last executing test programs: 27.330510072s ago: executing program 3 (id=200): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x404, &(0x7f00000001c0)={[{@nobh}, {@nobh}, {@grpjquota}, {@bh}], [{@audit}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000100)={[{@grpid}, {@dax_never}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d008000140000000000800"], 0x398}}, 0x8000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0xb, 0x5, {@mac=@random="23c530f1f332", {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0xc, 0x7, 0x9, 0x1, 0x5, 'ip6gretap0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x44c}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb, 0x5}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, &(0x7f00000002c0)) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7ff, 0x10200) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) 26.770790083s ago: executing program 3 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 25.7476142s ago: executing program 3 (id=212): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000000080004"], 0x38}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 25.709016823s ago: executing program 3 (id=213): mmap(&(0x7f00008a8000/0x2000)=nil, 0x2000, 0x9, 0x110, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x65c, &(0x7f0000002280)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r1 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, &(0x7f0000000000), 0x8, 0x0) 25.174458157s ago: executing program 3 (id=217): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) 24.901375779s ago: executing program 3 (id=220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) r4 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x23, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000040)='./file0\x00', 0x1a4ecb8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES16=r4], 0xd, 0x0, &(0x7f0000000000)) 24.824913785s ago: executing program 32 (id=220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) r4 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x23, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000040)='./file0\x00', 0x1a4ecb8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES16=r4], 0xd, 0x0, &(0x7f0000000000)) 4.039561561s ago: executing program 2 (id=343): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./bus\x00', 0x1004490, &(0x7f0000000240)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@nogrpid}]}, 0x1, 0x500, &(0x7f0000001340)="$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") (fail_nth: 6) 3.349202028s ago: executing program 0 (id=348): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000080, 0x2000000000b0, 0x2000000000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x3, 0x0, 0x500, 0x0, 0x54, 0xd}, 0x9c) 3.284390187s ago: executing program 0 (id=350): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) unshare(0x400) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60cabf0000173afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000008ce540"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 3.218617045s ago: executing program 0 (id=351): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x47b, &(0x7f0000000540)="$eJzs3MtvVFUYAPDvTl+Uh62IDxC0ikbio6XluXCD0cSFJia6wLiqbUGkUKU1EUIUXeDSkLg3Lk38C1zpxqgrE7e6NySEsAFNTMbcO/dOh2Gm7XRKpzK/X3LhnLmnc8537z0z554zMwF0rZH0nyRia0T8ERFDleztBUYq/926cXHq7xsXp5Iol9+8nmTlbt64OFUULf5uSyVTLuf5gQb1Xn4nYnJ2duZcnh9bOPPB2Pz5Cy+cOjN5cubkzNmJo0cPHtjTf3ji0OqD619MpnHd3PXJ3O6dr7595fWp41fe/eW7tL1b8/21cbRX06KRytFt6Ok2KtuIttWkk94ONoSW9EREerr6sv4/FD0xWN03FK983tHGAXdVuVwuN3p/zl0qA/ewJDrdAqAzijf69P632NZp6LEhXDsW8eGRSvy38q2ypzdKeZm+uvvbtTQSEccv/fN1ukX78xAAAMv64VhEPN9o/FeKh2rK3ZevoQxHxP0RsT0iHoiIHRHxYERW9uGIeKTF+utXSO4c/5SuriqwFUrHfy/ma1vV8d+/5Sz+3HBPntuWxd+XnDg1O7M/Pyb7om8gzY8vUcePL//+ZbN9teO/dEvrL8aCFaWrvXUTdNOTC5Nthl117bOIXb118WeSKJZxkojYGRG7WnrmxTuMU89+u7tZqeXjX8IarDOVv4l4pnL+L0Vd/IWk6frk+JHDE4fGNsXszP6x4qq406+/XX6jWf1txb8G0vO/uf76z1TjH042Rcyfv3A6W6+db72Oy39+0fSeZrXXf3/yVpYuFl4/nlxYODce0Z+8dufjE4t/W+SL8mn8+/Y2ir8U22NT9Ug8GhHpRbwnIh6LiMfztj8REU9GxN4l4v/5pafebz3+gXx17u5K459e7vxH7flvPdFz+qfvW4+/kJ7/g1lqX/7ISl7/VtrAdo4dAAAA/F+Uss/AJ6XRarpUGh2tfIZ/R2wuzc7NLzx3Yu6js9OVz8oPR1+pmOkaqpkPHc/nhov8RF3+QD5v/FXPYJYfnZqbne508NDltjTp/6m/7v70I9Bp2TraYKdbAXTCkuvoXhfgnub72tC99H/oXvo/dK9G/f/TDrQDWH+1/X+og+0A1p/xP3Qv/R+6l/4PXanpd+NLbX3lv2sT722JWNMnvJ7/jMpGCbCaiNLtjyTLXVEz5+Z7Y4M0vpoYjA3RjKUSvSv+MYtVJgYa7urwCxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAa+S8AAP//A7vthw==") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00005e4000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mprotect(&(0x7f000028d000/0x2000)=nil, 0x2000, 0x1) r1 = open(0x0, 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x100) 2.931288204s ago: executing program 0 (id=352): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20882, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0xc03e, 0x0, 0x0) 2.858928251s ago: executing program 1 (id=353): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000380)) close_range(0xffffffffffffffff, r0, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000180)={[{@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@grpquota}, {@debug}, {}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x5fd, &(0x7f00000005c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2.748897561s ago: executing program 2 (id=354): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r7 = shmat(r6, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r6, &(0x7f0000d6f000/0x3000)=nil, 0x6000) shmdt(r7) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.748213481s ago: executing program 0 (id=355): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000000380)) close_range(0xffffffffffffffff, r0, 0x2) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000180)={[{@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@grpquota}, {@debug}, {}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x5fd, &(0x7f00000005c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.910803891s ago: executing program 4 (id=358): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x140f, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r2 = eventfd(0x5c) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000003c0)="e18b96eb97ca09f255a8ddc04bc8c9fcda137d52338adcf3b3fc0869aa6a82adf3e6980e308edcb1a249fdfd83ba7505b58f598116cb3ffbcd579037e2ae6eaa4afa289bb8a25e633bb6a49d8baac55d102748b349b848aa8a1dbd2a240e42c84085c7ffbb288255fc49e5e91bfe23e2b37f81e80db2c0096f4143821ce994b11b90fda1e0d2e77d32f573", 0x8b, 0xffffffff, 0x0, 0x1, r2}, &(0x7f00000004c0)) 1.908516161s ago: executing program 1 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x2802, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 1.838988608s ago: executing program 4 (id=361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000080, 0x2000000000b0, 0x2000000000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x3, 0x0, 0x500, 0x0, 0x54, 0xd}, 0x9c) 1.820811925s ago: executing program 0 (id=362): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000240)="2cf719fd7e6a4215f2358376110485bf3ac7e165b66b77aaeb2d7c93dbff273ec9cf8d6201c7b04b2d0c5477fe05be93fc49ef026a807645b324b9b9db104fe200c32bbe1ff17fa05d4f3595604b5db9dbd5b479f267bf7b804c808fcb85808586d19ae583d576fcd5a8fc6b02652840d3b22bebaef689cf87a2d946adb784e8a462759273d40b7ddd6dac84e2c156ea0f4bdc012ef848d4e962eb6cc6b979baecf68683d6e736eb42b44201e3", 0xad) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdbfb9f3e, &(0x7f0000000100)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x129081, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000353000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0), 0x12) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f00000003c0)=""/77, 0x4d, 0x40000042, &(0x7f00000004c0)={0x11, 0x16, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000000340)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socket$inet6(0xa, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x4851, &(0x7f00000001c0)={[{@max_dir_size_kb}, {@commit={'commit', 0x3d, 0x5}}, {@data_err_abort}, {@errors_continue}]}, 0x0, 0x4ed, &(0x7f0000000940)="$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") lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6ff3780000000083000000"]) 1.752513463s ago: executing program 1 (id=363): unshare(0xa000400) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup2(r0, r0) connect$packet(r1, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x1, 0x6}, 0x14) syz_io_uring_setup(0x25ef, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0xf23, 0x0, 0xc, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname$llc(r9, 0x0, 0x0) 1.751811593s ago: executing program 2 (id=364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b80080009000000"], 0x184}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) 1.698496723s ago: executing program 4 (id=365): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.549548887s ago: executing program 1 (id=366): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) 1.500095268s ago: executing program 4 (id=367): io_uring_setup(0x1fc1, &(0x7f00000002c0)={0x0, 0xfc95, 0x0, 0x0, 0x157}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff01, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r2) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x262) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xd758}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000440)={[{@nodots}, {@fat=@errors_continue}, {@fat=@time_offset={'time_offset', 0x3d, 0x4c4}}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8001}}, {@fat=@nocase}, {@dots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1.499243028s ago: executing program 2 (id=368): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@fwd={0xb}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @enum64={0x2, 0x3, 0x0, 0x13, 0x1, 0xd, [{0xe, 0x4, 0x4}, {0xe, 0x4, 0x4}, {0x2, 0x8, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000a40)=""/4096, 0x7f, 0x1000, 0x0, 0xfffff966}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r0}, 0x8) r1 = socket$inet6(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x8000}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0xe, 0x7, 0xc6, 0x20, 0x251, 0x5}, &(0x7f00000004c0)=0x9c) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f0000000140)={[{@nodots}, {@fat=@tz_utc}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@check_normal}]}, 0x0, 0x1e8, &(0x7f0000000280)="$eJzs3D9rU10cB/DTNs8TrVQ6Cbp40EWXoJ0dFKkgBhU14p/plt5qaEhKboZEHDL7MhxFdHEuvoG+C7cilE5OXqk3ba3WdrAm0n4+S36c7wnnHC4cLufAXb0yHkLIKgtJJ4yXx8L41dAvhRCmw0Z7oR8uvn+0/ur+4ye3rlWrs+VBc4zx5Nnlpy/fnvvYOfHww9igeW3m08qpldOrXx88r2exnsVmqxOTONdqdZK5Rhrn69liJca7jTTJ0lhvZml7R77QaC0t9WLSnJ+aXGqnWRaTZi8upr3YacVOuxeTZ0m9GSuVSpyaDPyJ2psveR7W8jzPy/2Q5/moJ8SQef5H2+amfi/GYyF87ndr3VrxW+Q3blZnL8Xvprf/td7t1ia28stFHnfm/4XJQT6za/5/uHC+yDey63eqP+XHw/zfXz4AAAAAABxKlbjl1/P9zSvdXfOi+uF+oDi/f708yEvhTGmYKwEAAAB+J+u9WEwajbS9RzERQtivz4EXpTC8sXYvbodRjq44VEU5hLBnn3fhX5nqoNhv5xgbzgYFAAAcmO2X/lHPBAAAAAAAAAAAAAAAAAAAAI6uYXxObNRrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYy7cAAAD//wiXZL4=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000001000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)}}, {{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)='\f', 0x1}], 0x1}}], 0x2, 0x200400c0) 1.327203307s ago: executing program 5 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x24, 0x3, 0x1, 0x101, 0x0, 0xf0ffffff, {0x1, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044870}, 0x0) 889.019099ms ago: executing program 1 (id=370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x641, 0x21) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1ff, r3, &(0x7f00000001c0), 0x0, 0x9, 0x0, 0x0, r3}]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) io_cancel(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xc10e, r0, &(0x7f0000000540)="40c5e1ab83d80c84f073d13dfceeed39d43e3a4f1a13a2d2c93966fbaf0cd14dd11444de0ba3d3760504b97c62679770cbd262c5a37402a3d5990c0f050a000a", 0x40, 0xea, 0x0, 0x1}, &(0x7f0000000680)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000000020104000000000000000001000003040002870600074000030000"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) listen(r6, 0xd3) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x109081) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) r8 = msgget$private(0x0, 0x3ac) msgsnd(r8, &(0x7f0000002500)=ANY=[@ANYBLOB=']'], 0x8, 0x0) msgsnd(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x8, 0x0) msgctl$IPC_RMID(r8, 0x0) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000000740)=0x10001, 0x4) write$binfmt_misc(r9, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000004) madvise(&(0x7f000046c000/0x2000)=nil, 0x2000, 0x65) socket(0x25, 0x1, 0x3) 833.689349ms ago: executing program 4 (id=371): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x3ff}, 0x1c, 0x0}}], 0x1, 0x24000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0xe4, 0x32, 0x100, 0x2070bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@local, 0x4e21, 0x0, 0xfffe, 0x200, 0x2, 0x80, 0x20}, {0x21, 0x65ed, 0x201, 0x0, 0xfffffffffffffffc, 0x100000000000000, 0x8000000000000000, 0xfffffffffffffff7}, {0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x1}, {{@in=@multicast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r3, 0x0, 0x1000, 0x1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./bus\x00', 0x1004490, &(0x7f0000000240)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@nogrpid}]}, 0x1, 0x500, &(0x7f0000001340)="$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") 698.922475ms ago: executing program 5 (id=372): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x140f, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r2 = eventfd(0x5c) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000003c0)="e18b96eb97ca09f255a8ddc04bc8c9fcda137d52338adcf3b3fc0869aa6a82adf3e6980e308edcb1a249fdfd83ba7505b58f598116cb3ffbcd579037e2ae6eaa4afa289bb8a25e633bb6a49d8baac55d102748b349b848aa8a1dbd2a240e42c84085c7ffbb288255fc49e5e91bfe23e2b37f81e80db2c0096f4143821ce994b11b90fda1e0d2e77d32f573", 0x8b, 0xffffffff, 0x0, 0x1, r2}, &(0x7f00000004c0)) 698.407745ms ago: executing program 5 (id=373): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001380)="8e44", 0x2}], 0x1}}], 0x2, 0xc040) (fail_nth: 6) 679.817391ms ago: executing program 5 (id=374): socketpair(0x9, 0x1, 0x580, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) r2 = syz_clone3(&(0x7f0000001240)={0x20a00, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x1b}, &(0x7f00000001c0)=""/44, 0x2c, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r5 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc1, 0x0, 0x7f, 0x5, 0x0, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x8}, 0x8040, 0x8, 0x100, 0x1, 0x401, 0xbe2, 0x8, 0x0, 0x3, 0x0, 0x700000000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = accept(r1, &(0x7f00000012c0)=@sco={0x1f, @none}, &(0x7f0000001340)=0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), r6) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f00000013c0)={'#! ', './file0', [{0x20, '.{({@'}, {0x20, '+.'