied { ioctl } for pid=8874 comm="syz.5.1546" path="socket:[23777]" dev="sockfs" ino=23777 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.249313][ T8881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8881 comm=syz.5.1546 [ 186.329386][ T8838] loop0: detected capacity change from 0 to 1024 [ 186.386520][ T8893] loop5: detected capacity change from 0 to 256 [ 186.403513][ T8893] FAT-fs (loop5): bogus number of FAT structure [ 186.403963][ T8838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.412944][ T8893] FAT-fs (loop5): Can't find a valid FAT filesystem [ 186.443606][ T8838] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.518941][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 186.555206][ T8838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8838 comm=syz.0.1532 [ 186.557422][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 186.597244][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'. [ 186.602147][ T8838] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.1532: lblock 3 mapped to illegal pblock 3 (length 3) [ 186.653989][ T8838] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 186.677637][ T8838] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.677637][ T8838] [ 186.892869][ T8901] loop6: detected capacity change from 0 to 8192 [ 187.388208][ T8953] macvtap2: entered promiscuous mode [ 187.429279][ T8953] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 187.490178][ T8953] team0: Device macvtap2 is already an upper device of the team interface [ 187.607515][ T3324] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 187.651796][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.837533][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 187.857735][ T8973] lo speed is unknown, defaulting to 1000 [ 188.061684][ T9001] loop4: detected capacity change from 0 to 512 [ 188.083851][ T9001] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 188.129644][ T8991] loop6: detected capacity change from 0 to 8192 [ 188.153196][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.165026][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.186955][ T9019] loop4: detected capacity change from 0 to 512 [ 188.207477][ T9019] ext2: Unknown parameter 'fsuuid' [ 188.310013][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 188.600654][ T9042] blktrace: Concurrent blktraces are not allowed on loop0 [ 188.774246][ T9056] loop6: detected capacity change from 0 to 8192 [ 189.018683][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 189.030786][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1586'. [ 189.066891][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 189.066993][ T28] audit: type=1400 audit(1777069820.137:889): avc: denied { read } for pid=9064 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 189.277458][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 189.295717][ T9073] bond2: option lacp_active: invalid value (5) [ 189.312237][ T9073] bond2 (unregistering): Released all slaves [ 189.849153][ T9093] loop6: detected capacity change from 0 to 512 [ 189.890504][ T9097] loop5: detected capacity change from 0 to 7 [ 189.897445][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.907432][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.915952][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.925600][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.936183][ T9097] loop5: unable to read partition table [ 189.946890][ T9097] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 189.948780][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.968430][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.977625][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.978396][ T28] audit: type=1326 audit(1777069821.097:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9096 comm="syz.6.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x0 [ 189.987155][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 189.989174][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.031220][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 190.040787][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.050971][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 190.061236][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.070877][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 190.148026][ T9103] FAULT_INJECTION: forcing a failure. [ 190.148026][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 190.188940][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 190.212161][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.6.1599 Tainted: G W syzkaller #0 PREEMPT(full) [ 190.212195][ T9103] Tainted: [W]=WARN [ 190.212201][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.212213][ T9103] Call Trace: [ 190.212220][ T9103] [ 190.212227][ T9103] __dump_stack+0x1d/0x30 [ 190.212366][ T9103] dump_stack_lvl+0x95/0xd0 [ 190.212393][ T9103] dump_stack+0x15/0x1b [ 190.212419][ T9103] should_fail_ex+0x263/0x280 [ 190.212450][ T9103] should_failslab+0x8c/0xb0 [ 190.212529][ T9103] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 190.212551][ T9103] ? __alloc_skb+0x2d6/0x690 [ 190.212577][ T9103] __alloc_skb+0x2d6/0x690 [ 190.212602][ T9103] ? __alloc_skb+0x200/0x690 [ 190.212697][ T9103] netlink_alloc_large_skb+0xbf/0xf0 [ 190.212730][ T9103] netlink_sendmsg+0x40c/0x6f0 [ 190.212842][ T9103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.212879][ T9103] ____sys_sendmsg+0x563/0x5b0 [ 190.212914][ T9103] ___sys_sendmsg+0x195/0x1e0 [ 190.212955][ T9103] __x64_sys_sendmsg+0xd4/0x160 [ 190.213062][ T9103] x64_sys_call+0x194c/0x3020 [ 190.213088][ T9103] do_syscall_64+0x12c/0x3b0 [ 190.213146][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.213170][ T9103] RIP: 0033:0x7f6c70e5cdd9 [ 190.213186][ T9103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.213203][ T9103] RSP: 002b:00007f6c6f8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.213224][ T9103] RAX: ffffffffffffffda RBX: 00007f6c710d5fa0 RCX: 00007f6c70e5cdd9 [ 190.213241][ T9103] RDX: 0000000004000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 190.213259][ T9103] RBP: 00007f6c6f8af090 R08: 0000000000000000 R09: 0000000000000000 [ 190.213273][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.213287][ T9103] R13: 00007f6c710d6038 R14: 00007f6c710d5fa0 R15: 00007ffe0c502758 [ 190.213367][ T9103] [ 190.253541][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 190.349236][ T9095] blktrace: Concurrent blktraces are not allowed on loop0 [ 190.679454][ T9124] loop6: detected capacity change from 0 to 8192 [ 191.085275][ T9128] netlink: 'syz.5.1606': attribute type 1 has an invalid length. [ 192.133517][ T9145] loop6: detected capacity change from 0 to 128 [ 192.154341][ T9143] lo speed is unknown, defaulting to 1000 [ 192.200401][ T9146] loop0: detected capacity change from 0 to 1024 [ 192.200743][ T9146] ext4: Unknown parameter 'noacl' [ 192.297893][ T9146] loop0: detected capacity change from 0 to 512 [ 192.310950][ T9146] ext4: Unknown parameter 'nouser_xattr' [ 192.614628][ T9165] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 192.795969][ T9170] loop4: detected capacity change from 0 to 8192 [ 192.867675][ T9182] loop5: detected capacity change from 0 to 512 [ 192.954011][ T9182] EXT4-fs: Ignoring removed orlov option [ 193.016781][ T9182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.232314][ T9182] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.367978][ T9196] __nla_validate_parse: 4 callbacks suppressed [ 193.368249][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 193.552662][ T9186] lo speed is unknown, defaulting to 1000 [ 193.564400][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.576806][ T9196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=9196 comm=syz.4.1624 [ 193.678956][ T9199] lo speed is unknown, defaulting to 1000 [ 193.891608][ T9203] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1627'. [ 194.116727][ T9221] loop4: detected capacity change from 0 to 2048 [ 194.126508][ T9224] loop1: detected capacity change from 0 to 128 [ 194.164252][ T9221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.196590][ T9221] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.341883][ T9233] futex_wake_op: syz.6.1636 tries to shift op by -9; fix this program [ 194.354025][ T9235] lo speed is unknown, defaulting to 1000 [ 194.365129][ T9244] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1631'. [ 194.504481][ T9241] lo speed is unknown, defaulting to 1000 [ 195.100202][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.613217][ T3845] Bluetooth: hci0: sending frame failed (-49) [ 195.619963][ T5423] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 195.660835][ T28] audit: type=1400 audit(1777069826.777:891): avc: denied { bind } for pid=9264 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.850095][ T9271] loop0: detected capacity change from 0 to 164 [ 196.101465][ T9224] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 196.110588][ T9224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.120906][ T9224] team0: Port device netdevsim1 added [ 196.371820][ T6682] bio_check_eod: 12 callbacks suppressed [ 196.371839][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.371839][ T6682] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 196.375452][ T9290] loop5: detected capacity change from 0 to 1024 [ 196.386689][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.386689][ T6682] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 196.412573][ T9290] EXT4-fs (loop5): blocks per group (131072) and clusters per group (8192) inconsistent [ 196.428424][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.428424][ T6682] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 196.441998][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.441998][ T6682] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 196.470969][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.470969][ T6682] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 196.492858][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.492858][ T6682] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 196.508218][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.508218][ T6682] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 196.529394][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.529394][ T6682] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 196.545516][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.545516][ T6682] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 196.561401][ T6682] kworker/u8:33: attempt to access beyond end of device [ 196.561401][ T6682] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 196.831302][ T9321] loop0: detected capacity change from 0 to 256 [ 196.867907][ T9321] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.902694][ T28] audit: type=1400 audit(1777069828.017:892): avc: denied { getopt } for pid=9320 comm="syz.0.