}, {0x20, '*'}, {0x20, '\x17'}, {0x20, 'mptcp_pm\x00'}, {0x20, '^-*@#'}, {0x20, 'mptcp_pm\x00'}, {0x20, '&%{],'}, {0x20, '($}&'}], 0xa, "15d8356748b749a41c1db6d2927f5028715ab26737421a5971d31a93e01857f8ba5987edb3cfcf855e3ff474c28d8ee4f4c4847d08db80fd044d8d5baf5d1b1e16b7af7317fe69d90c7910c3b6d4c2b38433a7f360a5fc4bb9450f57e8199e901f226ab6a7dbdc16f29863bd360a6fa64917bba64776be91f24049d40ab7eb0edaa74744"}, 0xc1) lsetxattr$trusted_overlay_origin(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500), &(0x7f0000001540), 0x2, 0x6) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001580)={{0x0, 0x5, 0x4, 0xbdf6, 0x8e5, 0xfffffffffffffffe, 0x200, 0x45c8d34e, 0xdd, 0x7f, 0x10, 0x9, 0x100000000, 0xf}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000001640)={{r8, 0x3, 0x8, 0x800, 0x6, 0xe59, 0x100, 0xc, 0x10, 0x5, 0x8001, 0x8, 0x5, 0x700000000, 0x7ff}}) r9 = accept$unix(r6, &(0x7f0000002640)=@abs, &(0x7f00000026c0)=0x6e) r10 = accept$unix(r9, &(0x7f0000002700)=@abs, &(0x7f0000002780)=0x6e) connect$unix(r0, &(0x7f00000027c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r11 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002ac0)={0x60, 0x0, &(0x7f0000002940)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002880)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/13, 0xd, 0x2, 0x19}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}}, &(0x7f0000002900)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r11}, @release], 0xe1, 0x0, &(0x7f00000029c0)="94e7b34bf0ab800aa63031b16932dc5134d3c96ef64cbf8acd01082cf65179dfc2c577151761b823db3c6d62060c5a299f060143ac25261f94e02a7d0d314fb7e58f17470992e022846a44669b000a00c298d9dd05c7bb0c7c036da6013e4f2591cd0f5150ef6d680a10b43f9302b883432b7ba531079da68b6b6840c30fe0b0552c41d0296598658faa4040df16b7c995bdf2dc7fd42a071c2caa76e01e0c1bfa52bb4ebfb2468e2ae0b15732100916a6e2238fb8ceee69d9033aa5c9b176620f5f2aa3572d345c2073cb53e018feb6e868fbac2faab6b6ee70a75eff470250a9"}) r12 = accept$inet6(r0, &(0x7f0000002b40)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002b80)=0x1c) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002bc0)=@o_path={&(0x7f0000002b00)='./file0\x00', 0x0, 0x4000, r12}, 0x18) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r14, 0x89f4, &(0x7f0000002cc0)={'sit0\x00', &(0x7f0000002c00)={@dev={0xac, 0x14, 0x14, 0x30}, 0x1, 0x0, 0x90, 0x0, [{@local}, {@local}, {@remote}, {@broadcast}, {@private}, {@multicast1}, {@empty}, {@initdev}, {@local}]}}) sendmsg$NFT_BATCH(r6, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) ioctl$XFS_IOC_FD_TO_HANDLE(r14, 0xc038586a, &(0x7f0000002f40)={r12, &(0x7f0000002e40)='\x00', 0x6a000, &(0x7f0000002e80)={@align=0x7756, {0x4, 0x1, 0x5, 0x6}}, 0x5, &(0x7f0000002ec0)={@_ha_fsid}, &(0x7f0000002f00)=0x1}) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) r16 = socket$rds(0x15, 0x5, 0x0) fcntl$addseals(r13, 0x409, 0x1) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000003100)={&(0x7f0000002f80), 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xfc, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x88, 0x7, 0x1, 0x0, "20949b17828e0bc9ac86791675b195d5f38d871215893d5b54bfc40ae83c1de4b21d3aab44a3eb0f97ebcc75a8503ff9949fc9d0bf5393df827bf643304107b197f9c12d1115a0a05a0cba83bd6aba377c4fe6972d86033daa6df6cf3cc5f31f8b9e0076aab586fdae2ccc518093d9a00b31ad26420a040fda7a805c45cc2df903d1765f"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000003240)={r5, &(0x7f0000003140)='-\'}\x00', 0x80242, &(0x7f0000003180)={@align=0xb, {0x1f, 0xf, 0x2}}, 0x3, &(0x7f00000031c0), &(0x7f0000003200)=0x3}) mknodat(r17, &(0x7f0000003280)='./file0\x00', 0x1000, 0x7) r18 = openat$full(0xffffffffffffff9c, &(0x7f0000003400), 0x40, 0x0) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000032c0)="6366799e26f3f46ce9cd3fa7326073dfffb7db089d6c389059a22b83ed02ba875369fef796bf2193b893384efd02d42bc247b38ea3d7faabd4fb46a7d92f7f7a76d30a1151d55369fd815bbbca0ddc3a9376b258add53e7d5b7868762056fab69f17da818d60bd9215f7beadb7", 0x6d}, {&(0x7f0000003340)="ad013e615a735f53c52b6327e61bca212654b2470f9d4d1e5536acbbb5a6118c5c4e6297c03e273ba26a9e69123a778ad2edc38bc276c2acfc74a332f82ef29a812d10b8660667e8e73fcb8d721007ce11a638f7b556ee72af2cd67e76", 0x5d}], 0x2, &(0x7f00000036c0)=[@rights={{0x34, 0x1, 0x1, [r6, r0, r5, r9, r10, r3, r13, r10, r1]}}, @rights={{0x24, 0x1, 0x1, [r6, r18, 0xffffffffffffffff, r17, r9]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xc0, 0x40000d0}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003780)="a6c3a66a5676011b3fb9aadd28c7e086ed0fd5588bbc10e9929c73509f024a5c446330cf03d8c71738b203620c", 0x2d}, {&(0x7f00000037c0)="88a4525cd30f31b2e861fd83748761e16275d8ea6b662ea65ad1332ef16bbf017b05a05af848b8f4fdf332cf5ed7167389769d58914cc244881123505677bf2e86e96fcd60dfc02de4fd80a3a4b4f20575c00ea7bc5e574d9ba91770080738b63fa3bcedbbe8774b2f67ac6625e26fec6ad80bb1313e441510c84412e2456340717745a84c044d6309f7a83e303441d0d35d81eebcb11794a0ecd9e5c884b9", 0x9f}, {&(0x7f0000003880)="01c22e4ba3511ddec2dafabd3eddaa6d932e61a8bea62b70c6543112012fd668a82aac21bfb8546612f36267d0fb4eeb1679923b641fb10ae5d08aa83c8ea0", 0x3f}], 0x3, 0x0, 0x0, 0x24008810}}, {{&(0x7f0000003900)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003980)="aca81de016f4ba83ca110e28d7ecfd03a28f4a2404d651d1335e68003cbfa8fe90930b1e25742f6fa110cd8358ac5e2b39f819e3c836f513fc8081917fdb01509ce5c39ff0a1e404a3f6755be9990ecfdd819813ad570cc276decdf906ec11074ae10c80692b", 0x66}, {&(0x7f0000003a00)="170c0e6fd329cb3dd5bf3c660f4c964c6324f101cf639c5f1646bf7076ab627310cc130c665123f3bb16540728da0305c47cec0219fafd2270c796678513f9aad71f06aaaabed74222000b4cc7364a1f2b", 0x51}, {&(0x7f0000003a80)="cce81b5ffcbcdd67e822664ae04fec8f25f12da8ca2000b6f26bba040563648e4c9a5ec656b84d89f5e123d55ce4ae93b849909d4acb58b8fc", 0x39}, {&(0x7f0000003ac0)="9e4a42bb765f9586c5558cf889a8213084583bbfbc9df3a81ae4e8c902718985a2b89af645490d97899578cbc87cbb28a95f8340f66a85265874910b344a87fb5d20b716f420afca3b4276272c66c516d54899ca31de635d5521622794f340d7b22728434b97914364e27a752230f72ddc0c7454d71f40f9b6a10efb6ecb314c99cf000b6306f82915ec32c6dcaca4279825697913f2b3f3d7d5744559e579c252d0f9f80ae7f4c8a7ae1bc9c73681c0631cca87ac306b0629a87ed50a4100b4934f6b35125625fd2592ed7624d3e87c5e6f7c2b0110fafda460fd4fdf2ecbb34e2eb2f586cd305edd0bf1d31473", 0xee}, {&(0x7f0000003bc0)="1df8057a2580274a10df20c8f6a45220ff35cb727a248a5a89a903258fca37975df16e2b3cb4c699c685636032d3cd5243119026cf90550febe037b518eb1bc006d84b002a19983fc62318ee62eeb4c0c63dda16a103e5e4abab1025b222e168974271a63e624c489b07231af0b41719367aa373988a0b7a363757e217be52e6dafe15414e39208e89e750c7f4635596dd4934fcd6b0d305d4c6832bde6d411a1c27ad6a8e3ff043f8b569bbf0a825a82aa5457a63", 0xb5}], 0x5, 0x0, 0x0, 0x8800}}, {{&(0x7f0000003d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003d80)="94fabc61f8fcc2ba1f4ba14f714c8f9e70104364d173fa42a1db80623b1947aac1eb7431121aad17781ef3a12011ff7848f1efe1776433c2a17c7126aadf8a4abd468b66d5703a70aff59fb296be56469cb183762e6e86c77cb41d3ed3368253775b7610a1d3a26f1cf17f259425e65ff170518d4f19fa12374b986e5af524a73e4eb13d63a7adfba0c12cab52b9d13bc528a1d59491cb3b20386f55f637406640a5f062003ac96c9d600a80d0445e4ee6c3b50655b0cd821c0db41a1e3f9e82fc084796dffacdb3d9ca62d2321ccd1a597a33b920e1cf81077d6d42f4", 0xdd}], 0x1, &(0x7f0000003ec0)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0xc104}}, {{&(0x7f0000003f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003f80)="deab2ce6c1ad22455707a9e7ef27d5a866e1b8710ac9843f429147e6b8a92a597404f4ac7a5b45003c73689990fbda502fd8dc3bbd28cc416b7f729a6eb781a6337735cbdc5cbd36af47e2d878dcfa4322ec0e641bde98cf5044411280c50e9c517bcbe2cf345a04b2b2556668e3b646fce6d20e77", 0x75}, {&(0x7f0000004000)="67873c8030ad180f9f64584bce3acc70483299d75a4189377732371e1e197ef686025eef2738f5c39f09727c80e51c06d1bc5090d199b553b4885d66e3ccd16f77e72689d91e4412bb37", 0x4a}], 0x2, &(0x7f00000040c0)=[@rights={{0x2c, 0x1, 0x1, [r9, r14, 0xffffffffffffffff, r0, r16, r6, 0xffffffffffffffff]}}], 0x30, 0x20000011}}, {{&(0x7f0000004100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004340)=[{&(0x7f0000004180)="d15ee220c6480d6e17b084474aa29d58e3c6518b8ae2165044e7cedb48bdadcdd488e1e43da3660e621fc5b2d524f503d165fd9066385e74c17fbcb9931cac1864e1394a38d78a1bbb9bcaaa0444d1759eb4636e8d5ed5686d373f6187a5e3f4c0503e2cfc2e1ee87b04c69e2687798291cebf1bd9732f892a879358761df795e1dbb11bd67ef6adc5162d8ebd00adcb7bf9e66dd1eab5dc6fc5923785d41d95bfbc405327", 0xa5}, {&(0x7f0000004240)="67707d2c326032a43c246fa60782fb08b33060e738b3d9f219564a07d04b2ee719dc20f0191f179a54014db0c1edb45e151420590777abcca877f2bc0876aa1f26ceaf54da9e1c2c39ec0f27c79de6dad4823c286eb208f1f97b8e14d76986f6d62fcd8ff348e5af728438ad82987b2a3c3209ff7b04c27e2764cdcff9ccd6ec7422a8b495615b07d73fbe1d7a9f956d39fb3dee0bb15573a79f1d87fd69e9584a9a2ceda7b5c22c8d428c6530fa84ac6012a27492f46b", 0xb7}, {&(0x7f0000004300)="961bdf9827", 0x5}], 0x3, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000004380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004400)="a69b56979cfbca950605f2e5d4793b1452e6e7b3dbb4e4755e106736dda70f9ee5f5d2edc94eabc009d349069a2b3110380c36f6e6aabc1a22d3939a43e9ea380a42b57fac0a531ab89c676861f202b8bba2529e86fb58610ebac87460a1d1cc3485cfdf0632549b167f482eafa08f47816538885bc725f78affe4ab38d17fee746c8eab6ab7494b6962b148d14c03b5b26be8c95ebbd77898af43e6f0ea5c62197a0e27dc54866d98ab16b6e0fd50abfdee83e1b23e5c230ce4d087d2dc7a9efc", 0xc1}, {&(0x7f0000004500)="15c9c29db4e9a24cdd4de6aec26cefb3", 0x10}, {&(0x7f0000004540)="d147def25d5a948b706353ae3e699c5de45aed162f4c4f6d709121fef5e86c41768c1144f50d23962f", 0x29}, {&(0x7f0000004580)}, {&(0x7f00000045c0)="83ae6a4d532dba54b9d1510cd4b40b5e7b874e99219efd385a745f8bbd71ce964fae20635439ac7c5c720c7353a7553785eb2291782cfb5b7c703d343a54df61ae82b9495a0d1cd5b7aa54e4b6e409d691e6722fba5efd42ceb3d49221494c4b1286efccba753fdc9ab839067085bc76f7e6d39b5465c46f5ccf9ba8178840c337a323bd60174f74f5ef947cef89b41de7aa33a1168b3aeaa34ebc83b617b17797f769b1ce5b8145ecaa13db67c386f168a7c6a022c1828974436705642e00d80d0b77e782ecb40cc889c5c37818eae94cffc5229baa3dd7c874c39ad575a976c6f7613b26d70ccd18c31de6", 0xec}, {&(0x7f00000046c0)="a5ce67e4d6f1d8ae74b43b3f8aeed5e25c8eea2a2272a0fde462554c94326badbee7c09d75fea8a162f3d6584e76bd0d56f9a774f64fe4cb8a7be7da9086411e2ea8f223b257bfe1ca81f28eec0b7b01fce84e726bd1c83a4890d1a216aac4b7c91927b1f200dd61f0", 0x69}, {&(0x7f0000004740)="aa7b52e0d36c98ec64148ed839572099bb45fcfd30c170965702971d4e7a80ad0bf33ad3673701ba1da2ee91f68095dcd19ffd32fcde5976b757a4003aad00314afc9b9407", 0x45}, {&(0x7f00000047c0)="9a0a787e3ca35ff10f213c120ad8a5b131252ffc52112030e2bb6ef6da8d7e260fcfd26112d0f5a9a08dc0f526d0970b5c93bbbe33fa3df6546fe3cf3335b662776b6cf7418c7b", 0x47}], 0x8, &(0x7f0000004c40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x78}}], 0x7, 0x80000) 664.850019ms ago: executing program 1 (id=375): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x38, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000000011800068014000400200100"/170, @ANYRESHEX=r3, @ANYRESHEX=r2], 0xac}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000200000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004002001000000"], 0xb4}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) connect$inet6(r1, 0x0, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @empty}}, [0xb, 0x580, 0xc4e7, 0x8000000002, 0x8, 0x2, 0x26b3, 0x1, 0x9, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x4]}, &(0x7f0000000180)=0x100) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0xeaffffff, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x28f43000) waitid(0x1, 0x0, &(0x7f00000003c0), 0x80000000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x3a0af83a) getsockopt$inet_tcp_buf(r4, 0x6, 0x17, &(0x7f0000000980)=""/172, &(0x7f0000000140)=0xac) listen(r4, 0x28) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000a40)="8ed6840c0af26dadc10dd5727220576e090853f691caa2352acb8e07b75cda1ae6dcd0df257d3dbe8494d1bca677c9b3333f510a70fbd66a860783cf48ce7330b80f874bbf64441e9582ef912d911c3c9cdba9d341f9651aa1a184fa5e73434518b0f0b5657baaeeca14060b8de57f3ad80662843297c2796b022ec4aefddee6ec11139ceef0b643adbada0d78de5e13dcc17f974742c0a2b431a48fe96019b8facce010c4ab9af7cdb3d0e97328dcdc678642f02b3a096a5b0a1cf3b39dc5cde3d230c03729b673cf27510ee79bc74eb905f9a533d3c1e54b5ed812d68eb96311d0d3730cd868e8f11a92dc1f659eca2a41dacfe7") poll(0x0, 0x0, 0x400) shutdown(r4, 0x0) 570.225612ms ago: executing program 5 (id=376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xffffffef, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='1\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bc7000fcdbdf250d00000005fff300ffff40c0257abcc2ec6af465dfb75a0000eb9296"], 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000f00)={'gretap0\x00', {0x2, 0x4e24, @loopback}}) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x484, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfb, {0x17, 0x2, 0x2b, [0x4, 0x7, 0x369, 0x4, 0x8, 0x8, 0x4, 0x5, 0xffffffff, 0x5, 0x5, 0x7, 0x10000, 0x3, 0x1ff, 0x3, 0x7, 0xffff, 0x1, 0x8, 0x3f, 0x2, 0x120000, 0x10, 0x0, 0x6, 0x0, 0x9, 0x9, 0x6, 0x1, 0x1, 0x0, 0x4, 0xa3, 0xffffffff, 0x7031, 0xffffff80, 0x7f, 0x3ff, 0x2, 0x7, 0x378, 0x4, 0x7, 0x3, 0x4, 0x3, 0x80000000, 0x8000, 0x6, 0x6, 0x9, 0xb, 0x2, 0x9137, 0x5, 0xfffffff8, 0xc, 0x800, 0x24, 0x3, 0x6, 0x8], [0x1, 0x4, 0x10, 0x0, 0x3, 0x7fffffff, 0x5, 0xd, 0x3, 0x1, 0x5, 0x9680, 0x8000000, 0x1, 0x1, 0x3, 0xffff, 0x8, 0x6, 0x1, 0x0, 0x9, 0x7, 0xfc6, 0x7, 0x7, 0x6, 0x400, 0x4, 0x5, 0x6, 0x6, 0x8, 0xfffffffb, 0x8, 0x9, 0xfff, 0x6f, 0x12, 0x1, 0x3, 0x7, 0x3ff, 0x200, 0x587, 0x27, 0x1, 0x9e, 0x80, 0x80000000, 0x7, 0x40, 0x9, 0x5272, 0x8, 0x800, 0x9, 0xbbc9, 0x0, 0x1, 0x5, 0x8, 0x24, 0x3], [0xcdf, 0x1, 0x1, 0xde, 0xffffffc0, 0xffffffbf, 0x6f80, 0x89, 0x3, 0xfffffffc, 0x7f, 0xd96, 0x8, 0x10001, 0x3, 0xde, 0x5, 0x1, 0x100, 0x6, 0x7, 0xb8d7668, 0xc, 0x6, 0x8000, 0x9, 0x3, 0x401, 0x7, 0x80000001, 0x41, 0x2, 0x400, 0x7, 0x80, 0x9000, 0xf7dc, 0x80000000, 0x6f, 0x1, 0x9, 0xfffffffe, 0x68f, 0x81, 0x6, 0xfffffff8, 0x6, 0x5, 0x7fff, 0x1, 0xe, 0xf647baa, 0xd, 0x10, 0x3086, 0x3a, 0x1, 0xe3, 0x200, 0x7, 0x101, 0x80000000, 0x8, 0xfffffff7], [0x6, 0x8, 0x2, 0x5, 0xcb45, 0xc4, 0x3, 0xc, 0x4, 0x0, 0x4000, 0x5, 0xb34, 0x6, 0x7fff, 0x8943, 0x4, 0x7208, 0x5, 0x2, 0x9, 0x62, 0x9, 0x0, 0xa, 0x4, 0x1, 0x40, 0x7fff, 0xfffffdde, 0x8, 0xd, 0x90b, 0x7, 0x1, 0x1, 0x5, 0x3, 0xff, 0x8, 0x8, 0x8, 0x3, 0xb36, 0x9, 0x7, 0x7, 0x200, 0x422, 0x4, 0x7, 0x4, 0x1ff, 0x8, 0x3, 0x5f4b, 0x73, 0x8, 0x401, 0x8000, 0x0, 0x2, 0x40, 0x6e91], 0x61, ['batadv_slave_0\x00', 'NLBL_MGMT\x00', 'NLBL_MGMT\x00', 'gretap0\x00', '/proc/sys/net/ipv4/tcp_rmem\x00', 'gretap0\x00', '!]&!$]--\x00', 'nl802154\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x484}, 0x1, 0x0, 0x0, 0x4004081}, 0x44) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYBLOB="0100000a40000000000a0100000008000800ac1414370800070064010101060001005b000000080002000500000014000600000000000000000000093f55000000000000002baa62f95ac5cf17a4e03642263c8c9a90db9938a6416a4cd222e7936e6ae41b7d520b539eb4ba872342118d37700cda80afad74734d46ba6f1f5c112e1e"], 0x48}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) r8 = socket(0x2a, 0x4, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0xffe0}, {0xf, 0x1}, {0xfff0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400080c}, 0x4000800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fchdir(r11) r12 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3b95ba84cddb876, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xffff, 0x2}, 0x4, 0x0, 0x1, 0x8, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 569.487272ms ago: executing program 2 (id=377): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 527.990244ms ago: executing program 5 (id=378): socket(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = memfd_secret(0x80000) readahead(r1, 0x7, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x3, 0x4, 0x24800, r1, 0xfffffffc, '\x00', r9, r10, 0x4, 0x5, 0x4, 0x3}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 524.545724ms ago: executing program 2 (id=379): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0xff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000580)={0x20000002}) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/231, 0xe7}, 0xfff}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x2000, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) socket(0x10, 0x2, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002380)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x44) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a96ac27db2bb30e7d928897d80be51dc41547d87d38a481f6ce588d65c044d1fd9b375bfef2282661c43ff4e38f5737d021e72b1eab0ae0ff8086b0c88a7eec1cf8208e54b29e92fbf9827b0cffd6fde", 0x50, 0xfffffffffffffffe) sendfile(r10, r9, 0x0, 0x7fffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"7fc0ea6087adb46469591d6c5b733a5b", 0x0, r6, {0xf4, 0xfff}, {0x0, 0x10}, 0x1, [0x0, 0x4, 0x3, 0x400, 0x2, 0xf7, 0x401, 0x2, 0x0, 0x6, 0x23, 0x4, 0x2, 0x1, 0xc7f, 0x24e]}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x1a4243c, &(0x7f0000000a40)=ANY=[@ANYRES16=r12, @ANYRESHEX=r5, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=r11, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES32, @ANYRES16=r12, @ANYBLOB="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", @ANYRESOCT=r11, @ANYRES32], 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=380): setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x2}, @mss={0x2, 0x2}, @sack_perm, @timestamp, @sack_perm], 0x7) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x7ff}}]}, 0x1, 0xbcf, &(0x7f0000002080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000000010000300000000010000020300000000"], 0x24, 0x3) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x10022, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x90, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x26}, 0x34, 0x0, 0x800000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x38, &(0x7f0000002dc0)=""/4096, &(0x7f0000000200)=0x1000) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002200)=ANY=[@ANYBLOB="140000003a000d0326bd70"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x10) readv(r5, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1) syz_read_part_table(0x406c, &(0x7f000000c180)="$eJzszzFKxEAYBeCXzYZECSyCVoIoFraxs8ottpc9g5WFirmJpXgA7+EdLD2DVVbWCBYi4vJ91TzePz8z4a+V307Um7FI8rx62ktyfJKh65ImyXzsdz5Gu/NUu80sbZKr6eLl4w/fDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/F+zJPU63SYZXq7Pxtysm9Vhhps+F23SHCyS+zJVf1RkP/Mv95bJa5IiyVuS5eK3PwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbIfLjVR/rtvxcDe9+nCaoa/e2Z1DAwBAKISCRBd0SZfEZvb3u0rgvbVtv29Xss+0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCyAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//RwoVBA==") setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) kernel