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 197.275690][ T9321] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 197.284555][ T9321] FAT-fs (loop0): Filesystem has been set read-only [ 197.291464][ T9321] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 197.455421][ T9330] loop0: detected capacity change from 0 to 2048 [ 197.485684][ T9330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.528395][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.579071][ T28] audit: type=1400 audit(1777069828.707:893): avc: denied { create } for pid=9334 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 197.639970][ T28] audit: type=1400 audit(1777069828.757:894): avc: denied { lock } for pid=9342 comm="syz.0.1668" path="socket:[24515]" dev="sockfs" ino=24515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 197.704694][ T9346] FAULT_INJECTION: forcing a failure. [ 197.704694][ T9346] name failslab, interval 1, probability 0, space 0, times 0 [ 197.719520][ T9346] CPU: 0 UID: 0 PID: 9346 Comm: syz.0.1669 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.719595][ T9346] Tainted: [W]=WARN [ 197.719603][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.719616][ T9346] Call Trace: [ 197.719623][ T9346] [ 197.719632][ T9346] __dump_stack+0x1d/0x30 [ 197.719714][ T9346] dump_stack_lvl+0x95/0xd0 [ 197.719737][ T9346] dump_stack+0x15/0x1b [ 197.719757][ T9346] should_fail_ex+0x263/0x280 [ 197.719823][ T9346] should_failslab+0x8c/0xb0 [ 197.719844][ T9346] kmem_cache_alloc_noprof+0x66/0x3f0 [ 197.719866][ T9346] ? skb_clone+0x151/0x1f0 [ 197.719891][ T9346] skb_clone+0x151/0x1f0 [ 197.719937][ T9346] __netlink_deliver_tap+0x2c9/0x500 [ 197.720068][ T9346] netlink_unicast+0x653/0x680 [ 197.720098][ T9346] netlink_sendmsg+0x5c8/0x6f0 [ 197.720131][ T9346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.720208][ T9346] ____sys_sendmsg+0x563/0x5b0 [ 197.720234][ T9346] ___sys_sendmsg+0x195/0x1e0 [ 197.720266][ T9346] __x64_sys_sendmsg+0xd4/0x160 [ 197.720323][ T9346] x64_sys_call+0x194c/0x3020 [ 197.720354][ T9346] do_syscall_64+0x12c/0x3b0 [ 197.720458][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.720480][ T9346] RIP: 0033:0x7fec3878cdd9 [ 197.720494][ T9346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.720510][ T9346] RSP: 002b:00007fec371e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.720554][ T9346] RAX: ffffffffffffffda RBX: 00007fec38a05fa0 RCX: 00007fec3878cdd9 [ 197.720568][ T9346] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000003 [ 197.720580][ T9346] RBP: 00007fec371e7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.720599][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.720610][ T9346] R13: 00007fec38a06038 R14: 00007fec38a05fa0 R15: 00007ffc39040048 [ 197.720628][ T9346] [ 198.140498][ T28] audit: type=1400 audit(1777069829.257:895): avc: denied { setopt } for pid=9357 comm="syz.6.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.195158][ T9358] loop6: detected capacity change from 0 to 8192 [ 198.234080][ T9358] loop6: p3 p4 < > [ 198.238455][ T9358] loop6: p3 size 83886080 extends beyond EOD, truncated [ 198.275990][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.285332][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.300627][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 198.312269][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 199.728669][ T9309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.932889][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.947547][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.992891][ T28] audit: type=1400 audit(1777069831.107:896): avc: denied { append } for pid=9393 comm="syz.5.1686" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 200.044961][ T9407] loop0: detected capacity change from 0 to 512 [ 200.075122][ T9409] loop1: detected capacity change from 0 to 512 [ 200.121836][ T9409] FAULT_INJECTION: forcing a failure. [ 200.121836][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 200.155802][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz.1.1692 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.155920][ T9409] Tainted: [W]=WARN [ 200.155927][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.155942][ T9409] Call Trace: [ 200.155950][ T9409] [ 200.155959][ T9409] __dump_stack+0x1d/0x30 [ 200.156078][ T9409] dump_stack_lvl+0x95/0xd0 [ 200.156132][ T9409] dump_stack+0x15/0x1b [ 200.156212][ T9409] should_fail_ex+0x263/0x280 [ 200.156299][ T9409] should_failslab+0x8c/0xb0 [ 200.156326][ T9409] kmem_cache_alloc_noprof+0x66/0x3f0 [ 200.156349][ T9409] ? do_getname+0x2e/0x1c0 [ 200.156375][ T9409] do_getname+0x2e/0x1c0 [ 200.156398][ T9409] __se_sys_renameat2+0x29/0x1c0 [ 200.156466][ T9409] __x64_sys_renameat2+0x67/0x80 [ 200.156494][ T9409] x64_sys_call+0x2a12/0x3020 [ 200.156524][ T9409] do_syscall_64+0x12c/0x3b0 [ 200.156549][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.156622][ T9409] RIP: 0033:0x7fdbc913cdd9 [ 200.156641][ T9409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.156660][ T9409] RSP: 002b:00007fdbc7b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 200.156680][ T9409] RAX: ffffffffffffffda RBX: 00007fdbc93b5fa0 RCX: 00007fdbc913cdd9 [ 200.156694][ T9409] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 200.156753][ T9409] RBP: 00007fdbc7b97090 R08: 0000000000000000 R09: 0000000000000000 [ 200.156765][ T9409] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 200.156776][ T9409] R13: 00007fdbc93b6038 R14: 00007fdbc93b5fa0 R15: 00007fff89238e68 [ 200.156794][ T9409] [ 200.368009][ T9415] loop0: detected capacity change from 0 to 2048 [ 200.377162][ T9415] EXT4-fs: Ignoring removed i_version option [ 200.405065][ T9415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.421031][ T9415] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.576270][ T9423] loop1: detected capacity change from 0 to 8192 [ 200.810551][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.845457][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.915555][ T9456] loop1: detected capacity change from 0 to 512 [ 201.169033][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 201.241229][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.293171][ T9481] loop4: detected capacity change from 0 to 8192 [ 201.343978][ T9481] loop4: p1 < > p2 p4 < p5 > [ 201.353595][ T9481] loop4: partition table partially beyond EOD, truncated [ 201.373679][ T9490] loop1: detected capacity change from 0 to 512 [ 201.376207][ T9481] loop4: p1 start 134217728 is beyond EOD, truncated [ 201.400576][ T9494] loop0: detected capacity change from 0 to 512 [ 201.415083][ T9481] loop4: p2 size 591360 extends beyond EOD, truncated [ 201.448626][ T9481] loop4: p5 size 591360 extends beyond EOD, truncated [ 201.670014][ T9508] loop5: detected capacity change from 0 to 512 [ 201.843287][ T9524] loop6: detected capacity change from 0 to 512 [ 202.074371][ T9542] loop6: detected capacity change from 0 to 1024 [ 202.085965][ T9542] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 202.096712][ T9542] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 202.116581][ T9542] EXT4-fs (loop6): mount failed [ 202.267992][ T9554] netlink: 'syz.6.1741': attribute type 1 has an invalid length. [ 202.289644][ T9554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.312549][ T9554] bond1: (slave gretap1): making interface the new active one [ 202.322797][ T9554] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 202.365684][ T9558] loop6: detected capacity change from 0 to 512 [ 202.430501][ T9560] program syz.6.1743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.499675][ T9579] loop4: detected capacity change from 0 to 512 [ 203.576426][ T9590] loop0: detected capacity change from 0 to 512 [ 203.620623][ T9579] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 203.878626][ T9608] tipc: Started in network mode [ 204.844035][ T9608] tipc: Node identity 066b66a73096, cluster identity 6 [ 204.860991][ T9608] tipc: Enabled bearer , priority 0 [ 204.874230][ T9608] syzkaller0: entered promiscuous mode [ 204.887660][ T9608] syzkaller0: entered allmulticast mode [ 205.078429][ T9608] tipc: Resetting bearer [ 205.102912][ T9607] tipc: Resetting bearer [ 205.125343][ T9607] tipc: Disabling bearer [ 205.154486][ T9620] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 205.343644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.539171][ T9621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.568004][ T28] audit: type=1400 audit(1777069836.687:897): avc: denied { mount } for pid=9630 comm="syz.0.1766" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 205.703479][ T9621] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 205.808680][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.841130][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.869844][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 205.899349][ T9621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.918065][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.927215][ T9656] FAULT_INJECTION: forcing a failure. [ 205.927215][ T9656] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 205.939013][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.954066][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.961836][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.970091][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 205.986908][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 206.001357][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.5.1774 Tainted: G W syzkaller #0 PREEMPT(full) [ 206.001461][ T9656] Tainted: [W]=WARN [ 206.001468][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.001524][ T9656] Call Trace: [ 206.001532][ T9656] [ 206.001541][ T9656] __dump_stack+0x1d/0x30 [ 206.001572][ T9656] dump_stack_lvl+0x95/0xd0 [ 206.001643][ T9656] dump_stack+0x15/0x1b [ 206.001743][ T9656] should_fail_ex+0x263/0x280 [ 206.001778][ T9656] should_fail_alloc_page+0xf2/0x100 [ 206.001844][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 206.001802][ T9656] __alloc_frozen_pages_noprof+0x108/0x350 [ 206.001898][ T9656] alloc_pages_mpol+0xb3/0x260 [ 206.001998][ T9656] ? anon_pipe_read+0x741/0x750 [ 206.002021][ T9656] alloc_pages_noprof+0x8f/0x140 [ 206.002079][ T9656] anon_pipe_write+0x69c/0xb20 [ 206.002107][ T9656] ? anon_pipe_read+0x741/0x750 [ 206.002133][ T9656] ? __pfx_anon_pipe_write+0x10/0x10 [ 206.002166][ T9656] vfs_write+0x5a6/0x9f0 [ 206.002202][ T9656] ksys_write+0xdc/0x1a0 [ 206.002290][ T9656] __x64_sys_write+0x40/0x50 [ 206.002322][ T9656] x64_sys_call+0x27e1/0x3020 [ 206.002349][ T9656] do_syscall_64+0x12c/0x3b0 [ 206.002466][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.002516][ T9656] RIP: 0033:0x7f30e78ad60e [ 206.002535][ T9656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.002626][ T9656] RSP: 002b:00007f30e6346ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.002754][ T9656] RAX: ffffffffffffffda RBX: 00007f30e63476c0 RCX: 00007f30e78ad60e [ 206.002769][ T9656] RDX: 0000000000000029 RSI: 00007f30e6346e90 RDI: 0000000000000002 [ 206.002783][ T9656] RBP: 00007f30e6346e90 R08: 0000000000000000 R09: 0000000000000000 [ 206.002798][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 206.002811][ T9656] R13: 00007f30e7b3d7a0 R14: 00007f30e7b344a0 R15: 0000000000000001 [ 206.002830][ T9656] [ 206.226140][ T3439] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 206.234602][ T3439] hid-generic 0000:0000:000E.0001: item fetching failed at offset 16/17 [ 206.245023][ T3439] hid-generic 0000:0000:000E.0001: probe with driver hid-generic failed with error -22 [ 206.434431][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1781'. [ 206.474425][ T9675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.567220][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 206.579337][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.624779][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1785'. [ 206.714127][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.726178][ T9682] blktrace: Concurrent blktraces are not allowed on loop10 [ 