console output (not intermixed with test programs): 65.525411][ T3826] loop1: p2 p3 p7 [ 65.549416][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 65.563425][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.616135][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.617539][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 65.638443][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 65.650207][ T3833] FAULT_INJECTION: forcing a failure. [ 65.650207][ T3833] name failslab, interval 1, probability 0, space 0, times 1 [ 65.696298][ T3832] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 65.718431][ T3819] loop2: detected capacity change from 0 to 512 [ 65.725456][ T3832] loop1: detected capacity change from 0 to 512 [ 65.732493][ T3833] CPU: 1 UID: 0 PID: 3833 Comm: syz.3.88 Not tainted syzkaller #0 PREEMPT(full) [ 65.732524][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.732543][ T3833] Call Trace: [ 65.732549][ T3833] [ 65.732556][ T3833] __dump_stack+0x1d/0x30 [ 65.732608][ T3833] dump_stack_lvl+0x95/0xd0 [ 65.732693][ T3833] dump_stack+0x15/0x1b [ 65.732715][ T3833] should_fail_ex+0x263/0x280 [ 65.732738][ T3833] should_failslab+0x8c/0xb0 [ 65.732791][ T3833] __kvmalloc_node_noprof+0x155/0x650 [ 65.732824][ T3833] ? map_get_next_key+0x19c/0x330 [ 65.732910][ T3833] map_get_next_key+0x19c/0x330 [ 65.732938][ T3833] ? __sys_bpf+0x643/0x7e0 [ 65.733038][ T3833] __sys_bpf+0x64d/0x7e0 [ 65.733072][ T3833] __x64_sys_bpf+0x41/0x50 [ 65.733114][ T3833] x64_sys_call+0x10cb/0x3020 [ 65.733140][ T3833] do_syscall_64+0x12c/0x370 [ 65.733232][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.733295][ T3833] RIP: 0033:0x7f32de60c799 [ 65.733314][ T3833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.733345][ T3833] RSP: 002b:00007f32dd05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.733385][ T3833] RAX: ffffffffffffffda RBX: 00007f32de885fa0 RCX: 00007f32de60c799 [ 65.733398][ T3833] RDX: 0000000000000020 RSI: 00002000000005c0 RDI: 0000000000000004 [ 65.733419][ T3833] RBP: 00007f32dd05f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.733431][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.733443][ T3833] R13: 00007f32de886038 R14: 00007f32de885fa0 R15: 00007fff82379308 [ 65.733479][ T3833] [ 65.933322][ T3833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 65.953473][ T3819] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 66.115945][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.177766][ T3840] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 66.269862][ T3844] loop3: detected capacity change from 0 to 256 [ 66.470010][ T3844] FAT-fs (loop3): Directory bread(block 64) failed [ 66.476723][ T3844] FAT-fs (loop3): Directory bread(block 65) failed [ 66.483425][ T3844] FAT-fs (loop3): Directory bread(block 66) failed [ 66.490076][ T3844] FAT-fs (loop3): Directory bread(block 67) failed [ 66.496998][ T3844] FAT-fs (loop3): Directory bread(block 68) failed [ 66.503747][ T3844] FAT-fs (loop3): Directory bread(block 69) failed [ 66.510357][ T3844] FAT-fs (loop3): Directory bread(block 70) failed [ 66.517011][ T3844] FAT-fs (loop3): Directory bread(block 71) failed [ 66.523659][ T3844] FAT-fs (loop3): Directory bread(block 72) failed [ 66.530262][ T3844] FAT-fs (loop3): Directory bread(block 73) failed [ 66.548667][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.594273][ T3844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 66.605000][ T3844] random: crng reseeded on system resumption [ 66.732029][ T3848] loop0: detected capacity change from 0 to 1024 [ 67.010667][ T3854] veth0: entered promiscuous mode [ 67.087877][ T3848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.170043][ T3851] veth0: left promiscuous mode [ 68.168579][ T3864] loop1: detected capacity change from 0 to 512 [ 68.296346][ T3864] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.305454][ T3864] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 68.314661][ T3864] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 68.322992][ T3864] System zones: 0-2, 18-18, 34-35 [ 68.329319][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.878545][ T28] kauditd_printk_skb: 500 callbacks suppressed [ 68.878591][ T28] audit: type=1326 audit(1772957937.274:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 68.918821][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.943451][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.965492][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.983919][ T3867] FAULT_INJECTION: forcing a failure. [ 68.983919][ T3867] name failslab, interval 1, probability 0, space 0, times 0 [ 69.203555][ T3872] loop2: detected capacity change from 0 to 1024 [ 69.238719][ T3867] CPU: 1 UID: 0 PID: 3867 Comm: syz.4.98 Not tainted syzkaller #0 PREEMPT(full) [ 69.238753][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.238764][ T3867] Call Trace: [ 69.238769][ T3867] [ 69.238776][ T3867] __dump_stack+0x1d/0x30 [ 69.238801][ T3867] dump_stack_lvl+0x95/0xd0 [ 69.238878][ T3867] dump_stack+0x15/0x1b [ 69.238897][ T3867] should_fail_ex+0x263/0x280 [ 69.238922][ T3867] should_failslab+0x8c/0xb0 [ 69.239015][ T3867] __kmalloc_noprof+0xb8/0x4e0 [ 69.239041][ T3867] ? io_cache_alloc_new+0x2a/0xb0 [ 69.239071][ T3867] io_cache_alloc_new+0x2a/0xb0 [ 69.239093][ T3867] io_sqe_buffer_register+0x17e/0x1210 [ 69.239151][ T3867] ? lruvec_stat_mod_folio+0xd2/0x110 [ 69.239320][ T3867] ? ___kmalloc_large_node+0x7f/0xe0 [ 69.239375][ T3867] ? __kmalloc_large_node_noprof+0x18/0xb0 [ 69.239458][ T3867] ? __kvmalloc_node_noprof+0xb0/0x650 [ 69.239521][ T3867] ? io_sqe_buffers_register+0xd0/0x4e0 [ 69.239550][ T3867] ? iovec_from_user+0x179/0x200 [ 69.239688][ T3867] io_sqe_buffers_register+0x24e/0x4e0 [ 69.239724][ T3867] __se_sys_io_uring_register+0xdd6/0x12d0 [ 69.239785][ T3867] ? mutex_unlock+0x4e/0x90 [ 69.239815][ T3867] ? fput+0x8f/0xc0 [ 69.239839][ T3867] ? ksys_write+0x194/0x1a0 [ 69.239855][ T3867] __x64_sys_io_uring_register+0x55/0x70 [ 69.239941][ T3867] x64_sys_call+0x2be0/0x3020 [ 69.240039][ T3867] do_syscall_64+0x12c/0x370 [ 69.240057][ T3867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.240080][ T3867] RIP: 0033:0x7f64aceec799 [ 69.240138][ T3867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.240161][ T3867] RSP: 002b:00007f64ab91e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 69.240177][ T3867] RAX: ffffffffffffffda RBX: 00007f64ad166090 RCX: 00007f64aceec799 [ 69.240188][ T3867] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000005 [ 69.240198][ T3867] RBP: 00007f64ab91e090 R08: 0000000000000000 R09: 0000000000000000 [ 69.240234][ T3867] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000001 [ 69.240247][ T3867] R13: 00007f64ad166128 R14: 00007f64ad166090 R15: 00007ffe4866ec98 [ 69.240266][ T3867] [ 69.347230][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.367630][ T28] audit: type=1326 audit(1772957937.274:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 69.834292][ T3872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 69.872223][ T3872] System zones: 0-1, 3-36 [ 69.904892][ T3872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.956001][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.036270][ T3880] SET target dimension over the limit! [ 70.157559][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.165839][ T28] audit: type=1326 audit(1772957937.274:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 70.202091][ T3881] geneve2: entered promiscuous mode [ 70.209618][ T28] audit: type=1326 audit(1772957937.274:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 70.235825][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.310074][ T3883] loop3: detected capacity change from 0 to 512 [ 70.354257][ T28] audit: type=1400 audit(1772957937.404:1826): avc: denied { bpf } for pid=3870 comm="syz.2.100" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.396832][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.408908][ T28] audit: type=1400 audit(1772957937.934:1827): avc: denied { shutdown } for pid=3874 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.475139][ T28] audit: type=1400 audit(1772957938.134:1828): avc: denied { read } for pid=3876 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.506138][ T28] audit: type=1400 audit(1772957938.844:1829): avc: denied { module_request } for pid=3879 comm="syz.0.102" kmod="fs-esdfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 70.539852][ T3880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.102'. [ 70.560113][ T3890] loop1: detected capacity change from 0 to 1024 [ 70.575967][ T3880] netlink: 260 bytes leftover after parsing attributes in process `syz.0.102'. [ 70.584417][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.604799][ T28] audit: type=1400 audit(1772957938.984:1830): avc: denied { read write } for pid=3888 comm="syz.4.106" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.647317][ T3894] loop2: detected capacity change from 0 to 1024 [ 70.667771][ T28] audit: type=1400 audit(1772957938.994:1831): avc: denied { open } for pid=3888 comm="syz.4.106" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.701730][ T3890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.734337][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.762808][ T3898] loop0: detected capacity change from 0 to 136 [ 70.821310][ T3894] FAULT_INJECTION: forcing a failure. [ 70.821310][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.844692][ T3894] CPU: 1 UID: 0 PID: 3894 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) [ 70.844722][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.844736][ T3894] Call Trace: [ 70.844743][ T3894] [ 70.844751][ T3894] __dump_stack+0x1d/0x30 [ 70.844785][ T3894] dump_stack_lvl+0x95/0xd0 [ 70.844838][ T3894] dump_stack+0x15/0x1b [ 70.844865][ T3894] should_fail_ex+0x263/0x280 [ 70.844912][ T3894] ? __pfx_ucma_reject+0x10/0x10 [ 70.844938][ T3894] should_fail+0xb/0x20 [ 70.844963][ T3894] should_fail_usercopy+0x1a/0x20 [ 70.845011][ T3894] _copy_from_user+0x1c/0xb0 [ 70.845041][ T3894] ucma_reject+0x54/0x400 [ 70.845082][ T3894] ? __pfx_ucma_reject+0x10/0x10 [ 70.845161][ T3894] ucma_write+0x1c9/0x260 [ 70.845186][ T3894] vfs_writev+0x42b/0x900 [ 70.845213][ T3894] ? __pfx_ucma_write+0x10/0x10 [ 70.845257][ T3894] do_writev+0xe9/0x210 [ 70.845288][ T3894] __x64_sys_writev+0x45/0x50 [ 70.845391][ T3894] x64_sys_call+0x1c0c/0x3020 [ 70.845438][ T3894] do_syscall_64+0x12c/0x370 [ 70.845473][ T3894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.845501][ T3894] RIP: 0033:0x7f894de5c799 [ 70.845520][ T3894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.845583][ T3894] RSP: 002b:00007f894c8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 70.845610][ T3894] RAX: ffffffffffffffda RBX: 00007f894e0d5fa0 RCX: 00007f894de5c799 [ 70.845627][ T3894] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 70.845682][ T3894] RBP: 00007f894c8af090 R08: 0000000000000000 R09: 0000000000000000 [ 70.845698][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.845710][ T3894] R13: 00007f894e0d6038 R14: 00007f894e0d5fa0 R15: 00007ffdb1b141d8 [ 70.845729][ T3894] [ 71.057641][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.111594][ T3916] loop4: detected capacity change from 0 to 512 [ 71.126171][ T3916] EXT4-fs (loop4): 1 truncate cleaned up [ 71.174668][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.184561][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.235908][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.267071][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.390081][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.507276][ T3928] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.564529][ T3905] loop3: detected capacity change from 0 to 1024 [ 71.621174][ T3905] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 71.721219][ T3905] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.111: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.760662][ T3905] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 71.762687][ T3905] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.111: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.772101][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 71.772199][ C1] EXT4-fs (loop3): initial error at time 1772957940: ext4_map_blocks:776: inode 3: block 2 [ 71.772767][ C1] EXT4-fs (loop3): last error at time 1772957940: ext4_map_blocks:776: inode 3: block 2 [ 71.818751][ T3905] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 71.946175][ T3905] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.111: Failed to acquire dquot type 0 [ 71.971695][ T3905] loop3: lost filesystem error report for type 5 error -117 [ 71.977087][ T3905] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 72.040979][ T3905] loop3: lost filesystem error report for type 5 error -117 [ 72.042334][ T3905] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.111: mark_inode_dirty error [ 72.232474][ T3905] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.242184][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.242802][ T3905] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 72.271905][ T3905] EXT4-fs (loop3): 1 orphan inode deleted [ 72.278250][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.282907][ T3905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.299673][ T12] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.314498][ T12] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.314615][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 72.364599][ T3952] loop2: detected capacity change from 0 to 256 [ 72.453959][ T3954] FAULT_INJECTION: forcing a failure. [ 72.453959][ T3954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.567623][ T3952] FAT-fs (loop2): Directory bread(block 64) failed [ 72.574350][ T3952] FAT-fs (loop2): Directory bread(block 65) failed [ 72.581186][ T3952] FAT-fs (loop2): Directory bread(block 66) failed [ 72.587744][ T3952] FAT-fs (loop2): Directory bread(block 67) failed [ 72.594367][ T3952] FAT-fs (loop2): Directory bread(block 68) failed [ 72.601020][ T3952] FAT-fs (loop2): Directory bread(block 69) failed [ 72.607806][ T3952] FAT-fs (loop2): Directory bread(block 70) failed [ 72.614373][ T3952] FAT-fs (loop2): Directory bread(block 71) failed [ 72.620980][ T3952] FAT-fs (loop2): Directory bread(block 72) failed [ 72.627704][ T3952] FAT-fs (loop2): Directory bread(block 73) failed [ 72.692394][ T3952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 72.703229][ T3952] random: crng reseeded on system resumption [ 72.791465][ T3954] CPU: 1 UID: 0 PID: 3954 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 72.791493][ T3954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.791575][ T3954] Call Trace: [ 72.791581][ T3954] [ 72.791587][ T3954] __dump_stack+0x1d/0x30 [ 72.791612][ T3954] dump_stack_lvl+0x95/0xd0 [ 72.791694][ T3954] dump_stack+0x15/0x1b [ 72.791715][ T3954] should_fail_ex+0x263/0x280 [ 72.791742][ T3954] should_fail+0xb/0x20 [ 72.791765][ T3954] should_fail_usercopy+0x1a/0x20 [ 72.791789][ T3954] _copy_to_user+0x20/0xa0 [ 72.791815][ T3954] simple_read_from_buffer+0xb5/0x130 [ 72.791859][ T3954] proc_fail_nth_read+0x10e/0x150 [ 72.791897][ T3954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.791924][ T3954] vfs_read+0x1ab/0x7f0 [ 72.792035][ T3954] ? __rcu_read_unlock+0x4e/0x70 [ 72.792098][ T3954] ? __fget_files+0x184/0x1c0 [ 72.792168][ T3954] ? mutex_lock+0x57/0x90 [ 72.792203][ T3954] ksys_read+0xdc/0x1a0 [ 72.792300][ T3954] __x64_sys_read+0x40/0x50 [ 72.792319][ T3954] x64_sys_call+0x2886/0x3020 [ 72.792347][ T3954] do_syscall_64+0x12c/0x370 [ 72.792405][ T3954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.792433][ T3954] RIP: 0033:0x7f37ff03cfce [ 72.792453][ T3954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.792474][ T3954] RSP: 002b:00007f37fdacefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.792495][ T3954] RAX: ffffffffffffffda RBX: 00007f37fdacf6c0 RCX: 00007f37ff03cfce [ 72.792508][ T3954] RDX: 000000000000000f RSI: 00007f37fdacf0a0 RDI: 0000000000000004 [ 72.792553][ T3954] RBP: 00007f37fdacf090 R08: 0000000000000000 R09: 0000000000000000 [ 72.792568][ T3954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.792594][ T3954] R13: 00007f37ff2f6038 R14: 00007f37ff2f5fa0 R15: 00007ffff7d56298 [ 72.792613][ T3954] [ 73.385183][ T3966] loop4: detected capacity change from 0 to 1024 [ 73.392690][ T3967] loop1: detected capacity change from 0 to 512 [ 73.409151][ T3967] EXT4-fs (loop1): 1 truncate cleaned up [ 73.427908][ T3967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.444932][ T3966] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 73.482931][ T3966] System zones: 0-1, 3-36 [ 73.494443][ T3963] syz.0.127: attempt to access beyond end of device [ 73.494443][ T3963] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 73.518212][ T3966] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.129: bad orphan inode 134217728 [ 73.539659][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.556264][ T3963] Buffer I/O error on dev loop0, logical block 57847, async page read [ 73.574651][ T3966] loop4: lost filesystem error report for type 5 error -117 [ 73.575181][ T3966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.611956][ T3318] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 73.625177][ T3963] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 73.644892][ T3963] FAT-fs (loop0): Filesystem has been set read-only [ 73.651643][ T3318] loop3: lost filesystem error report for type 5 error -117 [ 73.651771][ T3318] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 73.676260][ T3963] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 73.688433][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.716821][ T3318] loop3: lost filesystem error report for type 5 error -117 [ 73.717041][ T3318] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 73.808115][ T3318] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.121745][ T3401] net_ratelimit: 5 callbacks suppressed [ 74.121761][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.122576][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.132647][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.269971][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.374375][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.382646][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.784984][ T4005] set_capacity_and_notify: 3 callbacks suppressed [ 74.785003][ T4005] loop4: detected capacity change from 0 to 256 [ 74.799620][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 74.799640][ T28] audit: type=1326 audit(1772957943.164:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 74.931553][ T4005] FAT-fs (loop4): Directory bread(block 64) failed [ 74.938212][ T4005] FAT-fs (loop4): Directory bread(block 65) failed [ 74.944788][ T4005] FAT-fs (loop4): Directory bread(block 66) failed [ 74.951478][ T4005] FAT-fs (loop4): Directory bread(block 67) failed [ 74.958040][ T4005] FAT-fs (loop4): Directory bread(block 68) failed [ 74.964632][ T4005] FAT-fs (loop4): Directory bread(block 69) failed [ 74.971466][ T4005] FAT-fs (loop4): Directory bread(block 70) failed [ 74.978031][ T4005] FAT-fs (loop4): Directory bread(block 71) failed [ 74.984677][ T4005] FAT-fs (loop4): Directory bread(block 72) failed [ 74.991348][ T4005] FAT-fs (loop4): Directory bread(block 73) failed [ 75.181306][ T28] audit: type=1326 audit(1772957943.164:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.301909][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.310138][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.318644][ T28] audit: type=1326 audit(1772957943.174:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.362236][ T28] audit: type=1326 audit(1772957943.174:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.568346][ T28] audit: type=1326 audit(1772957943.174:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.601872][ T4014] loop2: detected capacity change from 0 to 1024 [ 76.692872][ T4014] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 76.708662][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.726275][ T28] audit: type=1326 audit(1772957943.174:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.748603][ T4014] System zones: 0-1, 3-36 [ 76.755131][ T4014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.815997][ T28] audit: type=1326 audit(1772957943.174:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.861890][ T28] audit: type=1326 audit(1772957943.174:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.906525][ T28] audit: type=1326 audit(1772957943.174:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 76.977914][ T28] audit: type=1326 audit(1772957943.174:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4000 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 77.033620][ T4007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4007 comm=syz.1.139 [ 77.073298][ T4007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4007 comm=syz.1.139 [ 77.115278][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.126162][ T4005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.138'. [ 77.133119][ T4025] random: crng reseeded on system resumption [ 77.236180][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.255316][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.475538][ T4046] SELinux: security_context_str_to_sid (}) failed with errno=-22 [ 77.635055][ T4027] FAULT_INJECTION: forcing a failure. [ 77.635055][ T4027] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.843464][ T4027] CPU: 0 UID: 0 PID: 4027 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 77.843575][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.843591][ T4027] Call Trace: [ 77.843609][ T4027] [ 77.843617][ T4027] __dump_stack+0x1d/0x30 [ 77.843647][ T4027] dump_stack_lvl+0x95/0xd0 [ 77.843672][ T4027] dump_stack+0x15/0x1b [ 77.843701][ T4027] should_fail_ex+0x263/0x280 [ 77.843735][ T4027] should_fail_alloc_page+0xf2/0x100 [ 77.843759][ T4027] __alloc_frozen_pages_noprof+0x108/0x360 [ 77.843790][ T4027] alloc_pages_mpol+0xb3/0x260 [ 77.843863][ T4027] folio_alloc_mpol_noprof+0x39/0x80 [ 77.843901][ T4027] shmem_get_folio_gfp+0x3da/0xd60 [ 77.844025][ T4027] shmem_fault+0xf6/0x250 [ 77.844059][ T4027] __do_fault+0xbc/0x200 [ 77.844076][ T4027] handle_mm_fault+0xfa1/0x3020 [ 77.844185][ T4027] do_user_addr_fault+0x3fd/0x1050 [ 77.844287][ T4027] exc_page_fault+0x62/0xa0 [ 77.844343][ T4027] asm_exc_page_fault+0x26/0x30 [ 77.844363][ T4027] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 77.844413][ T4027] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f [ 77.844430][ T4027] RSP: 0018:ffffc90010d83d98 EFLAGS: 00050202 [ 77.844449][ T4027] RAX: ffff88810492bce9 RBX: 0000000000000002 RCX: 0000000000000002 [ 77.844464][ T4027] RDX: 0000000000000000 RSI: ffffffff85a67e10 RDI: 0000200000000040 [ 77.844478][ T4027] RBP: ffffc90010d83eb8 R08: 00000000000008ca R09: 0000000000000000 [ 77.844559][ T4027] R10: 0001ffff85a67e10 R11: 0001ffff85a67e11 R12: 0000200000000042 [ 77.844571][ T4027] R13: 00007ffffffff000 R14: 0000200000000040 R15: ffffffff85a67e10 [ 77.844666][ T4027] _copy_to_user+0x7c/0xa0 [ 77.844700][ T4027] __se_sys_keyctl+0x3e7/0xb80 [ 77.844740][ T4027] ? __rcu_read_unlock+0x4e/0x70 [ 77.844758][ T4027] ? __fget_files+0x184/0x1c0 [ 77.844785][ T4027] ? mutex_lock+0x57/0x90 [ 77.844811][ T4027] ? xfd_validate_state+0x45/0xf0 [ 77.844837][ T4027] ? restore_fpregs_from_fpstate+0x61/0x110 [ 77.844880][ T4027] __x64_sys_keyctl+0x67/0x80 [ 77.844904][ T4027] x64_sys_call+0x1d12/0x3020 [ 77.844996][ T4027] do_syscall_64+0x12c/0x370 [ 77.845085][ T4027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.845104][ T4027] RIP: 0033:0x7f894de5c799 [ 77.845119][ T4027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.845138][ T4027] RSP: 002b:00007f894c8af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 77.845154][ T4027] RAX: ffffffffffffffda RBX: 00007f894e0d5fa0 RCX: 00007f894de5c799 [ 77.845227][ T4027] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000001f [ 77.845238][ T4027] RBP: 00007f894c8af090 R08: 0000000000000000 R09: 0000000000000000 [ 77.845251][ T4027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.845264][ T4027] R13: 00007f894e0d6038 R14: 00007f894e0d5fa0 R15: 00007ffdb1b141d8 [ 77.845286][ T4027] [ 78.301686][ T4066] loop2: detected capacity change from 0 to 512 [ 78.308548][ T4066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.320047][ T4066] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 78.334980][ T4066] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.156: corrupted inode contents [ 78.346769][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 78.346791][ C0] EXT4-fs (loop2): initial error at time 1772957946: mb_free_blocks:2047: inode 11: block 64 [ 78.346833][ C0] EXT4-fs (loop2): last error at time 1772957946: mb_free_blocks:2047: inode 11: block 64 [ 78.373790][ T4066] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.379736][ T4066] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #11: comm syz.2.156: mark_inode_dirty error [ 78.400580][ T4066] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.406143][ T4066] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.156: invalid indirect mapped block 1 (level 1) [ 78.434889][ T4066] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.438042][ T4066] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.156: corrupted inode contents [ 78.460409][ T4066] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.465894][ T4066] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 78.488389][ T4066] loop2: lost filesystem error report for type 5 error -117 [ 78.488523][ T4066] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.156: corrupted inode contents [ 78.497824][ T4075] 9p: Bad value for 'afid' [ 78.515321][ T4072] bridge_slave_0: left allmulticast mode [ 78.521197][ T4066] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.521251][ T4072] bridge_slave_0: left promiscuous mode [ 78.536883][ T4066] EXT4-fs error (device loop2): ext4_truncate:4587: inode #11: comm syz.2.156: mark_inode_dirty error [ 78.555837][ T4066] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.557988][ T4066] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 78.578082][ T4066] loop2: lost filesystem error report for type 5 error -117 [ 78.580161][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.594877][ T4066] EXT4-fs (loop2): 1 truncate cleaned up [ 78.601247][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.618556][ T4072] bridge_slave_1: left allmulticast mode [ 78.624618][ T4066] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.156: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 78.645201][ T4072] bridge_slave_1: left promiscuous mode [ 78.651666][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.659551][ T4066] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.156: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 78.700382][ T4066] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 78.710328][ T4072] bond0: (slave bond_slave_0): Releasing backup interface [ 78.719735][ T4066] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 78.740090][ T4072] bond0: (slave bond_slave_1): Releasing backup interface [ 78.747490][ T4066] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 78.767556][ T4072] team0: Port device team_slave_0 removed [ 78.796267][ T4072] team0: Port device team_slave_1 removed [ 78.840569][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.849157][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.937501][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.945186][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.082732][ T4089] loop0: detected capacity change from 0 to 256 [ 79.127415][ T4089] FAT-fs (loop0): Directory bread(block 64) failed [ 79.134254][ T4089] FAT-fs (loop0): Directory bread(block 65) failed [ 79.141007][ T4089] FAT-fs (loop0): Directory bread(block 66) failed [ 79.147648][ T4089] FAT-fs (loop0): Directory bread(block 67) failed [ 79.154340][ T4089] FAT-fs (loop0): Directory bread(block 68) failed [ 79.161118][ T4089] FAT-fs (loop0): Directory bread(block 69) failed [ 79.167788][ T4089] FAT-fs (loop0): Directory bread(block 70) failed [ 79.174424][ T4089] FAT-fs (loop0): Directory bread(block 71) failed [ 79.181142][ T4089] FAT-fs (loop0): Directory bread(block 72) failed [ 79.187803][ T4089] FAT-fs (loop0): Directory bread(block 73) failed [ 79.233569][ T4089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.162'. [ 79.244454][ T4089] random: crng reseeded on system resumption [ 79.712782][ T3401] net_ratelimit: 5 callbacks suppressed [ 79.712797][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.726932][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.984745][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.469891][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.495894][ T28] kauditd_printk_skb: 502 callbacks suppressed [ 80.495910][ T28] audit: type=1326 audit(1772957948.374:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 80.570159][ T4097] loop3: detected capacity change from 0 to 256 [ 80.985917][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.999886][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.491619][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.521400][ T28] audit: type=1326 audit(1772957948.374:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 81.997500][ T4099] FAULT_INJECTION: forcing a failure. [ 81.997500][ T4099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.011022][ T4099] CPU: 0 UID: 0 PID: 4099 Comm: syz.2.166 Not tainted syzkaller #0 PREEMPT(full) [ 82.011121][ T4099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.011135][ T4099] Call Trace: [ 82.011142][ T4099] [ 82.011151][ T4099] __dump_stack+0x1d/0x30 [ 82.011184][ T4099] dump_stack_lvl+0x95/0xd0 [ 82.011214][ T4099] dump_stack+0x15/0x1b [ 82.011279][ T4099] should_fail_ex+0x263/0x280 [ 82.011309][ T4099] should_fail_alloc_page+0xf2/0x100 [ 82.011339][ T4099] __alloc_frozen_pages_noprof+0x108/0x360 [ 82.011379][ T4099] alloc_pages_mpol+0xb3/0x260 [ 82.011447][ T4099] alloc_pages_noprof+0x8f/0x130 [ 82.011545][ T4099] get_free_pages_noprof+0xc/0x40 [ 82.011592][ T4099] sel_read_avc_hash_stats+0x27/0xb0 [ 82.011629][ T4099] ? __pfx_sel_read_avc_hash_stats+0x10/0x10 [ 82.011753][ T4099] vfs_readv+0x432/0x6e0 [ 82.011783][ T4099] __se_sys_preadv2+0xfc/0x1c0 [ 82.011804][ T4099] __x64_sys_preadv2+0x67/0x80 [ 82.011903][ T4099] x64_sys_call+0x2b3b/0x3020 [ 82.011942][ T4099] do_syscall_64+0x12c/0x370 [ 82.011967][ T4099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.012046][ T4099] RIP: 0033:0x7f894de5c799 [ 82.012133][ T4099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.012152][ T4099] RSP: 002b:00007f894c8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 82.012175][ T4099] RAX: ffffffffffffffda RBX: 00007f894e0d5fa0 RCX: 00007f894de5c799 [ 82.012260][ T4099] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 82.012274][ T4099] RBP: 00007f894c8af090 R08: 0000000000000006 R09: 0000000000000001 [ 82.012289][ T4099] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 82.012303][ T4099] R13: 00007f894e0d6038 R14: 00007f894e0d5fa0 R15: 00007ffdb1b141d8 [ 82.012321][ T4099] [ 82.341672][ T4097] FAT-fs (loop3): Directory bread(block 64) failed [ 82.348326][ T4097] FAT-fs (loop3): Directory bread(block 65) failed [ 82.355009][ T4097] FAT-fs (loop3): Directory bread(block 66) failed [ 82.361612][ T4097] FAT-fs (loop3): Directory bread(block 67) failed [ 82.368264][ T4097] FAT-fs (loop3): Directory bread(block 68) failed [ 82.374826][ T4097] FAT-fs (loop3): Directory bread(block 69) failed [ 82.381452][ T4097] FAT-fs (loop3): Directory bread(block 70) failed [ 82.388059][ T4097] FAT-fs (loop3): Directory bread(block 71) failed [ 82.394633][ T4097] FAT-fs (loop3): Directory bread(block 72) failed [ 82.401511][ T4097] FAT-fs (loop3): Directory bread(block 73) failed [ 82.497435][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.505830][ T28] audit: type=1326 audit(1772957948.374:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.529430][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.537700][ T28] audit: type=1326 audit(1772957948.374:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.608410][ T28] audit: type=1326 audit(1772957948.504:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.631908][ T28] audit: type=1326 audit(1772957948.504:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.655307][ T28] audit: type=1326 audit(1772957948.504:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.678865][ T28] audit: type=1326 audit(1772957948.504:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.704022][ T28] audit: type=1326 audit(1772957948.504:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.831529][ T28] audit: type=1326 audit(1772957948.604:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 82.903123][ T4095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 82.913810][ T4095] random: crng reseeded on system resumption [ 83.151691][ T4113] loop1: detected capacity change from 0 to 256 [ 83.179228][ T4113] FAT-fs (loop1): Directory bread(block 64) failed [ 83.186046][ T4113] FAT-fs (loop1): Directory bread(block 65) failed [ 83.192722][ T4113] FAT-fs (loop1): Directory bread(block 66) failed [ 83.199397][ T4113] FAT-fs (loop1): Directory bread(block 67) failed [ 83.206140][ T4113] FAT-fs (loop1): Directory bread(block 68) failed [ 83.212698][ T4113] FAT-fs (loop1): Directory bread(block 69) failed [ 83.219399][ T4113] FAT-fs (loop1): Directory bread(block 70) failed [ 83.226106][ T4113] FAT-fs (loop1): Directory bread(block 71) failed [ 83.232710][ T4113] FAT-fs (loop1): Directory bread(block 72) failed [ 83.239388][ T4113] FAT-fs (loop1): Directory bread(block 73) failed [ 83.269146][ T4113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 83.285975][ T4113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.294192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.687944][ T4121] loop3: detected capacity change from 0 to 136 [ 84.559517][ T4131] loop4: detected capacity change from 0 to 256 [ 84.667110][ T4131] FAT-fs (loop4): Directory bread(block 64) failed [ 84.673763][ T4131] FAT-fs (loop4): Directory bread(block 65) failed [ 84.680453][ T4131] FAT-fs (loop4): Directory bread(block 66) failed [ 84.687140][ T4131] FAT-fs (loop4): Directory bread(block 67) failed [ 84.693872][ T4131] FAT-fs (loop4): Directory bread(block 68) failed [ 84.700516][ T4131] FAT-fs (loop4): Directory bread(block 69) failed [ 84.707158][ T4131] FAT-fs (loop4): Directory bread(block 70) failed [ 84.713730][ T4131] FAT-fs (loop4): Directory bread(block 71) failed [ 84.720645][ T4131] FAT-fs (loop4): Directory bread(block 72) failed [ 84.727282][ T4131] FAT-fs (loop4): Directory bread(block 73) failed [ 84.741575][ T23] net_ratelimit: 5 callbacks suppressed [ 84.741588][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.798279][ T4131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.178'. [ 84.809202][ T4131] random: crng reseeded on system resumption [ 85.121586][ T4135] loop1: detected capacity change from 0 to 512 [ 85.631165][ T28] kauditd_printk_skb: 407 callbacks suppressed [ 85.631195][ T28] audit: type=1326 audit(1772957953.714:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 85.660880][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.881449][ T4138] loop3: detected capacity change from 0 to 256 [ 86.638272][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.661960][ T28] audit: type=1326 audit(1772957953.714:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 87.111584][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.131266][ T4138] FAT-fs (loop3): Directory bread(block 64) failed [ 87.143496][ T4135] EXT4-fs (loop1): 1 truncate cleaned up [ 87.149851][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.170900][ T4138] FAT-fs (loop3): Directory bread(block 65) failed [ 87.177565][ T4138] FAT-fs (loop3): Directory bread(block 66) failed [ 87.184152][ T4138] FAT-fs (loop3): Directory bread(block 67) failed [ 87.190766][ T4138] FAT-fs (loop3): Directory bread(block 68) failed [ 87.197313][ T4138] FAT-fs (loop3): Directory bread(block 69) failed [ 87.203838][ T4138] FAT-fs (loop3): Directory bread(block 70) failed [ 87.210403][ T4138] FAT-fs (loop3): Directory bread(block 71) failed [ 87.216976][ T4138] FAT-fs (loop3): Directory bread(block 72) failed [ 87.223520][ T4138] FAT-fs (loop3): Directory bread(block 73) failed [ 87.480812][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.491380][ T28] audit: type=1326 audit(1772957953.714:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 87.515017][ T28] audit: type=1326 audit(1772957953.714:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 88.081056][ T4144] loop2: detected capacity change from 0 to 256 [ 88.091850][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.291909][ T4146] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 88.317684][ T4146] loop0: detected capacity change from 0 to 1024 [ 88.340657][ T4146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.488634][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.497258][ T28] audit: type=1326 audit(1772957953.824:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 88.523244][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.531522][ T28] audit: type=1326 audit(1772957953.824:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 88.594940][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.651233][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 88.707342][ T4152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4152 comm=syz.4.183 [ 88.952756][ T4158] FAULT_INJECTION: forcing a failure. [ 88.952756][ T4158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.062839][ T4158] CPU: 0 UID: 0 PID: 4158 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT(full) [ 89.062871][ T4158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.062885][ T4158] Call Trace: [ 89.062893][ T4158] [ 89.062901][ T4158] __dump_stack+0x1d/0x30 [ 89.062985][ T4158] dump_stack_lvl+0x95/0xd0 [ 89.063079][ T4158] dump_stack+0x15/0x1b [ 89.063098][ T4158] should_fail_ex+0x263/0x280 [ 89.063124][ T4158] should_fail+0xb/0x20 [ 89.063142][ T4158] should_fail_usercopy+0x1a/0x20 [ 89.063169][ T4158] _copy_from_user+0x1c/0xb0 [ 89.063207][ T4158] do_tcp_getsockopt+0xc8/0x1ba0 [ 89.063239][ T4158] ? _parse_integer_limit+0x170/0x190 [ 89.063301][ T4158] ? _parse_integer+0x27/0x40 [ 89.063316][ T4158] ? __rcu_read_unlock+0x4e/0x70 [ 89.063339][ T4158] ? avc_has_perm_noaudit+0xab/0x130 [ 89.063366][ T4158] ? avc_has_perm+0x101/0x190 [ 89.063472][ T4158] tcp_getsockopt+0x6e/0xe0 [ 89.063504][ T4158] sock_common_getsockopt+0x60/0x70 [ 89.063599][ T4158] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 89.063619][ T4158] do_sock_getsockopt+0x1c4/0x210 [ 89.063644][ T4158] __x64_sys_getsockopt+0x11d/0x1a0 [ 89.063672][ T4158] x64_sys_call+0x2dcf/0x3020 [ 89.063714][ T4158] do_syscall_64+0x12c/0x370 [ 89.063790][ T4158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.063815][ T4158] RIP: 0033:0x7f32de60c799 [ 89.063902][ T4158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.063921][ T4158] RSP: 002b:00007f32dd01d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 89.063991][ T4158] RAX: ffffffffffffffda RBX: 00007f32de886180 RCX: 00007f32de60c799 [ 89.064119][ T4158] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 89.064133][ T4158] RBP: 00007f32dd01d090 R08: 0000200000000040 R09: 0000000000000000 [ 89.064148][ T4158] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.064159][ T4158] R13: 00007f32de886218 R14: 00007f32de886180 R15: 00007fff82379308 [ 89.064176][ T4158] [ 89.352711][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.406179][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.417736][ T28] audit: type=1326 audit(1772957953.824:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 89.441480][ T28] audit: type=1326 audit(1772957953.824:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 89.465383][ T28] audit: type=1326 audit(1772957953.824:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 89.691347][ T28] audit: type=1326 audit(1772957953.944:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.3.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f32de60c799 code=0x7ffc0000 [ 89.744130][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.752979][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.026711][ T4170] loop4: detected capacity change from 0 to 256 [ 90.671028][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.472958][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.482020][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 91.482037][ T28] audit: type=1326 audit(1772957958.404:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 91.671228][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.738195][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 92.230295][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.277264][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.285626][ T28] audit: type=1326 audit(1772957958.404:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.301872][ T4170] FAT-fs (loop4): Directory bread(block 64) failed [ 92.315540][ T4170] FAT-fs (loop4): Directory bread(block 65) failed [ 92.322118][ T4170] FAT-fs (loop4): Directory bread(block 66) failed [ 92.328666][ T4170] FAT-fs (loop4): Directory bread(block 67) failed [ 92.335235][ T4170] FAT-fs (loop4): Directory bread(block 68) failed [ 92.341833][ T4170] FAT-fs (loop4): Directory bread(block 69) failed [ 92.348368][ T4170] FAT-fs (loop4): Directory bread(block 70) failed [ 92.354948][ T4170] FAT-fs (loop4): Directory bread(block 71) failed [ 92.361504][ T4170] FAT-fs (loop4): Directory bread(block 72) failed [ 92.368031][ T4170] FAT-fs (loop4): Directory bread(block 73) failed [ 92.376145][ T4179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.402467][ T28] audit: type=1326 audit(1772957958.404:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.444074][ T28] audit: type=1326 audit(1772957958.404:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.503117][ T28] audit: type=1326 audit(1772957958.414:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.527579][ T28] audit: type=1326 audit(1772957958.414:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.553856][ T28] audit: type=1326 audit(1772957958.414:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.577248][ T28] audit: type=1326 audit(1772957958.414:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.600892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.610134][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.620690][ T4179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.631864][ T28] audit: type=1326 audit(1772957958.414:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.655958][ T28] audit: type=1326 audit(1772957958.414:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 92.723815][ T4188] Set syz1 is full, maxelem 6117 reached [ 92.781083][ T4179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.793148][ T4168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 92.802692][ T4168] random: crng reseeded on system resumption [ 92.894654][ T4179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.998238][ T4192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.038442][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063551][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203513][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.264234][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.299413][ T4197] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 93.319395][ T4197] loop1: detected capacity change from 0 to 1024 [ 93.344644][ T4202] loop3: detected capacity change from 0 to 512 [ 93.352671][ T4202] EXT4-fs: Ignoring removed nobh option [ 93.358447][ T4202] EXT4-fs: Ignoring removed nobh option [ 93.364174][ T4202] EXT4-fs: Ignoring removed bh option [ 93.369733][ T4202] ext4: Unknown parameter 'audit' [ 93.379602][ T4202] loop3: detected capacity change from 0 to 512 [ 93.386349][ T4202] EXT4-fs: dax option not supported [ 93.459189][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.480193][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 93.498939][ T4202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 93.508341][ T4202] netlink: 660 bytes leftover after parsing attributes in process `syz.3.200'. [ 93.685101][ T4212] loop2: detected capacity change from 0 to 512 [ 93.866610][ T4212] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.940038][ T4212] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #11: block 1: comm syz.2.202: lblock 0 mapped to illegal pblock 1 (length 1) [ 93.978237][ T4212] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.980383][ T4212] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.989690][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 93.989712][ C1] EXT4-fs (loop2): initial error at time 1772957962: ext4_map_blocks:776: inode 11: block 1 [ 93.989764][ C1] EXT4-fs (loop2): last error at time 1772957962: ext4_map_blocks:776: inode 11: block 1 [ 94.073297][ T4212] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.202: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 94.106931][ T4212] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.107229][ T4212] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.202: ea_inode dec ref err=-117 [ 94.145052][ T4212] EXT4-fs (loop2): 1 orphan inode deleted [ 94.151265][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.244146][ T4222] loop0: detected capacity change from 0 to 512 [ 94.294923][ T4222] EXT4-fs (loop0): 1 truncate cleaned up [ 94.386668][ T4222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.765336][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.806710][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.819073][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.909966][ T4242] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 94.918141][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 94.943211][ T4245] FAULT_INJECTION: forcing a failure. [ 94.943211][ T4245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.970673][ T4247] loop3: detected capacity change from 0 to 164 [ 94.987173][ T4245] CPU: 1 UID: 0 PID: 4245 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT(full) [ 94.987216][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.987303][ T4245] Call Trace: [ 94.987310][ T4245] [ 94.987317][ T4245] __dump_stack+0x1d/0x30 [ 94.987349][ T4245] dump_stack_lvl+0x95/0xd0 [ 94.987379][ T4245] dump_stack+0x15/0x1b [ 94.987402][ T4245] should_fail_ex+0x263/0x280 [ 94.987462][ T4245] should_fail+0xb/0x20 [ 94.987485][ T4245] should_fail_usercopy+0x1a/0x20 [ 94.987589][ T4245] _copy_to_user+0x20/0xa0 [ 94.987688][ T4245] simple_read_from_buffer+0xb5/0x130 [ 94.987715][ T4245] proc_fail_nth_read+0x10e/0x150 [ 94.987749][ T4245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.987833][ T4245] vfs_read+0x1ab/0x7f0 [ 94.987868][ T4245] ? io_poll_wake+0x2b5/0x400 [ 94.987889][ T4245] ? __rcu_read_unlock+0x4e/0x70 [ 94.987908][ T4245] ? __fget_files+0x184/0x1c0 [ 94.987928][ T4245] ? __wake_up+0x88/0xb0 [ 94.988032][ T4245] ? mutex_lock+0x57/0x90 [ 94.988059][ T4245] ksys_read+0xdc/0x1a0 [ 94.988091][ T4245] __x64_sys_read+0x40/0x50 [ 94.988182][ T4245] x64_sys_call+0x2886/0x3020 [ 94.988254][ T4245] do_syscall_64+0x12c/0x370 [ 94.988291][ T4245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.988432][ T4245] RIP: 0033:0x7f37ff03cfce [ 94.988452][ T4245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.988470][ T4245] RSP: 002b:00007f37fd91cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.988488][ T4245] RAX: ffffffffffffffda RBX: 00007f37fd91d6c0 RCX: 00007f37ff03cfce [ 94.988501][ T4245] RDX: 000000000000000f RSI: 00007f37fd91d0a0 RDI: 0000000000000006 [ 94.988513][ T4245] RBP: 00007f37fd91d090 R08: 0000000000000000 R09: 0000000000000000 [ 94.988593][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.988670][ T4245] R13: 00007f37ff2f6128 R14: 00007f37ff2f6090 R15: 00007ffff7d56298 [ 94.988688][ T4245] [ 95.201065][ T35] net_ratelimit: 17 callbacks suppressed [ 95.201080][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.220544][ T4251] loop1: detected capacity change from 0 to 128 [ 95.252222][ T4251] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.364319][ T4258] loop0: detected capacity change from 0 to 512 [ 95.415192][ T4258] EXT4-fs (loop0): 1 truncate cleaned up [ 95.454880][ T4258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.467250][ T3318] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.476349][ T3318] ISOFS: unable to read i-node block [ 95.481792][ T3318] ISOFS: unable to read i-node block [ 95.541746][ T4264] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 95.587781][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 95.667379][ T4264] bond1: option updelay: invalid value (18446744073580052489) [ 95.694523][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.714125][ T4264] bond1: option updelay: allowed values 0 - 2147483647 [ 95.722244][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.734705][ T4270] xt_TCPMSS: Only works on TCP SYN packets [ 95.762542][ T4264] bond1 (unregistering): Released all slaves [ 95.809138][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.987957][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.229856][ T4289] loop4: detected capacity change from 0 to 256 [ 96.887436][ T28] kauditd_printk_skb: 174 callbacks suppressed [ 96.887473][ T28] audit: type=1326 audit(1772957964.614:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 97.052861][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.066985][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.867312][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.875680][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.889767][ T28] audit: type=1326 audit(1772957964.614:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 97.913354][ T28] audit: type=1326 audit(1772957964.614:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.051802][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.079365][ T28] audit: type=1326 audit(1772957964.614:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.103141][ T28] audit: type=1326 audit(1772957964.614:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.379337][ T4289] FAT-fs (loop4): Directory bread(block 64) failed [ 98.386005][ T4289] FAT-fs (loop4): Directory bread(block 65) failed [ 98.392572][ T4289] FAT-fs (loop4): Directory bread(block 66) failed [ 98.399116][ T4289] FAT-fs (loop4): Directory bread(block 67) failed [ 98.405689][ T4289] FAT-fs (loop4): Directory bread(block 68) failed [ 98.412234][ T4289] FAT-fs (loop4): Directory bread(block 69) failed [ 98.418771][ T4289] FAT-fs (loop4): Directory bread(block 70) failed [ 98.425290][ T4289] FAT-fs (loop4): Directory bread(block 71) failed [ 98.431851][ T4289] FAT-fs (loop4): Directory bread(block 72) failed [ 98.438454][ T4289] FAT-fs (loop4): Directory bread(block 73) failed [ 98.459920][ T28] audit: type=1326 audit(1772957964.614:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.484463][ T28] audit: type=1326 audit(1772957964.614:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.508823][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.520224][ T28] audit: type=1326 audit(1772957964.614:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.546099][ T28] audit: type=1326 audit(1772957964.614:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.578055][ T28] audit: type=1326 audit(1772957964.614:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4282 comm="syz.4.