206.736072][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.863651][ T9701] set_capacity_and_notify: 4 callbacks suppressed [ 206.863682][ T9701] loop4: detected capacity change from 0 to 512 [ 207.458914][ T9744] loop6: detected capacity change from 0 to 512 [ 207.643607][ T9763] loop5: detected capacity change from 0 to 512 [ 207.676959][ T9763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.713196][ T9763] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.835978][ T28] audit: type=1326 audit(1777069838.957:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 207.890536][ T28] audit: type=1326 audit(1777069838.957:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 207.939340][ T28] audit: type=1326 audit(1777069838.957:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 207.973480][ T28] audit: type=1326 audit(1777069838.957:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 207.999195][ T28] audit: type=1326 audit(1777069838.957:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 208.047839][ T28] audit: type=1326 audit(1777069838.987:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 208.091369][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.106500][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.123021][ T9740] loop0: detected capacity change from 0 to 1024 [ 208.133933][ T28] audit: type=1326 audit(1777069838.987:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 208.178947][ T28] audit: type=1326 audit(1777069838.987:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 208.232957][ T9809] FAULT_INJECTION: forcing a failure. [ 208.232957][ T9809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.249764][ T28] audit: type=1326 audit(1777069838.987:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 208.257921][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.4.1806 Tainted: G W syzkaller #0 PREEMPT(full) [ 208.257995][ T9809] Tainted: [W]=WARN [ 208.258059][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.258072][ T9809] Call Trace: [ 208.258080][ T9809] [ 208.258089][ T9809] __dump_stack+0x1d/0x30 [ 208.258117][ T9809] dump_stack_lvl+0x95/0xd0 [ 208.258142][ T9809] dump_stack+0x15/0x1b [ 208.258205][ T9809] should_fail_ex+0x263/0x280 [ 208.258251][ T9809] should_fail+0xb/0x20 [ 208.258278][ T9809] should_fail_usercopy+0x1a/0x20 [ 208.258298][ T9809] _copy_from_user+0x1c/0xb0 [ 208.258318][ T9809] ___sys_sendmsg+0xc1/0x1e0 [ 208.258408][ T9809] __x64_sys_sendmsg+0xd4/0x160 [ 208.258439][ T9809] x64_sys_call+0x194c/0x3020 [ 208.258556][ T9809] do_syscall_64+0x12c/0x3b0 [ 208.258583][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.258676][ T9809] RIP: 0033:0x7ff0ec48cdd9 [ 208.258693][ T9809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.258712][ T9809] RSP: 002b:00007ff0eaedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.258732][ T9809] RAX: ffffffffffffffda RBX: 00007ff0ec705fa0 RCX: 00007ff0ec48cdd9 [ 208.258747][ T9809] RDX: 0000000020004800 RSI: 0000200000001140 RDI: 0000000000000008 [ 208.258837][ T9809] RBP: 00007ff0eaedf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.258854][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.258884][ T9809] R13: 00007ff0ec706038 R14: 00007ff0ec705fa0 R15: 00007ffd70e2a468 [ 208.258912][ T9809] [ 208.463916][ T28] audit: type=1326 audit(1777069838.987:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.6.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c70e5cdd9 code=0x7ffc0000 [ 208.497674][ T9740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 208.527430][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.527722][ T9740] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.732429][ T9740] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.1794: lblock 3 mapped to illegal pblock 3 (length 3) [ 208.788506][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1812'. [ 208.908769][ T9832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1812'. [ 208.926654][ T9826] blktrace: Concurrent blktraces are not allowed on loop8 [ 208.948202][ T9740] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 209.035931][ T9835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1794: bg 0: block 112: padding at end of block bitmap is not set [ 209.309407][ T9740] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.309407][ T9740] [ 209.583686][ T57] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 209.627995][ T57] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 209.666039][ T57] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.666039][ T57] [ 209.701859][ T3324] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 209.721693][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.965430][ T9865] loop1: detected capacity change from 0 to 8192 [ 210.079898][ T9888] lo speed is unknown, defaulting to 1000 [ 210.890672][ T9965] loop5: detected capacity change from 0 to 1024 [ 210.922661][ T9965] EXT4-fs: Ignoring removed orlov option [ 210.942755][ T9969] loop4: detected capacity change from 0 to 512 [ 210.955672][ T9965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 210.979036][ T9965] System zones: 0-1, 3-12 [ 210.993065][ T9965] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.014583][ T9969] FAULT_INJECTION: forcing a failure. [ 211.014583][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 211.060436][ T9963] loop1: detected capacity change from 0 to 128 [ 211.079901][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.4.1835 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.079935][ T9969] Tainted: [W]=WARN [ 211.079943][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.079955][ T9969] Call Trace: [ 211.079966][ T9969] [ 211.080012][ T9969] __dump_stack+0x1d/0x30 [ 211.080040][ T9969] dump_stack_lvl+0x95/0xd0 [ 211.080141][ T9969] dump_stack+0x15/0x1b [ 211.080167][ T9969] should_fail_ex+0x263/0x280 [ 211.080215][ T9969] ? __pfx_fat_alloc_inode+0x10/0x10 [ 211.080330][ T9969] should_failslab+0x8c/0xb0 [ 211.080353][ T9969] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 211.080377][ T9969] ? fat_alloc_inode+0x3c/0xe0 [ 211.080466][ T9969] ? fat_get_entry+0xeb/0x5d0 [ 211.080486][ T9969] ? __pfx_fat_alloc_inode+0x10/0x10 [ 211.080584][ T9969] fat_alloc_inode+0x3c/0xe0 [ 211.080611][ T9969] ? __pfx_fat_alloc_inode+0x10/0x10 [ 211.080679][ T9969] alloc_inode+0x40/0x170 [ 211.080699][ T9969] new_inode+0x1d/0xe0 [ 211.080720][ T9969] fat_build_inode+0x169/0x290 [ 211.080746][ T9969] msdos_lookup+0x22d/0x2a0 [ 211.080771][ T9969] lookup_one_qstr_excl+0xc7/0x240 [ 211.080834][ T9969] __start_renaming+0xff/0x2a0 [ 211.080867][ T9969] filename_renameat2+0x2d0/0x6e0 [ 211.080897][ T9969] __se_sys_renameat2+0x4f/0x1c0 [ 211.080965][ T9969] __x64_sys_renameat2+0x67/0x80 [ 211.080992][ T9969] x64_sys_call+0x2a12/0x3020 [ 211.081021][ T9969] do_syscall_64+0x12c/0x3b0 [ 211.081107][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.081128][ T9969] RIP: 0033:0x7ff0ec48cdd9 [ 211.081144][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.081160][ T9969] RSP: 002b:00007ff0eaedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 211.081181][ T9969] RAX: ffffffffffffffda RBX: 00007ff0ec705fa0 RCX: 00007ff0ec48cdd9 [ 211.081261][ T9969] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 211.081294][ T9969] RBP: 00007ff0eaedf090 R08: 0000000000000000 R09: 0000000000000000 [ 211.081380][ T9969] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 211.081394][ T9969] R13: 00007ff0ec706038 R14: 00007ff0ec705fa0 R15: 00007ffd70e2a468 [ 211.081415][ T9969] [ 211.330649][ T9961] loop0: detected capacity change from 0 to 8192 [ 211.368967][ T9965] lo speed is unknown, defaulting to 1000 [ 211.437467][ T9967] blktrace: Concurrent blktraces are not allowed on loop12 [ 211.667841][ T9985] loop0: detected capacity change from 0 to 128 [ 211.686478][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 211.779391][ T9985] 9p: Bad value for 'rfdno' [ 212.137203][T10010] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 212.144231][T10010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.173476][T10010] vhci_hcd vhci_hcd.0: Device attached [ 212.220330][T10017] bio_check_eod: 102 callbacks suppressed [ 212.220353][T10017] syz.1.1832: attempt to access beyond end of device [ 212.220353][T10017] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 212.248145][T10014] vhci_hcd: connection closed [ 212.248323][ T334] vhci_hcd vhci_hcd.5: stop threads [ 212.271192][T10017] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 212.287259][ T334] vhci_hcd vhci_hcd.5: release socket [ 212.288640][T10017] syz.1.1832: attempt to access beyond end of device [ 212.288640][T10017] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 212.315409][ T334] vhci_hcd vhci_hcd.5: disconnect device [ 212.333837][T10017] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 212.348509][T10024] loop6: detected capacity change from 0 to 512 [ 212.355435][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.370125][T10017] syz.1.1832: attempt to access beyond end of device [ 212.370125][T10017] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 212.389285][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.398660][T10017] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 212.411703][T10017] syz.1.1832: attempt to access beyond end of device [ 212.411703][T10017] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 212.414140][T10024] FAULT_INJECTION: forcing a failure. [ 212.414140][T10024] name failslab, interval 1, probability 0, space 0, times 0 [ 212.443325][T10017] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 212.456619][T10017] syz.1.1832: attempt to access beyond end of device [ 212.456619][T10017] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 212.463798][T10024] CPU: 1 UID: 0 PID: 10024 Comm: syz.6.1850 Tainted: G W syzkaller #0 PREEMPT(full) [ 212.463841][T10024] Tainted: [W]=WARN [ 212.463865][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.463878][T10024] Call Trace: [ 212.463885][T10024] [ 212.463945][T10024] __dump_stack+0x1d/0x30 [ 212.463973][T10024] dump_stack_lvl+0x95/0xd0 [ 212.464006][T10024] dump_stack+0x15/0x1b [ 212.464055][T10024] should_fail_ex+0x263/0x280 [ 212.464172][T10024] should_failslab+0x8c/0xb0 [ 212.464395][T10024] kmem_cache_alloc_noprof+0x66/0x3f0 [ 212.464427][T10024] ? security_inode_alloc+0x37/0x100 [ 212.464465][T10024] security_inode_alloc+0x37/0x100 [ 212.464503][T10024] inode_init_always_gfp+0x4a0/0x4e0 [ 212.464529][T10024] ? __pfx_fat_alloc_inode+0x10/0x10 [ 212.464560][T10024] alloc_inode+0x58/0x170 [ 212.464842][T10024] new_inode+0x1d/0xe0 [ 212.464866][T10024] fat_build_inode+0x169/0x290 [ 212.464896][T10024] msdos_lookup+0x22d/0x2a0 [ 212.465120][T10024] lookup_one_qstr_excl+0xc7/0x240 [ 212.465217][T10024] __start_renaming+0xff/0x2a0 [ 212.465249][T10024] filename_renameat2+0x2d0/0x6e0 [ 212.465293][T10024] __se_sys_renameat2+0x4f/0x1c0 [ 212.465392][T10024] __x64_sys_renameat2+0x67/0x80 [ 212.465491][T10024] x64_sys_call+0x2a12/0x3020 [ 212.465530][T10024] do_syscall_64+0x12c/0x3b0 [ 212.465667][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.465712][T10024] RIP: 0033:0x7f6c70e5cdd9 [ 212.465742][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.465761][T10024] RSP: 002b:00007f6c6f8af028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 212.465782][T10024] RAX: ffffffffffffffda RBX: 00007f6c710d5fa0 RCX: 00007f6c70e5cdd9 [ 212.465799][T10024] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 212.465814][T10024] RBP: 00007f6c6f8af090 R08: 0000000000000000 R09: 0000000000000000 [ 212.465902][T10024] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 212.465915][T10024] R13: 00007f6c710d6038 R14: 00007f6c710d5fa0 R15: 00007ffe0c502758 [ 212.465933][T10024] [ 212.771310][T10017] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 212.782551][T10017] syz.1.1832: attempt to access beyond end of device [ 212.782551][T10017] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 212.811535][T10017] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 212.839317][T10032] loop6: detected capacity change from 0 to 512 [ 212.894496][T10032] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 212.941005][T10032] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1852: Invalid inode bitmap blk 4 in block_group 0 [ 212.963165][T10032] loop6: lost filesystem error report for type 5 error -117 [ 212.975293][T10032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.130380][T10020] syz.1.1832: attempt to access beyond end of device [ 213.130380][T10020] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 213.173033][T10020] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 213.199891][T10020] syz.1.1832: attempt to access beyond end of device [ 213.199891][T10020] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 213.224766][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.229925][T10020] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 213.258230][T10020] syz.1.1832: attempt to access beyond end of device [ 213.258230][T10020] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 213.287514][T10020] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 213.339752][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1858'. [ 213.394670][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 213.394726][ T28] audit: type=1400 audit(1777069844.517:1049): avc: denied { ioctl } for pid=10051 comm="syz.6.1858" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 213.812748][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 213.855564][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1869'. [ 213.879646][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1868'. [ 213.909323][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1869'. [ 214.326078][T10123] FAULT_INJECTION: forcing a failure. [ 214.326078][T10123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.355199][T10123] CPU: 1 UID: 0 PID: 10123 Comm: syz.4.1871 Tainted: G W syzkaller #0 PREEMPT(full) [ 214.355235][T10123] Tainted: [W]=WARN [ 214.355287][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.355301][T10123] Call Trace: [ 214.355309][T10123] [ 214.355337][T10123] __dump_stack+0x1d/0x30 [ 214.355364][T10123] dump_stack_lvl+0x95/0xd0 [ 214.355428][T10123] dump_stack+0x15/0x1b [ 214.355449][T10123] should_fail_ex+0x263/0x280 [ 214.355611][T10123] should_fail+0xb/0x20 [ 214.355640][T10123] should_fail_usercopy+0x1a/0x20 [ 214.355719][T10123] _copy_from_iter+0xcf/0xea0 [ 214.355790][T10123] ? __alloc_skb+0x4f6/0x690 [ 214.355813][T10123] ? __alloc_skb+0x200/0x690 [ 214.355836][T10123] netlink_sendmsg+0x4ae/0x6f0 [ 214.355871][T10123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.355950][T10123] ____sys_sendmsg+0x563/0x5b0 [ 214.355978][T10123] ___sys_sendmsg+0x195/0x1e0 [ 214.356010][T10123] __x64_sys_sendmsg+0xd4/0x160 [ 214.356091][T10123] x64_sys_call+0x194c/0x3020 [ 214.356129][T10123] do_syscall_64+0x12c/0x3b0 [ 214.356190][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.356213][T10123] RIP: 0033:0x7ff0ec48cdd9 [ 214.356298][T10123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.356318][T10123] RSP: 002b:00007ff0eaedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.356339][T10123] RAX: ffffffffffffffda RBX: 00007ff0ec705fa0 RCX: 00007ff0ec48cdd9 [ 214.356356][T10123] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 214.356414][T10123] RBP: 00007ff0eaedf090 R08: 0000000000000000 R09: 0000000000000000 [ 214.356426][T10123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.356437][T10123] R13: 00007ff0ec706038 R14: 00007ff0ec705fa0 R15: 00007ffd70e2a468 [ 214.356454][T10123] [ 214.679586][T10135] loop4: detected capacity change from 0 to 1024 [ 214.690266][T10135] EXT4-fs: inline encryption not supported [ 214.702556][T10135] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 214.724638][T10134] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 214.774943][T10135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.896021][T10135] Cannot find map_set index 65533 as target [ 215.018954][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.059873][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.141177][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.141263][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.169436][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.181648][T10167] FAULT_INJECTION: forcing a failure. [ 215.181648][T10167] name failslab, interval 1, probability 0, space 0, times 0 [ 215.209780][T10167] CPU: 0 UID: 0 PID: 10167 Comm: syz.0.1878 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.209836][T10167] Tainted: [W]=WARN [ 215.209843][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.209853][T10167] Call Trace: [ 215.209859][T10167] [ 215.209866][T10167] __dump_stack+0x1d/0x30 [ 215.209892][T10167] dump_stack_lvl+0x95/0xd0 [ 215.209991][T10167] dump_stack+0x15/0x1b [ 215.210142][T10167] should_fail_ex+0x263/0x280 [ 215.210183][T10167] should_failslab+0x8c/0xb0 [ 215.210203][T10167] __kmalloc_noprof+0xb8/0x4d0 [ 215.210277][T10167] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 215.210309][T10167] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 215.210337][T10167] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 215.210364][T10167] ? selinux_capable+0x31/0x40 [ 215.210410][T10167] ? security_capable+0x7b/0x90 [ 215.210681][T10167] ? ns_capable+0x7c/0xb0 [ 215.210705][T10167] genl_rcv_msg+0x432/0x470 [ 215.210732][T10167] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 215.210800][T10167] netlink_rcv_skb+0x123/0x220 [ 215.210832][T10167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.210863][T10167] genl_rcv+0x28/0x40 [ 215.210921][T10167] netlink_unicast+0x5a8/0x680 [ 215.211047][T10167] netlink_sendmsg+0x5c8/0x6f0 [ 215.211142][T10167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.211245][T10167] ____sys_sendmsg+0x563/0x5b0 [ 215.211279][T10167] ___sys_sendmsg+0x195/0x1e0 [ 215.211319][T10167] __x64_sys_sendmsg+0xd4/0x160 [ 215.211412][T10167] x64_sys_call+0x194c/0x3020 [ 215.211442][T10167] do_syscall_64+0x12c/0x3b0 [ 215.211472][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.211564][T10167] RIP: 0033:0x7fec3878cdd9 [ 215.211582][T10167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.211601][T10167] RSP: 002b:00007fec371e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.211624][T10167] RAX: ffffffffffffffda RBX: 00007fec38a05fa0 RCX: 00007fec3878cdd9 [ 215.211640][T10167] RDX: 0000000020004800 RSI: 0000200000001140 RDI: 0000000000000008 [ 215.211755][T10167] RBP: 00007fec371e7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.211848][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.211862][T10167] R13: 00007fec38a06038 R14: 00007fec38a05fa0 R15: 00007ffc39040048 [ 215.211883][T10167] [ 215.857247][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'. [ 215.870488][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1884'. [ 216.078173][T10216] lo speed is unknown, defaulting to 1000 [ 216.117839][T10220] loop0: detected capacity change from 0 to 1024 [ 216.135557][T10220] EXT4-fs: inline encryption not supported [ 216.165974][T10220] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 216.196997][T10220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.238303][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.372349][T10244] FAULT_INJECTION: forcing a failure. [ 216.372349][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 216.389721][T10244] CPU: 1 UID: 0 PID: 10244 Comm: syz.5.1893 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.389777][T10244] Tainted: [W]=WARN [ 216.389784][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.389797][T10244] Call Trace: [ 216.389804][T10244] [ 216.389813][T10244] __dump_stack+0x1d/0x30 [ 216.389840][T10244] dump_stack_lvl+0x95/0xd0 [ 216.389938][T10244] dump_stack+0x15/0x1b [ 216.390031][T10244] should_fail_ex+0x263/0x280 [ 216.390060][T10244] should_failslab+0x8c/0xb0 [ 216.390155][T10244] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 216.390176][T10244] ? __alloc_skb+0x2d6/0x690 [ 216.390198][T10244] __alloc_skb+0x2d6/0x690 [ 216.390219][T10244] ? class_find_device+0x274/0x2d0 [ 216.390268][T10244] ? __alloc_skb+0x200/0x690 [ 216.390294][T10244] ieee802154_nl_new_reply+0x2f/0xb0 [ 216.390351][T10244] ieee802154_add_iface+0x188/0x480 [ 216.390382][T10244] ? __nla_parse+0x40/0x60 [ 216.390403][T10244] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 216.390434][T10244] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 216.390489][T10244] genl_family_rcv_msg_doit+0x187/0x1f0 [ 216.390516][T10244] genl_rcv_msg+0x432/0x470 [ 216.390540][T10244] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 216.390637][T10244] netlink_rcv_skb+0x123/0x220 [ 216.390676][T10244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.390770][T10244] genl_rcv+0x28/0x40 [ 216.390791][T10244] netlink_unicast+0x5a8/0x680 [ 216.390816][T10244] netlink_sendmsg+0x5c8/0x6f0 [ 216.390915][T10244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.390948][T10244] ____sys_sendmsg+0x563/0x5b0 [ 216.391044][T10244] ___sys_sendmsg+0x195/0x1e0 [ 216.391081][T10244] __x64_sys_sendmsg+0xd4/0x160 [ 216.391137][T10244] x64_sys_call+0x194c/0x3020 [ 216.391168][T10244] do_syscall_64+0x12c/0x3b0 [ 216.391197][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.391219][T10244] RIP: 0033:0x7f30e78ecdd9 [ 216.391243][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.391340][T10244] RSP: 002b:00007f30e6347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.391362][T10244] RAX: ffffffffffffffda RBX: 00007f30e7b65fa0 RCX: 00007f30e78ecdd9 [ 216.391379][T10244] RDX: 0000000020004800 RSI: 0000200000001140 RDI: 0000000000000008 [ 216.391397][T10244] RBP: 00007f30e6347090 R08: 0000000000000000 R09: 0000000000000000 [ 216.391412][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.391425][T10244] R13: 00007f30e7b66038 R14: 00007f30e7b65fa0 R15: 00007fff1fe701f8 [ 216.391445][T10244] [ 216.975063][T10260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.983808][T10260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.116701][T10279] FAULT_INJECTION: forcing a failure. [ 217.116701][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 217.162281][T10258] blktrace: Concurrent blktraces are not allowed on loop8 [ 217.179158][T10283] loop5: detected capacity change from 0 to 512 [ 217.183697][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.1.1904 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.183730][T10279] Tainted: [W]=WARN [ 217.183738][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.183750][T10279] Call Trace: [ 217.183757][T10279] [ 217.183766][T10279] __dump_stack+0x1d/0x30 [ 217.183862][T10279] dump_stack_lvl+0x95/0xd0 [ 217.183887][T10279] dump_stack+0x15/0x1b [ 217.183910][T10279] should_fail_ex+0x263/0x280 [ 217.184015][T10279] should_failslab+0x8c/0xb0 [ 217.184036][T10279] __kmalloc_noprof+0xb8/0x4d0 [ 217.184058][T10279] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 217.184086][T10279] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 217.184180][T10279] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 217.184207][T10279] ? __kfree_skb+0x109/0x150 [ 217.184285][T10279] genl_start+0xe0/0x390 [ 217.184307][T10279] __netlink_dump_start+0x334/0x520 [ 217.184365][T10279] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 217.184392][T10279] ? __pfx_genl_start+0x10/0x10 [ 217.184414][T10279] ? __pfx_genl_dumpit+0x10/0x10 [ 217.184437][T10279] ? __pfx_genl_done+0x10/0x10 [ 217.184480][T10279] genl_rcv_msg+0x400/0x470 [ 217.184575][T10279] ? __pfx_ethnl_perphy_start+0x10/0x10 [ 217.184603][T10279] ? __pfx_ethnl_perphy_dumpit+0x10/0x10 [ 217.184625][T10279] ? __pfx_ethnl_perphy_done+0x10/0x10 [ 217.184651][T10279] netlink_rcv_skb+0x123/0x220 [ 217.184758][T10279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.184786][T10279] genl_rcv+0x28/0x40 [ 217.184807][T10279] netlink_unicast+0x5a8/0x680 [ 217.184949][T10279] netlink_sendmsg+0x5c8/0x6f0 [ 217.184993][T10279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.185026][T10279] ____sys_sendmsg+0x563/0x5b0 [ 217.185100][T10279] ___sys_sendmsg+0x195/0x1e0 [ 217.185138][T10279] __x64_sys_sendmsg+0xd4/0x160 [ 217.185217][T10279] x64_sys_call+0x194c/0x3020 [ 217.185245][T10279] do_syscall_64+0x12c/0x3b0 [ 217.185294][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.185318][T10279] RIP: 0033:0x7fdbc913cdd9 [ 217.185412][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.185431][T10279] RSP: 002b:00007fdbc7b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.185453][T10279] RAX: ffffffffffffffda RBX: 00007fdbc93b5fa0 RCX: 00007fdbc913cdd9 [ 217.185467][T10279] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 217.185553][T10279] RBP: 00007fdbc7b97090 R08: 0000000000000000 R09: 0000000000000000 [ 217.185567][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.185580][T10279] R13: 00007fdbc93b6038 R14: 00007fdbc93b5fa0 R15: 00007fff89238e68 [ 217.185600][T10279] [ 217.347241][T10281] loop6: detected capacity change from 0 to 8192 [ 217.352283][T10288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1907'. [ 217.427685][T10283] journal_path: Non-blockdev passed as './file2' [ 217.494942][T10283] EXT4-fs: error: could not find journal device path [ 217.593553][T10293] FAULT_INJECTION: forcing a failure. [ 217.593553][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 217.634253][T10293] CPU: 0 UID: 0 PID: 10293 Comm: syz.5.1909 Tainted: G W syzkaller #0 PREEMPT(full) [ 217.634292][T10293] Tainted: [W]=WARN [ 217.634298][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.634310][T10293] Call Trace: [ 217.634317][T10293] [ 217.634324][T10293] __dump_stack+0x1d/0x30 [ 217.634354][T10293] dump_stack_lvl+0x95/0xd0 [ 217.634430][T10293] dump_stack+0x15/0x1b [ 217.634450][T10293] should_fail_ex+0x263/0x280 [ 217.634479][T10293] should_failslab+0x8c/0xb0 [ 217.634501][T10293] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 217.634563][T10293] ? __d_alloc+0x37/0x340 [ 217.634588][T10293] __d_alloc+0x37/0x340 [ 217.634636][T10293] ? default_pointer+0xf2/0x5e0 [ 217.634658][T10293] d_alloc+0x2e/0x100 [ 217.634687][T10293] lookup_one_qstr_excl+0x95/0x240 [ 217.634723][T10293] start_dirop+0x3e/0x70 [ 217.634751][T10293] simple_start_creating+0xa2/0xd0 [ 217.634776][T10293] debugfs_start_creating+0xda/0x150 [ 217.634813][T10293] __debugfs_create_file+0x70/0x2b0 [ 217.634840][T10293] debugfs_create_file_full+0x3f/0x60 [ 217.634944][T10293] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 217.635021][T10293] ref_tracker_dir_debugfs+0x10e/0x220 [ 217.635094][T10293] alloc_netdev_mqs+0x1a7/0xa70 [ 217.635119][T10293] ieee802154_if_add+0x8e/0x7f0 [ 217.635193][T10293] ? __nlmsg_put+0xa0/0xc0 [ 217.635219][T10293] ? genlmsg_put+0x116/0x150 [ 217.635238][T10293] ieee802154_add_iface_deprecated+0x43/0x70 [ 217.635334][T10293] ieee802154_add_iface+0x296/0x480 [ 217.635386][T10293] ? __nla_parse+0x40/0x60 [ 217.635449][T10293] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 217.635524][T10293] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 217.635549][T10293] genl_family_rcv_msg_doit+0x187/0x1f0 [ 217.635576][T10293] genl_rcv_msg+0x432/0x470 [ 217.635654][T10293] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 217.635776][T10293] netlink_rcv_skb+0x123/0x220 [ 217.635880][T10293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 217.635905][T10293] genl_rcv+0x28/0x40 [ 217.635923][T10293] netlink_unicast+0x5a8/0x680 [ 217.636011][T10293] netlink_sendmsg+0x5c8/0x6f0 [ 217.636042][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.636135][T10293] ____sys_sendmsg+0x563/0x5b0 [ 217.636233][T10293] ___sys_sendmsg+0x195/0x1e0 [ 217.636280][T10293] __x64_sys_sendmsg+0xd4/0x160 [ 217.636307][T10293] x64_sys_call+0x194c/0x3020 [ 217.636332][T10293] do_syscall_64+0x12c/0x3b0 [ 217.636421][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.636442][T10293] RIP: 0033:0x7f30e78ecdd9 [ 217.636457][T10293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.636473][T10293] RSP: 002b:00007f30e6347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.636564][T10293] RAX: ffffffffffffffda RBX: 00007f30e7b65fa0 RCX: 00007f30e78ecdd9 [ 217.636576][T10293] RDX: 0000000020004800 RSI: 0000200000001140 RDI: 0000000000000008 [ 217.636668][T10293] RBP: 00007f30e6347090 R08: 0000000000000000 R09: 0000000000000000 [ 217.636749][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.636760][T10293] R13: 00007f30e7b66038 R14: 00007f30e7b65fa0 R15: 00007fff1fe701f8 [ 217.636777][T10293] [ 217.645044][T10297] openvswitch: netlink: Missing key (keys=40, expected=100) [ 217.851372][T10301] loop0: detected capacity change from 0 to 512 [ 217.863747][T10299] loop6: detected capacity change from 0 to 512 [ 218.026240][T10301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.050224][T10299] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1910: inode has both inline data and extents flags [ 218.062801][T10301] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.086948][T10299] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.093401][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 218.110126][ C1] EXT4-fs (loop6): initial error at time 1777069849: ext4_orphan_get:1397: inode 15 [ 218.120089][ C1] EXT4-fs (loop6): last error at time 1777069849: ext4_orphan_get:1397: inode 15 [ 218.132592][T10299] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1910: couldn't read orphan inode 15 (err -117) [ 218.157228][T10299] loop6: lost filesystem error report for type 5 error -117 [ 218.157865][T10299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.209278][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.266370][ T28] audit: type=1400 audit(1777069849.387:1050): avc: denied { execute } for pid=10296 comm="syz.6.1910" path="/96/file0/file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 218.491524][T10323] futex_wake_op: syz.0.1918 tries to shift op by -9; fix this program [ 218.604598][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.664610][T10326] loop0: detected capacity change from 0 to 4096 [ 218.775784][T10326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.809232][T10332] loop6: detected capacity change from 0 to 8192 [ 218.867198][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 218.890493][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 218.890532][ T3320] Tainted: [W]=WARN [ 218.890541][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.890555][ T3320] Call Trace: [ 218.890563][ T3320] [ 218.890572][ T3320] __dump_stack+0x1d/0x30 [ 218.890603][ T3320] dump_stack_lvl+0x95/0xd0 [ 218.890635][ T3320] dump_stack+0x15/0x1b [ 218.890691][ T3320] dump_header+0x80/0x240 [ 218.890719][ T3320] oom_kill_process+0x295/0x350 [ 218.890743][ T3320] out_of_memory+0x97d/0xb80 [ 218.890829][ T3320] try_charge_memcg+0x62f/0xa10 [ 218.890901][ T3320] charge_memcg+0x6d/0x120 [ 218.890931][ T3320] __mem_cgroup_charge+0x28/0xb0 [ 218.890957][ T3320] filemap_add_folio+0x110/0x350 [ 218.891074][ T3320] __filemap_get_folio_mpol+0x326/0x680 [ 218.891096][ T3320] filemap_fault+0x462/0xb70 [ 218.891126][ T3320] ? __pfx_filemap_map_pages+0x10/0x10 [ 218.891147][ T3320] handle_mm_fault+0x16cb/0x2e70 [ 218.891211][ T3320] ? __pfx_filemap_fault+0x10/0x10 [ 218.891245][ T3320] do_user_addr_fault+0x62f/0x1050 [ 218.891284][ T3320] ? trace_page_fault_user+0x1f/0xa0 [ 218.891356][ T3320] exc_page_fault+0x62/0xa0 [ 218.891376][ T3320] asm_exc_page_fault+0x26/0x30 [ 218.891398][ T3320] RIP: 0033:0x7fdbc900adf4 [ 218.891553][ T3320] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 [ 218.891591][ T3320] RSP: 002b:00007fff892391d0 EFLAGS: 00010206 [ 218.891609][ T3320] RAX: 0000001b34024000 RBX: 0000000000000434 RCX: 0000000000035390 [ 218.891622][ T3320] RDX: 000000000c91aaac RSI: 00007fff89239260 RDI: 0000000000000001 [ 218.891634][ T3320] RBP: 00007fff8923920c R08: 000000002ff26ca3 R09: 3fffffffffffffff [ 218.891647][ T3320] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 218.891881][ T3320] R13: 00000000000927c0 R14: 0000000000035547 R15: 00007fff89239260 [ 218.891903][ T3320] [ 218.891930][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 5263 [ 218.987132][T10338] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1919'. [ 218.994259][ T3320] memory+swap: usage 289644kB, limit 9007199254740988kB, failcnt 0 [ 219.048544][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 219.176287][ T3320] kmem: usage 265696kB, limit 9007199254740988kB, failcnt 0 [ 219.213485][ T3320] Memory cgroup stats for /syz1: [ 219.213739][ T3320] cache 0 [ 219.237716][T10338] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1919'. [ 219.252932][ T3320] rss 20480 [ 219.263569][ T3320] shmem 0 [ 219.268998][ T3320] mapped_file 0 [ 219.269430][T10354] netlink: 'syz.5.1930': attribute type 4 has an invalid length. [ 219.283528][T10338] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1919'. [ 219.294767][ T3320] dirty 0 [ 219.298067][ T3320] writeback 0 [ 219.303017][ T3320] workingset_refault_anon 2175 [ 219.311133][T10355] loop6: detected capacity change from 0 to 512 [ 219.320328][T10343] blktrace: Concurrent blktraces are not allowed on loop8 [ 219.329291][ T3320] workingset_refault_file 870 [ 219.335776][T10355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.343552][T10338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1919'. [ 219.359664][ T3320] swap 393216 [ 219.369379][ T3320] swapcached 11423744 [ 219.374055][T10355] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.396601][ T3320] pgpgin 203427 [ 219.423442][ T3320] pgpgout 203422 [ 219.435774][ T3320] pgfault 203532 [ 219.443486][ T3320] pgmajfault 332 [ 219.451091][T10355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.468424][ T3320] inactive_anon 0 [ 219.481731][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1930'. [ 219.492886][ T3320] active_anon 20480 [ 219.503586][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.513113][ T3320] inactive_file 0 [ 219.524690][ T3320] active_file 0 [ 219.531819][ T3320] unevictable 0 [ 219.541036][ T3320] hierarchical_memory_limit 314572800 [ 219.550969][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1930'. [ 219.554008][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 219.581443][ T3320] total_cache 0 [ 219.581455][ T3320] total_rss 20480 [ 219.581463][ T3320] total_shmem 0 [ 219.581471][ T3320] total_mapped_file 0 [ 219.581558][ T3320] total_dirty 0 [ 219.581565][ T3320] total_writeback 0 [ 219.581572][ T3320] total_workingset_refault_anon 2175 [ 219.581581][ T3320] total_workingset_refault_file 870 [ 219.581589][ T3320] total_swap 393216 [ 219.581596][ T3320] total_swapcached 11423744 [ 219.581605][ T3320] total_pgpgin 203427 [ 219.581613][ T3320] total_pgpgout 203422 [ 219.581621][ T3320] total_pgfault 203532 [ 219.581628][ T3320] total_pgmajfault 332 [ 219.581636][ T3320] total_inactive_anon 0 [ 219.581645][ T3320] total_active_anon 20480 [ 219.581854][ T3320] total_inactive_file 0 [ 219.581863][ T3320] total_active_file 0 [ 219.581871][ T3320] total_unevictable 0 [ 219.581880][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1911,pid=10294,uid=0 [ 219.582023][ T3320] Memory cgroup out of memory: Killed process 10294 (syz.1.1911) total-vm:161884kB, anon-rss:1244kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 220.126931][T10369] loop1: detected capacity change from 0 to 2048 [ 220.131740][T10369] EXT4-fs: Ignoring removed bh option [ 220.131780][T10369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.131887][T10369] ext4: Unknown parameter 'appraise' [ 220.154088][ T28] audit: type=1400 audit(1777069851.277:1051): avc: denied { ioctl } for pid=10368 comm="syz.1.1934" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 220.190162][T10366] loop5: detected capacity change from 0 to 8192 [ 220.274344][ T28] audit: type=1326 audit(1777069851.397:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 220.330756][T10374] loop6: detected capacity change from 0 to 128 [ 220.335631][ T28] audit: type=1400 audit(1777069851.397:1053): avc: denied { read } for pid=10368 comm="syz.1.1934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 220.360427][ T28] audit: type=1326 audit(1777069851.427:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 220.396255][ T28] audit: type=1326 audit(1777069851.427:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 220.910751][ T28] audit: type=1326 audit(1777069851.427:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 221.030047][ T28] audit: type=1326 audit(1777069851.427:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 221.068997][ T28] audit: type=1326 audit(1777069851.427:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 221.094383][ T28] audit: type=1326 audit(1777069851.427:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 221.153435][ T28] audit: type=1326 audit(1777069851.427:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.5.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e78ecdd9 code=0x7ffc0000 [ 221.173338][T10379] loop6: detected capacity change from 0 to 8192 [ 221.195925][T10383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1938'. [ 221.324967][T10387] netlink: 'syz.6.1940': attribute type 2 has an invalid length. [ 221.335274][T10387] netlink: 199792 bytes leftover after parsing attributes in process `syz.6.1940'. [ 221.342611][T10390] netlink: 'syz.5.1941': attribute type 30 has an invalid length. [ 221.348674][T10387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=10387 comm=syz.6.1940 [ 221.433292][T10397] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1943'. [ 221.510988][T10401] tmpfs: Bad value for 'size' [ 221.579643][T10401] loop5: detected capacity change from 0 to 512 [ 221.628042][T10408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10408 comm=syz.0.1948 [ 221.647678][T10401] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1945: corrupted inode contents [ 221.664377][T10403] blktrace: Concurrent blktraces are not allowed on loop12 [ 221.664710][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.667420][T10401] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1945: mark_inode_dirty error [ 221.683589][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 221.683748][ C1] EXT4-fs (loop5): initial error at time 1777069852: ext4_do_update_inode:5690: inode 16 [ 221.683920][ C1] EXT4-fs (loop5): last error at time 1777069852: ext4_do_update_inode:5690: inode 16 [ 221.735257][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.736612][T10401] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1945: corrupted inode contents [ 221.736729][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.738540][T10401] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1945: mark_inode_dirty error [ 221.792949][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.795276][T10401] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1945: corrupted inode contents [ 221.795439][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.796216][T10401] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 221.796329][T10401] loop5: lost filesystem error report for type 5 error -117 [ 221.806569][T10401] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1945: corrupted inode contents [ 221.865300][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.866889][T10401] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1945: mark_inode_dirty error [ 221.888964][T10401] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.890673][T10401] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 221.890711][T10401] loop5: lost filesystem error report for type 5 error -117 [ 221.996340][T10401] EXT4-fs (loop5): 1 truncate cleaned up [ 222.014424][ T6676] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:31: Failed to release dquot type 1 [ 222.047179][ T6676] loop5: lost filesystem error report for type 5 error -117 [ 222.052986][T10401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.080786][T10401] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.945559][T10427] set_capacity_and_notify: 1 callbacks suppressed [ 222.945585][T10427] loop1: detected capacity change from 0 to 512 [ 223.002821][T10427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.052468][T10427] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1952: corrupted xattr entries [ 223.077764][T10427] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 223.078227][T10427] EXT4-fs (loop1): 1 truncate cleaned up [ 223.087883][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 223.087900][ C0] EXT4-fs (loop1): initial error at time 1777069854: xattr_find_entry:337: inode 15 [ 223.087949][ C0] EXT4-fs (loop1): last error at time 1777069854: xattr_find_entry:337: inode 15 [ 223.152906][T10422] loop6: detected capacity change from 0 to 8192 [ 223.161479][T10427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.405992][T10436] veth1_macvtap: renamed from vlan1 (while UP) [ 223.488173][T10440] loop6: detected capacity change from 0 to 512 [ 223.515561][T10440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.532256][T10440] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.882172][T10443] EXT4-fs (loop6): resizing filesystem from 128 to 1 blocks [ 223.937757][T10443] EXT4-fs warning (device loop6): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 223.959925][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.024648][T10446] __nla_validate_parse: 2 callbacks suppressed [ 224.024663][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1958'. [ 224.041539][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1959'. [ 224.075004][T10450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.542094][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.554805][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.604664][T10473] loop4: detected capacity change from 0 to 8192 [ 224.729176][T10510] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1968'. [ 224.823684][T10519] netlink: 'syz.0.1971': attribute type 8 has an invalid length. [ 224.845173][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 224.890741][T10519] erspan0: entered promiscuous mode [ 224.909593][T10519] gretap0: entered promiscuous mode [ 224.927515][T10519] erspan0: left promiscuous mode [ 224.939344][T10519] gretap0: left promiscuous mode [ 225.477333][T10547] Can't find ip_set type bitmap:ip [ 225.508618][T10554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 225.610741][T10559] loop0: detected capacity change from 0 to 256 [ 225.659370][T10559] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.744312][T10579] loop6: detected capacity change from 0 to 128 [ 225.780685][T10579] mmap: syz.6.1981 (10579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.820659][T10579] loop6: detected capacity change from 0 to 512 [ 225.831878][T10579] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.848310][T10579] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 225.872103][T10579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 225.904838][T10579] EXT4-fs (loop6): orphan cleanup on readonly fs [ 225.916391][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 225.936286][T10579] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1981: bg 0: block 361: padding at end of block bitmap is not set [ 225.970989][T10579] loop6: lost filesystem error report for type 5 error -117 [ 225.973454][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 225.982994][T10579] EXT4-fs (loop6): Remounting filesystem read-only [ 225.987531][ C0] EXT4-fs (loop6): initial error at time 1777069857: ext4_validate_block_bitmap:441 [ 225.987559][ C0] EXT4-fs (loop6): last error at time 1777069857: ext4_validate_block_bitmap:441 [ 226.001528][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 226.001545][ T28] audit: type=1400 audit(1777069857.127:1155): avc: denied { accept } for pid=10580 comm="syz.5.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.046872][T10579] EXT4-fs (loop6): 1 truncate cleaned up [ 226.064107][T10579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 226.165019][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 226.371783][ T28] audit: type=1400 audit(1777069857.487:1156): avc: denied { setattr } for pid=10598 comm="syz.6.1988" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 226.442306][T10592] loop0: detected capacity change from 0 to 1024 [ 226.458335][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 226.476578][T10592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.499514][T10592] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.493449][T10604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 228.054924][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.066501][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.075447][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.176491][T10634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.200359][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.217185][T10637] netlink: 'syz.0.1995': attribute type 13 has an invalid length. [ 228.218309][T10636] loop5: detected capacity change from 0 to 512 [ 228.228298][T10637] netlink: 'syz.0.1995': attribute type 17 has an invalid length. [ 228.254142][T10637] netlink: 'syz.0.1995': attribute type 27 has an invalid length. [ 228.254731][T10636] EXT4-fs: test_dummy_encryption option not supported [ 228.311961][T10636] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 228.313679][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.333780][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.358562][T10632] tipc: Resetting bearer [ 228.372135][T10644] loop5: detected capacity change from 0 to 512 [ 228.379732][T10644] EXT4-fs: Ignoring removed bh option [ 228.387576][T10644] EXT4-fs: Mount option(s) incompatible with ext2 [ 228.412299][T10644] loop5: detected capacity change from 0 to 512 [ 228.421590][T10644] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.432439][T10644] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1999: corrupted in-inode xattr: e_value size too large [ 228.447635][T10644] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.448129][T10644] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1999: couldn't read orphan inode 15 (err -117) [ 228.457738][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 228.457773][ C0] EXT4-fs (loop5): initial error at time 1777069859: ext4_iget_extra_inode:5128: inode 15 [ 228.457812][ C0] EXT4-fs (loop5): last error at time 1777069859: ext4_iget_extra_inode:5128: inode 15 [ 228.499774][T10644] loop5: lost filesystem error report for type 5 error -117 [ 228.502229][T10644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.533422][ T5423] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.534737][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.561980][T10650] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2000'. [ 228.617569][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.646334][ T334] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.655718][ T334] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.678037][ T334] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.968962][T10661] loop6: detected capacity change from 0 to 512 [ 229.094417][T10661] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.117776][T10661] EXT4-fs (loop6): mount failed [ 230.296819][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2006'. [ 230.630619][T10678] loop5: detected capacity change from 0 to 136 [ 230.688950][T10678] iso9660: Unknown parameter '' [ 230.749498][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2010'. [ 230.814071][T10697] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2012'. [ 230.904919][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.920588][T10710] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2017'. [ 230.922916][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.786423][T10725] vlan0: entered allmulticast mode [ 231.801366][T10725] macsec0: entered allmulticast mode [ 231.833176][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 231.938906][T10738] tipc: Started in network mode [ 231.950237][ T28] audit: type=1400 audit(231.920:1157): avc: denied { write } for pid=10737 comm="syz.0.2027" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 231.963481][T10738] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 232.063972][T10738] tipc: Enabled bearer , priority 10 [ 232.086646][T10745] netlink: 'syz.5.2028': attribute type 1 has an invalid length. [ 232.145456][T10745] bond2: entered promiscuous mode [ 232.159402][T10745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.320888][T10745] loop5: detected capacity change from 0 to 512 [ 232.395768][T10745] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.595808][T10745] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 232.616744][T10745] Quota error (device loop5): write_blk: dquota write failed [ 232.623405][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 232.624822][T10745] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 232.631124][ C0] EXT4-fs (loop5): initial error at time 232: ext4_mb_generate_buddy:1317 [ 232.640408][T10745] Quota error (device loop5): write_blk: dquota write failed [ 232.649256][ C0] EXT4-fs (loop5): last error at time 232: ext4_mb_generate_buddy:1317 [ 232.656865][T10745] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 232.675261][T10745] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2028: Failed to acquire dquot type 1 [ 232.690169][T10745] loop5: lost filesystem error report for type 5 error -28 [ 232.690427][T10745] EXT4-fs (loop5): 1 truncate cleaned up [ 232.704210][T10745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.710445][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2032'. [ 232.754399][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 232.820185][T10745] bond2: (slave bridge2): making interface the new active one [ 232.828785][T10745] bridge2: entered promiscuous mode [ 232.835989][T10745] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 232.870885][ T4439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.955907][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2032'. [ 233.042450][T10776] loop0: detected capacity change from 0 to 2048 [ 233.079202][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.116158][T10776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.149872][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.216712][ T4381] tipc: Node number set to 4269801488 [ 233.257211][ T4705] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 345: padding at end of block bitmap is not set [ 233.338365][ T4705] EXT4-fs (loop0): Remounting filesystem read-only [ 233.358708][ T334] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 233.402572][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.509133][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 233.518751][T10800] loop0: detected capacity change from 0 to 512 [ 233.554713][T10806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.584996][T10811] tipc: Enabled bearer , priority 10 [ 233.672865][T10825] loop6: detected capacity change from 0 to 512 [ 233.680020][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2041'. [ 233.698580][T10829] loop0: detected capacity change from 0 to 1024 [ 233.708535][T10825] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 233.711012][T10829] EXT4-fs: Ignoring removed bh option [ 233.721194][T10827] loop7: detected capacity change from 0 to 16384 [ 233.740530][T10825] EXT4-fs (loop6): 1 truncate cleaned up [ 233.748473][T10825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.821344][T10829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.921424][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.937289][ T28] audit: type=1400 audit(233.900:1158): avc: denied { ioctl } for pid=10851 comm="syz.4.2051" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 233.952798][T10849] netlink: 'syz.6.2047': attribute type 3 has an invalid length. [ 233.983906][T10840] loop7: detected capacity change from 16384 to 0 [ 233.989041][ C1] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 234.052880][ T28] audit: type=1400 audit(234.010:1159): avc: denied { write } for pid=10857 comm="syz.0.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.153190][ T28] audit: type=1400 audit(234.110:1160): avc: denied { write } for pid=10861 comm="syz.4.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 234.180242][T10862] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 234.219170][ T28] audit: type=1400 audit(234.150:1161): avc: denied { ioctl } for pid=10861 comm="syz.4.2055" path="socket:[32526]" dev="sockfs" ino=32526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 234.258805][T10865] loop4: detected capacity change from 0 to 1024 [ 234.277231][T10865] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 234.313051][T10865] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2055: Invalid block bitmap block 0 in block_group 0 [ 234.333611][T10865] loop4: lost filesystem error report for type 5 error -117 [ 234.334957][T10865] Quota error (device loop4): write_blk: dquota write failed [ 234.343765][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 234.343788][ C1] EXT4-fs (loop4): initial error at time 234: ext4_read_block_bitmap_nowait:483 [ 234.343808][ C1] EXT4-fs (loop4): last error at time 234: ext4_read_block_bitmap_nowait:483 [ 234.382760][T10872] tipc: Enabling of bearer rejected, failed to enable media [ 234.406013][T10865] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2055: Failed to acquire dquot type 0 [ 234.421273][T10865] loop4: lost filesystem error report for type 5 error -117 [ 234.421770][T10865] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.2055: Freeing blocks not in datazone - block = 0, count = 4096 [ 234.445508][T10865] loop4: lost filesystem error report for type 5 error -117 [ 234.449192][T10874] loop0: detected capacity change from 0 to 512 [ 234.465264][T10865] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2055: Invalid inode bitmap blk 0 in block_group 0 [ 234.479587][T10865] loop4: lost filesystem error report for type 5 error -117 [ 234.480009][T10865] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 234.497625][T10865] loop4: lost filesystem error report for type 5 error -117 [ 234.497859][T10865] EXT4-fs (loop4): 1 orphan inode deleted [ 234.516269][ T4705] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 0 [ 234.553123][ T4705] loop4: lost filesystem error report for type 5 error -117 [ 234.555848][T10865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.590531][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.623862][ T4381] tipc: Node number set to 2010048480 [ 234.625648][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.655447][T10888] loop0: detected capacity change from 0 to 512 [ 234.678028][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.701338][T10888] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2065: Failed to acquire dquot type 1 [ 234.714736][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.738403][T10888] loop0: lost filesystem error report for type 5 error -117 [ 234.739181][T10888] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2065: corrupted inode contents [ 234.748020][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 234.748044][ C1] EXT4-fs (loop0): initial error at time 234: ext4_acquire_dquot:7034 [ 234.748072][ C1] EXT4-fs (loop0): last error at time 234: ext4_acquire_dquot:7034 [ 234.840308][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 234.840536][T10888] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.2065: mark_inode_dirty error [ 234.864859][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 234.865417][T10888] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2065: corrupted inode contents [ 234.896512][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 234.896806][T10888] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2065: mark_inode_dirty error [ 234.921223][T10900] tipc: Enabling of bearer rejected, failed to enable media [ 234.922312][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 234.930994][T10888] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2065: corrupted inode contents [ 234.956393][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 234.956548][T10888] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 234.975660][T10888] loop0: lost filesystem error report for type 5 error -117 [ 234.977323][T10888] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2065: corrupted inode contents [ 235.002194][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 235.003643][T10888] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.2065: mark_inode_dirty error [ 235.047814][T10888] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 235.048059][T10888] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 235.055199][T10902] loop1: detected capacity change from 0 to 512 [ 235.071213][T10888] loop0: lost filesystem error report for type 5 error -117 [ 235.083966][T10902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.102805][T10888] EXT4-fs (loop0): 1 truncate cleaned up [ 235.110147][T10888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.125944][T10902] EXT4-fs: Ignoring removed nobh option [ 235.140936][T10902] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 235.163153][T10888] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2065: Failed to acquire dquot type 1 [ 235.183482][T10902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 235.199545][T10902] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 235.233514][T10902] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 235.271625][T10902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 235.376950][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.400277][T10899] blktrace: Concurrent blktraces are not allowed on loop12 [ 235.477759][T10921] FAULT_INJECTION: forcing a failure. [ 235.477759][T10921] name fail_futex, interval 1, probability 0, space 0, times 1 [ 235.504903][T10917] futex_wake_op: syz.4.2072 tries to shift op by -9; fix this program [ 235.505301][T10921] CPU: 0 UID: 0 PID: 10921 Comm: syz.0.2073 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.505330][T10921] Tainted: [W]=WARN [ 235.505336][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.505410][T10921] Call Trace: [ 235.505418][T10921] [ 235.505487][T10921] __dump_stack+0x1d/0x30 [ 235.505517][T10921] dump_stack_lvl+0x95/0xd0 [ 235.505570][T10921] dump_stack+0x15/0x1b [ 235.505593][T10921] should_fail_ex+0x263/0x280 [ 235.505649][T10921] should_fail+0xb/0x20 [ 235.505677][T10921] get_futex_key+0x12f/0xb50 [ 235.505768][T10921] futex_wake_op+0xa3/0xa70 [ 235.505846][T10921] ? timerqueue_linked_add+0x1c9/0x1f0 [ 235.505882][T10921] do_futex+0x348/0x380 [ 235.505923][T10921] __se_sys_futex+0x2f6/0x370 [ 235.505943][T10921] ? tick_program_event+0x79/0xc0 [ 235.506008][T10921] __x64_sys_futex+0x78/0x90 [ 235.506029][T10921] x64_sys_call+0x24ab/0x3020 [ 235.506057][T10921] do_syscall_64+0x12c/0x3b0 [ 235.506581][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.506715][T10921] RIP: 0033:0x7fec3878cdd9 [ 235.506735][T10921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.506754][T10921] RSP: 002b:00007fec371e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.506786][T10921] RAX: ffffffffffffffda RBX: 00007fec38a05fa0 RCX: 00007fec3878cdd9 [ 235.506802][T10921] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000001cc0 [ 235.506815][T10921] RBP: 00007fec371e7090 R08: 0000200000000100 R09: 00000000cfff7ff8 [ 235.506854][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.506867][T10921] R13: 00007fec38a06038 R14: 00007fec38a05fa0 R15: 00007ffc39040048 [ 235.506887][T10921] [ 235.753266][T10929] __nla_validate_parse: 4 callbacks suppressed [ 235.753288][T10929] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2075'. [ 235.791815][T10929] netlink: zone id is out of range [ 235.797321][T10929] netlink: zone id is out of range [ 235.803106][T10929] netlink: zone id is out of range [ 235.808400][T10929] netlink: zone id is out of range [ 235.853937][T10931] futex_wake_op: syz.5.2075 tries to shift op by -9; fix this program [ 235.863853][T10929] netlink: zone id is out of range [ 235.869886][T10929] netlink: zone id is out of range [ 235.879207][T10929] netlink: zone id is out of range [ 235.887311][T10929] netlink: zone id is out of range [ 235.997699][T10933] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 236.038016][T10937] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.2070: Abort forced by user [ 236.127511][T10937] EXT4-fs (loop1): Remounting filesystem read-only [ 236.240341][T10937] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 236.277110][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 236.401827][T10943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2080'. [ 236.574048][T10954] loop6: detected capacity change from 0 to 512 [ 236.590017][T10954] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.688290][T10960] ipip1: entered promiscuous mode [ 236.730191][T10960] ipip1: entered allmulticast mode [ 236.973014][T10974] futex_wake_op: syz.4.2088 tries to shift op by -9; fix this program [ 237.084978][T10954] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2084: Invalid block bitmap block 0 in block_group 0 [ 237.105799][T10954] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 237.115039][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 237.115059][ C0] EXT4-fs (loop6): initial error at time 237: ext4_read_block_bitmap_nowait:483 [ 237.115078][ C0] EXT4-fs (loop6): last error at time 237: ext4_read_block_bitmap_nowait:483 [ 237.141117][T10954] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.2084: attempt to clear invalid blocks 983261 len 1 [ 237.155426][T10954] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.167038][T10954] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2084: Invalid inode table block 0 in block_group 0 [ 237.192206][T10954] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 237.203437][T10954] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 237.213600][T10954] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2084: Invalid inode table block 0 in block_group 0 [ 237.227382][T10954] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 237.244987][T10954] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.2084: mark_inode_dirty error [ 237.256810][T10954] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 237.257056][T10954] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 237.275989][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.276023][T10954] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2084: Invalid inode table block 0 in block_group 0 [ 237.276138][T10954] EXT4-fs (loop6): 1 truncate cleaned up [ 237.313102][T10954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.429493][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 237.429508][ T28] audit: type=1400 audit(237.296:1163): avc: denied { read } for pid=10977 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.479807][ T28] audit: type=1400 audit(237.436:1164): avc: denied { connect } for pid=10953 comm="syz.6.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 237.500329][T10986] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.2084: Invalid inode table block 0 in block_group 0 [ 237.658352][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.775587][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 237.824764][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.834498][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.858475][T10991] netlink: 'syz.6.2093': attribute type 1 has an invalid length. [ 237.880580][T10993] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2094'. [ 237.938042][T10991] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.951359][T10995] 9p: Bad value for 'rfdno' [ 237.999512][T10995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 238.010607][T10991] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2093: Invalid block bitmap block 0 in block_group 0 [ 238.053844][T10991] fserror_report: 9 callbacks suppressed [ 238.053864][T10991] loop6: lost filesystem error report for type 5 error -117 [ 238.063097][T10995] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 238.066132][T11005] netlink: 'syz.4.2099': attribute type 1 has an invalid length. [ 238.075762][T10991] Quota error (device loop6): write_blk: dquota write failed [ 238.088665][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 238.088683][ C0] EXT4-fs (loop6): initial error at time 238: ext4_read_block_bitmap_nowait:483 [ 238.088712][ C0] EXT4-fs (loop6): last error at time 238: ext4_read_block_bitmap_nowait:483 [ 238.097164][T11005] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 238.137928][T11005] macvlan4: entered promiscuous mode [ 238.143258][T11005] macvlan4: entered allmulticast mode [ 238.149280][T11005] bond3: entered promiscuous mode [ 238.154452][T11005] bridge1: entered promiscuous mode [ 238.160340][T11005] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 238.167930][T10991] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 238.186642][T10991] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2093: Failed to acquire dquot type 0 [ 238.199405][T11005] bond3: left promiscuous mode [ 238.214422][T11005] bridge1: left promiscuous mode [ 238.221822][T10991] loop6: lost filesystem error report for type 5 error -117 [ 238.222101][T10991] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2093: Freeing blocks not in datazone - block = 0, count = 4096 [ 238.240725][T10995] EXT4-fs (loop1): failed to open journal device unknown-block(0,2) -6 [ 238.253747][T10991] loop6: lost filesystem error report for type 5 error -117 [ 238.261610][T10991] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2093: Invalid inode bitmap blk 0 in block_group 0 [ 238.307882][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 238.343870][T10991] loop6: lost filesystem error report for type 5 error -117 [ 238.353243][T10991] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 238.414908][T11016] futex_wake_op: syz.5.2100 tries to shift op by -9; fix this program [ 238.488655][T10991] loop6: lost filesystem error report for type 5 error -117 [ 238.489091][T10991] EXT4-fs (loop6): 1 orphan inode deleted [ 238.626976][T11019] set_capacity_and_notify: 2 callbacks suppressed [ 238.627410][T11019] loop4: detected capacity change from 0 to 2048 [ 238.648468][T10991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.729522][T11019] ext4: Unknown parameter 'noacl' [ 238.789948][T11034] loop1: detected capacity change from 0 to 128 [ 238.797780][ T3010] ================================================================== [ 238.806358][ T3010] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 238.815735][ T3010] [ 238.818075][ T3010] read-write to 0xffff8881005f0b78 of 8 bytes by task 11034 on cpu 1: [ 238.826319][ T3010] __filemap_add_folio+0x671/0x880 [ 238.831632][ T3010] filemap_add_folio+0x1d3/0x350 [ 238.836917][ T3010] __filemap_get_folio_mpol+0x326/0x680 [ 238.842998][ T3010] bdev_getblk+0x173/0x3f0 [ 238.848117][ T3010] __ext4_sb_bread_gfp+0x44/0x170 [ 238.853589][ T3010] ext4_fill_super+0x48b/0x37c0 [ 238.859416][ T3010] get_tree_bdev_flags+0x291/0x300 [ 238.865096][ T3010] get_tree_bdev+0x1f/0x30 [ 238.869934][ T3010] ext4_get_tree+0x1c/0x30 [ 238.874460][ T3010] vfs_get_tree+0x57/0x1d0 [ 238.879775][ T3010] do_new_mount+0x288/0x8d0 [ 238.884483][ T3010] path_mount+0x4d0/0xbc0 [ 238.889548][ T3010] __se_sys_mount+0x28c/0x2e0 [ 238.895528][ T3010] __x64_sys_mount+0x67/0x80 [ 238.901530][ T3010] x64_sys_call+0x2d61/0x3020 [ 238.906673][ T3010] do_syscall_64+0x12c/0x3b0 [ 238.911654][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.917905][ T3010] [ 238.920406][ T3010] read to 0xffff8881005f0b78 of 8 bytes by task 3010 on cpu 0: [ 238.928076][ T3010] filemap_write_and_wait_range+0x59/0x370 [ 238.934003][ T3010] bdev_release+0xeb/0x3d0 [ 238.938484][ T3010] blkdev_release+0x15/0x20 [ 238.943038][ T3010] __fput+0x29b/0x630 [ 238.947056][ T3010] fput_close_sync+0xad/0x190 [ 238.951748][ T3010] __x64_sys_close+0x55/0xf0 [ 238.954905][T11034] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.956342][ T3010] x64_sys_call+0x275d/0x3020 [ 238.956377][ T3010] do_syscall_64+0x12c/0x3b0 [ 238.977692][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.983607][ T3010] [ 238.985992][ T3010] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 238.993195][ T3010] [ 238.995792][ T3010] Reported by Kernel Concurrency Sanitizer on: [ 239.002404][ T3010] CPU: 0 UID: 0 PID: 3010 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 239.013102][ T3010] Tainted: [W]=WARN [ 239.016910][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.027346][ T3010] ================================================================== [ 239.079810][ T4701] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 239.089191][ T4701] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 0 [ 239.102578][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.305803][ T8052] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.