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 98.602344][ T4286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 98.611953][ T4286] random: crng reseeded on system resumption [ 98.624666][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.638301][ T4296] netlink: 328 bytes leftover after parsing attributes in process `syz.0.225'. [ 98.647450][ T4294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 98.733129][ T30] bridge_slave_1: left allmulticast mode [ 98.790688][ T30] bridge_slave_1: left promiscuous mode [ 98.797001][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.813063][ T4307] loop4: detected capacity change from 0 to 512 [ 98.820103][ T4305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4305 comm=syz.0.228 [ 98.826294][ T30] bridge_slave_0: left allmulticast mode [ 98.839467][ T30] bridge_slave_0: left promiscuous mode [ 98.845203][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.856124][ T4307] EXT4-fs (loop4): 1 truncate cleaned up [ 98.862503][ T4307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.911829][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.924095][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.932474][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.969425][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.979221][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.988895][ T30] bond0 (unregistering): Released all slaves [ 98.996889][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.017606][ T4313] loop4: detected capacity change from 0 to 512 [ 99.075839][ T30] hsr_slave_0: left promiscuous mode [ 99.085573][ T30] hsr_slave_1: left promiscuous mode [ 99.106629][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.114031][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.138733][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.146366][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.160618][ T30] veth1_macvtap: left promiscuous mode [ 99.166303][ T30] veth0_macvtap: left promiscuous mode [ 99.171863][ T30] veth1_vlan: left promiscuous mode [ 99.173378][ T4331] tls_set_device_offload_rx: netdev not found [ 99.177254][ T30] veth0_vlan: left promiscuous mode [ 99.380192][ T30] team0 (unregistering): Port device team_slave_1 removed [ 99.389868][ T30] team0 (unregistering): Port device team_slave_0 removed [ 99.435538][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 99.725958][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.816671][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.880072][ T4274] bridge_slave_0: entered allmulticast mode [ 99.886731][ T4274] bridge_slave_0: entered promiscuous mode [ 99.893683][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.900808][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.907942][ T4274] bridge_slave_1: entered allmulticast mode [ 99.914455][ T4274] bridge_slave_1: entered promiscuous mode [ 99.954772][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.977333][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.005958][ T4274] team0: Port device team_slave_0 added [ 100.012789][ T4274] team0: Port device team_slave_1 added [ 100.027857][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.034839][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.069362][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.187130][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.194114][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.227259][ T4369] loop1: detected capacity change from 0 to 128 [ 100.233849][ T4369] vfat: Unknown parameter '18446744073709551615' [ 100.275984][ C1] net_ratelimit: 4 callbacks suppressed [ 100.276003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.336096][ T4378] loop2: detected capacity change from 0 to 512 [ 100.356083][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.377086][ T4378] EXT4-fs (loop2): 1 truncate cleaned up [ 100.383354][ T4378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.457104][ T4382] loop0: detected capacity change from 0 to 256 [ 100.600203][ T4382] FAT-fs (loop0): Directory bread(block 64) failed [ 100.606878][ T4382] FAT-fs (loop0): Directory bread(block 65) failed [ 100.613634][ T4382] FAT-fs (loop0): Directory bread(block 66) failed [ 100.620268][ T4382] FAT-fs (loop0): Directory bread(block 67) failed [ 100.627020][ T4382] FAT-fs (loop0): Directory bread(block 68) failed [ 100.633896][ T4382] FAT-fs (loop0): Directory bread(block 69) failed [ 100.640599][ T4382] FAT-fs (loop0): Directory bread(block 70) failed [ 100.647183][ T4382] FAT-fs (loop0): Directory bread(block 71) failed [ 100.653895][ T4382] FAT-fs (loop0): Directory bread(block 72) failed [ 100.660520][ T4382] FAT-fs (loop0): Directory bread(block 73) failed [ 100.714654][ T4382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 100.725009][ T4382] random: crng reseeded on system resumption [ 100.820658][ T4274] hsr_slave_0: entered promiscuous mode [ 101.000963][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.075973][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.120289][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.524771][ T4353] loop4: detected capacity change from 0 to 512 [ 101.551709][ T4353] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 101.662521][ T4390] FAULT_INJECTION: forcing a failure. [ 101.662521][ T4390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.676005][ T4390] CPU: 1 UID: 0 PID: 4390 Comm: syz.1.242 Not tainted syzkaller #0 PREEMPT(full) [ 101.676029][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.676040][ T4390] Call Trace: [ 101.676046][ T4390] [ 101.676054][ T4390] __dump_stack+0x1d/0x30 [ 101.676087][ T4390] dump_stack_lvl+0x95/0xd0 [ 101.676127][ T4390] dump_stack+0x15/0x1b [ 101.676151][ T4390] should_fail_ex+0x263/0x280 [ 101.676180][ T4390] should_fail+0xb/0x20 [ 101.676210][ T4390] should_fail_usercopy+0x1a/0x20 [ 101.676273][ T4390] _copy_from_user+0x1c/0xb0 [ 101.676310][ T4390] ___sys_sendmsg+0xc1/0x1e0 [ 101.676357][ T4390] __x64_sys_sendmsg+0xd4/0x160 [ 101.676462][ T4390] x64_sys_call+0x194c/0x3020 [ 101.676497][ T4390] do_syscall_64+0x12c/0x370 [ 101.676518][ T4390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.676539][ T4390] RIP: 0033:0x7fd03eebc799 [ 101.676555][ T4390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.676581][ T4390] RSP: 002b:00007fd03d917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.676603][ T4390] RAX: ffffffffffffffda RBX: 00007fd03f135fa0 RCX: 00007fd03eebc799 [ 101.676616][ T4390] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 101.676628][ T4390] RBP: 00007fd03d917090 R08: 0000000000000000 R09: 0000000000000000 [ 101.676668][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.676732][ T4390] R13: 00007fd03f136038 R14: 00007fd03f135fa0 R15: 00007fffbc595738 [ 101.676753][ T4390] [ 101.843430][ T4274] hsr_slave_1: entered promiscuous mode [ 101.850591][ T4274] debugfs: 'hsr0' already exists in 'hsr' [ 101.856395][ T4274] Cannot create hsr debugfs directory [ 102.016424][ T4274] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.040299][ T4274] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.060689][ T4274] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.089385][ T4274] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.159080][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.167237][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.183228][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.227907][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.248898][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.284278][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.300991][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.329504][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.336676][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.359057][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.366131][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.438957][ T4420] loop2: detected capacity change from 0 to 256 [ 102.454147][ T28] kauditd_printk_skb: 504 callbacks suppressed [ 102.454159][ T28] audit: type=1326 audit(1772957970.824:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.507266][ T28] audit: type=1326 audit(1772957970.824:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.595739][ T4420] FAT-fs (loop2): Directory bread(block 64) failed [ 102.602613][ T4420] FAT-fs (loop2): Directory bread(block 65) failed [ 102.609329][ T4420] FAT-fs (loop2): Directory bread(block 66) failed [ 102.616026][ T4420] FAT-fs (loop2): Directory bread(block 67) failed [ 102.622665][ T4420] FAT-fs (loop2): Directory bread(block 68) failed [ 102.629315][ T4420] FAT-fs (loop2): Directory bread(block 69) failed [ 102.635957][ T4420] FAT-fs (loop2): Directory bread(block 70) failed [ 102.642674][ T4420] FAT-fs (loop2): Directory bread(block 71) failed [ 102.649453][ T4420] FAT-fs (loop2): Directory bread(block 72) failed [ 102.656099][ T4420] FAT-fs (loop2): Directory bread(block 73) failed [ 102.687039][ T4420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 102.741573][ T4421] loop0: detected capacity change from 0 to 2048 [ 102.818884][ T4421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.834237][ T4418] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.834300][ T4418] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 102.834327][ T4418] audit: backlog limit exceeded [ 102.863072][ T28] audit: type=1326 audit(1772957970.824:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.863098][ T28] audit: type=1326 audit(1772957970.824:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.863142][ T28] audit: type=1326 audit(1772957970.824:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.863243][ T28] audit: type=1326 audit(1772957970.824:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.863264][ T28] audit: type=1326 audit(1772957970.824:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894de5c799 code=0x7ffc0000 [ 102.864197][ T4420] random: crng reseeded on system resumption [ 102.873396][ T4420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.873638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.262165][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.324052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.333826][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.598386][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.824609][ T4417] loop1: detected capacity change from 0 to 512 [ 103.856163][ T4460] FAULT_INJECTION: forcing a failure. [ 103.856163][ T4460] name failslab, interval 1, probability 0, space 0, times 0 [ 103.856271][ T4460] CPU: 1 UID: 0 PID: 4460 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 103.856295][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.856370][ T4460] Call Trace: [ 103.856376][ T4460] [ 103.856383][ T4460] __dump_stack+0x1d/0x30 [ 103.856408][ T4460] dump_stack_lvl+0x95/0xd0 [ 103.856438][ T4460] dump_stack+0x15/0x1b [ 103.856494][ T4460] should_fail_ex+0x263/0x280 [ 103.856518][ T4460] ? p9_fd_create+0xa5/0x230 [ 103.856538][ T4460] should_failslab+0x8c/0xb0 [ 103.856564][ T4460] __kmalloc_cache_noprof+0x5f/0x410 [ 103.856595][ T4460] ? should_failslab+0x8c/0xb0 [ 103.856648][ T4460] p9_fd_create+0xa5/0x230 [ 103.856716][ T4460] p9_client_create+0x231/0x7a0 [ 103.856748][ T4460] ? should_fail_ex+0xd9/0x280 [ 103.856825][ T4460] v9fs_session_init+0x3c/0x4a0 [ 103.856907][ T4460] v9fs_get_tree+0x5c/0x5e0 [ 103.856940][ T4460] ? security_capable+0x7b/0x90 [ 103.856964][ T4460] vfs_get_tree+0x57/0x1d0 [ 103.856981][ T4460] do_new_mount+0x288/0x8d0 [ 103.857001][ T4460] ? security_capable+0x7b/0x90 [ 103.857098][ T4460] path_mount+0x4d0/0xbc0 [ 103.857127][ T4460] __se_sys_mount+0x28c/0x2e0 [ 103.857155][ T4460] ? fput+0x8f/0xc0 [ 103.857182][ T4460] __x64_sys_mount+0x67/0x80 [ 103.857251][ T4460] x64_sys_call+0x2d61/0x3020 [ 103.857294][ T4460] do_syscall_64+0x12c/0x370 [ 103.857321][ T4460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.857349][ T4460] RIP: 0033:0x7f37ff07c799 [ 103.857441][ T4460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.857459][ T4460] RSP: 002b:00007f37fdacf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.857482][ T4460] RAX: ffffffffffffffda RBX: 00007f37ff2f5fa0 RCX: 00007f37ff07c799 [ 103.857508][ T4460] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 103.857525][ T4460] RBP: 00007f37fdacf090 R08: 00002000000005c0 R09: 0000000000000000 [ 103.857567][ T4460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.857579][ T4460] R13: 00007f37ff2f6038 R14: 00007f37ff2f5fa0 R15: 00007ffff7d56298 [ 103.857643][ T4460] [ 103.875104][ T4417] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 103.987844][ T4467] loop0: detected capacity change from 0 to 512 [ 104.017942][ T4467] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.249: corrupted in-inode xattr: invalid ea_ino [ 104.017969][ T4467] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.018190][ T4467] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.249: couldn't read orphan inode 15 (err -117) [ 104.018215][ T4467] loop0: lost filesystem error report for type 5 error -117 [ 104.018688][ T4467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.091014][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.107921][ T4274] veth0_vlan: entered promiscuous mode [ 104.126166][ T4274] veth1_vlan: entered promiscuous mode [ 104.149910][ T4274] veth0_macvtap: entered promiscuous mode [ 104.151451][ T4274] veth1_macvtap: entered promiscuous mode [ 104.159924][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.167678][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.171434][ T1642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.171522][ T1642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.171554][ T1642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.171585][ T1642] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.328874][ T4483] netlink: 328 bytes leftover after parsing attributes in process `syz.0.250'. [ 104.345231][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.221'. [ 104.411369][ T4486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4486 comm=syz.5.252 [ 104.798551][ T4503] FAULT_INJECTION: forcing a failure. [ 104.798551][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 104.798646][ T4503] CPU: 1 UID: 0 PID: 4503 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 104.798668][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.798679][ T4503] Call Trace: [ 104.798684][ T4503] [ 104.798691][ T4503] __dump_stack+0x1d/0x30 [ 104.798717][ T4503] dump_stack_lvl+0x95/0xd0 [ 104.798814][ T4503] dump_stack+0x15/0x1b [ 104.798840][ T4503] should_fail_ex+0x263/0x280 [ 104.798865][ T4503] should_failslab+0x8c/0xb0 [ 104.798884][ T4503] kmem_cache_alloc_noprof+0x66/0x400 [ 104.798914][ T4503] ? alloc_empty_file+0x76/0x200 [ 104.798985][ T4503] alloc_empty_file+0x76/0x200 [ 104.799007][ T4503] alloc_file_pseudo+0xf6/0x190 [ 104.799102][ T4503] __shmem_file_setup+0x1dd/0x210 [ 104.799134][ T4503] shmem_file_setup+0x3b/0x50 [ 104.799157][ T4503] memfd_alloc_file+0x4e/0x300 [ 104.799238][ T4503] __se_sys_memfd_create+0x2e1/0x3b0 [ 104.799342][ T4503] __x64_sys_memfd_create+0x31/0x40 [ 104.799370][ T4503] x64_sys_call+0x1f22/0x3020 [ 104.799463][ T4503] do_syscall_64+0x12c/0x370 [ 104.799482][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.799544][ T4503] RIP: 0033:0x7fd03eebc799 [ 104.799557][ T4503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.799575][ T4503] RSP: 002b:00007fd03d916e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 104.799594][ T4503] RAX: ffffffffffffffda RBX: 0000000000000500 RCX: 00007fd03eebc799 [ 104.799653][ T4503] RDX: 00007fd03d916ee0 RSI: 0000000000000000 RDI: 00007fd03ef52db9 [ 104.799668][ T4503] RBP: 0000200000001340 R08: 00000000ffffffff R09: 0000000000000000 [ 104.799682][ T4503] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000008c0 [ 104.799696][ T4503] R13: 00007fd03d916ee0 R14: 00007fd03d916ea0 R15: 0000200000000240 [ 104.799717][ T4503] [ 105.289013][ T4511] net_ratelimit: 6 callbacks suppressed [ 105.289028][ T4511] IPv6: addrconf: prefix option has invalid lifetime [ 105.289036][ T4511] IPv6: addrconf: prefix option has invalid lifetime [ 105.290660][ T4511] netlink: 'syz.0.259': attribute type 27 has an invalid length. [ 105.316033][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.403495][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.501224][ T4522] loop0: detected capacity change from 0 to 512 [ 105.544673][ T4522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.558563][ T4525] process 'syz.4.265' launched './file0' with NULL argv: empty string added [ 105.567661][ T4525] Invalid argument reading file caps for ./file0 [ 105.582992][ T4522] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.652637][ T4530] loop1: detected capacity change from 0 to 128 [ 105.673642][ T4525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.721597][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.728779][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.794089][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.900227][ T4530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.909903][ T4530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.992727][ T4539] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 106.134294][ T96] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.514824][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.532659][ T96] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.547146][ T96] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.566103][ T96] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.694129][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.711846][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 106.750953][ T4550] loop2: detected capacity change from 0 to 1024 [ 106.805383][ T4546] dummy0: entered promiscuous mode [ 106.820797][ T4553] loop5: detected capacity change from 0 to 256 [ 106.830915][ T4546] macsec1: entered allmulticast mode [ 106.836289][ T4546] dummy0: entered allmulticast mode [ 106.905451][ T4550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 106.939940][ T4550] System zones: 0-1, 3-36 [ 106.994749][ T4553] FAT-fs (loop5): Directory bread(block 64) failed [ 107.001613][ T4553] FAT-fs (loop5): Directory bread(block 65) failed [ 107.008310][ T4553] FAT-fs (loop5): Directory bread(block 66) failed [ 107.014896][ T4553] FAT-fs (loop5): Directory bread(block 67) failed [ 107.021539][ T4553] FAT-fs (loop5): Directory bread(block 68) failed [ 107.028130][ T4553] FAT-fs (loop5): Directory bread(block 69) failed [ 107.034736][ T4553] FAT-fs (loop5): Directory bread(block 70) failed [ 107.041459][ T4553] FAT-fs (loop5): Directory bread(block 71) failed [ 107.048244][ T4553] FAT-fs (loop5): Directory bread(block 72) failed [ 107.054885][ T4553] FAT-fs (loop5): Directory bread(block 73) failed [ 107.101780][ T4553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.271'. [ 107.111945][ T4553] random: crng reseeded on system resumption [ 107.192312][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.469237][ T28] kauditd_printk_skb: 568 callbacks suppressed [ 107.469694][ T28] audit: type=1326 audit(1772957975.854:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1bd5a7c799 code=0x7ffc0000 [ 107.516771][ T4550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.525250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.561635][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.592578][ T28] audit: type=1326 audit(1772957975.864:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4547 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1bd5a7c799 code=0x7ffc0000 [ 107.721835][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.827267][ T4561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=4561 comm=syz.4.274 [ 107.841452][ T28] audit: type=1326 audit(1772957976.224:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 107.876791][ T4562] netlink: 328 bytes leftover after parsing attributes in process `syz.2.273'. [ 107.966536][ T28] audit: type=1326 audit(1772957976.224:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.017957][ T4565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=4565 comm=syz.4.274 [ 108.079693][ T28] audit: type=1326 audit(1772957976.224:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.192829][ T28] audit: type=1326 audit(1772957976.224:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.315855][ T28] audit: type=1326 audit(1772957976.224:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.422195][ T28] audit: type=1326 audit(1772957976.224:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.478377][ T4573] loop1: detected capacity change from 0 to 1024 [ 108.508218][ T4579] loop0: detected capacity change from 0 to 512 [ 108.514945][ T28] audit: type=1326 audit(1772957976.224:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.547276][ T4573] EXT4-fs: inline encryption not supported [ 108.553278][ T4578] FAULT_INJECTION: forcing a failure. [ 108.553278][ T4578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.579938][ T4579] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 108.598852][ T3478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.610730][ T4578] CPU: 1 UID: 0 PID: 4578 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(full) [ 108.610753][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.610764][ T4578] Call Trace: [ 108.610771][ T4578] [ 108.610777][ T4578] __dump_stack+0x1d/0x30 [ 108.610800][ T4578] dump_stack_lvl+0x95/0xd0 [ 108.610859][ T4578] dump_stack+0x15/0x1b [ 108.610878][ T4578] should_fail_ex+0x263/0x280 [ 108.610899][ T4578] should_fail+0xb/0x20 [ 108.610945][ T4578] should_fail_usercopy+0x1a/0x20 [ 108.611032][ T4578] _copy_to_user+0x20/0xa0 [ 108.611058][ T4578] put_user_ifreq+0x57/0xa0 [ 108.611085][ T4578] sock_ioctl+0x5cc/0x610 [ 108.611201][ T4578] ? __pfx_sock_ioctl+0x10/0x10 [ 108.611227][ T4578] __se_sys_ioctl+0xce/0x140 [ 108.611243][ T4578] __x64_sys_ioctl+0x43/0x50 [ 108.611319][ T4578] x64_sys_call+0x1563/0x3020 [ 108.611353][ T4578] do_syscall_64+0x12c/0x370 [ 108.611391][ T4578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.611410][ T4578] RIP: 0033:0x7f894de5c799 [ 108.611424][ T4578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.611439][ T4578] RSP: 002b:00007f894c8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.611472][ T4578] RAX: ffffffffffffffda RBX: 00007f894e0d5fa0 RCX: 00007f894de5c799 [ 108.611484][ T4578] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 108.611519][ T4578] RBP: 00007f894c8af090 R08: 0000000000000000 R09: 0000000000000000 [ 108.611529][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.611540][ T4578] R13: 00007f894e0d6038 R14: 00007f894e0d5fa0 R15: 00007ffdb1b141d8 [ 108.611571][ T4578] [ 108.612689][ T28] audit: type=1326 audit(1772957976.224:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 108.658011][ T4573] EXT4-fs: Ignoring removed bh option [ 108.827490][ T4573] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.838515][ T4573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 108.845099][ T4573] EXT4-fs error (device loop1): ext4_quota_enable:7192: comm syz.1.277: inode #2304: comm syz.1.277: iget: illegal inode # [ 108.989137][ T4573] loop1: lost filesystem error report for type 5 error -117 [ 108.995807][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 109.009707][ C0] EXT4-fs (loop1): initial error at time 1772957977: ext4_quota_enable:7192 [ 109.018438][ C0] EXT4-fs (loop1): last error at time 1772957977: ext4_quota_enable:7192 [ 109.294290][ T4595] FAULT_INJECTION: forcing a failure. [ 109.294290][ T4595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.429513][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(full) [ 109.429548][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.429635][ T4595] Call Trace: [ 109.429697][ T4595] [ 109.429707][ T4595] __dump_stack+0x1d/0x30 [ 109.429740][ T4595] dump_stack_lvl+0x95/0xd0 [ 109.429771][ T4595] dump_stack+0x15/0x1b [ 109.429819][ T4595] should_fail_ex+0x263/0x280 [ 109.429848][ T4595] should_fail+0xb/0x20 [ 109.429873][ T4595] should_fail_usercopy+0x1a/0x20 [ 109.429906][ T4595] _copy_from_iter+0xcf/0xea0 [ 109.429949][ T4595] ? __alloc_skb+0x4f6/0x690 [ 109.429971][ T4595] ? __alloc_skb+0x200/0x690 [ 109.430006][ T4595] netlink_sendmsg+0x4ae/0x6f0 [ 109.430057][ T4595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.430161][ T4595] ____sys_sendmsg+0x563/0x5b0 [ 109.430221][ T4595] ___sys_sendmsg+0x195/0x1e0 [ 109.430269][ T4595] __x64_sys_sendmsg+0xd4/0x160 [ 109.430317][ T4595] x64_sys_call+0x194c/0x3020 [ 109.430351][ T4595] do_syscall_64+0x12c/0x370 [ 109.430379][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.430407][ T4595] RIP: 0033:0x7f37ff07c799 [ 109.430426][ T4595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.430485][ T4595] RSP: 002b:00007f37fdacf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.430504][ T4595] RAX: ffffffffffffffda RBX: 00007f37ff2f5fa0 RCX: 00007f37ff07c799 [ 109.430520][ T4595] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 109.430532][ T4595] RBP: 00007f37fdacf090 R08: 0000000000000000 R09: 0000000000000000 [ 109.430614][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.430630][ T4595] R13: 00007f37ff2f6038 R14: 00007f37ff2f5fa0 R15: 00007ffff7d56298 [ 109.430650][ T4595] [ 109.575884][ T4573] EXT4-fs (loop1): Remounting filesystem read-only [ 109.629636][ T4573] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 109.641682][ T4600] loop5: detected capacity change from 0 to 1024 [ 109.651229][ T4573] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 109.658899][ T4573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.693608][ T4600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 109.709866][ T4600] System zones: 0-1, 3-36 [ 109.842623][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.858770][ T4600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.897183][ T4612] FAULT_INJECTION: forcing a failure. [ 109.897183][ T4612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.920368][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 109.920401][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.920416][ T4612] Call Trace: [ 109.920424][ T4612] [ 109.920436][ T4612] __dump_stack+0x1d/0x30 [ 109.920498][ T4612] dump_stack_lvl+0x95/0xd0 [ 109.920596][ T4612] dump_stack+0x15/0x1b [ 109.920623][ T4612] should_fail_ex+0x263/0x280 [ 109.920671][ T4612] should_fail+0xb/0x20 [ 109.920691][ T4612] should_fail_usercopy+0x1a/0x20 [ 109.920722][ T4612] _copy_to_user+0x20/0xa0 [ 109.920789][ T4612] simple_read_from_buffer+0xb5/0x130 [ 109.920812][ T4612] proc_fail_nth_read+0x10e/0x150 [ 109.920851][ T4612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.920955][ T4612] vfs_read+0x1ab/0x7f0 [ 109.920987][ T4612] ? __rcu_read_unlock+0x4e/0x70 [ 109.921022][ T4612] ? __fget_files+0x184/0x1c0 [ 109.921049][ T4612] ? mutex_lock+0x57/0x90 [ 109.921094][ T4612] ksys_read+0xdc/0x1a0 [ 109.921149][ T4612] __x64_sys_read+0x40/0x50 [ 109.921166][ T4612] x64_sys_call+0x2886/0x3020 [ 109.921259][ T4612] do_syscall_64+0x12c/0x370 [ 109.921283][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.921307][ T4612] RIP: 0033:0x7f894de1cfce [ 109.921392][ T4612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.921409][ T4612] RSP: 002b:00007f894c8aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.921427][ T4612] RAX: ffffffffffffffda RBX: 00007f894c8af6c0 RCX: 00007f894de1cfce [ 109.921441][ T4612] RDX: 000000000000000f RSI: 00007f894c8af0a0 RDI: 000000000000000a [ 109.921454][ T4612] RBP: 00007f894c8af090 R08: 0000000000000000 R09: 0000000000000000 [ 109.921478][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.921492][ T4612] R13: 00007f894e0d6038 R14: 00007f894e0d5fa0 R15: 00007ffdb1b141d8 [ 109.921514][ T4612] [ 110.148339][ T4606] loop4: detected capacity change from 0 to 8192 [ 110.178767][ T4606] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.381537][ T4621] loop0: detected capacity change from 0 to 512 [ 110.403884][ T4621] EXT4-fs: quotafile must be on filesystem root [ 110.930527][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 111.010820][ T3388] net_ratelimit: 2 callbacks suppressed [ 111.010908][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.062374][ T4274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.081716][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.090135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.171589][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.226026][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.240061][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.258375][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.267013][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.275400][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.288050][ T4642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.307200][ T4650] netlink: 328 bytes leftover after parsing attributes in process `syz.4.301'. [ 111.346648][ T4654] loop2: detected capacity change from 0 to 512 [ 111.366581][ T4658] netlink: 56 bytes leftover after parsing attributes in process `syz.4.304'. [ 111.386787][ T4654] EXT4-fs (loop2): 1 truncate cleaned up [ 111.387398][ T4660] __vm_enough_memory: pid: 4660, comm: syz.5.305, bytes: 4503599627366400 not enough memory for the allocation [ 111.393099][ T4654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.539079][ T4672] netlink: 168 bytes leftover after parsing attributes in process `syz.0.309'. [ 111.553002][ T4672] loop0: detected capacity change from 0 to 1024 [ 111.561301][ T4672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 111.569544][ T35] IPVS: starting estimator thread 0... [ 111.595811][ T4672] System zones: 0-1, 3-36 [ 111.609855][ T4672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.641904][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.655848][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 111.668495][ T4680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4680 comm=syz.4.312 [ 111.677527][ T4673] IPVS: using max 2112 ests per chain, 105600 per kthread [ 111.728220][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.956650][ T4690] lo speed is unknown, defaulting to 1000 [ 111.962462][ T4690] lo speed is unknown, defaulting to 1000 [ 111.968708][ T4690] lo speed is unknown, defaulting to 1000 [ 111.975283][ T4690] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.982946][ T4690] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 111.994909][ T4690] lo speed is unknown, defaulting to 1000 [ 112.001515][ T4690] lo speed is unknown, defaulting to 1000 [ 112.008103][ T4690] lo speed is unknown, defaulting to 1000 [ 112.014657][ T4690] lo speed is unknown, defaulting to 1000 [ 112.020879][ T4690] lo speed is unknown, defaulting to 1000 [ 112.037254][ T4690] loop2: detected capacity change from 0 to 512 [ 112.373577][ T4695] loop0: detected capacity change from 0 to 512 [ 112.380558][ T4695] EXT4-fs: Ignoring removed oldalloc option [ 112.395351][ T4693] loop4: detected capacity change from 0 to 256 [ 112.403392][ T4695] EXT4-fs (loop0): 1 truncate cleaned up [ 112.409521][ T4695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.437428][ T4695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4695 comm=syz.0.315 [ 112.490310][ T4693] FAT-fs (loop4): Directory bread(block 64) failed [ 112.497042][ T4693] FAT-fs (loop4): Directory bread(block 65) failed [ 112.505260][ T4693] FAT-fs (loop4): Directory bread(block 66) failed [ 112.523162][ T4693] FAT-fs (loop4): Directory bread(block 67) failed [ 112.543107][ T4693] FAT-fs (loop4): Directory bread(block 68) failed [ 112.596193][ T4693] FAT-fs (loop4): Directory bread(block 69) failed [ 112.602813][ T4693] FAT-fs (loop4): Directory bread(block 70) failed [ 112.627874][ T4693] FAT-fs (loop4): Directory bread(block 71) failed [ 112.666556][ T4693] FAT-fs (loop4): Directory bread(block 72) failed [ 112.685277][ T4700] loop1: detected capacity change from 0 to 512 [ 112.693207][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.704118][ T4693] FAT-fs (loop4): Directory bread(block 73) failed [ 112.720221][ T4700] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.782131][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 112.782144][ T28] audit: type=1326 audit(1772957981.174:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64aceacfce code=0x7ffc0000 [ 112.816939][ T4693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 112.848165][ T28] audit: type=1326 audit(1772957981.174:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f64aceeabd7 code=0x7ffc0000 [ 112.871728][ T4693] random: crng reseeded on system resumption [ 112.872248][ T28] audit: type=1326 audit(1772957981.174:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64aceacfce code=0x7ffc0000 [ 112.902657][ T28] audit: type=1326 audit(1772957981.174:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 112.988123][ T28] audit: type=1326 audit(1772957981.174:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 113.102612][ T28] audit: type=1326 audit(1772957981.194:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 113.201954][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 113.251275][ T28] audit: type=1326 audit(1772957981.194:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 113.289644][ T4723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4723 comm=syz.2.323 [ 113.331063][ T4728] loop0: detected capacity change from 0 to 1024 [ 113.355811][ T28] audit: type=1326 audit(1772957981.204:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 113.400994][ T3321] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 113.405845][ T28] audit: type=1326 audit(1772957981.204:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 113.486793][ T4728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 113.506343][ T28] audit: type=1326 audit(1772957981.204:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64aceec799 code=0x7ffc0000 [ 113.518930][ T4728] System zones: 0-1, 3-36 [ 113.552615][ T4728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.939758][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.033729][ T4747] lo speed is unknown, defaulting to 1000 [ 114.138290][ T4755] FAULT_INJECTION: forcing a failure. [ 114.138290][ T4755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.175938][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(full) [ 114.176006][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.176021][ T4755] Call Trace: [ 114.176029][ T4755] [ 114.176039][ T4755] __dump_stack+0x1d/0x30 [ 114.176073][ T4755] dump_stack_lvl+0x95/0xd0 [ 114.176112][ T4755] dump_stack+0x15/0x1b [ 114.176141][ T4755] should_fail_ex+0x263/0x280 [ 114.176172][ T4755] should_fail+0xb/0x20 [ 114.176290][ T4755] should_fail_usercopy+0x1a/0x20 [ 114.176403][ T4755] _copy_from_user+0x1c/0xb0 [ 114.176441][ T4755] __x64_sys_clock_adjtime+0x67/0x1d0 [ 114.176510][ T4755] x64_sys_call+0x2794/0x3020 [ 114.176597][ T4755] do_syscall_64+0x12c/0x370 [ 114.176620][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.176694][ T4755] RIP: 0033:0x7f37ff07c799 [ 114.176711][ T4755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.176728][ T4755] RSP: 002b:00007f37fdacf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 114.176748][ T4755] RAX: ffffffffffffffda RBX: 00007f37ff2f5fa0 RCX: 00007f37ff07c799 [ 114.176764][ T4755] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 114.176780][ T4755] RBP: 00007f37fdacf090 R08: 0000000000000000 R09: 0000000000000000 [ 114.176878][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.176895][ T4755] R13: 00007f37ff2f6038 R14: 00007f37ff2f5fa0 R15: 00007ffff7d56298 [ 114.176968][ T4755] [ 114.417530][ T4757] EXT4-fs (loop2): 1 truncate cleaned up [ 114.423670][ T4757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.497548][ T4767] iso9660: Bad value for 'map' [ 114.580070][ T4768] IPVS: set_ctl: invalid protocol: 2 172.30.1.1:20003 [ 114.592347][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.727946][ T4782] set_capacity_and_notify: 2 callbacks suppressed [ 114.727965][ T4782] loop5: detected capacity change from 0 to 1024 [ 114.746517][ T4786] loop1: detected capacity change from 0 to 8192 [ 114.775564][ T4782] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 114.784090][ T4782] System zones: 0-1, 3-36 [ 114.802163][ T4782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.822661][ T4786] vfat: Unknown parameter '0x00000000000000000x0000000000000000' [ 114.902679][ T4792] loop2: detected capacity change from 0 to 256 [ 114.992277][ T4786] loop1: detected capacity change from 0 to 512 [ 115.041271][ T4792] FAT-fs (loop2): Directory bread(block 64) failed [ 115.047993][ T4792] FAT-fs (loop2): Directory bread(block 65) failed [ 115.054593][ T4792] FAT-fs (loop2): Directory bread(block 66) failed [ 115.061164][ T4792] FAT-fs (loop2): Directory bread(block 67) failed [ 115.067842][ T4792] FAT-fs (loop2): Directory bread(block 68) failed [ 115.074506][ T4792] FAT-fs (loop2): Directory bread(block 69) failed [ 115.081189][ T4792] FAT-fs (loop2): Directory bread(block 70) failed [ 115.087725][ T4792] FAT-fs (loop2): Directory bread(block 71) failed [ 115.094427][ T4792] FAT-fs (loop2): Directory bread(block 72) failed [ 115.101035][ T4792] FAT-fs (loop2): Directory bread(block 73) failed [ 115.152028][ T4792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'. [ 115.163057][ T4792] random: crng reseeded on system resumption [ 115.212384][ T4786] ext4: Unknown parameter 'subj_role' [ 116.590173][ T9] net_ratelimit: 64 callbacks suppressed [ 116.590188][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.907598][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.921335][ T4274] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.938304][ T4817] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 117.052597][ T4825] FAULT_INJECTION: forcing a failure. [ 117.052597][ T4825] name failslab, interval 1, probability 0, space 0, times 0 [ 117.075873][ T4825] CPU: 0 UID: 0 PID: 4825 Comm: syz.1.347 Not tainted syzkaller #0 PREEMPT(full) [ 117.075928][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.075942][ T4825] Call Trace: [ 117.075949][ T4825] [ 117.075958][ T4825] __dump_stack+0x1d/0x30 [ 117.076065][ T4825] dump_stack_lvl+0x95/0xd0 [ 117.076088][ T4825] dump_stack+0x15/0x1b [ 117.076109][ T4825] should_fail_ex+0x263/0x280 [ 117.076132][ T4825] should_failslab+0x8c/0xb0 [ 117.076198][ T4825] __kmalloc_noprof+0xb8/0x4e0 [ 117.076228][ T4825] ? io_cache_alloc_new+0x2a/0xb0 [ 117.076272][ T4825] io_cache_alloc_new+0x2a/0xb0 [ 117.076299][ T4825] io_msg_alloc_async+0xf9/0x190 [ 117.076381][ T4825] io_recvmsg_prep+0x493/0x880 [ 117.076453][ T4825] io_submit_sqes+0x75a/0x1270 [ 117.076517][ T4825] __se_sys_io_uring_enter+0x1c9/0xf50 [ 117.076555][ T4825] ? __fget_files+0x184/0x1c0 [ 117.076664][ T4825] ? mutex_unlock+0x4e/0x90 [ 117.076706][ T4825] ? fput+0x8f/0xc0 [ 117.076739][ T4825] __x64_sys_io_uring_enter+0x78/0x90 [ 117.076804][ T4825] x64_sys_call+0x1e16/0x3020 [ 117.076914][ T4825] do_syscall_64+0x12c/0x370 [ 117.076941][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.076970][ T4825] RIP: 0033:0x7fd03eebc799 [ 117.076985][ T4825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.077003][ T4825] RSP: 002b:00007fd03d917028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 117.077050][ T4825] RAX: ffffffffffffffda RBX: 00007fd03f135fa0 RCX: 00007fd03eebc799 [ 117.077067][ T4825] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 117.077081][ T4825] RBP: 00007fd03d917090 R08: 0000000000000000 R09: 0000000000000000 [ 117.077094][ T4825] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 117.077107][ T4825] R13: 00007fd03f136038 R14: 00007fd03f135fa0 R15: 00007fffbc595738 [ 117.077139][ T4825] [ 117.390294][ T4839] loop0: detected capacity change from 0 to 512 [ 117.401799][ T4839] EXT4-fs (loop0): 1 truncate cleaned up [ 117.407879][ T4839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.413294][ T4803] FAULT_INJECTION: forcing a failure. [ 117.413294][ T4803] name failslab, interval 1, probability 0, space 0, times 0 [ 117.472510][ T4803] CPU: 0 UID: 0 PID: 4803 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT(full) [ 117.472543][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.472555][ T4803] Call Trace: [ 117.472562][ T4803] [ 117.472631][ T4803] __dump_stack+0x1d/0x30 [ 117.472717][ T4803] dump_stack_lvl+0x95/0xd0 [ 117.472812][ T4803] dump_stack+0x15/0x1b [ 117.472835][ T4803] should_fail_ex+0x263/0x280 [ 117.472965][ T4803] should_failslab+0x8c/0xb0 [ 117.472986][ T4803] kmem_cache_alloc_noprof+0x66/0x400 [ 117.473046][ T4803] ? alloc_empty_file+0x76/0x200 [ 117.473071][ T4803] alloc_empty_file+0x76/0x200 [ 117.473094][ T4803] alloc_file_pseudo+0xf6/0x190 [ 117.473200][ T4803] __shmem_file_setup+0x1dd/0x210 [ 117.473228][ T4803] shmem_file_setup+0x3b/0x50 [ 117.473332][ T4803] memfd_alloc_file+0x4e/0x300 [ 117.473371][ T4803] __se_sys_memfd_create+0x2e1/0x3b0 [ 117.473481][ T4803] __x64_sys_memfd_create+0x31/0x40 [ 117.473521][ T4803] x64_sys_call+0x1f22/0x3020 [ 117.473554][ T4803] do_syscall_64+0x12c/0x370 [ 117.473587][ T4803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.473688][ T4803] RIP: 0033:0x7f894de5c799 [ 117.473708][ T4803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.473729][ T4803] RSP: 002b:00007f894c8aee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 117.473752][ T4803] RAX: ffffffffffffffda RBX: 0000000000000500 RCX: 00007f894de5c799 [ 117.473841][ T4803] RDX: 00007f894c8aeee0 RSI: 0000000000000000 RDI: 00007f894def2db9 [ 117.473857][ T4803] RBP: 0000200000001340 R08: 00000000ffffffff R09: 0000000000000000 [ 117.473873][ T4803] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000008c0 [ 117.473887][ T4803] R13: 00007f894c8aeee0 R14: 00007f894c8aeea0 R15: 0000200000000240 [ 117.473904][ T4803] [ 117.748392][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.841666][ T4860] loop1: detected capacity change from 0 to 1024 [ 117.889354][ T4867] loop0: detected capacity change from 0 to 1024 [ 117.891569][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.898900][ T4860] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 117.916230][ T4860] System zones: 0-1, 3-36 [ 117.928694][ T4860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.008759][ T4867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 118.032441][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.081576][ T4867] System zones: 0-1, 3-36 [ 118.087884][ T4867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.347420][ T4882] loop5: detected capacity change from 0 to 1024 [ 118.402508][ T4882] ext4: Bad value for 'debug_want_extra_isize' [ 118.507069][ T4882] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.547153][ T28] kauditd_printk_skb: 276 callbacks suppressed [ 118.547177][ T28] audit: type=1400 audit(1772958499.817:4614): avc: denied { name_connect } for pid=4884 comm="syz.4.357" dest=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 118.598817][ T4882] Cannot find add_set index 0 as target [ 118.733540][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.826358][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.879609][ T4901] __vm_enough_memory: pid: 4901, comm: syz.1.363, bytes: 4503599627366400 not enough memory for the allocation [ 118.958652][ T28] audit: type=1400 audit(1772958500.188:4615): avc: denied { create } for pid=4900 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.048260][ T28] audit: type=1400 audit(1772958500.188:4616): avc: denied { connect } for pid=4900 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.075766][ T4906] netlink: 328 bytes leftover after parsing attributes in process `syz.2.364'. [ 119.125183][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.164667][ T4910] loop2: detected capacity change from 0 to 128 [ 119.313107][ T4912] loop4: detected capacity change from 0 to 512 [ 119.778959][ T4921] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.985047][ T28] audit: type=1400 audit(1772958501.232:4617): avc: denied { create } for pid=4928 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.053980][ T28] audit: type=1400 audit(1772958501.291:4618): avc: denied { ioctl } for pid=4932 comm="syz.5.376" path="socket:[9713]" dev="sockfs" ino=9713 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.135192][ T28] audit: type=1400 audit(1772958501.369:4619): avc: denied { listen } for pid=4939 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.175835][ T4941] tmpfs: Bad value for 'mpol' [ 120.189990][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.206677][ T28] audit: type=1400 audit(1772958501.428:4620): avc: denied { ioctl } for pid=4930 comm="syz.1.375" path="socket:[10406]" dev="sockfs" ino=10406 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.253550][ T4940] loop2: detected capacity change from 0 to 4096 [ 120.256687][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.378'. [ 120.269700][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 120.271483][ T4940] EXT4-fs: Ignoring removed bh option [ 120.294346][ T28] audit: type=1400 audit(1772958501.438:4621): avc: denied { name_connect } for pid=4938 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 120.374199][ T4940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.421307][ T4923] loop4: detected capacity change from 0 to 512 [ 120.507184][ T4923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.540037][ T4923] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.588785][ T4913] loop0: detected capacity change from 0 to 512 [ 120.630821][ T4913] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 120.648508][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.749436][ T4913] ================================================================== [ 120.757564][ T4913] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 120.765151][ T4913] [ 120.767501][ T4913] read-write to 0xffff888237d26668 of 1 bytes by task 4914 on cpu 1: [ 120.775606][ T4913] folio_add_lru+0xa4/0x1e0 [ 120.780137][ T4913] shmem_get_folio_gfp+0x7b0/0xd60 [ 120.785279][ T4913] shmem_write_begin+0xfc/0x1f0 [ 120.790293][ T4913] generic_perform_write+0x183/0x490 [ 120.795615][ T4913] shmem_file_write_iter+0xc5/0xf0 [ 120.800789][ T4913] __kernel_write_iter+0x319/0x590 [ 120.805940][ T4913] dump_user_range+0xa7d/0xdb0 [ 120.810749][ T4913] elf_core_dump+0x21a2/0x2330 [ 120.815555][ T4913] coredump_write+0xacc/0xdd0 [ 120.820284][ T4913] vfs_coredump+0x26c7/0x3130 [ 120.824986][ T4913] get_signal+0xd80/0xf60 [ 120.829372][ T4913] arch_do_signal_or_restart+0x96/0x450 [ 120.834962][ T4913] irqentry_exit+0xf7/0x520 [ 120.839492][ T4913] asm_exc_page_fault+0x26/0x30 [ 120.844374][ T4913] [ 120.846712][ T4913] read to 0xffff888237d26668 of 1 bytes by task 4913 on cpu 0: [ 120.854276][ T4913] __lru_add_drain_all+0x17e/0x450 [ 120.859414][ T4913] lru_add_drain_all+0x10/0x20 [ 120.864208][ T4913] invalidate_bdev+0x47/0x70 [ 120.868828][ T4913] ext4_fill_super+0x2cf6/0x37c0 [ 120.873794][ T4913] get_tree_bdev_flags+0x291/0x300 [ 120.878945][ T4913] get_tree_bdev+0x1f/0x30 [ 120.883393][ T4913] ext4_get_tree+0x1c/0x30 [ 120.887827][ T4913] vfs_get_tree+0x57/0x1d0 [ 120.892252][ T4913] do_new_mount+0x288/0x8d0 [ 120.896778][ T4913] path_mount+0x4d0/0xbc0 [ 120.901140][ T4913] __se_sys_mount+0x28c/0x2e0 [ 120.905841][ T4913] __x64_sys_mount+0x67/0x80 [ 120.910453][ T4913] x64_sys_call+0x2d61/0x3020 [ 120.915161][ T4913] do_syscall_64+0x12c/0x370 [ 120.919785][ T4913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.925706][ T4913] [ 120.928131][ T4913] value changed: 0x0e -> 0x12 [ 120.932836][ T4913] [ 120.935248][ T4913] Reported by Kernel Concurrency Sanitizer on: [ 120.941427][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.0.362 Not tainted syzkaller #0 PREEMPT(full) [ 120.950663][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.960744][ T4913] ================================================================== [ 121.016001][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.033564][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.114832][ T4954] loop4: detected capacity change from 0 to 4096 [ 121.131694][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.253373][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.933915][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.312895][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.375559][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.106522][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.434705][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.492996][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.140703][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.549629][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.196737][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.604428][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.659008][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.712614][ T3388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.277190][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog